Upgrade Flux to v0.25.3
[icn.git] / deploy / cluster / templates / flux-addon.yaml
1 {{- if .Values.flux }}
2 ---
3 apiVersion: v1
4 data:
5   flux-system.yaml: |
6     ---
7     # This manifest was generated by flux. DO NOT EDIT.
8     # Flux Version: v0.25.3
9     # Components: source-controller,kustomize-controller,helm-controller,notification-controller
10     apiVersion: v1
11     kind: Namespace
12     metadata:
13       labels:
14         app.kubernetes.io/instance: flux-system
15         app.kubernetes.io/part-of: flux
16         app.kubernetes.io/version: v0.25.3
17       name: flux-system
18     ---
19     apiVersion: apiextensions.k8s.io/v1
20     kind: CustomResourceDefinition
21     metadata:
22       annotations:
23         controller-gen.kubebuilder.io/version: v0.7.0
24       creationTimestamp: null
25       labels:
26         app.kubernetes.io/instance: flux-system
27         app.kubernetes.io/part-of: flux
28         app.kubernetes.io/version: v0.25.3
29       name: alerts.notification.toolkit.fluxcd.io
30     spec:
31       group: notification.toolkit.fluxcd.io
32       names:
33         kind: Alert
34         listKind: AlertList
35         plural: alerts
36         singular: alert
37       scope: Namespaced
38       versions:
39       - additionalPrinterColumns:
40         - jsonPath: .status.conditions[?(@.type=="Ready")].status
41           name: Ready
42           type: string
43         - jsonPath: .status.conditions[?(@.type=="Ready")].message
44           name: Status
45           type: string
46         - jsonPath: .metadata.creationTimestamp
47           name: Age
48           type: date
49         name: v1beta1
50         schema:
51           openAPIV3Schema:
52             description: Alert is the Schema for the alerts API
53             properties:
54               apiVersion:
55                 description: 'APIVersion defines the versioned schema of this representation
56                   of an object. Servers should convert recognized schemas to the latest
57                   internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
58                 type: string
59               kind:
60                 description: 'Kind is a string value representing the REST resource this
61                   object represents. Servers may infer this from the endpoint the client
62                   submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
63                 type: string
64               metadata:
65                 type: object
66               spec:
67                 description: AlertSpec defines an alerting rule for events involving a
68                   list of objects
69                 properties:
70                   eventSeverity:
71                     default: info
72                     description: Filter events based on severity, defaults to ('info').
73                       If set to 'info' no events will be filtered.
74                     enum:
75                     - info
76                     - error
77                     type: string
78                   eventSources:
79                     description: Filter events based on the involved objects.
80                     items:
81                       description: CrossNamespaceObjectReference contains enough information
82                         to let you locate the typed referenced object at cluster level
83                       properties:
84                         apiVersion:
85                           description: API version of the referent
86                           type: string
87                         kind:
88                           description: Kind of the referent
89                           enum:
90                           - Bucket
91                           - GitRepository
92                           - Kustomization
93                           - HelmRelease
94                           - HelmChart
95                           - HelmRepository
96                           - ImageRepository
97                           - ImagePolicy
98                           - ImageUpdateAutomation
99                           type: string
100                         name:
101                           description: Name of the referent
102                           maxLength: 53
103                           minLength: 1
104                           type: string
105                         namespace:
106                           description: Namespace of the referent
107                           maxLength: 53
108                           minLength: 1
109                           type: string
110                       required:
111                       - name
112                       type: object
113                     type: array
114                   exclusionList:
115                     description: A list of Golang regular expressions to be used for excluding
116                       messages.
117                     items:
118                       type: string
119                     type: array
120                   providerRef:
121                     description: Send events using this provider.
122                     properties:
123                       name:
124                         description: Name of the referent
125                         type: string
126                     required:
127                     - name
128                     type: object
129                   summary:
130                     description: Short description of the impact and affected cluster.
131                     type: string
132                   suspend:
133                     description: This flag tells the controller to suspend subsequent
134                       events dispatching. Defaults to false.
135                     type: boolean
136                 required:
137                 - eventSources
138                 - providerRef
139                 type: object
140               status:
141                 default:
142                   observedGeneration: -1
143                 description: AlertStatus defines the observed state of Alert
144                 properties:
145                   conditions:
146                     items:
147                       description: "Condition contains details for one aspect of the current
148                         state of this API Resource. --- This struct is intended for direct
149                         use as an array at the field path .status.conditions.  For example,
150                         type FooStatus struct{     // Represents the observations of a
151                         foo's current state.     // Known .status.conditions.type are:
152                         \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
153                         \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
154                         \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
155                         patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
156                         \n     // other fields }"
157                       properties:
158                         lastTransitionTime:
159                           description: lastTransitionTime is the last time the condition
160                             transitioned from one status to another. This should be when
161                             the underlying condition changed.  If that is not known, then
162                             using the time when the API field changed is acceptable.
163                           format: date-time
164                           type: string
165                         message:
166                           description: message is a human readable message indicating
167                             details about the transition. This may be an empty string.
168                           maxLength: 32768
169                           type: string
170                         observedGeneration:
171                           description: observedGeneration represents the .metadata.generation
172                             that the condition was set based upon. For instance, if .metadata.generation
173                             is currently 12, but the .status.conditions[x].observedGeneration
174                             is 9, the condition is out of date with respect to the current
175                             state of the instance.
176                           format: int64
177                           minimum: 0
178                           type: integer
179                         reason:
180                           description: reason contains a programmatic identifier indicating
181                             the reason for the condition's last transition. Producers
182                             of specific condition types may define expected values and
183                             meanings for this field, and whether the values are considered
184                             a guaranteed API. The value should be a CamelCase string.
185                             This field may not be empty.
186                           maxLength: 1024
187                           minLength: 1
188                           pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
189                           type: string
190                         status:
191                           description: status of the condition, one of True, False, Unknown.
192                           enum:
193                           - "True"
194                           - "False"
195                           - Unknown
196                           type: string
197                         type:
198                           description: type of condition in CamelCase or in foo.example.com/CamelCase.
199                             --- Many .condition.type values are consistent across resources
200                             like Available, but because arbitrary conditions can be useful
201                             (see .node.status.conditions), the ability to deconflict is
202                             important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
203                           maxLength: 316
204                           pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
205                           type: string
206                       required:
207                       - lastTransitionTime
208                       - message
209                       - reason
210                       - status
211                       - type
212                       type: object
213                     type: array
214                   observedGeneration:
215                     description: ObservedGeneration is the last observed generation.
216                     format: int64
217                     type: integer
218                 type: object
219             type: object
220         served: true
221         storage: true
222         subresources:
223           status: {}
224     status:
225       acceptedNames:
226         kind: ""
227         plural: ""
228       conditions: []
229       storedVersions: []
230     ---
231     apiVersion: apiextensions.k8s.io/v1
232     kind: CustomResourceDefinition
233     metadata:
234       annotations:
235         controller-gen.kubebuilder.io/version: v0.5.0
236       creationTimestamp: null
237       labels:
238         app.kubernetes.io/instance: flux-system
239         app.kubernetes.io/part-of: flux
240         app.kubernetes.io/version: v0.25.3
241       name: buckets.source.toolkit.fluxcd.io
242     spec:
243       group: source.toolkit.fluxcd.io
244       names:
245         kind: Bucket
246         listKind: BucketList
247         plural: buckets
248         singular: bucket
249       scope: Namespaced
250       versions:
251       - additionalPrinterColumns:
252         - jsonPath: .spec.endpoint
253           name: Endpoint
254           type: string
255         - jsonPath: .status.conditions[?(@.type=="Ready")].status
256           name: Ready
257           type: string
258         - jsonPath: .status.conditions[?(@.type=="Ready")].message
259           name: Status
260           type: string
261         - jsonPath: .metadata.creationTimestamp
262           name: Age
263           type: date
264         name: v1beta1
265         schema:
266           openAPIV3Schema:
267             description: Bucket is the Schema for the buckets API
268             properties:
269               apiVersion:
270                 description: 'APIVersion defines the versioned schema of this representation
271                   of an object. Servers should convert recognized schemas to the latest
272                   internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
273                 type: string
274               kind:
275                 description: 'Kind is a string value representing the REST resource this
276                   object represents. Servers may infer this from the endpoint the client
277                   submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
278                 type: string
279               metadata:
280                 type: object
281               spec:
282                 description: BucketSpec defines the desired state of an S3 compatible
283                   bucket
284                 properties:
285                   accessFrom:
286                     description: AccessFrom defines an Access Control List for allowing
287                       cross-namespace references to this object.
288                     properties:
289                       namespaceSelectors:
290                         description: NamespaceSelectors is the list of namespace selectors
291                           to which this ACL applies. Items in this list are evaluated
292                           using a logical OR operation.
293                         items:
294                           description: NamespaceSelector selects the namespaces to which
295                             this ACL applies. An empty map of MatchLabels matches all
296                             namespaces in a cluster.
297                           properties:
298                             matchLabels:
299                               additionalProperties:
300                                 type: string
301                               description: MatchLabels is a map of {key,value} pairs.
302                                 A single {key,value} in the matchLabels map is equivalent
303                                 to an element of matchExpressions, whose key field is
304                                 "key", the operator is "In", and the values array contains
305                                 only "value". The requirements are ANDed.
306                               type: object
307                           type: object
308                         type: array
309                     required:
310                     - namespaceSelectors
311                     type: object
312                   bucketName:
313                     description: The bucket name.
314                     type: string
315                   endpoint:
316                     description: The bucket endpoint address.
317                     type: string
318                   ignore:
319                     description: Ignore overrides the set of excluded patterns in the
320                       .sourceignore format (which is the same as .gitignore). If not provided,
321                       a default will be used, consult the documentation for your version
322                       to find out what those are.
323                     type: string
324                   insecure:
325                     description: Insecure allows connecting to a non-TLS S3 HTTP endpoint.
326                     type: boolean
327                   interval:
328                     description: The interval at which to check for bucket updates.
329                     type: string
330                   provider:
331                     default: generic
332                     description: The S3 compatible storage provider name, default ('generic').
333                     enum:
334                     - generic
335                     - aws
336                     - gcp
337                     type: string
338                   region:
339                     description: The bucket region.
340                     type: string
341                   secretRef:
342                     description: The name of the secret containing authentication credentials
343                       for the Bucket.
344                     properties:
345                       name:
346                         description: Name of the referent
347                         type: string
348                     required:
349                     - name
350                     type: object
351                   suspend:
352                     description: This flag tells the controller to suspend the reconciliation
353                       of this source.
354                     type: boolean
355                   timeout:
356                     default: 20s
357                     description: The timeout for download operations, defaults to 20s.
358                     type: string
359                 required:
360                 - bucketName
361                 - endpoint
362                 - interval
363                 type: object
364               status:
365                 default:
366                   observedGeneration: -1
367                 description: BucketStatus defines the observed state of a bucket
368                 properties:
369                   artifact:
370                     description: Artifact represents the output of the last successful
371                       Bucket sync.
372                     properties:
373                       checksum:
374                         description: Checksum is the SHA256 checksum of the artifact.
375                         type: string
376                       lastUpdateTime:
377                         description: LastUpdateTime is the timestamp corresponding to
378                           the last update of this artifact.
379                         format: date-time
380                         type: string
381                       path:
382                         description: Path is the relative file path of this artifact.
383                         type: string
384                       revision:
385                         description: Revision is a human readable identifier traceable
386                           in the origin source system. It can be a Git commit SHA, Git
387                           tag, a Helm index timestamp, a Helm chart version, etc.
388                         type: string
389                       url:
390                         description: URL is the HTTP address of this artifact.
391                         type: string
392                     required:
393                     - path
394                     - url
395                     type: object
396                   conditions:
397                     description: Conditions holds the conditions for the Bucket.
398                     items:
399                       description: "Condition contains details for one aspect of the current
400                         state of this API Resource. --- This struct is intended for direct
401                         use as an array at the field path .status.conditions.  For example,
402                         type FooStatus struct{     // Represents the observations of a
403                         foo's current state.     // Known .status.conditions.type are:
404                         \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
405                         \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
406                         \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
407                         patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
408                         \n     // other fields }"
409                       properties:
410                         lastTransitionTime:
411                           description: lastTransitionTime is the last time the condition
412                             transitioned from one status to another. This should be when
413                             the underlying condition changed.  If that is not known, then
414                             using the time when the API field changed is acceptable.
415                           format: date-time
416                           type: string
417                         message:
418                           description: message is a human readable message indicating
419                             details about the transition. This may be an empty string.
420                           maxLength: 32768
421                           type: string
422                         observedGeneration:
423                           description: observedGeneration represents the .metadata.generation
424                             that the condition was set based upon. For instance, if .metadata.generation
425                             is currently 12, but the .status.conditions[x].observedGeneration
426                             is 9, the condition is out of date with respect to the current
427                             state of the instance.
428                           format: int64
429                           minimum: 0
430                           type: integer
431                         reason:
432                           description: reason contains a programmatic identifier indicating
433                             the reason for the condition's last transition. Producers
434                             of specific condition types may define expected values and
435                             meanings for this field, and whether the values are considered
436                             a guaranteed API. The value should be a CamelCase string.
437                             This field may not be empty.
438                           maxLength: 1024
439                           minLength: 1
440                           pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
441                           type: string
442                         status:
443                           description: status of the condition, one of True, False, Unknown.
444                           enum:
445                           - "True"
446                           - "False"
447                           - Unknown
448                           type: string
449                         type:
450                           description: type of condition in CamelCase or in foo.example.com/CamelCase.
451                             --- Many .condition.type values are consistent across resources
452                             like Available, but because arbitrary conditions can be useful
453                             (see .node.status.conditions), the ability to deconflict is
454                             important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
455                           maxLength: 316
456                           pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
457                           type: string
458                       required:
459                       - lastTransitionTime
460                       - message
461                       - reason
462                       - status
463                       - type
464                       type: object
465                     type: array
466                   lastHandledReconcileAt:
467                     description: LastHandledReconcileAt holds the value of the most recent
468                       reconcile request value, so a change can be detected.
469                     type: string
470                   observedGeneration:
471                     description: ObservedGeneration is the last observed generation.
472                     format: int64
473                     type: integer
474                   url:
475                     description: URL is the download link for the artifact output of the
476                       last Bucket sync.
477                     type: string
478                 type: object
479             type: object
480         served: true
481         storage: true
482         subresources:
483           status: {}
484     status:
485       acceptedNames:
486         kind: ""
487         plural: ""
488       conditions: []
489       storedVersions: []
490     ---
491     apiVersion: apiextensions.k8s.io/v1
492     kind: CustomResourceDefinition
493     metadata:
494       annotations:
495         controller-gen.kubebuilder.io/version: v0.5.0
496       creationTimestamp: null
497       labels:
498         app.kubernetes.io/instance: flux-system
499         app.kubernetes.io/part-of: flux
500         app.kubernetes.io/version: v0.25.3
501       name: gitrepositories.source.toolkit.fluxcd.io
502     spec:
503       group: source.toolkit.fluxcd.io
504       names:
505         kind: GitRepository
506         listKind: GitRepositoryList
507         plural: gitrepositories
508         shortNames:
509         - gitrepo
510         singular: gitrepository
511       scope: Namespaced
512       versions:
513       - additionalPrinterColumns:
514         - jsonPath: .spec.url
515           name: URL
516           type: string
517         - jsonPath: .status.conditions[?(@.type=="Ready")].status
518           name: Ready
519           type: string
520         - jsonPath: .status.conditions[?(@.type=="Ready")].message
521           name: Status
522           type: string
523         - jsonPath: .metadata.creationTimestamp
524           name: Age
525           type: date
526         name: v1beta1
527         schema:
528           openAPIV3Schema:
529             description: GitRepository is the Schema for the gitrepositories API
530             properties:
531               apiVersion:
532                 description: 'APIVersion defines the versioned schema of this representation
533                   of an object. Servers should convert recognized schemas to the latest
534                   internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
535                 type: string
536               kind:
537                 description: 'Kind is a string value representing the REST resource this
538                   object represents. Servers may infer this from the endpoint the client
539                   submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
540                 type: string
541               metadata:
542                 type: object
543               spec:
544                 description: GitRepositorySpec defines the desired state of a Git repository.
545                 properties:
546                   accessFrom:
547                     description: AccessFrom defines an Access Control List for allowing
548                       cross-namespace references to this object.
549                     properties:
550                       namespaceSelectors:
551                         description: NamespaceSelectors is the list of namespace selectors
552                           to which this ACL applies. Items in this list are evaluated
553                           using a logical OR operation.
554                         items:
555                           description: NamespaceSelector selects the namespaces to which
556                             this ACL applies. An empty map of MatchLabels matches all
557                             namespaces in a cluster.
558                           properties:
559                             matchLabels:
560                               additionalProperties:
561                                 type: string
562                               description: MatchLabels is a map of {key,value} pairs.
563                                 A single {key,value} in the matchLabels map is equivalent
564                                 to an element of matchExpressions, whose key field is
565                                 "key", the operator is "In", and the values array contains
566                                 only "value". The requirements are ANDed.
567                               type: object
568                           type: object
569                         type: array
570                     required:
571                     - namespaceSelectors
572                     type: object
573                   gitImplementation:
574                     default: go-git
575                     description: Determines which git client library to use. Defaults
576                       to go-git, valid values are ('go-git', 'libgit2').
577                     enum:
578                     - go-git
579                     - libgit2
580                     type: string
581                   ignore:
582                     description: Ignore overrides the set of excluded patterns in the
583                       .sourceignore format (which is the same as .gitignore). If not provided,
584                       a default will be used, consult the documentation for your version
585                       to find out what those are.
586                     type: string
587                   include:
588                     description: Extra git repositories to map into the repository
589                     items:
590                       description: GitRepositoryInclude defines a source with a from and
591                         to path.
592                       properties:
593                         fromPath:
594                           description: The path to copy contents from, defaults to the
595                             root directory.
596                           type: string
597                         repository:
598                           description: Reference to a GitRepository to include.
599                           properties:
600                             name:
601                               description: Name of the referent
602                               type: string
603                           required:
604                           - name
605                           type: object
606                         toPath:
607                           description: The path to copy contents to, defaults to the name
608                             of the source ref.
609                           type: string
610                       required:
611                       - repository
612                       type: object
613                     type: array
614                   interval:
615                     description: The interval at which to check for repository updates.
616                     type: string
617                   recurseSubmodules:
618                     description: When enabled, after the clone is created, initializes
619                       all submodules within, using their default settings. This option
620                       is available only when using the 'go-git' GitImplementation.
621                     type: boolean
622                   ref:
623                     description: The Git reference to checkout and monitor for changes,
624                       defaults to master branch.
625                     properties:
626                       branch:
627                         description: The Git branch to checkout, defaults to master.
628                         type: string
629                       commit:
630                         description: The Git commit SHA to checkout, if specified Tag
631                           filters will be ignored.
632                         type: string
633                       semver:
634                         description: The Git tag semver expression, takes precedence over
635                           Tag.
636                         type: string
637                       tag:
638                         description: The Git tag to checkout, takes precedence over Branch.
639                         type: string
640                     type: object
641                   secretRef:
642                     description: The secret name containing the Git credentials. For HTTPS
643                       repositories the secret must contain username and password fields.
644                       For SSH repositories the secret must contain identity, identity.pub
645                       and known_hosts fields.
646                     properties:
647                       name:
648                         description: Name of the referent
649                         type: string
650                     required:
651                     - name
652                     type: object
653                   suspend:
654                     description: This flag tells the controller to suspend the reconciliation
655                       of this source.
656                     type: boolean
657                   timeout:
658                     default: 20s
659                     description: The timeout for remote Git operations like cloning, defaults
660                       to 20s.
661                     type: string
662                   url:
663                     description: The repository URL, can be a HTTP/S or SSH address.
664                     pattern: ^(http|https|ssh)://
665                     type: string
666                   verify:
667                     description: Verify OpenPGP signature for the Git commit HEAD points
668                       to.
669                     properties:
670                       mode:
671                         description: Mode describes what git object should be verified,
672                           currently ('head').
673                         enum:
674                         - head
675                         type: string
676                       secretRef:
677                         description: The secret name containing the public keys of all
678                           trusted Git authors.
679                         properties:
680                           name:
681                             description: Name of the referent
682                             type: string
683                         required:
684                         - name
685                         type: object
686                     required:
687                     - mode
688                     type: object
689                 required:
690                 - interval
691                 - url
692                 type: object
693               status:
694                 default:
695                   observedGeneration: -1
696                 description: GitRepositoryStatus defines the observed state of a Git repository.
697                 properties:
698                   artifact:
699                     description: Artifact represents the output of the last successful
700                       repository sync.
701                     properties:
702                       checksum:
703                         description: Checksum is the SHA256 checksum of the artifact.
704                         type: string
705                       lastUpdateTime:
706                         description: LastUpdateTime is the timestamp corresponding to
707                           the last update of this artifact.
708                         format: date-time
709                         type: string
710                       path:
711                         description: Path is the relative file path of this artifact.
712                         type: string
713                       revision:
714                         description: Revision is a human readable identifier traceable
715                           in the origin source system. It can be a Git commit SHA, Git
716                           tag, a Helm index timestamp, a Helm chart version, etc.
717                         type: string
718                       url:
719                         description: URL is the HTTP address of this artifact.
720                         type: string
721                     required:
722                     - path
723                     - url
724                     type: object
725                   conditions:
726                     description: Conditions holds the conditions for the GitRepository.
727                     items:
728                       description: "Condition contains details for one aspect of the current
729                         state of this API Resource. --- This struct is intended for direct
730                         use as an array at the field path .status.conditions.  For example,
731                         type FooStatus struct{     // Represents the observations of a
732                         foo's current state.     // Known .status.conditions.type are:
733                         \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
734                         \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
735                         \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
736                         patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
737                         \n     // other fields }"
738                       properties:
739                         lastTransitionTime:
740                           description: lastTransitionTime is the last time the condition
741                             transitioned from one status to another. This should be when
742                             the underlying condition changed.  If that is not known, then
743                             using the time when the API field changed is acceptable.
744                           format: date-time
745                           type: string
746                         message:
747                           description: message is a human readable message indicating
748                             details about the transition. This may be an empty string.
749                           maxLength: 32768
750                           type: string
751                         observedGeneration:
752                           description: observedGeneration represents the .metadata.generation
753                             that the condition was set based upon. For instance, if .metadata.generation
754                             is currently 12, but the .status.conditions[x].observedGeneration
755                             is 9, the condition is out of date with respect to the current
756                             state of the instance.
757                           format: int64
758                           minimum: 0
759                           type: integer
760                         reason:
761                           description: reason contains a programmatic identifier indicating
762                             the reason for the condition's last transition. Producers
763                             of specific condition types may define expected values and
764                             meanings for this field, and whether the values are considered
765                             a guaranteed API. The value should be a CamelCase string.
766                             This field may not be empty.
767                           maxLength: 1024
768                           minLength: 1
769                           pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
770                           type: string
771                         status:
772                           description: status of the condition, one of True, False, Unknown.
773                           enum:
774                           - "True"
775                           - "False"
776                           - Unknown
777                           type: string
778                         type:
779                           description: type of condition in CamelCase or in foo.example.com/CamelCase.
780                             --- Many .condition.type values are consistent across resources
781                             like Available, but because arbitrary conditions can be useful
782                             (see .node.status.conditions), the ability to deconflict is
783                             important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
784                           maxLength: 316
785                           pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
786                           type: string
787                       required:
788                       - lastTransitionTime
789                       - message
790                       - reason
791                       - status
792                       - type
793                       type: object
794                     type: array
795                   includedArtifacts:
796                     description: IncludedArtifacts represents the included artifacts from
797                       the last successful repository sync.
798                     items:
799                       description: Artifact represents the output of a source synchronisation.
800                       properties:
801                         checksum:
802                           description: Checksum is the SHA256 checksum of the artifact.
803                           type: string
804                         lastUpdateTime:
805                           description: LastUpdateTime is the timestamp corresponding to
806                             the last update of this artifact.
807                           format: date-time
808                           type: string
809                         path:
810                           description: Path is the relative file path of this artifact.
811                           type: string
812                         revision:
813                           description: Revision is a human readable identifier traceable
814                             in the origin source system. It can be a Git commit SHA, Git
815                             tag, a Helm index timestamp, a Helm chart version, etc.
816                           type: string
817                         url:
818                           description: URL is the HTTP address of this artifact.
819                           type: string
820                       required:
821                       - path
822                       - url
823                       type: object
824                     type: array
825                   lastHandledReconcileAt:
826                     description: LastHandledReconcileAt holds the value of the most recent
827                       reconcile request value, so a change can be detected.
828                     type: string
829                   observedGeneration:
830                     description: ObservedGeneration is the last observed generation.
831                     format: int64
832                     type: integer
833                   url:
834                     description: URL is the download link for the artifact output of the
835                       last repository sync.
836                     type: string
837                 type: object
838             type: object
839         served: true
840         storage: true
841         subresources:
842           status: {}
843     status:
844       acceptedNames:
845         kind: ""
846         plural: ""
847       conditions: []
848       storedVersions: []
849     ---
850     apiVersion: apiextensions.k8s.io/v1
851     kind: CustomResourceDefinition
852     metadata:
853       annotations:
854         controller-gen.kubebuilder.io/version: v0.5.0
855       creationTimestamp: null
856       labels:
857         app.kubernetes.io/instance: flux-system
858         app.kubernetes.io/part-of: flux
859         app.kubernetes.io/version: v0.25.3
860       name: helmcharts.source.toolkit.fluxcd.io
861     spec:
862       group: source.toolkit.fluxcd.io
863       names:
864         kind: HelmChart
865         listKind: HelmChartList
866         plural: helmcharts
867         shortNames:
868         - hc
869         singular: helmchart
870       scope: Namespaced
871       versions:
872       - additionalPrinterColumns:
873         - jsonPath: .spec.chart
874           name: Chart
875           type: string
876         - jsonPath: .spec.version
877           name: Version
878           type: string
879         - jsonPath: .spec.sourceRef.kind
880           name: Source Kind
881           type: string
882         - jsonPath: .spec.sourceRef.name
883           name: Source Name
884           type: string
885         - jsonPath: .status.conditions[?(@.type=="Ready")].status
886           name: Ready
887           type: string
888         - jsonPath: .status.conditions[?(@.type=="Ready")].message
889           name: Status
890           type: string
891         - jsonPath: .metadata.creationTimestamp
892           name: Age
893           type: date
894         name: v1beta1
895         schema:
896           openAPIV3Schema:
897             description: HelmChart is the Schema for the helmcharts API
898             properties:
899               apiVersion:
900                 description: 'APIVersion defines the versioned schema of this representation
901                   of an object. Servers should convert recognized schemas to the latest
902                   internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
903                 type: string
904               kind:
905                 description: 'Kind is a string value representing the REST resource this
906                   object represents. Servers may infer this from the endpoint the client
907                   submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
908                 type: string
909               metadata:
910                 type: object
911               spec:
912                 description: HelmChartSpec defines the desired state of a Helm chart.
913                 properties:
914                   accessFrom:
915                     description: AccessFrom defines an Access Control List for allowing
916                       cross-namespace references to this object.
917                     properties:
918                       namespaceSelectors:
919                         description: NamespaceSelectors is the list of namespace selectors
920                           to which this ACL applies. Items in this list are evaluated
921                           using a logical OR operation.
922                         items:
923                           description: NamespaceSelector selects the namespaces to which
924                             this ACL applies. An empty map of MatchLabels matches all
925                             namespaces in a cluster.
926                           properties:
927                             matchLabels:
928                               additionalProperties:
929                                 type: string
930                               description: MatchLabels is a map of {key,value} pairs.
931                                 A single {key,value} in the matchLabels map is equivalent
932                                 to an element of matchExpressions, whose key field is
933                                 "key", the operator is "In", and the values array contains
934                                 only "value". The requirements are ANDed.
935                               type: object
936                           type: object
937                         type: array
938                     required:
939                     - namespaceSelectors
940                     type: object
941                   chart:
942                     description: The name or path the Helm chart is available at in the
943                       SourceRef.
944                     type: string
945                   interval:
946                     description: The interval at which to check the Source for updates.
947                     type: string
948                   reconcileStrategy:
949                     default: ChartVersion
950                     description: Determines what enables the creation of a new artifact.
951                       Valid values are ('ChartVersion', 'Revision'). See the documentation
952                       of the values for an explanation on their behavior. Defaults to
953                       ChartVersion when omitted.
954                     enum:
955                     - ChartVersion
956                     - Revision
957                     type: string
958                   sourceRef:
959                     description: The reference to the Source the chart is available at.
960                     properties:
961                       apiVersion:
962                         description: APIVersion of the referent.
963                         type: string
964                       kind:
965                         description: Kind of the referent, valid values are ('HelmRepository',
966                           'GitRepository', 'Bucket').
967                         enum:
968                         - HelmRepository
969                         - GitRepository
970                         - Bucket
971                         type: string
972                       name:
973                         description: Name of the referent.
974                         type: string
975                     required:
976                     - kind
977                     - name
978                     type: object
979                   suspend:
980                     description: This flag tells the controller to suspend the reconciliation
981                       of this source.
982                     type: boolean
983                   valuesFile:
984                     description: Alternative values file to use as the default chart values,
985                       expected to be a relative path in the SourceRef. Deprecated in favor
986                       of ValuesFiles, for backwards compatibility the file defined here
987                       is merged before the ValuesFiles items. Ignored when omitted.
988                     type: string
989                   valuesFiles:
990                     description: Alternative list of values files to use as the chart
991                       values (values.yaml is not included by default), expected to be
992                       a relative path in the SourceRef. Values files are merged in the
993                       order of this list with the last file overriding the first. Ignored
994                       when omitted.
995                     items:
996                       type: string
997                     type: array
998                   version:
999                     default: '*'
1000                     description: The chart version semver expression, ignored for charts
1001                       from GitRepository and Bucket sources. Defaults to latest when omitted.
1002                     type: string
1003                 required:
1004                 - chart
1005                 - interval
1006                 - sourceRef
1007                 type: object
1008               status:
1009                 default:
1010                   observedGeneration: -1
1011                 description: HelmChartStatus defines the observed state of the HelmChart.
1012                 properties:
1013                   artifact:
1014                     description: Artifact represents the output of the last successful
1015                       chart sync.
1016                     properties:
1017                       checksum:
1018                         description: Checksum is the SHA256 checksum of the artifact.
1019                         type: string
1020                       lastUpdateTime:
1021                         description: LastUpdateTime is the timestamp corresponding to
1022                           the last update of this artifact.
1023                         format: date-time
1024                         type: string
1025                       path:
1026                         description: Path is the relative file path of this artifact.
1027                         type: string
1028                       revision:
1029                         description: Revision is a human readable identifier traceable
1030                           in the origin source system. It can be a Git commit SHA, Git
1031                           tag, a Helm index timestamp, a Helm chart version, etc.
1032                         type: string
1033                       url:
1034                         description: URL is the HTTP address of this artifact.
1035                         type: string
1036                     required:
1037                     - path
1038                     - url
1039                     type: object
1040                   conditions:
1041                     description: Conditions holds the conditions for the HelmChart.
1042                     items:
1043                       description: "Condition contains details for one aspect of the current
1044                         state of this API Resource. --- This struct is intended for direct
1045                         use as an array at the field path .status.conditions.  For example,
1046                         type FooStatus struct{     // Represents the observations of a
1047                         foo's current state.     // Known .status.conditions.type are:
1048                         \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
1049                         \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
1050                         \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
1051                         patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
1052                         \n     // other fields }"
1053                       properties:
1054                         lastTransitionTime:
1055                           description: lastTransitionTime is the last time the condition
1056                             transitioned from one status to another. This should be when
1057                             the underlying condition changed.  If that is not known, then
1058                             using the time when the API field changed is acceptable.
1059                           format: date-time
1060                           type: string
1061                         message:
1062                           description: message is a human readable message indicating
1063                             details about the transition. This may be an empty string.
1064                           maxLength: 32768
1065                           type: string
1066                         observedGeneration:
1067                           description: observedGeneration represents the .metadata.generation
1068                             that the condition was set based upon. For instance, if .metadata.generation
1069                             is currently 12, but the .status.conditions[x].observedGeneration
1070                             is 9, the condition is out of date with respect to the current
1071                             state of the instance.
1072                           format: int64
1073                           minimum: 0
1074                           type: integer
1075                         reason:
1076                           description: reason contains a programmatic identifier indicating
1077                             the reason for the condition's last transition. Producers
1078                             of specific condition types may define expected values and
1079                             meanings for this field, and whether the values are considered
1080                             a guaranteed API. The value should be a CamelCase string.
1081                             This field may not be empty.
1082                           maxLength: 1024
1083                           minLength: 1
1084                           pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
1085                           type: string
1086                         status:
1087                           description: status of the condition, one of True, False, Unknown.
1088                           enum:
1089                           - "True"
1090                           - "False"
1091                           - Unknown
1092                           type: string
1093                         type:
1094                           description: type of condition in CamelCase or in foo.example.com/CamelCase.
1095                             --- Many .condition.type values are consistent across resources
1096                             like Available, but because arbitrary conditions can be useful
1097                             (see .node.status.conditions), the ability to deconflict is
1098                             important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
1099                           maxLength: 316
1100                           pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
1101                           type: string
1102                       required:
1103                       - lastTransitionTime
1104                       - message
1105                       - reason
1106                       - status
1107                       - type
1108                       type: object
1109                     type: array
1110                   lastHandledReconcileAt:
1111                     description: LastHandledReconcileAt holds the value of the most recent
1112                       reconcile request value, so a change can be detected.
1113                     type: string
1114                   observedGeneration:
1115                     description: ObservedGeneration is the last observed generation.
1116                     format: int64
1117                     type: integer
1118                   url:
1119                     description: URL is the download link for the last chart pulled.
1120                     type: string
1121                 type: object
1122             type: object
1123         served: true
1124         storage: true
1125         subresources:
1126           status: {}
1127     status:
1128       acceptedNames:
1129         kind: ""
1130         plural: ""
1131       conditions: []
1132       storedVersions: []
1133     ---
1134     apiVersion: apiextensions.k8s.io/v1
1135     kind: CustomResourceDefinition
1136     metadata:
1137       annotations:
1138         controller-gen.kubebuilder.io/version: v0.7.0
1139       creationTimestamp: null
1140       labels:
1141         app.kubernetes.io/instance: flux-system
1142         app.kubernetes.io/part-of: flux
1143         app.kubernetes.io/version: v0.25.3
1144       name: helmreleases.helm.toolkit.fluxcd.io
1145     spec:
1146       group: helm.toolkit.fluxcd.io
1147       names:
1148         kind: HelmRelease
1149         listKind: HelmReleaseList
1150         plural: helmreleases
1151         shortNames:
1152         - hr
1153         singular: helmrelease
1154       scope: Namespaced
1155       versions:
1156       - additionalPrinterColumns:
1157         - jsonPath: .status.conditions[?(@.type=="Ready")].status
1158           name: Ready
1159           type: string
1160         - jsonPath: .status.conditions[?(@.type=="Ready")].message
1161           name: Status
1162           type: string
1163         - jsonPath: .metadata.creationTimestamp
1164           name: Age
1165           type: date
1166         name: v2beta1
1167         schema:
1168           openAPIV3Schema:
1169             description: HelmRelease is the Schema for the helmreleases API
1170             properties:
1171               apiVersion:
1172                 description: 'APIVersion defines the versioned schema of this representation
1173                   of an object. Servers should convert recognized schemas to the latest
1174                   internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
1175                 type: string
1176               kind:
1177                 description: 'Kind is a string value representing the REST resource this
1178                   object represents. Servers may infer this from the endpoint the client
1179                   submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
1180                 type: string
1181               metadata:
1182                 type: object
1183               spec:
1184                 description: HelmReleaseSpec defines the desired state of a Helm release.
1185                 properties:
1186                   chart:
1187                     description: Chart defines the template of the v1beta1.HelmChart that
1188                       should be created for this HelmRelease.
1189                     properties:
1190                       spec:
1191                         description: Spec holds the template for the v1beta1.HelmChartSpec
1192                           for this HelmRelease.
1193                         properties:
1194                           chart:
1195                             description: The name or path the Helm chart is available
1196                               at in the SourceRef.
1197                             type: string
1198                           interval:
1199                             description: Interval at which to check the v1beta1.Source
1200                               for updates. Defaults to 'HelmReleaseSpec.Interval'.
1201                             type: string
1202                           reconcileStrategy:
1203                             default: ChartVersion
1204                             description: Determines what enables the creation of a new
1205                               artifact. Valid values are ('ChartVersion', 'Revision').
1206                               See the documentation of the values for an explanation on
1207                               their behavior. Defaults to ChartVersion when omitted.
1208                             enum:
1209                             - ChartVersion
1210                             - Revision
1211                             type: string
1212                           sourceRef:
1213                             description: The name and namespace of the v1beta1.Source
1214                               the chart is available at.
1215                             properties:
1216                               apiVersion:
1217                                 description: APIVersion of the referent.
1218                                 type: string
1219                               kind:
1220                                 description: Kind of the referent.
1221                                 enum:
1222                                 - HelmRepository
1223                                 - GitRepository
1224                                 - Bucket
1225                                 type: string
1226                               name:
1227                                 description: Name of the referent.
1228                                 maxLength: 253
1229                                 minLength: 1
1230                                 type: string
1231                               namespace:
1232                                 description: Namespace of the referent.
1233                                 maxLength: 63
1234                                 minLength: 1
1235                                 type: string
1236                             required:
1237                             - name
1238                             type: object
1239                           valuesFile:
1240                             description: Alternative values file to use as the default
1241                               chart values, expected to be a relative path in the SourceRef.
1242                               Deprecated in favor of ValuesFiles, for backwards compatibility
1243                               the file defined here is merged before the ValuesFiles items.
1244                               Ignored when omitted.
1245                             type: string
1246                           valuesFiles:
1247                             description: Alternative list of values files to use as the
1248                               chart values (values.yaml is not included by default), expected
1249                               to be a relative path in the SourceRef. Values files are
1250                               merged in the order of this list with the last file overriding
1251                               the first. Ignored when omitted.
1252                             items:
1253                               type: string
1254                             type: array
1255                           version:
1256                             default: '*'
1257                             description: Version semver expression, ignored for charts
1258                               from v1beta1.GitRepository and v1beta1.Bucket sources. Defaults
1259                               to latest when omitted.
1260                             type: string
1261                         required:
1262                         - chart
1263                         - sourceRef
1264                         type: object
1265                     required:
1266                     - spec
1267                     type: object
1268                   dependsOn:
1269                     description: DependsOn may contain a dependency.CrossNamespaceDependencyReference
1270                       slice with references to HelmRelease resources that must be ready
1271                       before this HelmRelease can be reconciled.
1272                     items:
1273                       description: CrossNamespaceDependencyReference holds the reference
1274                         to a dependency.
1275                       properties:
1276                         name:
1277                           description: Name holds the name reference of a dependency.
1278                           type: string
1279                         namespace:
1280                           description: Namespace holds the namespace reference of a dependency.
1281                           type: string
1282                       required:
1283                       - name
1284                       type: object
1285                     type: array
1286                   install:
1287                     description: Install holds the configuration for Helm install actions
1288                       for this HelmRelease.
1289                     properties:
1290                       crds:
1291                         description: "CRDs upgrade CRDs from the Helm Chart's crds directory
1292                           according to the CRD upgrade policy provided here. Valid values
1293                           are `Skip`, `Create` or `CreateReplace`. Default is `Create`
1294                           and if omitted CRDs are installed but not updated. \n Skip:
1295                           do neither install nor replace (update) any CRDs. \n Create:
1296                           new CRDs are created, existing CRDs are neither updated nor
1297                           deleted. \n CreateReplace: new CRDs are created, existing CRDs
1298                           are updated (replaced) but not deleted. \n By default, CRDs
1299                           are applied (installed) during Helm install action. With this
1300                           option users can opt-in to CRD replace existing CRDs on Helm
1301                           install actions, which is not (yet) natively supported by Helm.
1302                           https://helm.sh/docs/chart_best_practices/custom_resource_definitions."
1303                         enum:
1304                         - Skip
1305                         - Create
1306                         - CreateReplace
1307                         type: string
1308                       createNamespace:
1309                         description: CreateNamespace tells the Helm install action to
1310                           create the HelmReleaseSpec.TargetNamespace if it does not exist
1311                           yet. On uninstall, the namespace will not be garbage collected.
1312                         type: boolean
1313                       disableHooks:
1314                         description: DisableHooks prevents hooks from running during the
1315                           Helm install action.
1316                         type: boolean
1317                       disableOpenAPIValidation:
1318                         description: DisableOpenAPIValidation prevents the Helm install
1319                           action from validating rendered templates against the Kubernetes
1320                           OpenAPI Schema.
1321                         type: boolean
1322                       disableWait:
1323                         description: DisableWait disables the waiting for resources to
1324                           be ready after a Helm install has been performed.
1325                         type: boolean
1326                       disableWaitForJobs:
1327                         description: DisableWaitForJobs disables waiting for jobs to complete
1328                           after a Helm install has been performed.
1329                         type: boolean
1330                       remediation:
1331                         description: Remediation holds the remediation configuration for
1332                           when the Helm install action for the HelmRelease fails. The
1333                           default is to not perform any action.
1334                         properties:
1335                           ignoreTestFailures:
1336                             description: IgnoreTestFailures tells the controller to skip
1337                               remediation when the Helm tests are run after an install
1338                               action but fail. Defaults to 'Test.IgnoreFailures'.
1339                             type: boolean
1340                           remediateLastFailure:
1341                             description: RemediateLastFailure tells the controller to
1342                               remediate the last failure, when no retries remain. Defaults
1343                               to 'false'.
1344                             type: boolean
1345                           retries:
1346                             description: Retries is the number of retries that should
1347                               be attempted on failures before bailing. Remediation, using
1348                               an uninstall, is performed between each attempt. Defaults
1349                               to '0', a negative integer equals to unlimited retries.
1350                             type: integer
1351                         type: object
1352                       replace:
1353                         description: Replace tells the Helm install action to re-use the
1354                           'ReleaseName', but only if that name is a deleted release which
1355                           remains in the history.
1356                         type: boolean
1357                       skipCRDs:
1358                         description: "SkipCRDs tells the Helm install action to not install
1359                           any CRDs. By default, CRDs are installed if not already present.
1360                           \n Deprecated use CRD policy (`crds`) attribute with value `Skip`
1361                           instead."
1362                         type: boolean
1363                       timeout:
1364                         description: Timeout is the time to wait for any individual Kubernetes
1365                           operation (like Jobs for hooks) during the performance of a
1366                           Helm install action. Defaults to 'HelmReleaseSpec.Timeout'.
1367                         type: string
1368                     type: object
1369                   interval:
1370                     description: Interval at which to reconcile the Helm release.
1371                     type: string
1372                   kubeConfig:
1373                     description: KubeConfig for reconciling the HelmRelease on a remote
1374                       cluster. When specified, KubeConfig takes precedence over ServiceAccountName.
1375                     properties:
1376                       secretRef:
1377                         description: SecretRef holds the name to a secret that contains
1378                           a 'value' key with the kubeconfig file as the value. It must
1379                           be in the same namespace as the HelmRelease. It is recommended
1380                           that the kubeconfig is self-contained, and the secret is regularly
1381                           updated if credentials such as a cloud-access-token expire.
1382                           Cloud specific `cmd-path` auth helpers will not function without
1383                           adding binaries and credentials to the Pod that is responsible
1384                           for reconciling the HelmRelease.
1385                         properties:
1386                           name:
1387                             description: Name of the referent
1388                             type: string
1389                         required:
1390                         - name
1391                         type: object
1392                     type: object
1393                   maxHistory:
1394                     description: MaxHistory is the number of revisions saved by Helm for
1395                       this HelmRelease. Use '0' for an unlimited number of revisions;
1396                       defaults to '10'.
1397                     type: integer
1398                   postRenderers:
1399                     description: PostRenderers holds an array of Helm PostRenderers, which
1400                       will be applied in order of their definition.
1401                     items:
1402                       description: PostRenderer contains a Helm PostRenderer specification.
1403                       properties:
1404                         kustomize:
1405                           description: Kustomization to apply as PostRenderer.
1406                           properties:
1407                             images:
1408                               description: Images is a list of (image name, new name,
1409                                 new tag or digest) for changing image names, tags or digests.
1410                                 This can also be achieved with a patch, but this operator
1411                                 is simpler to specify.
1412                               items:
1413                                 description: Image contains an image name, a new name,
1414                                   a new tag or digest, which will replace the original
1415                                   name and tag.
1416                                 properties:
1417                                   digest:
1418                                     description: Digest is the value used to replace the
1419                                       original image tag. If digest is present NewTag
1420                                       value is ignored.
1421                                     type: string
1422                                   name:
1423                                     description: Name is a tag-less image name.
1424                                     type: string
1425                                   newName:
1426                                     description: NewName is the value used to replace
1427                                       the original name.
1428                                     type: string
1429                                   newTag:
1430                                     description: NewTag is the value used to replace the
1431                                       original tag.
1432                                     type: string
1433                                 required:
1434                                 - name
1435                                 type: object
1436                               type: array
1437                             patchesJson6902:
1438                               description: JSON 6902 patches, defined as inline YAML objects.
1439                               items:
1440                                 description: JSON6902Patch contains a JSON6902 patch and
1441                                   the target the patch should be applied to.
1442                                 properties:
1443                                   patch:
1444                                     description: Patch contains the JSON6902 patch document
1445                                       with an array of operation objects.
1446                                     items:
1447                                       description: JSON6902 is a JSON6902 operation object.
1448                                         https://datatracker.ietf.org/doc/html/rfc6902#section-4
1449                                       properties:
1450                                         from:
1451                                           description: From contains a JSON-pointer value
1452                                             that references a location within the target
1453                                             document where the operation is performed.
1454                                             The meaning of the value depends on the value
1455                                             of Op, and is NOT taken into account by all
1456                                             operations.
1457                                           type: string
1458                                         op:
1459                                           description: Op indicates the operation to perform.
1460                                             Its value MUST be one of "add", "remove",
1461                                             "replace", "move", "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4
1462                                           enum:
1463                                           - test
1464                                           - remove
1465                                           - add
1466                                           - replace
1467                                           - move
1468                                           - copy
1469                                           type: string
1470                                         path:
1471                                           description: Path contains the JSON-pointer
1472                                             value that references a location within the
1473                                             target document where the operation is performed.
1474                                             The meaning of the value depends on the value
1475                                             of Op.
1476                                           type: string
1477                                         value:
1478                                           description: Value contains a valid JSON structure.
1479                                             The meaning of the value depends on the value
1480                                             of Op, and is NOT taken into account by all
1481                                             operations.
1482                                           x-kubernetes-preserve-unknown-fields: true
1483                                       required:
1484                                       - op
1485                                       - path
1486                                       type: object
1487                                     type: array
1488                                   target:
1489                                     description: Target points to the resources that the
1490                                       patch document should be applied to.
1491                                     properties:
1492                                       annotationSelector:
1493                                         description: AnnotationSelector is a string that
1494                                           follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
1495                                           It matches with the resource annotations.
1496                                         type: string
1497                                       group:
1498                                         description: Group is the API group to select
1499                                           resources from. Together with Version and Kind
1500                                           it is capable of unambiguously identifying and/or
1501                                           selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
1502                                         type: string
1503                                       kind:
1504                                         description: Kind of the API Group to select resources
1505                                           from. Together with Group and Version it is
1506                                           capable of unambiguously identifying and/or
1507                                           selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
1508                                         type: string
1509                                       labelSelector:
1510                                         description: LabelSelector is a string that follows
1511                                           the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
1512                                           It matches with the resource labels.
1513                                         type: string
1514                                       name:
1515                                         description: Name to match resources with.
1516                                         type: string
1517                                       namespace:
1518                                         description: Namespace to select resources from.
1519                                         type: string
1520                                       version:
1521                                         description: Version of the API Group to select
1522                                           resources from. Together with Group and Kind
1523                                           it is capable of unambiguously identifying and/or
1524                                           selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
1525                                         type: string
1526                                     type: object
1527                                 required:
1528                                 - patch
1529                                 - target
1530                                 type: object
1531                               type: array
1532                             patchesStrategicMerge:
1533                               description: Strategic merge patches, defined as inline
1534                                 YAML objects.
1535                               items:
1536                                 x-kubernetes-preserve-unknown-fields: true
1537                               type: array
1538                           type: object
1539                       type: object
1540                     type: array
1541                   releaseName:
1542                     description: ReleaseName used for the Helm release. Defaults to a
1543                       composition of '[TargetNamespace-]Name'.
1544                     maxLength: 53
1545                     minLength: 1
1546                     type: string
1547                   rollback:
1548                     description: Rollback holds the configuration for Helm rollback actions
1549                       for this HelmRelease.
1550                     properties:
1551                       cleanupOnFail:
1552                         description: CleanupOnFail allows deletion of new resources created
1553                           during the Helm rollback action when it fails.
1554                         type: boolean
1555                       disableHooks:
1556                         description: DisableHooks prevents hooks from running during the
1557                           Helm rollback action.
1558                         type: boolean
1559                       disableWait:
1560                         description: DisableWait disables the waiting for resources to
1561                           be ready after a Helm rollback has been performed.
1562                         type: boolean
1563                       disableWaitForJobs:
1564                         description: DisableWaitForJobs disables waiting for jobs to complete
1565                           after a Helm rollback has been performed.
1566                         type: boolean
1567                       force:
1568                         description: Force forces resource updates through a replacement
1569                           strategy.
1570                         type: boolean
1571                       recreate:
1572                         description: Recreate performs pod restarts for the resource if
1573                           applicable.
1574                         type: boolean
1575                       timeout:
1576                         description: Timeout is the time to wait for any individual Kubernetes
1577                           operation (like Jobs for hooks) during the performance of a
1578                           Helm rollback action. Defaults to 'HelmReleaseSpec.Timeout'.
1579                         type: string
1580                     type: object
1581                   serviceAccountName:
1582                     description: The name of the Kubernetes service account to impersonate
1583                       when reconciling this HelmRelease.
1584                     type: string
1585                   storageNamespace:
1586                     description: StorageNamespace used for the Helm storage. Defaults
1587                       to the namespace of the HelmRelease.
1588                     maxLength: 63
1589                     minLength: 1
1590                     type: string
1591                   suspend:
1592                     description: Suspend tells the controller to suspend reconciliation
1593                       for this HelmRelease, it does not apply to already started reconciliations.
1594                       Defaults to false.
1595                     type: boolean
1596                   targetNamespace:
1597                     description: TargetNamespace to target when performing operations
1598                       for the HelmRelease. Defaults to the namespace of the HelmRelease.
1599                     maxLength: 63
1600                     minLength: 1
1601                     type: string
1602                   test:
1603                     description: Test holds the configuration for Helm test actions for
1604                       this HelmRelease.
1605                     properties:
1606                       enable:
1607                         description: Enable enables Helm test actions for this HelmRelease
1608                           after an Helm install or upgrade action has been performed.
1609                         type: boolean
1610                       ignoreFailures:
1611                         description: IgnoreFailures tells the controller to skip remediation
1612                           when the Helm tests are run but fail. Can be overwritten for
1613                           tests run after install or upgrade actions in 'Install.IgnoreTestFailures'
1614                           and 'Upgrade.IgnoreTestFailures'.
1615                         type: boolean
1616                       timeout:
1617                         description: Timeout is the time to wait for any individual Kubernetes
1618                           operation during the performance of a Helm test action. Defaults
1619                           to 'HelmReleaseSpec.Timeout'.
1620                         type: string
1621                     type: object
1622                   timeout:
1623                     description: Timeout is the time to wait for any individual Kubernetes
1624                       operation (like Jobs for hooks) during the performance of a Helm
1625                       action. Defaults to '5m0s'.
1626                     type: string
1627                   uninstall:
1628                     description: Uninstall holds the configuration for Helm uninstall
1629                       actions for this HelmRelease.
1630                     properties:
1631                       disableHooks:
1632                         description: DisableHooks prevents hooks from running during the
1633                           Helm rollback action.
1634                         type: boolean
1635                       keepHistory:
1636                         description: KeepHistory tells Helm to remove all associated resources
1637                           and mark the release as deleted, but retain the release history.
1638                         type: boolean
1639                       timeout:
1640                         description: Timeout is the time to wait for any individual Kubernetes
1641                           operation (like Jobs for hooks) during the performance of a
1642                           Helm uninstall action. Defaults to 'HelmReleaseSpec.Timeout'.
1643                         type: string
1644                     type: object
1645                   upgrade:
1646                     description: Upgrade holds the configuration for Helm upgrade actions
1647                       for this HelmRelease.
1648                     properties:
1649                       cleanupOnFail:
1650                         description: CleanupOnFail allows deletion of new resources created
1651                           during the Helm upgrade action when it fails.
1652                         type: boolean
1653                       crds:
1654                         description: "CRDs upgrade CRDs from the Helm Chart's crds directory
1655                           according to the CRD upgrade policy provided here. Valid values
1656                           are `Skip`, `Create` or `CreateReplace`. Default is `Skip` and
1657                           if omitted CRDs are neither installed nor upgraded. \n Skip:
1658                           do neither install nor replace (update) any CRDs. \n Create:
1659                           new CRDs are created, existing CRDs are neither updated nor
1660                           deleted. \n CreateReplace: new CRDs are created, existing CRDs
1661                           are updated (replaced) but not deleted. \n By default, CRDs
1662                           are not applied during Helm upgrade action. With this option
1663                           users can opt-in to CRD upgrade, which is not (yet) natively
1664                           supported by Helm. https://helm.sh/docs/chart_best_practices/custom_resource_definitions."
1665                         enum:
1666                         - Skip
1667                         - Create
1668                         - CreateReplace
1669                         type: string
1670                       disableHooks:
1671                         description: DisableHooks prevents hooks from running during the
1672                           Helm upgrade action.
1673                         type: boolean
1674                       disableOpenAPIValidation:
1675                         description: DisableOpenAPIValidation prevents the Helm upgrade
1676                           action from validating rendered templates against the Kubernetes
1677                           OpenAPI Schema.
1678                         type: boolean
1679                       disableWait:
1680                         description: DisableWait disables the waiting for resources to
1681                           be ready after a Helm upgrade has been performed.
1682                         type: boolean
1683                       disableWaitForJobs:
1684                         description: DisableWaitForJobs disables waiting for jobs to complete
1685                           after a Helm upgrade has been performed.
1686                         type: boolean
1687                       force:
1688                         description: Force forces resource updates through a replacement
1689                           strategy.
1690                         type: boolean
1691                       preserveValues:
1692                         description: PreserveValues will make Helm reuse the last release's
1693                           values and merge in overrides from 'Values'. Setting this flag
1694                           makes the HelmRelease non-declarative.
1695                         type: boolean
1696                       remediation:
1697                         description: Remediation holds the remediation configuration for
1698                           when the Helm upgrade action for the HelmRelease fails. The
1699                           default is to not perform any action.
1700                         properties:
1701                           ignoreTestFailures:
1702                             description: IgnoreTestFailures tells the controller to skip
1703                               remediation when the Helm tests are run after an upgrade
1704                               action but fail. Defaults to 'Test.IgnoreFailures'.
1705                             type: boolean
1706                           remediateLastFailure:
1707                             description: RemediateLastFailure tells the controller to
1708                               remediate the last failure, when no retries remain. Defaults
1709                               to 'false' unless 'Retries' is greater than 0.
1710                             type: boolean
1711                           retries:
1712                             description: Retries is the number of retries that should
1713                               be attempted on failures before bailing. Remediation, using
1714                               'Strategy', is performed between each attempt. Defaults
1715                               to '0', a negative integer equals to unlimited retries.
1716                             type: integer
1717                           strategy:
1718                             description: Strategy to use for failure remediation. Defaults
1719                               to 'rollback'.
1720                             enum:
1721                             - rollback
1722                             - uninstall
1723                             type: string
1724                         type: object
1725                       timeout:
1726                         description: Timeout is the time to wait for any individual Kubernetes
1727                           operation (like Jobs for hooks) during the performance of a
1728                           Helm upgrade action. Defaults to 'HelmReleaseSpec.Timeout'.
1729                         type: string
1730                     type: object
1731                   values:
1732                     description: Values holds the values for this Helm release.
1733                     x-kubernetes-preserve-unknown-fields: true
1734                   valuesFrom:
1735                     description: ValuesFrom holds references to resources containing Helm
1736                       values for this HelmRelease, and information about how they should
1737                       be merged.
1738                     items:
1739                       description: ValuesReference contains a reference to a resource
1740                         containing Helm values, and optionally the key they can be found
1741                         at.
1742                       properties:
1743                         kind:
1744                           description: Kind of the values referent, valid values are ('Secret',
1745                             'ConfigMap').
1746                           enum:
1747                           - Secret
1748                           - ConfigMap
1749                           type: string
1750                         name:
1751                           description: Name of the values referent. Should reside in the
1752                             same namespace as the referring resource.
1753                           maxLength: 253
1754                           minLength: 1
1755                           type: string
1756                         optional:
1757                           description: Optional marks this ValuesReference as optional.
1758                             When set, a not found error for the values reference is ignored,
1759                             but any ValuesKey, TargetPath or transient error will still
1760                             result in a reconciliation failure.
1761                           type: boolean
1762                         targetPath:
1763                           description: TargetPath is the YAML dot notation path the value
1764                             should be merged at. When set, the ValuesKey is expected to
1765                             be a single flat value. Defaults to 'None', which results
1766                             in the values getting merged at the root.
1767                           type: string
1768                         valuesKey:
1769                           description: ValuesKey is the data key where the values.yaml
1770                             or a specific value can be found at. Defaults to 'values.yaml'.
1771                           type: string
1772                       required:
1773                       - kind
1774                       - name
1775                       type: object
1776                     type: array
1777                 required:
1778                 - chart
1779                 - interval
1780                 type: object
1781               status:
1782                 default:
1783                   observedGeneration: -1
1784                 description: HelmReleaseStatus defines the observed state of a HelmRelease.
1785                 properties:
1786                   conditions:
1787                     description: Conditions holds the conditions for the HelmRelease.
1788                     items:
1789                       description: "Condition contains details for one aspect of the current
1790                         state of this API Resource. --- This struct is intended for direct
1791                         use as an array at the field path .status.conditions.  For example,
1792                         type FooStatus struct{     // Represents the observations of a
1793                         foo's current state.     // Known .status.conditions.type are:
1794                         \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
1795                         \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
1796                         \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
1797                         patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
1798                         \n     // other fields }"
1799                       properties:
1800                         lastTransitionTime:
1801                           description: lastTransitionTime is the last time the condition
1802                             transitioned from one status to another. This should be when
1803                             the underlying condition changed.  If that is not known, then
1804                             using the time when the API field changed is acceptable.
1805                           format: date-time
1806                           type: string
1807                         message:
1808                           description: message is a human readable message indicating
1809                             details about the transition. This may be an empty string.
1810                           maxLength: 32768
1811                           type: string
1812                         observedGeneration:
1813                           description: observedGeneration represents the .metadata.generation
1814                             that the condition was set based upon. For instance, if .metadata.generation
1815                             is currently 12, but the .status.conditions[x].observedGeneration
1816                             is 9, the condition is out of date with respect to the current
1817                             state of the instance.
1818                           format: int64
1819                           minimum: 0
1820                           type: integer
1821                         reason:
1822                           description: reason contains a programmatic identifier indicating
1823                             the reason for the condition's last transition. Producers
1824                             of specific condition types may define expected values and
1825                             meanings for this field, and whether the values are considered
1826                             a guaranteed API. The value should be a CamelCase string.
1827                             This field may not be empty.
1828                           maxLength: 1024
1829                           minLength: 1
1830                           pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
1831                           type: string
1832                         status:
1833                           description: status of the condition, one of True, False, Unknown.
1834                           enum:
1835                           - "True"
1836                           - "False"
1837                           - Unknown
1838                           type: string
1839                         type:
1840                           description: type of condition in CamelCase or in foo.example.com/CamelCase.
1841                             --- Many .condition.type values are consistent across resources
1842                             like Available, but because arbitrary conditions can be useful
1843                             (see .node.status.conditions), the ability to deconflict is
1844                             important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
1845                           maxLength: 316
1846                           pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
1847                           type: string
1848                       required:
1849                       - lastTransitionTime
1850                       - message
1851                       - reason
1852                       - status
1853                       - type
1854                       type: object
1855                     type: array
1856                   failures:
1857                     description: Failures is the reconciliation failure count against
1858                       the latest desired state. It is reset after a successful reconciliation.
1859                     format: int64
1860                     type: integer
1861                   helmChart:
1862                     description: HelmChart is the namespaced name of the HelmChart resource
1863                       created by the controller for the HelmRelease.
1864                     type: string
1865                   installFailures:
1866                     description: InstallFailures is the install failure count against
1867                       the latest desired state. It is reset after a successful reconciliation.
1868                     format: int64
1869                     type: integer
1870                   lastAppliedRevision:
1871                     description: LastAppliedRevision is the revision of the last successfully
1872                       applied source.
1873                     type: string
1874                   lastAttemptedRevision:
1875                     description: LastAttemptedRevision is the revision of the last reconciliation
1876                       attempt.
1877                     type: string
1878                   lastAttemptedValuesChecksum:
1879                     description: LastAttemptedValuesChecksum is the SHA1 checksum of the
1880                       values of the last reconciliation attempt.
1881                     type: string
1882                   lastHandledReconcileAt:
1883                     description: LastHandledReconcileAt holds the value of the most recent
1884                       reconcile request value, so a change can be detected.
1885                     type: string
1886                   lastReleaseRevision:
1887                     description: LastReleaseRevision is the revision of the last successful
1888                       Helm release.
1889                     type: integer
1890                   observedGeneration:
1891                     description: ObservedGeneration is the last observed generation.
1892                     format: int64
1893                     type: integer
1894                   upgradeFailures:
1895                     description: UpgradeFailures is the upgrade failure count against
1896                       the latest desired state. It is reset after a successful reconciliation.
1897                     format: int64
1898                     type: integer
1899                 type: object
1900             type: object
1901         served: true
1902         storage: true
1903         subresources:
1904           status: {}
1905     status:
1906       acceptedNames:
1907         kind: ""
1908         plural: ""
1909       conditions: []
1910       storedVersions: []
1911     ---
1912     apiVersion: apiextensions.k8s.io/v1
1913     kind: CustomResourceDefinition
1914     metadata:
1915       annotations:
1916         controller-gen.kubebuilder.io/version: v0.5.0
1917       creationTimestamp: null
1918       labels:
1919         app.kubernetes.io/instance: flux-system
1920         app.kubernetes.io/part-of: flux
1921         app.kubernetes.io/version: v0.25.3
1922       name: helmrepositories.source.toolkit.fluxcd.io
1923     spec:
1924       group: source.toolkit.fluxcd.io
1925       names:
1926         kind: HelmRepository
1927         listKind: HelmRepositoryList
1928         plural: helmrepositories
1929         shortNames:
1930         - helmrepo
1931         singular: helmrepository
1932       scope: Namespaced
1933       versions:
1934       - additionalPrinterColumns:
1935         - jsonPath: .spec.url
1936           name: URL
1937           type: string
1938         - jsonPath: .status.conditions[?(@.type=="Ready")].status
1939           name: Ready
1940           type: string
1941         - jsonPath: .status.conditions[?(@.type=="Ready")].message
1942           name: Status
1943           type: string
1944         - jsonPath: .metadata.creationTimestamp
1945           name: Age
1946           type: date
1947         name: v1beta1
1948         schema:
1949           openAPIV3Schema:
1950             description: HelmRepository is the Schema for the helmrepositories API
1951             properties:
1952               apiVersion:
1953                 description: 'APIVersion defines the versioned schema of this representation
1954                   of an object. Servers should convert recognized schemas to the latest
1955                   internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
1956                 type: string
1957               kind:
1958                 description: 'Kind is a string value representing the REST resource this
1959                   object represents. Servers may infer this from the endpoint the client
1960                   submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
1961                 type: string
1962               metadata:
1963                 type: object
1964               spec:
1965                 description: HelmRepositorySpec defines the reference to a Helm repository.
1966                 properties:
1967                   accessFrom:
1968                     description: AccessFrom defines an Access Control List for allowing
1969                       cross-namespace references to this object.
1970                     properties:
1971                       namespaceSelectors:
1972                         description: NamespaceSelectors is the list of namespace selectors
1973                           to which this ACL applies. Items in this list are evaluated
1974                           using a logical OR operation.
1975                         items:
1976                           description: NamespaceSelector selects the namespaces to which
1977                             this ACL applies. An empty map of MatchLabels matches all
1978                             namespaces in a cluster.
1979                           properties:
1980                             matchLabels:
1981                               additionalProperties:
1982                                 type: string
1983                               description: MatchLabels is a map of {key,value} pairs.
1984                                 A single {key,value} in the matchLabels map is equivalent
1985                                 to an element of matchExpressions, whose key field is
1986                                 "key", the operator is "In", and the values array contains
1987                                 only "value". The requirements are ANDed.
1988                               type: object
1989                           type: object
1990                         type: array
1991                     required:
1992                     - namespaceSelectors
1993                     type: object
1994                   interval:
1995                     description: The interval at which to check the upstream for updates.
1996                     type: string
1997                   passCredentials:
1998                     description: PassCredentials allows the credentials from the SecretRef
1999                       to be passed on to a host that does not match the host as defined
2000                       in URL. This may be required if the host of the advertised chart
2001                       URLs in the index differ from the defined URL. Enabling this should
2002                       be done with caution, as it can potentially result in credentials
2003                       getting stolen in a MITM-attack.
2004                     type: boolean
2005                   secretRef:
2006                     description: The name of the secret containing authentication credentials
2007                       for the Helm repository. For HTTP/S basic auth the secret must contain
2008                       username and password fields. For TLS the secret must contain a
2009                       certFile and keyFile, and/or caCert fields.
2010                     properties:
2011                       name:
2012                         description: Name of the referent
2013                         type: string
2014                     required:
2015                     - name
2016                     type: object
2017                   suspend:
2018                     description: This flag tells the controller to suspend the reconciliation
2019                       of this source.
2020                     type: boolean
2021                   timeout:
2022                     default: 60s
2023                     description: The timeout of index downloading, defaults to 60s.
2024                     type: string
2025                   url:
2026                     description: The Helm repository URL, a valid URL contains at least
2027                       a protocol and host.
2028                     type: string
2029                 required:
2030                 - interval
2031                 - url
2032                 type: object
2033               status:
2034                 default:
2035                   observedGeneration: -1
2036                 description: HelmRepositoryStatus defines the observed state of the HelmRepository.
2037                 properties:
2038                   artifact:
2039                     description: Artifact represents the output of the last successful
2040                       repository sync.
2041                     properties:
2042                       checksum:
2043                         description: Checksum is the SHA256 checksum of the artifact.
2044                         type: string
2045                       lastUpdateTime:
2046                         description: LastUpdateTime is the timestamp corresponding to
2047                           the last update of this artifact.
2048                         format: date-time
2049                         type: string
2050                       path:
2051                         description: Path is the relative file path of this artifact.
2052                         type: string
2053                       revision:
2054                         description: Revision is a human readable identifier traceable
2055                           in the origin source system. It can be a Git commit SHA, Git
2056                           tag, a Helm index timestamp, a Helm chart version, etc.
2057                         type: string
2058                       url:
2059                         description: URL is the HTTP address of this artifact.
2060                         type: string
2061                     required:
2062                     - path
2063                     - url
2064                     type: object
2065                   conditions:
2066                     description: Conditions holds the conditions for the HelmRepository.
2067                     items:
2068                       description: "Condition contains details for one aspect of the current
2069                         state of this API Resource. --- This struct is intended for direct
2070                         use as an array at the field path .status.conditions.  For example,
2071                         type FooStatus struct{     // Represents the observations of a
2072                         foo's current state.     // Known .status.conditions.type are:
2073                         \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
2074                         \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
2075                         \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
2076                         patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
2077                         \n     // other fields }"
2078                       properties:
2079                         lastTransitionTime:
2080                           description: lastTransitionTime is the last time the condition
2081                             transitioned from one status to another. This should be when
2082                             the underlying condition changed.  If that is not known, then
2083                             using the time when the API field changed is acceptable.
2084                           format: date-time
2085                           type: string
2086                         message:
2087                           description: message is a human readable message indicating
2088                             details about the transition. This may be an empty string.
2089                           maxLength: 32768
2090                           type: string
2091                         observedGeneration:
2092                           description: observedGeneration represents the .metadata.generation
2093                             that the condition was set based upon. For instance, if .metadata.generation
2094                             is currently 12, but the .status.conditions[x].observedGeneration
2095                             is 9, the condition is out of date with respect to the current
2096                             state of the instance.
2097                           format: int64
2098                           minimum: 0
2099                           type: integer
2100                         reason:
2101                           description: reason contains a programmatic identifier indicating
2102                             the reason for the condition's last transition. Producers
2103                             of specific condition types may define expected values and
2104                             meanings for this field, and whether the values are considered
2105                             a guaranteed API. The value should be a CamelCase string.
2106                             This field may not be empty.
2107                           maxLength: 1024
2108                           minLength: 1
2109                           pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
2110                           type: string
2111                         status:
2112                           description: status of the condition, one of True, False, Unknown.
2113                           enum:
2114                           - "True"
2115                           - "False"
2116                           - Unknown
2117                           type: string
2118                         type:
2119                           description: type of condition in CamelCase or in foo.example.com/CamelCase.
2120                             --- Many .condition.type values are consistent across resources
2121                             like Available, but because arbitrary conditions can be useful
2122                             (see .node.status.conditions), the ability to deconflict is
2123                             important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
2124                           maxLength: 316
2125                           pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
2126                           type: string
2127                       required:
2128                       - lastTransitionTime
2129                       - message
2130                       - reason
2131                       - status
2132                       - type
2133                       type: object
2134                     type: array
2135                   lastHandledReconcileAt:
2136                     description: LastHandledReconcileAt holds the value of the most recent
2137                       reconcile request value, so a change can be detected.
2138                     type: string
2139                   observedGeneration:
2140                     description: ObservedGeneration is the last observed generation.
2141                     format: int64
2142                     type: integer
2143                   url:
2144                     description: URL is the download link for the last index fetched.
2145                     type: string
2146                 type: object
2147             type: object
2148         served: true
2149         storage: true
2150         subresources:
2151           status: {}
2152     status:
2153       acceptedNames:
2154         kind: ""
2155         plural: ""
2156       conditions: []
2157       storedVersions: []
2158     ---
2159     apiVersion: apiextensions.k8s.io/v1
2160     kind: CustomResourceDefinition
2161     metadata:
2162       annotations:
2163         controller-gen.kubebuilder.io/version: v0.7.0
2164       creationTimestamp: null
2165       labels:
2166         app.kubernetes.io/instance: flux-system
2167         app.kubernetes.io/part-of: flux
2168         app.kubernetes.io/version: v0.25.3
2169       name: kustomizations.kustomize.toolkit.fluxcd.io
2170     spec:
2171       group: kustomize.toolkit.fluxcd.io
2172       names:
2173         kind: Kustomization
2174         listKind: KustomizationList
2175         plural: kustomizations
2176         shortNames:
2177         - ks
2178         singular: kustomization
2179       scope: Namespaced
2180       versions:
2181       - additionalPrinterColumns:
2182         - jsonPath: .status.conditions[?(@.type=="Ready")].status
2183           name: Ready
2184           type: string
2185         - jsonPath: .status.conditions[?(@.type=="Ready")].message
2186           name: Status
2187           type: string
2188         - jsonPath: .metadata.creationTimestamp
2189           name: Age
2190           type: date
2191         name: v1beta1
2192         schema:
2193           openAPIV3Schema:
2194             description: Kustomization is the Schema for the kustomizations API.
2195             properties:
2196               apiVersion:
2197                 description: 'APIVersion defines the versioned schema of this representation
2198                   of an object. Servers should convert recognized schemas to the latest
2199                   internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
2200                 type: string
2201               kind:
2202                 description: 'Kind is a string value representing the REST resource this
2203                   object represents. Servers may infer this from the endpoint the client
2204                   submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
2205                 type: string
2206               metadata:
2207                 type: object
2208               spec:
2209                 description: KustomizationSpec defines the desired state of a kustomization.
2210                 properties:
2211                   decryption:
2212                     description: Decrypt Kubernetes secrets before applying them on the
2213                       cluster.
2214                     properties:
2215                       provider:
2216                         description: Provider is the name of the decryption engine.
2217                         enum:
2218                         - sops
2219                         type: string
2220                       secretRef:
2221                         description: The secret name containing the private OpenPGP keys
2222                           used for decryption.
2223                         properties:
2224                           name:
2225                             description: Name of the referent
2226                             type: string
2227                         required:
2228                         - name
2229                         type: object
2230                     required:
2231                     - provider
2232                     type: object
2233                   dependsOn:
2234                     description: DependsOn may contain a dependency.CrossNamespaceDependencyReference
2235                       slice with references to Kustomization resources that must be ready
2236                       before this Kustomization can be reconciled.
2237                     items:
2238                       description: CrossNamespaceDependencyReference holds the reference
2239                         to a dependency.
2240                       properties:
2241                         name:
2242                           description: Name holds the name reference of a dependency.
2243                           type: string
2244                         namespace:
2245                           description: Namespace holds the namespace reference of a dependency.
2246                           type: string
2247                       required:
2248                       - name
2249                       type: object
2250                     type: array
2251                   force:
2252                     default: false
2253                     description: Force instructs the controller to recreate resources
2254                       when patching fails due to an immutable field change.
2255                     type: boolean
2256                   healthChecks:
2257                     description: A list of resources to be included in the health assessment.
2258                     items:
2259                       description: NamespacedObjectKindReference contains enough information
2260                         to let you locate the typed referenced object in any namespace
2261                       properties:
2262                         apiVersion:
2263                           description: API version of the referent, if not specified the
2264                             Kubernetes preferred version will be used
2265                           type: string
2266                         kind:
2267                           description: Kind of the referent
2268                           type: string
2269                         name:
2270                           description: Name of the referent
2271                           type: string
2272                         namespace:
2273                           description: Namespace of the referent, when not specified it
2274                             acts as LocalObjectReference
2275                           type: string
2276                       required:
2277                       - kind
2278                       - name
2279                       type: object
2280                     type: array
2281                   images:
2282                     description: Images is a list of (image name, new name, new tag or
2283                       digest) for changing image names, tags or digests. This can also
2284                       be achieved with a patch, but this operator is simpler to specify.
2285                     items:
2286                       description: Image contains an image name, a new name, a new tag
2287                         or digest, which will replace the original name and tag.
2288                       properties:
2289                         digest:
2290                           description: Digest is the value used to replace the original
2291                             image tag. If digest is present NewTag value is ignored.
2292                           type: string
2293                         name:
2294                           description: Name is a tag-less image name.
2295                           type: string
2296                         newName:
2297                           description: NewName is the value used to replace the original
2298                             name.
2299                           type: string
2300                         newTag:
2301                           description: NewTag is the value used to replace the original
2302                             tag.
2303                           type: string
2304                       required:
2305                       - name
2306                       type: object
2307                     type: array
2308                   interval:
2309                     description: The interval at which to reconcile the Kustomization.
2310                     type: string
2311                   kubeConfig:
2312                     description: The KubeConfig for reconciling the Kustomization on a
2313                       remote cluster. When specified, KubeConfig takes precedence over
2314                       ServiceAccountName.
2315                     properties:
2316                       secretRef:
2317                         description: SecretRef holds the name to a secret that contains
2318                           a 'value' key with the kubeconfig file as the value. It must
2319                           be in the same namespace as the Kustomization. It is recommended
2320                           that the kubeconfig is self-contained, and the secret is regularly
2321                           updated if credentials such as a cloud-access-token expire.
2322                           Cloud specific `cmd-path` auth helpers will not function without
2323                           adding binaries and credentials to the Pod that is responsible
2324                           for reconciling the Kustomization.
2325                         properties:
2326                           name:
2327                             description: Name of the referent
2328                             type: string
2329                         required:
2330                         - name
2331                         type: object
2332                     type: object
2333                   patches:
2334                     description: Strategic merge and JSON patches, defined as inline YAML
2335                       objects, capable of targeting objects based on kind, label and annotation
2336                       selectors.
2337                     items:
2338                       description: Patch contains an inline StrategicMerge or JSON6902
2339                         patch, and the target the patch should be applied to.
2340                       properties:
2341                         patch:
2342                           description: Patch contains an inline StrategicMerge patch or
2343                             an inline JSON6902 patch with an array of operation objects.
2344                           type: string
2345                         target:
2346                           description: Target points to the resources that the patch document
2347                             should be applied to.
2348                           properties:
2349                             annotationSelector:
2350                               description: AnnotationSelector is a string that follows
2351                                 the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2352                                 It matches with the resource annotations.
2353                               type: string
2354                             group:
2355                               description: Group is the API group to select resources
2356                                 from. Together with Version and Kind it is capable of
2357                                 unambiguously identifying and/or selecting resources.
2358                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2359                               type: string
2360                             kind:
2361                               description: Kind of the API Group to select resources from.
2362                                 Together with Group and Version it is capable of unambiguously
2363                                 identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2364                               type: string
2365                             labelSelector:
2366                               description: LabelSelector is a string that follows the
2367                                 label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2368                                 It matches with the resource labels.
2369                               type: string
2370                             name:
2371                               description: Name to match resources with.
2372                               type: string
2373                             namespace:
2374                               description: Namespace to select resources from.
2375                               type: string
2376                             version:
2377                               description: Version of the API Group to select resources
2378                                 from. Together with Group and Kind it is capable of unambiguously
2379                                 identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2380                               type: string
2381                           type: object
2382                       type: object
2383                     type: array
2384                   patchesJson6902:
2385                     description: JSON 6902 patches, defined as inline YAML objects.
2386                     items:
2387                       description: JSON6902Patch contains a JSON6902 patch and the target
2388                         the patch should be applied to.
2389                       properties:
2390                         patch:
2391                           description: Patch contains the JSON6902 patch document with
2392                             an array of operation objects.
2393                           items:
2394                             description: JSON6902 is a JSON6902 operation object. https://datatracker.ietf.org/doc/html/rfc6902#section-4
2395                             properties:
2396                               from:
2397                                 description: From contains a JSON-pointer value that references
2398                                   a location within the target document where the operation
2399                                   is performed. The meaning of the value depends on the
2400                                   value of Op, and is NOT taken into account by all operations.
2401                                 type: string
2402                               op:
2403                                 description: Op indicates the operation to perform. Its
2404                                   value MUST be one of "add", "remove", "replace", "move",
2405                                   "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4
2406                                 enum:
2407                                 - test
2408                                 - remove
2409                                 - add
2410                                 - replace
2411                                 - move
2412                                 - copy
2413                                 type: string
2414                               path:
2415                                 description: Path contains the JSON-pointer value that
2416                                   references a location within the target document where
2417                                   the operation is performed. The meaning of the value
2418                                   depends on the value of Op.
2419                                 type: string
2420                               value:
2421                                 description: Value contains a valid JSON structure. The
2422                                   meaning of the value depends on the value of Op, and
2423                                   is NOT taken into account by all operations.
2424                                 x-kubernetes-preserve-unknown-fields: true
2425                             required:
2426                             - op
2427                             - path
2428                             type: object
2429                           type: array
2430                         target:
2431                           description: Target points to the resources that the patch document
2432                             should be applied to.
2433                           properties:
2434                             annotationSelector:
2435                               description: AnnotationSelector is a string that follows
2436                                 the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2437                                 It matches with the resource annotations.
2438                               type: string
2439                             group:
2440                               description: Group is the API group to select resources
2441                                 from. Together with Version and Kind it is capable of
2442                                 unambiguously identifying and/or selecting resources.
2443                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2444                               type: string
2445                             kind:
2446                               description: Kind of the API Group to select resources from.
2447                                 Together with Group and Version it is capable of unambiguously
2448                                 identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2449                               type: string
2450                             labelSelector:
2451                               description: LabelSelector is a string that follows the
2452                                 label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2453                                 It matches with the resource labels.
2454                               type: string
2455                             name:
2456                               description: Name to match resources with.
2457                               type: string
2458                             namespace:
2459                               description: Namespace to select resources from.
2460                               type: string
2461                             version:
2462                               description: Version of the API Group to select resources
2463                                 from. Together with Group and Kind it is capable of unambiguously
2464                                 identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2465                               type: string
2466                           type: object
2467                       required:
2468                       - patch
2469                       - target
2470                       type: object
2471                     type: array
2472                   patchesStrategicMerge:
2473                     description: Strategic merge patches, defined as inline YAML objects.
2474                     items:
2475                       x-kubernetes-preserve-unknown-fields: true
2476                     type: array
2477                   path:
2478                     description: Path to the directory containing the kustomization.yaml
2479                       file, or the set of plain YAMLs a kustomization.yaml should be generated
2480                       for. Defaults to 'None', which translates to the root path of the
2481                       SourceRef.
2482                     type: string
2483                   postBuild:
2484                     description: PostBuild describes which actions to perform on the YAML
2485                       manifest generated by building the kustomize overlay.
2486                     properties:
2487                       substitute:
2488                         additionalProperties:
2489                           type: string
2490                         description: Substitute holds a map of key/value pairs. The variables
2491                           defined in your YAML manifests that match any of the keys defined
2492                           in the map will be substituted with the set value. Includes
2493                           support for bash string replacement functions e.g. ${var:=default},
2494                           ${var:position} and ${var/substring/replacement}.
2495                         type: object
2496                       substituteFrom:
2497                         description: SubstituteFrom holds references to ConfigMaps and
2498                           Secrets containing the variables and their values to be substituted
2499                           in the YAML manifests. The ConfigMap and the Secret data keys
2500                           represent the var names and they must match the vars declared
2501                           in the manifests for the substitution to happen.
2502                         items:
2503                           description: SubstituteReference contains a reference to a resource
2504                             containing the variables name and value.
2505                           properties:
2506                             kind:
2507                               description: Kind of the values referent, valid values are
2508                                 ('Secret', 'ConfigMap').
2509                               enum:
2510                               - Secret
2511                               - ConfigMap
2512                               type: string
2513                             name:
2514                               description: Name of the values referent. Should reside
2515                                 in the same namespace as the referring resource.
2516                               maxLength: 253
2517                               minLength: 1
2518                               type: string
2519                           required:
2520                           - kind
2521                           - name
2522                           type: object
2523                         type: array
2524                     type: object
2525                   prune:
2526                     description: Prune enables garbage collection.
2527                     type: boolean
2528                   retryInterval:
2529                     description: The interval at which to retry a previously failed reconciliation.
2530                       When not specified, the controller uses the KustomizationSpec.Interval
2531                       value to retry failures.
2532                     type: string
2533                   serviceAccountName:
2534                     description: The name of the Kubernetes service account to impersonate
2535                       when reconciling this Kustomization.
2536                     type: string
2537                   sourceRef:
2538                     description: Reference of the source where the kustomization file
2539                       is.
2540                     properties:
2541                       apiVersion:
2542                         description: API version of the referent
2543                         type: string
2544                       kind:
2545                         description: Kind of the referent
2546                         enum:
2547                         - GitRepository
2548                         - Bucket
2549                         type: string
2550                       name:
2551                         description: Name of the referent
2552                         type: string
2553                       namespace:
2554                         description: Namespace of the referent, defaults to the Kustomization
2555                           namespace
2556                         type: string
2557                     required:
2558                     - kind
2559                     - name
2560                     type: object
2561                   suspend:
2562                     description: This flag tells the controller to suspend subsequent
2563                       kustomize executions, it does not apply to already started executions.
2564                       Defaults to false.
2565                     type: boolean
2566                   targetNamespace:
2567                     description: TargetNamespace sets or overrides the namespace in the
2568                       kustomization.yaml file.
2569                     maxLength: 63
2570                     minLength: 1
2571                     type: string
2572                   timeout:
2573                     description: Timeout for validation, apply and health checking operations.
2574                       Defaults to 'Interval' duration.
2575                     type: string
2576                   validation:
2577                     description: Validate the Kubernetes objects before applying them
2578                       on the cluster. The validation strategy can be 'client' (local dry-run),
2579                       'server' (APIServer dry-run) or 'none'. When 'Force' is 'true',
2580                       validation will fallback to 'client' if set to 'server' because
2581                       server-side validation is not supported in this scenario.
2582                     enum:
2583                     - none
2584                     - client
2585                     - server
2586                     type: string
2587                 required:
2588                 - interval
2589                 - prune
2590                 - sourceRef
2591                 type: object
2592               status:
2593                 default:
2594                   observedGeneration: -1
2595                 description: KustomizationStatus defines the observed state of a kustomization.
2596                 properties:
2597                   conditions:
2598                     items:
2599                       description: "Condition contains details for one aspect of the current
2600                         state of this API Resource. --- This struct is intended for direct
2601                         use as an array at the field path .status.conditions.  For example,
2602                         type FooStatus struct{     // Represents the observations of a
2603                         foo's current state.     // Known .status.conditions.type are:
2604                         \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
2605                         \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
2606                         \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
2607                         patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
2608                         \n     // other fields }"
2609                       properties:
2610                         lastTransitionTime:
2611                           description: lastTransitionTime is the last time the condition
2612                             transitioned from one status to another. This should be when
2613                             the underlying condition changed.  If that is not known, then
2614                             using the time when the API field changed is acceptable.
2615                           format: date-time
2616                           type: string
2617                         message:
2618                           description: message is a human readable message indicating
2619                             details about the transition. This may be an empty string.
2620                           maxLength: 32768
2621                           type: string
2622                         observedGeneration:
2623                           description: observedGeneration represents the .metadata.generation
2624                             that the condition was set based upon. For instance, if .metadata.generation
2625                             is currently 12, but the .status.conditions[x].observedGeneration
2626                             is 9, the condition is out of date with respect to the current
2627                             state of the instance.
2628                           format: int64
2629                           minimum: 0
2630                           type: integer
2631                         reason:
2632                           description: reason contains a programmatic identifier indicating
2633                             the reason for the condition's last transition. Producers
2634                             of specific condition types may define expected values and
2635                             meanings for this field, and whether the values are considered
2636                             a guaranteed API. The value should be a CamelCase string.
2637                             This field may not be empty.
2638                           maxLength: 1024
2639                           minLength: 1
2640                           pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
2641                           type: string
2642                         status:
2643                           description: status of the condition, one of True, False, Unknown.
2644                           enum:
2645                           - "True"
2646                           - "False"
2647                           - Unknown
2648                           type: string
2649                         type:
2650                           description: type of condition in CamelCase or in foo.example.com/CamelCase.
2651                             --- Many .condition.type values are consistent across resources
2652                             like Available, but because arbitrary conditions can be useful
2653                             (see .node.status.conditions), the ability to deconflict is
2654                             important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
2655                           maxLength: 316
2656                           pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
2657                           type: string
2658                       required:
2659                       - lastTransitionTime
2660                       - message
2661                       - reason
2662                       - status
2663                       - type
2664                       type: object
2665                     type: array
2666                   lastAppliedRevision:
2667                     description: The last successfully applied revision. The revision
2668                       format for Git sources is <branch|tag>/<commit-sha>.
2669                     type: string
2670                   lastAttemptedRevision:
2671                     description: LastAttemptedRevision is the revision of the last reconciliation
2672                       attempt.
2673                     type: string
2674                   lastHandledReconcileAt:
2675                     description: LastHandledReconcileAt holds the value of the most recent
2676                       reconcile request value, so a change can be detected.
2677                     type: string
2678                   observedGeneration:
2679                     description: ObservedGeneration is the last reconciled generation.
2680                     format: int64
2681                     type: integer
2682                   snapshot:
2683                     description: The last successfully applied revision metadata.
2684                     properties:
2685                       checksum:
2686                         description: The manifests sha1 checksum.
2687                         type: string
2688                       entries:
2689                         description: A list of Kubernetes kinds grouped by namespace.
2690                         items:
2691                           description: Snapshot holds the metadata of namespaced Kubernetes
2692                             objects
2693                           properties:
2694                             kinds:
2695                               additionalProperties:
2696                                 type: string
2697                               description: The list of Kubernetes kinds.
2698                               type: object
2699                             namespace:
2700                               description: The namespace of this entry.
2701                               type: string
2702                           required:
2703                           - kinds
2704                           type: object
2705                         type: array
2706                     required:
2707                     - checksum
2708                     - entries
2709                     type: object
2710                 type: object
2711             type: object
2712         served: true
2713         storage: false
2714         subresources:
2715           status: {}
2716       - additionalPrinterColumns:
2717         - jsonPath: .status.conditions[?(@.type=="Ready")].status
2718           name: Ready
2719           type: string
2720         - jsonPath: .status.conditions[?(@.type=="Ready")].message
2721           name: Status
2722           type: string
2723         - jsonPath: .metadata.creationTimestamp
2724           name: Age
2725           type: date
2726         name: v1beta2
2727         schema:
2728           openAPIV3Schema:
2729             description: Kustomization is the Schema for the kustomizations API.
2730             properties:
2731               apiVersion:
2732                 description: 'APIVersion defines the versioned schema of this representation
2733                   of an object. Servers should convert recognized schemas to the latest
2734                   internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
2735                 type: string
2736               kind:
2737                 description: 'Kind is a string value representing the REST resource this
2738                   object represents. Servers may infer this from the endpoint the client
2739                   submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
2740                 type: string
2741               metadata:
2742                 type: object
2743               spec:
2744                 description: KustomizationSpec defines the configuration to calculate
2745                   the desired state from a Source using Kustomize.
2746                 properties:
2747                   decryption:
2748                     description: Decrypt Kubernetes secrets before applying them on the
2749                       cluster.
2750                     properties:
2751                       provider:
2752                         description: Provider is the name of the decryption engine.
2753                         enum:
2754                         - sops
2755                         type: string
2756                       secretRef:
2757                         description: The secret name containing the private OpenPGP keys
2758                           used for decryption.
2759                         properties:
2760                           name:
2761                             description: Name of the referent
2762                             type: string
2763                         required:
2764                         - name
2765                         type: object
2766                     required:
2767                     - provider
2768                     type: object
2769                   dependsOn:
2770                     description: DependsOn may contain a dependency.CrossNamespaceDependencyReference
2771                       slice with references to Kustomization resources that must be ready
2772                       before this Kustomization can be reconciled.
2773                     items:
2774                       description: CrossNamespaceDependencyReference holds the reference
2775                         to a dependency.
2776                       properties:
2777                         name:
2778                           description: Name holds the name reference of a dependency.
2779                           type: string
2780                         namespace:
2781                           description: Namespace holds the namespace reference of a dependency.
2782                           type: string
2783                       required:
2784                       - name
2785                       type: object
2786                     type: array
2787                   force:
2788                     default: false
2789                     description: Force instructs the controller to recreate resources
2790                       when patching fails due to an immutable field change.
2791                     type: boolean
2792                   healthChecks:
2793                     description: A list of resources to be included in the health assessment.
2794                     items:
2795                       description: NamespacedObjectKindReference contains enough information
2796                         to let you locate the typed referenced object in any namespace
2797                       properties:
2798                         apiVersion:
2799                           description: API version of the referent, if not specified the
2800                             Kubernetes preferred version will be used
2801                           type: string
2802                         kind:
2803                           description: Kind of the referent
2804                           type: string
2805                         name:
2806                           description: Name of the referent
2807                           type: string
2808                         namespace:
2809                           description: Namespace of the referent, when not specified it
2810                             acts as LocalObjectReference
2811                           type: string
2812                       required:
2813                       - kind
2814                       - name
2815                       type: object
2816                     type: array
2817                   images:
2818                     description: Images is a list of (image name, new name, new tag or
2819                       digest) for changing image names, tags or digests. This can also
2820                       be achieved with a patch, but this operator is simpler to specify.
2821                     items:
2822                       description: Image contains an image name, a new name, a new tag
2823                         or digest, which will replace the original name and tag.
2824                       properties:
2825                         digest:
2826                           description: Digest is the value used to replace the original
2827                             image tag. If digest is present NewTag value is ignored.
2828                           type: string
2829                         name:
2830                           description: Name is a tag-less image name.
2831                           type: string
2832                         newName:
2833                           description: NewName is the value used to replace the original
2834                             name.
2835                           type: string
2836                         newTag:
2837                           description: NewTag is the value used to replace the original
2838                             tag.
2839                           type: string
2840                       required:
2841                       - name
2842                       type: object
2843                     type: array
2844                   interval:
2845                     description: The interval at which to reconcile the Kustomization.
2846                     type: string
2847                   kubeConfig:
2848                     description: The KubeConfig for reconciling the Kustomization on a
2849                       remote cluster. When specified, KubeConfig takes precedence over
2850                       ServiceAccountName.
2851                     properties:
2852                       secretRef:
2853                         description: SecretRef holds the name to a secret that contains
2854                           a 'value' key with the kubeconfig file as the value. It must
2855                           be in the same namespace as the Kustomization. It is recommended
2856                           that the kubeconfig is self-contained, and the secret is regularly
2857                           updated if credentials such as a cloud-access-token expire.
2858                           Cloud specific `cmd-path` auth helpers will not function without
2859                           adding binaries and credentials to the Pod that is responsible
2860                           for reconciling the Kustomization.
2861                         properties:
2862                           name:
2863                             description: Name of the referent
2864                             type: string
2865                         required:
2866                         - name
2867                         type: object
2868                     type: object
2869                   patches:
2870                     description: Strategic merge and JSON patches, defined as inline YAML
2871                       objects, capable of targeting objects based on kind, label and annotation
2872                       selectors.
2873                     items:
2874                       description: Patch contains an inline StrategicMerge or JSON6902
2875                         patch, and the target the patch should be applied to.
2876                       properties:
2877                         patch:
2878                           description: Patch contains an inline StrategicMerge patch or
2879                             an inline JSON6902 patch with an array of operation objects.
2880                           type: string
2881                         target:
2882                           description: Target points to the resources that the patch document
2883                             should be applied to.
2884                           properties:
2885                             annotationSelector:
2886                               description: AnnotationSelector is a string that follows
2887                                 the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2888                                 It matches with the resource annotations.
2889                               type: string
2890                             group:
2891                               description: Group is the API group to select resources
2892                                 from. Together with Version and Kind it is capable of
2893                                 unambiguously identifying and/or selecting resources.
2894                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2895                               type: string
2896                             kind:
2897                               description: Kind of the API Group to select resources from.
2898                                 Together with Group and Version it is capable of unambiguously
2899                                 identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2900                               type: string
2901                             labelSelector:
2902                               description: LabelSelector is a string that follows the
2903                                 label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2904                                 It matches with the resource labels.
2905                               type: string
2906                             name:
2907                               description: Name to match resources with.
2908                               type: string
2909                             namespace:
2910                               description: Namespace to select resources from.
2911                               type: string
2912                             version:
2913                               description: Version of the API Group to select resources
2914                                 from. Together with Group and Kind it is capable of unambiguously
2915                                 identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2916                               type: string
2917                           type: object
2918                       type: object
2919                     type: array
2920                   patchesJson6902:
2921                     description: 'JSON 6902 patches, defined as inline YAML objects. Deprecated:
2922                       Use Patches instead.'
2923                     items:
2924                       description: JSON6902Patch contains a JSON6902 patch and the target
2925                         the patch should be applied to.
2926                       properties:
2927                         patch:
2928                           description: Patch contains the JSON6902 patch document with
2929                             an array of operation objects.
2930                           items:
2931                             description: JSON6902 is a JSON6902 operation object. https://datatracker.ietf.org/doc/html/rfc6902#section-4
2932                             properties:
2933                               from:
2934                                 description: From contains a JSON-pointer value that references
2935                                   a location within the target document where the operation
2936                                   is performed. The meaning of the value depends on the
2937                                   value of Op, and is NOT taken into account by all operations.
2938                                 type: string
2939                               op:
2940                                 description: Op indicates the operation to perform. Its
2941                                   value MUST be one of "add", "remove", "replace", "move",
2942                                   "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4
2943                                 enum:
2944                                 - test
2945                                 - remove
2946                                 - add
2947                                 - replace
2948                                 - move
2949                                 - copy
2950                                 type: string
2951                               path:
2952                                 description: Path contains the JSON-pointer value that
2953                                   references a location within the target document where
2954                                   the operation is performed. The meaning of the value
2955                                   depends on the value of Op.
2956                                 type: string
2957                               value:
2958                                 description: Value contains a valid JSON structure. The
2959                                   meaning of the value depends on the value of Op, and
2960                                   is NOT taken into account by all operations.
2961                                 x-kubernetes-preserve-unknown-fields: true
2962                             required:
2963                             - op
2964                             - path
2965                             type: object
2966                           type: array
2967                         target:
2968                           description: Target points to the resources that the patch document
2969                             should be applied to.
2970                           properties:
2971                             annotationSelector:
2972                               description: AnnotationSelector is a string that follows
2973                                 the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2974                                 It matches with the resource annotations.
2975                               type: string
2976                             group:
2977                               description: Group is the API group to select resources
2978                                 from. Together with Version and Kind it is capable of
2979                                 unambiguously identifying and/or selecting resources.
2980                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2981                               type: string
2982                             kind:
2983                               description: Kind of the API Group to select resources from.
2984                                 Together with Group and Version it is capable of unambiguously
2985                                 identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2986                               type: string
2987                             labelSelector:
2988                               description: LabelSelector is a string that follows the
2989                                 label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2990                                 It matches with the resource labels.
2991                               type: string
2992                             name:
2993                               description: Name to match resources with.
2994                               type: string
2995                             namespace:
2996                               description: Namespace to select resources from.
2997                               type: string
2998                             version:
2999                               description: Version of the API Group to select resources
3000                                 from. Together with Group and Kind it is capable of unambiguously
3001                                 identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
3002                               type: string
3003                           type: object
3004                       required:
3005                       - patch
3006                       - target
3007                       type: object
3008                     type: array
3009                   patchesStrategicMerge:
3010                     description: 'Strategic merge patches, defined as inline YAML objects.
3011                       Deprecated: Use Patches instead.'
3012                     items:
3013                       x-kubernetes-preserve-unknown-fields: true
3014                     type: array
3015                   path:
3016                     description: Path to the directory containing the kustomization.yaml
3017                       file, or the set of plain YAMLs a kustomization.yaml should be generated
3018                       for. Defaults to 'None', which translates to the root path of the
3019                       SourceRef.
3020                     type: string
3021                   postBuild:
3022                     description: PostBuild describes which actions to perform on the YAML
3023                       manifest generated by building the kustomize overlay.
3024                     properties:
3025                       substitute:
3026                         additionalProperties:
3027                           type: string
3028                         description: Substitute holds a map of key/value pairs. The variables
3029                           defined in your YAML manifests that match any of the keys defined
3030                           in the map will be substituted with the set value. Includes
3031                           support for bash string replacement functions e.g. ${var:=default},
3032                           ${var:position} and ${var/substring/replacement}.
3033                         type: object
3034                       substituteFrom:
3035                         description: SubstituteFrom holds references to ConfigMaps and
3036                           Secrets containing the variables and their values to be substituted
3037                           in the YAML manifests. The ConfigMap and the Secret data keys
3038                           represent the var names and they must match the vars declared
3039                           in the manifests for the substitution to happen.
3040                         items:
3041                           description: SubstituteReference contains a reference to a resource
3042                             containing the variables name and value.
3043                           properties:
3044                             kind:
3045                               description: Kind of the values referent, valid values are
3046                                 ('Secret', 'ConfigMap').
3047                               enum:
3048                               - Secret
3049                               - ConfigMap
3050                               type: string
3051                             name:
3052                               description: Name of the values referent. Should reside
3053                                 in the same namespace as the referring resource.
3054                               maxLength: 253
3055                               minLength: 1
3056                               type: string
3057                           required:
3058                           - kind
3059                           - name
3060                           type: object
3061                         type: array
3062                     type: object
3063                   prune:
3064                     description: Prune enables garbage collection.
3065                     type: boolean
3066                   retryInterval:
3067                     description: The interval at which to retry a previously failed reconciliation.
3068                       When not specified, the controller uses the KustomizationSpec.Interval
3069                       value to retry failures.
3070                     type: string
3071                   serviceAccountName:
3072                     description: The name of the Kubernetes service account to impersonate
3073                       when reconciling this Kustomization.
3074                     type: string
3075                   sourceRef:
3076                     description: Reference of the source where the kustomization file
3077                       is.
3078                     properties:
3079                       apiVersion:
3080                         description: API version of the referent.
3081                         type: string
3082                       kind:
3083                         description: Kind of the referent.
3084                         enum:
3085                         - GitRepository
3086                         - Bucket
3087                         type: string
3088                       name:
3089                         description: Name of the referent.
3090                         type: string
3091                       namespace:
3092                         description: Namespace of the referent, defaults to the namespace
3093                           of the Kubernetes resource object that contains the reference.
3094                         type: string
3095                     required:
3096                     - kind
3097                     - name
3098                     type: object
3099                   suspend:
3100                     description: This flag tells the controller to suspend subsequent
3101                       kustomize executions, it does not apply to already started executions.
3102                       Defaults to false.
3103                     type: boolean
3104                   targetNamespace:
3105                     description: TargetNamespace sets or overrides the namespace in the
3106                       kustomization.yaml file.
3107                     maxLength: 63
3108                     minLength: 1
3109                     type: string
3110                   timeout:
3111                     description: Timeout for validation, apply and health checking operations.
3112                       Defaults to 'Interval' duration.
3113                     type: string
3114                   validation:
3115                     description: 'Deprecated: Not used in v1beta2.'
3116                     enum:
3117                     - none
3118                     - client
3119                     - server
3120                     type: string
3121                   wait:
3122                     description: Wait instructs the controller to check the health of
3123                       all the reconciled resources. When enabled, the HealthChecks are
3124                       ignored. Defaults to false.
3125                     type: boolean
3126                 required:
3127                 - interval
3128                 - prune
3129                 - sourceRef
3130                 type: object
3131               status:
3132                 default:
3133                   observedGeneration: -1
3134                 description: KustomizationStatus defines the observed state of a kustomization.
3135                 properties:
3136                   conditions:
3137                     items:
3138                       description: "Condition contains details for one aspect of the current
3139                         state of this API Resource. --- This struct is intended for direct
3140                         use as an array at the field path .status.conditions.  For example,
3141                         type FooStatus struct{     // Represents the observations of a
3142                         foo's current state.     // Known .status.conditions.type are:
3143                         \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
3144                         \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
3145                         \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
3146                         patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
3147                         \n     // other fields }"
3148                       properties:
3149                         lastTransitionTime:
3150                           description: lastTransitionTime is the last time the condition
3151                             transitioned from one status to another. This should be when
3152                             the underlying condition changed.  If that is not known, then
3153                             using the time when the API field changed is acceptable.
3154                           format: date-time
3155                           type: string
3156                         message:
3157                           description: message is a human readable message indicating
3158                             details about the transition. This may be an empty string.
3159                           maxLength: 32768
3160                           type: string
3161                         observedGeneration:
3162                           description: observedGeneration represents the .metadata.generation
3163                             that the condition was set based upon. For instance, if .metadata.generation
3164                             is currently 12, but the .status.conditions[x].observedGeneration
3165                             is 9, the condition is out of date with respect to the current
3166                             state of the instance.
3167                           format: int64
3168                           minimum: 0
3169                           type: integer
3170                         reason:
3171                           description: reason contains a programmatic identifier indicating
3172                             the reason for the condition's last transition. Producers
3173                             of specific condition types may define expected values and
3174                             meanings for this field, and whether the values are considered
3175                             a guaranteed API. The value should be a CamelCase string.
3176                             This field may not be empty.
3177                           maxLength: 1024
3178                           minLength: 1
3179                           pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3180                           type: string
3181                         status:
3182                           description: status of the condition, one of True, False, Unknown.
3183                           enum:
3184                           - "True"
3185                           - "False"
3186                           - Unknown
3187                           type: string
3188                         type:
3189                           description: type of condition in CamelCase or in foo.example.com/CamelCase.
3190                             --- Many .condition.type values are consistent across resources
3191                             like Available, but because arbitrary conditions can be useful
3192                             (see .node.status.conditions), the ability to deconflict is
3193                             important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
3194                           maxLength: 316
3195                           pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3196                           type: string
3197                       required:
3198                       - lastTransitionTime
3199                       - message
3200                       - reason
3201                       - status
3202                       - type
3203                       type: object
3204                     type: array
3205                   inventory:
3206                     description: Inventory contains the list of Kubernetes resource object
3207                       references that have been successfully applied.
3208                     properties:
3209                       entries:
3210                         description: Entries of Kubernetes resource object references.
3211                         items:
3212                           description: ResourceRef contains the information necessary
3213                             to locate a resource within a cluster.
3214                           properties:
3215                             id:
3216                               description: ID is the string representation of the Kubernetes
3217                                 resource object's metadata, in the format '<namespace>_<name>_<group>_<kind>'.
3218                               type: string
3219                             v:
3220                               description: Version is the API version of the Kubernetes
3221                                 resource object's kind.
3222                               type: string
3223                           required:
3224                           - id
3225                           - v
3226                           type: object
3227                         type: array
3228                     required:
3229                     - entries
3230                     type: object
3231                   lastAppliedRevision:
3232                     description: The last successfully applied revision. The revision
3233                       format for Git sources is <branch|tag>/<commit-sha>.
3234                     type: string
3235                   lastAttemptedRevision:
3236                     description: LastAttemptedRevision is the revision of the last reconciliation
3237                       attempt.
3238                     type: string
3239                   lastHandledReconcileAt:
3240                     description: LastHandledReconcileAt holds the value of the most recent
3241                       reconcile request value, so a change can be detected.
3242                     type: string
3243                   observedGeneration:
3244                     description: ObservedGeneration is the last reconciled generation.
3245                     format: int64
3246                     type: integer
3247                 type: object
3248             type: object
3249         served: true
3250         storage: true
3251         subresources:
3252           status: {}
3253     status:
3254       acceptedNames:
3255         kind: ""
3256         plural: ""
3257       conditions: []
3258       storedVersions: []
3259     ---
3260     apiVersion: apiextensions.k8s.io/v1
3261     kind: CustomResourceDefinition
3262     metadata:
3263       annotations:
3264         controller-gen.kubebuilder.io/version: v0.7.0
3265       creationTimestamp: null
3266       labels:
3267         app.kubernetes.io/instance: flux-system
3268         app.kubernetes.io/part-of: flux
3269         app.kubernetes.io/version: v0.25.3
3270       name: providers.notification.toolkit.fluxcd.io
3271     spec:
3272       group: notification.toolkit.fluxcd.io
3273       names:
3274         kind: Provider
3275         listKind: ProviderList
3276         plural: providers
3277         singular: provider
3278       scope: Namespaced
3279       versions:
3280       - additionalPrinterColumns:
3281         - jsonPath: .status.conditions[?(@.type=="Ready")].status
3282           name: Ready
3283           type: string
3284         - jsonPath: .status.conditions[?(@.type=="Ready")].message
3285           name: Status
3286           type: string
3287         - jsonPath: .metadata.creationTimestamp
3288           name: Age
3289           type: date
3290         name: v1beta1
3291         schema:
3292           openAPIV3Schema:
3293             description: Provider is the Schema for the providers API
3294             properties:
3295               apiVersion:
3296                 description: 'APIVersion defines the versioned schema of this representation
3297                   of an object. Servers should convert recognized schemas to the latest
3298                   internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
3299                 type: string
3300               kind:
3301                 description: 'Kind is a string value representing the REST resource this
3302                   object represents. Servers may infer this from the endpoint the client
3303                   submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
3304                 type: string
3305               metadata:
3306                 type: object
3307               spec:
3308                 description: ProviderSpec defines the desired state of Provider
3309                 properties:
3310                   address:
3311                     description: HTTP/S webhook address of this provider
3312                     pattern: ^(http|https)://
3313                     type: string
3314                   certSecretRef:
3315                     description: CertSecretRef can be given the name of a secret containing
3316                       a PEM-encoded CA certificate (`caFile`)
3317                     properties:
3318                       name:
3319                         description: Name of the referent
3320                         type: string
3321                     required:
3322                     - name
3323                     type: object
3324                   channel:
3325                     description: Alert channel for this provider
3326                     type: string
3327                   proxy:
3328                     description: HTTP/S address of the proxy
3329                     pattern: ^(http|https)://
3330                     type: string
3331                   secretRef:
3332                     description: Secret reference containing the provider webhook URL
3333                       using "address" as data key
3334                     properties:
3335                       name:
3336                         description: Name of the referent
3337                         type: string
3338                     required:
3339                     - name
3340                     type: object
3341                   suspend:
3342                     description: This flag tells the controller to suspend subsequent
3343                       events handling. Defaults to false.
3344                     type: boolean
3345                   type:
3346                     description: Type of provider
3347                     enum:
3348                     - slack
3349                     - discord
3350                     - msteams
3351                     - rocket
3352                     - generic
3353                     - github
3354                     - gitlab
3355                     - bitbucket
3356                     - azuredevops
3357                     - googlechat
3358                     - webex
3359                     - sentry
3360                     - azureeventhub
3361                     - telegram
3362                     - lark
3363                     - matrix
3364                     - opsgenie
3365                     - alertmanager
3366                     type: string
3367                   username:
3368                     description: Bot username for this provider
3369                     type: string
3370                 required:
3371                 - type
3372                 type: object
3373               status:
3374                 default:
3375                   observedGeneration: -1
3376                 description: ProviderStatus defines the observed state of Provider
3377                 properties:
3378                   conditions:
3379                     items:
3380                       description: "Condition contains details for one aspect of the current
3381                         state of this API Resource. --- This struct is intended for direct
3382                         use as an array at the field path .status.conditions.  For example,
3383                         type FooStatus struct{     // Represents the observations of a
3384                         foo's current state.     // Known .status.conditions.type are:
3385                         \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
3386                         \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
3387                         \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
3388                         patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
3389                         \n     // other fields }"
3390                       properties:
3391                         lastTransitionTime:
3392                           description: lastTransitionTime is the last time the condition
3393                             transitioned from one status to another. This should be when
3394                             the underlying condition changed.  If that is not known, then
3395                             using the time when the API field changed is acceptable.
3396                           format: date-time
3397                           type: string
3398                         message:
3399                           description: message is a human readable message indicating
3400                             details about the transition. This may be an empty string.
3401                           maxLength: 32768
3402                           type: string
3403                         observedGeneration:
3404                           description: observedGeneration represents the .metadata.generation
3405                             that the condition was set based upon. For instance, if .metadata.generation
3406                             is currently 12, but the .status.conditions[x].observedGeneration
3407                             is 9, the condition is out of date with respect to the current
3408                             state of the instance.
3409                           format: int64
3410                           minimum: 0
3411                           type: integer
3412                         reason:
3413                           description: reason contains a programmatic identifier indicating
3414                             the reason for the condition's last transition. Producers
3415                             of specific condition types may define expected values and
3416                             meanings for this field, and whether the values are considered
3417                             a guaranteed API. The value should be a CamelCase string.
3418                             This field may not be empty.
3419                           maxLength: 1024
3420                           minLength: 1
3421                           pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3422                           type: string
3423                         status:
3424                           description: status of the condition, one of True, False, Unknown.
3425                           enum:
3426                           - "True"
3427                           - "False"
3428                           - Unknown
3429                           type: string
3430                         type:
3431                           description: type of condition in CamelCase or in foo.example.com/CamelCase.
3432                             --- Many .condition.type values are consistent across resources
3433                             like Available, but because arbitrary conditions can be useful
3434                             (see .node.status.conditions), the ability to deconflict is
3435                             important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
3436                           maxLength: 316
3437                           pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3438                           type: string
3439                       required:
3440                       - lastTransitionTime
3441                       - message
3442                       - reason
3443                       - status
3444                       - type
3445                       type: object
3446                     type: array
3447                   observedGeneration:
3448                     description: ObservedGeneration is the last reconciled generation.
3449                     format: int64
3450                     type: integer
3451                 type: object
3452             type: object
3453         served: true
3454         storage: true
3455         subresources:
3456           status: {}
3457     status:
3458       acceptedNames:
3459         kind: ""
3460         plural: ""
3461       conditions: []
3462       storedVersions: []
3463     ---
3464     apiVersion: apiextensions.k8s.io/v1
3465     kind: CustomResourceDefinition
3466     metadata:
3467       annotations:
3468         controller-gen.kubebuilder.io/version: v0.7.0
3469       creationTimestamp: null
3470       labels:
3471         app.kubernetes.io/instance: flux-system
3472         app.kubernetes.io/part-of: flux
3473         app.kubernetes.io/version: v0.25.3
3474       name: receivers.notification.toolkit.fluxcd.io
3475     spec:
3476       group: notification.toolkit.fluxcd.io
3477       names:
3478         kind: Receiver
3479         listKind: ReceiverList
3480         plural: receivers
3481         singular: receiver
3482       scope: Namespaced
3483       versions:
3484       - additionalPrinterColumns:
3485         - jsonPath: .status.conditions[?(@.type=="Ready")].status
3486           name: Ready
3487           type: string
3488         - jsonPath: .status.conditions[?(@.type=="Ready")].message
3489           name: Status
3490           type: string
3491         - jsonPath: .metadata.creationTimestamp
3492           name: Age
3493           type: date
3494         name: v1beta1
3495         schema:
3496           openAPIV3Schema:
3497             description: Receiver is the Schema for the receivers API
3498             properties:
3499               apiVersion:
3500                 description: 'APIVersion defines the versioned schema of this representation
3501                   of an object. Servers should convert recognized schemas to the latest
3502                   internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
3503                 type: string
3504               kind:
3505                 description: 'Kind is a string value representing the REST resource this
3506                   object represents. Servers may infer this from the endpoint the client
3507                   submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
3508                 type: string
3509               metadata:
3510                 type: object
3511               spec:
3512                 description: ReceiverSpec defines the desired state of Receiver
3513                 properties:
3514                   events:
3515                     description: A list of events to handle, e.g. 'push' for GitHub or
3516                       'Push Hook' for GitLab.
3517                     items:
3518                       type: string
3519                     type: array
3520                   resources:
3521                     description: A list of resources to be notified about changes.
3522                     items:
3523                       description: CrossNamespaceObjectReference contains enough information
3524                         to let you locate the typed referenced object at cluster level
3525                       properties:
3526                         apiVersion:
3527                           description: API version of the referent
3528                           type: string
3529                         kind:
3530                           description: Kind of the referent
3531                           enum:
3532                           - Bucket
3533                           - GitRepository
3534                           - Kustomization
3535                           - HelmRelease
3536                           - HelmChart
3537                           - HelmRepository
3538                           - ImageRepository
3539                           - ImagePolicy
3540                           - ImageUpdateAutomation
3541                           type: string
3542                         name:
3543                           description: Name of the referent
3544                           maxLength: 53
3545                           minLength: 1
3546                           type: string
3547                         namespace:
3548                           description: Namespace of the referent
3549                           maxLength: 53
3550                           minLength: 1
3551                           type: string
3552                       required:
3553                       - name
3554                       type: object
3555                     type: array
3556                   secretRef:
3557                     description: Secret reference containing the token used to validate
3558                       the payload authenticity
3559                     properties:
3560                       name:
3561                         description: Name of the referent
3562                         type: string
3563                     required:
3564                     - name
3565                     type: object
3566                   suspend:
3567                     description: This flag tells the controller to suspend subsequent
3568                       events handling. Defaults to false.
3569                     type: boolean
3570                   type:
3571                     description: Type of webhook sender, used to determine the validation
3572                       procedure and payload deserialization.
3573                     enum:
3574                     - generic
3575                     - generic-hmac
3576                     - github
3577                     - gitlab
3578                     - bitbucket
3579                     - harbor
3580                     - dockerhub
3581                     - quay
3582                     - gcr
3583                     - nexus
3584                     - acr
3585                     type: string
3586                 required:
3587                 - resources
3588                 - type
3589                 type: object
3590               status:
3591                 default:
3592                   observedGeneration: -1
3593                 description: ReceiverStatus defines the observed state of Receiver
3594                 properties:
3595                   conditions:
3596                     items:
3597                       description: "Condition contains details for one aspect of the current
3598                         state of this API Resource. --- This struct is intended for direct
3599                         use as an array at the field path .status.conditions.  For example,
3600                         type FooStatus struct{     // Represents the observations of a
3601                         foo's current state.     // Known .status.conditions.type are:
3602                         \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
3603                         \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
3604                         \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
3605                         patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
3606                         \n     // other fields }"
3607                       properties:
3608                         lastTransitionTime:
3609                           description: lastTransitionTime is the last time the condition
3610                             transitioned from one status to another. This should be when
3611                             the underlying condition changed.  If that is not known, then
3612                             using the time when the API field changed is acceptable.
3613                           format: date-time
3614                           type: string
3615                         message:
3616                           description: message is a human readable message indicating
3617                             details about the transition. This may be an empty string.
3618                           maxLength: 32768
3619                           type: string
3620                         observedGeneration:
3621                           description: observedGeneration represents the .metadata.generation
3622                             that the condition was set based upon. For instance, if .metadata.generation
3623                             is currently 12, but the .status.conditions[x].observedGeneration
3624                             is 9, the condition is out of date with respect to the current
3625                             state of the instance.
3626                           format: int64
3627                           minimum: 0
3628                           type: integer
3629                         reason:
3630                           description: reason contains a programmatic identifier indicating
3631                             the reason for the condition's last transition. Producers
3632                             of specific condition types may define expected values and
3633                             meanings for this field, and whether the values are considered
3634                             a guaranteed API. The value should be a CamelCase string.
3635                             This field may not be empty.
3636                           maxLength: 1024
3637                           minLength: 1
3638                           pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3639                           type: string
3640                         status:
3641                           description: status of the condition, one of True, False, Unknown.
3642                           enum:
3643                           - "True"
3644                           - "False"
3645                           - Unknown
3646                           type: string
3647                         type:
3648                           description: type of condition in CamelCase or in foo.example.com/CamelCase.
3649                             --- Many .condition.type values are consistent across resources
3650                             like Available, but because arbitrary conditions can be useful
3651                             (see .node.status.conditions), the ability to deconflict is
3652                             important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
3653                           maxLength: 316
3654                           pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3655                           type: string
3656                       required:
3657                       - lastTransitionTime
3658                       - message
3659                       - reason
3660                       - status
3661                       - type
3662                       type: object
3663                     type: array
3664                   observedGeneration:
3665                     description: ObservedGeneration is the last observed generation.
3666                     format: int64
3667                     type: integer
3668                   url:
3669                     description: Generated webhook URL in the format of '/hook/sha256sum(token+name+namespace)'.
3670                     type: string
3671                 type: object
3672             type: object
3673         served: true
3674         storage: true
3675         subresources:
3676           status: {}
3677     status:
3678       acceptedNames:
3679         kind: ""
3680         plural: ""
3681       conditions: []
3682       storedVersions: []
3683     ---
3684     apiVersion: v1
3685     kind: ServiceAccount
3686     metadata:
3687       labels:
3688         app.kubernetes.io/instance: flux-system
3689         app.kubernetes.io/part-of: flux
3690         app.kubernetes.io/version: v0.25.3
3691       name: helm-controller
3692       namespace: flux-system
3693     ---
3694     apiVersion: v1
3695     kind: ServiceAccount
3696     metadata:
3697       labels:
3698         app.kubernetes.io/instance: flux-system
3699         app.kubernetes.io/part-of: flux
3700         app.kubernetes.io/version: v0.25.3
3701       name: kustomize-controller
3702       namespace: flux-system
3703     ---
3704     apiVersion: v1
3705     kind: ServiceAccount
3706     metadata:
3707       labels:
3708         app.kubernetes.io/instance: flux-system
3709         app.kubernetes.io/part-of: flux
3710         app.kubernetes.io/version: v0.25.3
3711       name: notification-controller
3712       namespace: flux-system
3713     ---
3714     apiVersion: v1
3715     kind: ServiceAccount
3716     metadata:
3717       labels:
3718         app.kubernetes.io/instance: flux-system
3719         app.kubernetes.io/part-of: flux
3720         app.kubernetes.io/version: v0.25.3
3721       name: source-controller
3722       namespace: flux-system
3723     ---
3724     apiVersion: rbac.authorization.k8s.io/v1
3725     kind: ClusterRole
3726     metadata:
3727       labels:
3728         app.kubernetes.io/instance: flux-system
3729         app.kubernetes.io/part-of: flux
3730         app.kubernetes.io/version: v0.25.3
3731       name: crd-controller-flux-system
3732     rules:
3733     - apiGroups:
3734       - source.toolkit.fluxcd.io
3735       resources:
3736       - '*'
3737       verbs:
3738       - '*'
3739     - apiGroups:
3740       - kustomize.toolkit.fluxcd.io
3741       resources:
3742       - '*'
3743       verbs:
3744       - '*'
3745     - apiGroups:
3746       - helm.toolkit.fluxcd.io
3747       resources:
3748       - '*'
3749       verbs:
3750       - '*'
3751     - apiGroups:
3752       - notification.toolkit.fluxcd.io
3753       resources:
3754       - '*'
3755       verbs:
3756       - '*'
3757     - apiGroups:
3758       - image.toolkit.fluxcd.io
3759       resources:
3760       - '*'
3761       verbs:
3762       - '*'
3763     - apiGroups:
3764       - ""
3765       resources:
3766       - namespaces
3767       - secrets
3768       verbs:
3769       - get
3770       - list
3771       - watch
3772     - apiGroups:
3773       - ""
3774       resources:
3775       - events
3776       verbs:
3777       - create
3778       - patch
3779     - apiGroups:
3780       - ""
3781       resources:
3782       - configmaps
3783       - configmaps/status
3784       verbs:
3785       - get
3786       - list
3787       - watch
3788       - create
3789       - update
3790       - patch
3791       - delete
3792     - apiGroups:
3793       - coordination.k8s.io
3794       resources:
3795       - leases
3796       verbs:
3797       - get
3798       - list
3799       - watch
3800       - create
3801       - update
3802       - patch
3803       - delete
3804     ---
3805     apiVersion: rbac.authorization.k8s.io/v1
3806     kind: ClusterRoleBinding
3807     metadata:
3808       labels:
3809         app.kubernetes.io/instance: flux-system
3810         app.kubernetes.io/part-of: flux
3811         app.kubernetes.io/version: v0.25.3
3812       name: cluster-reconciler-flux-system
3813     roleRef:
3814       apiGroup: rbac.authorization.k8s.io
3815       kind: ClusterRole
3816       name: cluster-admin
3817     subjects:
3818     - kind: ServiceAccount
3819       name: kustomize-controller
3820       namespace: flux-system
3821     - kind: ServiceAccount
3822       name: helm-controller
3823       namespace: flux-system
3824     ---
3825     apiVersion: rbac.authorization.k8s.io/v1
3826     kind: ClusterRoleBinding
3827     metadata:
3828       labels:
3829         app.kubernetes.io/instance: flux-system
3830         app.kubernetes.io/part-of: flux
3831         app.kubernetes.io/version: v0.25.3
3832       name: crd-controller-flux-system
3833     roleRef:
3834       apiGroup: rbac.authorization.k8s.io
3835       kind: ClusterRole
3836       name: crd-controller-flux-system
3837     subjects:
3838     - kind: ServiceAccount
3839       name: kustomize-controller
3840       namespace: flux-system
3841     - kind: ServiceAccount
3842       name: helm-controller
3843       namespace: flux-system
3844     - kind: ServiceAccount
3845       name: source-controller
3846       namespace: flux-system
3847     - kind: ServiceAccount
3848       name: notification-controller
3849       namespace: flux-system
3850     - kind: ServiceAccount
3851       name: image-reflector-controller
3852       namespace: flux-system
3853     - kind: ServiceAccount
3854       name: image-automation-controller
3855       namespace: flux-system
3856     ---
3857     apiVersion: v1
3858     kind: Service
3859     metadata:
3860       labels:
3861         app.kubernetes.io/instance: flux-system
3862         app.kubernetes.io/part-of: flux
3863         app.kubernetes.io/version: v0.25.3
3864         control-plane: controller
3865       name: notification-controller
3866       namespace: flux-system
3867     spec:
3868       ports:
3869       - name: http
3870         port: 80
3871         protocol: TCP
3872         targetPort: http
3873       selector:
3874         app: notification-controller
3875       type: ClusterIP
3876     ---
3877     apiVersion: v1
3878     kind: Service
3879     metadata:
3880       labels:
3881         app.kubernetes.io/instance: flux-system
3882         app.kubernetes.io/part-of: flux
3883         app.kubernetes.io/version: v0.25.3
3884         control-plane: controller
3885       name: source-controller
3886       namespace: flux-system
3887     spec:
3888       ports:
3889       - name: http
3890         port: 80
3891         protocol: TCP
3892         targetPort: http
3893       selector:
3894         app: source-controller
3895       type: ClusterIP
3896     ---
3897     apiVersion: v1
3898     kind: Service
3899     metadata:
3900       labels:
3901         app.kubernetes.io/instance: flux-system
3902         app.kubernetes.io/part-of: flux
3903         app.kubernetes.io/version: v0.25.3
3904         control-plane: controller
3905       name: webhook-receiver
3906       namespace: flux-system
3907     spec:
3908       ports:
3909       - name: http
3910         port: 80
3911         protocol: TCP
3912         targetPort: http-webhook
3913       selector:
3914         app: notification-controller
3915       type: ClusterIP
3916     ---
3917     apiVersion: apps/v1
3918     kind: Deployment
3919     metadata:
3920       labels:
3921         app.kubernetes.io/instance: flux-system
3922         app.kubernetes.io/part-of: flux
3923         app.kubernetes.io/version: v0.25.3
3924         control-plane: controller
3925       name: helm-controller
3926       namespace: flux-system
3927     spec:
3928       replicas: 1
3929       selector:
3930         matchLabels:
3931           app: helm-controller
3932       template:
3933         metadata:
3934           annotations:
3935             prometheus.io/port: "8080"
3936             prometheus.io/scrape: "true"
3937           labels:
3938             app: helm-controller
3939         spec:
3940           containers:
3941           - args:
3942             - --events-addr=http://notification-controller.flux-system.svc.cluster.local/
3943             - --watch-all-namespaces=true
3944             - --log-level=info
3945             - --log-encoding=json
3946             - --enable-leader-election
3947             env:
3948             - name: RUNTIME_NAMESPACE
3949               valueFrom:
3950                 fieldRef:
3951                   fieldPath: metadata.namespace
3952             image: ghcr.io/fluxcd/helm-controller:v0.15.0
3953             imagePullPolicy: IfNotPresent
3954             livenessProbe:
3955               httpGet:
3956                 path: /healthz
3957                 port: healthz
3958             name: manager
3959             ports:
3960             - containerPort: 8080
3961               name: http-prom
3962             - containerPort: 9440
3963               name: healthz
3964               protocol: TCP
3965             readinessProbe:
3966               httpGet:
3967                 path: /readyz
3968                 port: healthz
3969             resources:
3970               limits:
3971                 cpu: 1000m
3972                 memory: 1Gi
3973               requests:
3974                 cpu: 100m
3975                 memory: 64Mi
3976             securityContext:
3977               allowPrivilegeEscalation: false
3978               readOnlyRootFilesystem: true
3979             volumeMounts:
3980             - mountPath: /tmp
3981               name: temp
3982           nodeSelector:
3983             kubernetes.io/os: linux
3984           serviceAccountName: helm-controller
3985           terminationGracePeriodSeconds: 600
3986           volumes:
3987           - emptyDir: {}
3988             name: temp
3989     ---
3990     apiVersion: apps/v1
3991     kind: Deployment
3992     metadata:
3993       labels:
3994         app.kubernetes.io/instance: flux-system
3995         app.kubernetes.io/part-of: flux
3996         app.kubernetes.io/version: v0.25.3
3997         control-plane: controller
3998       name: kustomize-controller
3999       namespace: flux-system
4000     spec:
4001       replicas: 1
4002       selector:
4003         matchLabels:
4004           app: kustomize-controller
4005       template:
4006         metadata:
4007           annotations:
4008             prometheus.io/port: "8080"
4009             prometheus.io/scrape: "true"
4010           labels:
4011             app: kustomize-controller
4012         spec:
4013           containers:
4014           - args:
4015             - --events-addr=http://notification-controller.flux-system.svc.cluster.local/
4016             - --watch-all-namespaces=true
4017             - --log-level=info
4018             - --log-encoding=json
4019             - --enable-leader-election
4020             env:
4021             - name: RUNTIME_NAMESPACE
4022               valueFrom:
4023                 fieldRef:
4024                   fieldPath: metadata.namespace
4025             image: ghcr.io/fluxcd/kustomize-controller:v0.19.1
4026             imagePullPolicy: IfNotPresent
4027             livenessProbe:
4028               httpGet:
4029                 path: /healthz
4030                 port: healthz
4031             name: manager
4032             ports:
4033             - containerPort: 8080
4034               name: http-prom
4035             - containerPort: 9440
4036               name: healthz
4037               protocol: TCP
4038             readinessProbe:
4039               httpGet:
4040                 path: /readyz
4041                 port: healthz
4042             resources:
4043               limits:
4044                 cpu: 1000m
4045                 memory: 1Gi
4046               requests:
4047                 cpu: 100m
4048                 memory: 64Mi
4049             securityContext:
4050               allowPrivilegeEscalation: false
4051               readOnlyRootFilesystem: true
4052             volumeMounts:
4053             - mountPath: /tmp
4054               name: temp
4055           nodeSelector:
4056             kubernetes.io/os: linux
4057           securityContext:
4058             fsGroup: 1337
4059           serviceAccountName: kustomize-controller
4060           terminationGracePeriodSeconds: 60
4061           volumes:
4062           - emptyDir: {}
4063             name: temp
4064     ---
4065     apiVersion: apps/v1
4066     kind: Deployment
4067     metadata:
4068       labels:
4069         app.kubernetes.io/instance: flux-system
4070         app.kubernetes.io/part-of: flux
4071         app.kubernetes.io/version: v0.25.3
4072         control-plane: controller
4073       name: notification-controller
4074       namespace: flux-system
4075     spec:
4076       replicas: 1
4077       selector:
4078         matchLabels:
4079           app: notification-controller
4080       template:
4081         metadata:
4082           annotations:
4083             prometheus.io/port: "8080"
4084             prometheus.io/scrape: "true"
4085           labels:
4086             app: notification-controller
4087         spec:
4088           containers:
4089           - args:
4090             - --watch-all-namespaces=true
4091             - --log-level=info
4092             - --log-encoding=json
4093             - --enable-leader-election
4094             env:
4095             - name: RUNTIME_NAMESPACE
4096               valueFrom:
4097                 fieldRef:
4098                   fieldPath: metadata.namespace
4099             image: ghcr.io/fluxcd/notification-controller:v0.20.1
4100             imagePullPolicy: IfNotPresent
4101             livenessProbe:
4102               httpGet:
4103                 path: /healthz
4104                 port: healthz
4105             name: manager
4106             ports:
4107             - containerPort: 9090
4108               name: http
4109             - containerPort: 9292
4110               name: http-webhook
4111             - containerPort: 8080
4112               name: http-prom
4113             - containerPort: 9440
4114               name: healthz
4115               protocol: TCP
4116             readinessProbe:
4117               httpGet:
4118                 path: /readyz
4119                 port: healthz
4120             resources:
4121               limits:
4122                 cpu: 1000m
4123                 memory: 1Gi
4124               requests:
4125                 cpu: 100m
4126                 memory: 64Mi
4127             securityContext:
4128               allowPrivilegeEscalation: false
4129               readOnlyRootFilesystem: true
4130             volumeMounts:
4131             - mountPath: /tmp
4132               name: temp
4133           nodeSelector:
4134             kubernetes.io/os: linux
4135           serviceAccountName: notification-controller
4136           terminationGracePeriodSeconds: 10
4137           volumes:
4138           - emptyDir: {}
4139             name: temp
4140     ---
4141     apiVersion: apps/v1
4142     kind: Deployment
4143     metadata:
4144       labels:
4145         app.kubernetes.io/instance: flux-system
4146         app.kubernetes.io/part-of: flux
4147         app.kubernetes.io/version: v0.25.3
4148         control-plane: controller
4149       name: source-controller
4150       namespace: flux-system
4151     spec:
4152       replicas: 1
4153       selector:
4154         matchLabels:
4155           app: source-controller
4156       strategy:
4157         type: Recreate
4158       template:
4159         metadata:
4160           annotations:
4161             prometheus.io/port: "8080"
4162             prometheus.io/scrape: "true"
4163           labels:
4164             app: source-controller
4165         spec:
4166           containers:
4167           - args:
4168             - --events-addr=http://notification-controller.flux-system.svc.cluster.local/
4169             - --watch-all-namespaces=true
4170             - --log-level=info
4171             - --log-encoding=json
4172             - --enable-leader-election
4173             - --storage-path=/data
4174             - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local.
4175             env:
4176             - name: RUNTIME_NAMESPACE
4177               valueFrom:
4178                 fieldRef:
4179                   fieldPath: metadata.namespace
4180             image: ghcr.io/fluxcd/source-controller:v0.20.1
4181             imagePullPolicy: IfNotPresent
4182             livenessProbe:
4183               httpGet:
4184                 path: /healthz
4185                 port: healthz
4186             name: manager
4187             ports:
4188             - containerPort: 9090
4189               name: http
4190             - containerPort: 8080
4191               name: http-prom
4192             - containerPort: 9440
4193               name: healthz
4194             readinessProbe:
4195               httpGet:
4196                 path: /
4197                 port: http
4198             resources:
4199               limits:
4200                 cpu: 1000m
4201                 memory: 1Gi
4202               requests:
4203                 cpu: 50m
4204                 memory: 64Mi
4205             securityContext:
4206               allowPrivilegeEscalation: false
4207               readOnlyRootFilesystem: true
4208             volumeMounts:
4209             - mountPath: /data
4210               name: data
4211             - mountPath: /tmp
4212               name: tmp
4213           nodeSelector:
4214             kubernetes.io/os: linux
4215           securityContext:
4216             fsGroup: 1337
4217           serviceAccountName: source-controller
4218           terminationGracePeriodSeconds: 10
4219           volumes:
4220           - emptyDir: {}
4221             name: data
4222           - emptyDir: {}
4223             name: tmp
4224     ---
4225     apiVersion: networking.k8s.io/v1
4226     kind: NetworkPolicy
4227     metadata:
4228       labels:
4229         app.kubernetes.io/instance: flux-system
4230         app.kubernetes.io/part-of: flux
4231         app.kubernetes.io/version: v0.25.3
4232       name: allow-egress
4233       namespace: flux-system
4234     spec:
4235       egress:
4236       - {}
4237       ingress:
4238       - from:
4239         - podSelector: {}
4240       podSelector: {}
4241       policyTypes:
4242       - Ingress
4243       - Egress
4244     ---
4245     apiVersion: networking.k8s.io/v1
4246     kind: NetworkPolicy
4247     metadata:
4248       labels:
4249         app.kubernetes.io/instance: flux-system
4250         app.kubernetes.io/part-of: flux
4251         app.kubernetes.io/version: v0.25.3
4252       name: allow-scraping
4253       namespace: flux-system
4254     spec:
4255       ingress:
4256       - from:
4257         - namespaceSelector: {}
4258         ports:
4259         - port: 8080
4260           protocol: TCP
4261       podSelector: {}
4262       policyTypes:
4263       - Ingress
4264     ---
4265     apiVersion: networking.k8s.io/v1
4266     kind: NetworkPolicy
4267     metadata:
4268       labels:
4269         app.kubernetes.io/instance: flux-system
4270         app.kubernetes.io/part-of: flux
4271         app.kubernetes.io/version: v0.25.3
4272       name: allow-webhooks
4273       namespace: flux-system
4274     spec:
4275       ingress:
4276       - from:
4277         - namespaceSelector: {}
4278       podSelector:
4279         matchLabels:
4280           app: notification-controller
4281       policyTypes:
4282       - Ingress
4283   sync.yaml: |
4284     {{- if .Values.flux.decryptionSecret }}
4285     ---
4286     apiVersion: v1
4287     type: Opaque
4288     kind: Secret
4289     metadata:
4290       name: {{ .Values.flux.repositoryName }}-{{ .Values.flux.branch }}-sops-gpg
4291       namespace: flux-system
4292     data:
4293       sops.asc: {{ .Values.flux.decryptionSecret | b64enc }}
4294     {{- end }}
4295     ---
4296     apiVersion: source.toolkit.fluxcd.io/v1beta1
4297     kind: GitRepository
4298     metadata:
4299       name: {{ .Values.flux.repositoryName }}
4300       namespace: flux-system
4301     spec:
4302       gitImplementation: go-git
4303       interval: 1m0s
4304       ref:
4305         branch: {{ .Values.flux.branch }}
4306       timeout: 20s
4307       url: {{ .Values.flux.url }}
4308     ---
4309     apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
4310     kind: Kustomization
4311     metadata:
4312       name: {{ .Values.clusterName }}-flux-sync
4313       namespace: flux-system
4314     spec:
4315       interval: 10m0s
4316       path: {{ .Values.flux.path }}
4317       prune: true
4318       sourceRef:
4319         kind: GitRepository
4320         name: {{ .Values.flux.repositoryName }}
4321     {{- if .Values.flux.decryptionSecret }}
4322       decryption:
4323         provider: sops
4324         secretRef:
4325           name: {{ .Values.flux.repositoryName }}-{{ .Values.flux.branch }}-sops-gpg
4326     {{- end }}
4327 kind: ConfigMap
4328 metadata:
4329   creationTimestamp: null
4330   name: {{ .Values.clusterName }}-flux-addon
4331 {{- end }}