deploy/site/cluster-addons/flux-system/gotk-components.yaml

   1 ---
   2 # This manifest was generated by flux. DO NOT EDIT.
   3 # Flux Version: v0.25.3
   4 # Components: source-controller,kustomize-controller,helm-controller,notification-controller
   5 apiVersion: v1
   6 kind: Namespace
   7 metadata:
   8   labels:
   9     app.kubernetes.io/instance: flux-system
  10     app.kubernetes.io/part-of: flux
  11     app.kubernetes.io/version: v0.25.3
  12   name: flux-system
  13 ---
  14 apiVersion: apiextensions.k8s.io/v1
  15 kind: CustomResourceDefinition
  16 metadata:
  17   annotations:
  18     controller-gen.kubebuilder.io/version: v0.7.0
  19   creationTimestamp: null
  20   labels:
  21     app.kubernetes.io/instance: flux-system
  22     app.kubernetes.io/part-of: flux
  23     app.kubernetes.io/version: v0.25.3
  24   name: alerts.notification.toolkit.fluxcd.io
  25 spec:
  26   group: notification.toolkit.fluxcd.io
  27   names:
  28     kind: Alert
  29     listKind: AlertList
  30     plural: alerts
  31     singular: alert
  32   scope: Namespaced
  33   versions:
  34   - additionalPrinterColumns:
  35     - jsonPath: .status.conditions[?(@.type=="Ready")].status
  36       name: Ready
  37       type: string
  38     - jsonPath: .status.conditions[?(@.type=="Ready")].message
  39       name: Status
  40       type: string
  41     - jsonPath: .metadata.creationTimestamp
  42       name: Age
  43       type: date
  44     name: v1beta1
  45     schema:
  46       openAPIV3Schema:
  47         description: Alert is the Schema for the alerts API
  48         properties:
  49           apiVersion:
  50             description: 'APIVersion defines the versioned schema of this representation
  51               of an object. Servers should convert recognized schemas to the latest
  52               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  53             type: string
  54           kind:
  55             description: 'Kind is a string value representing the REST resource this
  56               object represents. Servers may infer this from the endpoint the client
  57               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  58             type: string
  59           metadata:
  60             type: object
  61           spec:
  62             description: AlertSpec defines an alerting rule for events involving a
  63               list of objects
  64             properties:
  65               eventSeverity:
  66                 default: info
  67                 description: Filter events based on severity, defaults to ('info').
  68                   If set to 'info' no events will be filtered.
  69                 enum:
  70                 - info
  71                 - error
  72                 type: string
  73               eventSources:
  74                 description: Filter events based on the involved objects.
  75                 items:
  76                   description: CrossNamespaceObjectReference contains enough information
  77                     to let you locate the typed referenced object at cluster level
  78                   properties:
  79                     apiVersion:
  80                       description: API version of the referent
  81                       type: string
  82                     kind:
  83                       description: Kind of the referent
  84                       enum:
  85                       - Bucket
  86                       - GitRepository
  87                       - Kustomization
  88                       - HelmRelease
  89                       - HelmChart
  90                       - HelmRepository
  91                       - ImageRepository
  92                       - ImagePolicy
  93                       - ImageUpdateAutomation
  94                       type: string
  95                     name:
  96                       description: Name of the referent
  97                       maxLength: 53
  98                       minLength: 1
  99                       type: string
 100                     namespace:
 101                       description: Namespace of the referent
 102                       maxLength: 53
 103                       minLength: 1
 104                       type: string
 105                   required:
 106                   - name
 107                   type: object
 108                 type: array
 109               exclusionList:
 110                 description: A list of Golang regular expressions to be used for excluding
 111                   messages.
 112                 items:
 113                   type: string
 114                 type: array
 115               providerRef:
 116                 description: Send events using this provider.
 117                 properties:
 118                   name:
 119                     description: Name of the referent
 120                     type: string
 121                 required:
 122                 - name
 123                 type: object
 124               summary:
 125                 description: Short description of the impact and affected cluster.
 126                 type: string
 127               suspend:
 128                 description: This flag tells the controller to suspend subsequent
 129                   events dispatching. Defaults to false.
 130                 type: boolean
 131             required:
 132             - eventSources
 133             - providerRef
 134             type: object
 135           status:
 136             default:
 137               observedGeneration: -1
 138             description: AlertStatus defines the observed state of Alert
 139             properties:
 140               conditions:
 141                 items:
 142                   description: "Condition contains details for one aspect of the current
 143                     state of this API Resource. --- This struct is intended for direct
 144                     use as an array at the field path .status.conditions.  For example,
 145                     type FooStatus struct{     // Represents the observations of a
 146                     foo's current state.     // Known .status.conditions.type are:
 147                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
 148                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
 149                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
 150                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
 151                     \n     // other fields }"
 152                   properties:
 153                     lastTransitionTime:
 154                       description: lastTransitionTime is the last time the condition
 155                         transitioned from one status to another. This should be when
 156                         the underlying condition changed.  If that is not known, then
 157                         using the time when the API field changed is acceptable.
 158                       format: date-time
 159                       type: string
 160                     message:
 161                       description: message is a human readable message indicating
 162                         details about the transition. This may be an empty string.
 163                       maxLength: 32768
 164                       type: string
 165                     observedGeneration:
 166                       description: observedGeneration represents the .metadata.generation
 167                         that the condition was set based upon. For instance, if .metadata.generation
 168                         is currently 12, but the .status.conditions[x].observedGeneration
 169                         is 9, the condition is out of date with respect to the current
 170                         state of the instance.
 171                       format: int64
 172                       minimum: 0
 173                       type: integer
 174                     reason:
 175                       description: reason contains a programmatic identifier indicating
 176                         the reason for the condition's last transition. Producers
 177                         of specific condition types may define expected values and
 178                         meanings for this field, and whether the values are considered
 179                         a guaranteed API. The value should be a CamelCase string.
 180                         This field may not be empty.
 181                       maxLength: 1024
 182                       minLength: 1
 183                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
 184                       type: string
 185                     status:
 186                       description: status of the condition, one of True, False, Unknown.
 187                       enum:
 188                       - "True"
 189                       - "False"
 190                       - Unknown
 191                       type: string
 192                     type:
 193                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
 194                         --- Many .condition.type values are consistent across resources
 195                         like Available, but because arbitrary conditions can be useful
 196                         (see .node.status.conditions), the ability to deconflict is
 197                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
 198                       maxLength: 316
 199                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
 200                       type: string
 201                   required:
 202                   - lastTransitionTime
 203                   - message
 204                   - reason
 205                   - status
 206                   - type
 207                   type: object
 208                 type: array
 209               observedGeneration:
 210                 description: ObservedGeneration is the last observed generation.
 211                 format: int64
 212                 type: integer
 213             type: object
 214         type: object
 215     served: true
 216     storage: true
 217     subresources:
 218       status: {}
 219 status:
 220   acceptedNames:
 221     kind: ""
 222     plural: ""
 223   conditions: []
 224   storedVersions: []
 225 ---
 226 apiVersion: apiextensions.k8s.io/v1
 227 kind: CustomResourceDefinition
 228 metadata:
 229   annotations:
 230     controller-gen.kubebuilder.io/version: v0.5.0
 231   creationTimestamp: null
 232   labels:
 233     app.kubernetes.io/instance: flux-system
 234     app.kubernetes.io/part-of: flux
 235     app.kubernetes.io/version: v0.25.3
 236   name: buckets.source.toolkit.fluxcd.io
 237 spec:
 238   group: source.toolkit.fluxcd.io
 239   names:
 240     kind: Bucket
 241     listKind: BucketList
 242     plural: buckets
 243     singular: bucket
 244   scope: Namespaced
 245   versions:
 246   - additionalPrinterColumns:
 247     - jsonPath: .spec.endpoint
 248       name: Endpoint
 249       type: string
 250     - jsonPath: .status.conditions[?(@.type=="Ready")].status
 251       name: Ready
 252       type: string
 253     - jsonPath: .status.conditions[?(@.type=="Ready")].message
 254       name: Status
 255       type: string
 256     - jsonPath: .metadata.creationTimestamp
 257       name: Age
 258       type: date
 259     name: v1beta1
 260     schema:
 261       openAPIV3Schema:
 262         description: Bucket is the Schema for the buckets API
 263         properties:
 264           apiVersion:
 265             description: 'APIVersion defines the versioned schema of this representation
 266               of an object. Servers should convert recognized schemas to the latest
 267               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
 268             type: string
 269           kind:
 270             description: 'Kind is a string value representing the REST resource this
 271               object represents. Servers may infer this from the endpoint the client
 272               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
 273             type: string
 274           metadata:
 275             type: object
 276           spec:
 277             description: BucketSpec defines the desired state of an S3 compatible
 278               bucket
 279             properties:
 280               accessFrom:
 281                 description: AccessFrom defines an Access Control List for allowing
 282                   cross-namespace references to this object.
 283                 properties:
 284                   namespaceSelectors:
 285                     description: NamespaceSelectors is the list of namespace selectors
 286                       to which this ACL applies. Items in this list are evaluated
 287                       using a logical OR operation.
 288                     items:
 289                       description: NamespaceSelector selects the namespaces to which
 290                         this ACL applies. An empty map of MatchLabels matches all
 291                         namespaces in a cluster.
 292                       properties:
 293                         matchLabels:
 294                           additionalProperties:
 295                             type: string
 296                           description: MatchLabels is a map of {key,value} pairs.
 297                             A single {key,value} in the matchLabels map is equivalent
 298                             to an element of matchExpressions, whose key field is
 299                             "key", the operator is "In", and the values array contains
 300                             only "value". The requirements are ANDed.
 301                           type: object
 302                       type: object
 303                     type: array
 304                 required:
 305                 - namespaceSelectors
 306                 type: object
 307               bucketName:
 308                 description: The bucket name.
 309                 type: string
 310               endpoint:
 311                 description: The bucket endpoint address.
 312                 type: string
 313               ignore:
 314                 description: Ignore overrides the set of excluded patterns in the
 315                   .sourceignore format (which is the same as .gitignore). If not provided,
 316                   a default will be used, consult the documentation for your version
 317                   to find out what those are.
 318                 type: string
 319               insecure:
 320                 description: Insecure allows connecting to a non-TLS S3 HTTP endpoint.
 321                 type: boolean
 322               interval:
 323                 description: The interval at which to check for bucket updates.
 324                 type: string
 325               provider:
 326                 default: generic
 327                 description: The S3 compatible storage provider name, default ('generic').
 328                 enum:
 329                 - generic
 330                 - aws
 331                 - gcp
 332                 type: string
 333               region:
 334                 description: The bucket region.
 335                 type: string
 336               secretRef:
 337                 description: The name of the secret containing authentication credentials
 338                   for the Bucket.
 339                 properties:
 340                   name:
 341                     description: Name of the referent
 342                     type: string
 343                 required:
 344                 - name
 345                 type: object
 346               suspend:
 347                 description: This flag tells the controller to suspend the reconciliation
 348                   of this source.
 349                 type: boolean
 350               timeout:
 351                 default: 20s
 352                 description: The timeout for download operations, defaults to 20s.
 353                 type: string
 354             required:
 355             - bucketName
 356             - endpoint
 357             - interval
 358             type: object
 359           status:
 360             default:
 361               observedGeneration: -1
 362             description: BucketStatus defines the observed state of a bucket
 363             properties:
 364               artifact:
 365                 description: Artifact represents the output of the last successful
 366                   Bucket sync.
 367                 properties:
 368                   checksum:
 369                     description: Checksum is the SHA256 checksum of the artifact.
 370                     type: string
 371                   lastUpdateTime:
 372                     description: LastUpdateTime is the timestamp corresponding to
 373                       the last update of this artifact.
 374                     format: date-time
 375                     type: string
 376                   path:
 377                     description: Path is the relative file path of this artifact.
 378                     type: string
 379                   revision:
 380                     description: Revision is a human readable identifier traceable
 381                       in the origin source system. It can be a Git commit SHA, Git
 382                       tag, a Helm index timestamp, a Helm chart version, etc.
 383                     type: string
 384                   url:
 385                     description: URL is the HTTP address of this artifact.
 386                     type: string
 387                 required:
 388                 - path
 389                 - url
 390                 type: object
 391               conditions:
 392                 description: Conditions holds the conditions for the Bucket.
 393                 items:
 394                   description: "Condition contains details for one aspect of the current
 395                     state of this API Resource. --- This struct is intended for direct
 396                     use as an array at the field path .status.conditions.  For example,
 397                     type FooStatus struct{     // Represents the observations of a
 398                     foo's current state.     // Known .status.conditions.type are:
 399                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
 400                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
 401                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
 402                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
 403                     \n     // other fields }"
 404                   properties:
 405                     lastTransitionTime:
 406                       description: lastTransitionTime is the last time the condition
 407                         transitioned from one status to another. This should be when
 408                         the underlying condition changed.  If that is not known, then
 409                         using the time when the API field changed is acceptable.
 410                       format: date-time
 411                       type: string
 412                     message:
 413                       description: message is a human readable message indicating
 414                         details about the transition. This may be an empty string.
 415                       maxLength: 32768
 416                       type: string
 417                     observedGeneration:
 418                       description: observedGeneration represents the .metadata.generation
 419                         that the condition was set based upon. For instance, if .metadata.generation
 420                         is currently 12, but the .status.conditions[x].observedGeneration
 421                         is 9, the condition is out of date with respect to the current
 422                         state of the instance.
 423                       format: int64
 424                       minimum: 0
 425                       type: integer
 426                     reason:
 427                       description: reason contains a programmatic identifier indicating
 428                         the reason for the condition's last transition. Producers
 429                         of specific condition types may define expected values and
 430                         meanings for this field, and whether the values are considered
 431                         a guaranteed API. The value should be a CamelCase string.
 432                         This field may not be empty.
 433                       maxLength: 1024
 434                       minLength: 1
 435                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
 436                       type: string
 437                     status:
 438                       description: status of the condition, one of True, False, Unknown.
 439                       enum:
 440                       - "True"
 441                       - "False"
 442                       - Unknown
 443                       type: string
 444                     type:
 445                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
 446                         --- Many .condition.type values are consistent across resources
 447                         like Available, but because arbitrary conditions can be useful
 448                         (see .node.status.conditions), the ability to deconflict is
 449                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
 450                       maxLength: 316
 451                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
 452                       type: string
 453                   required:
 454                   - lastTransitionTime
 455                   - message
 456                   - reason
 457                   - status
 458                   - type
 459                   type: object
 460                 type: array
 461               lastHandledReconcileAt:
 462                 description: LastHandledReconcileAt holds the value of the most recent
 463                   reconcile request value, so a change can be detected.
 464                 type: string
 465               observedGeneration:
 466                 description: ObservedGeneration is the last observed generation.
 467                 format: int64
 468                 type: integer
 469               url:
 470                 description: URL is the download link for the artifact output of the
 471                   last Bucket sync.
 472                 type: string
 473             type: object
 474         type: object
 475     served: true
 476     storage: true
 477     subresources:
 478       status: {}
 479 status:
 480   acceptedNames:
 481     kind: ""
 482     plural: ""
 483   conditions: []
 484   storedVersions: []
 485 ---
 486 apiVersion: apiextensions.k8s.io/v1
 487 kind: CustomResourceDefinition
 488 metadata:
 489   annotations:
 490     controller-gen.kubebuilder.io/version: v0.5.0
 491   creationTimestamp: null
 492   labels:
 493     app.kubernetes.io/instance: flux-system
 494     app.kubernetes.io/part-of: flux
 495     app.kubernetes.io/version: v0.25.3
 496   name: gitrepositories.source.toolkit.fluxcd.io
 497 spec:
 498   group: source.toolkit.fluxcd.io
 499   names:
 500     kind: GitRepository
 501     listKind: GitRepositoryList
 502     plural: gitrepositories
 503     shortNames:
 504     - gitrepo
 505     singular: gitrepository
 506   scope: Namespaced
 507   versions:
 508   - additionalPrinterColumns:
 509     - jsonPath: .spec.url
 510       name: URL
 511       type: string
 512     - jsonPath: .status.conditions[?(@.type=="Ready")].status
 513       name: Ready
 514       type: string
 515     - jsonPath: .status.conditions[?(@.type=="Ready")].message
 516       name: Status
 517       type: string
 518     - jsonPath: .metadata.creationTimestamp
 519       name: Age
 520       type: date
 521     name: v1beta1
 522     schema:
 523       openAPIV3Schema:
 524         description: GitRepository is the Schema for the gitrepositories API
 525         properties:
 526           apiVersion:
 527             description: 'APIVersion defines the versioned schema of this representation
 528               of an object. Servers should convert recognized schemas to the latest
 529               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
 530             type: string
 531           kind:
 532             description: 'Kind is a string value representing the REST resource this
 533               object represents. Servers may infer this from the endpoint the client
 534               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
 535             type: string
 536           metadata:
 537             type: object
 538           spec:
 539             description: GitRepositorySpec defines the desired state of a Git repository.
 540             properties:
 541               accessFrom:
 542                 description: AccessFrom defines an Access Control List for allowing
 543                   cross-namespace references to this object.
 544                 properties:
 545                   namespaceSelectors:
 546                     description: NamespaceSelectors is the list of namespace selectors
 547                       to which this ACL applies. Items in this list are evaluated
 548                       using a logical OR operation.
 549                     items:
 550                       description: NamespaceSelector selects the namespaces to which
 551                         this ACL applies. An empty map of MatchLabels matches all
 552                         namespaces in a cluster.
 553                       properties:
 554                         matchLabels:
 555                           additionalProperties:
 556                             type: string
 557                           description: MatchLabels is a map of {key,value} pairs.
 558                             A single {key,value} in the matchLabels map is equivalent
 559                             to an element of matchExpressions, whose key field is
 560                             "key", the operator is "In", and the values array contains
 561                             only "value". The requirements are ANDed.
 562                           type: object
 563                       type: object
 564                     type: array
 565                 required:
 566                 - namespaceSelectors
 567                 type: object
 568               gitImplementation:
 569                 default: go-git
 570                 description: Determines which git client library to use. Defaults
 571                   to go-git, valid values are ('go-git', 'libgit2').
 572                 enum:
 573                 - go-git
 574                 - libgit2
 575                 type: string
 576               ignore:
 577                 description: Ignore overrides the set of excluded patterns in the
 578                   .sourceignore format (which is the same as .gitignore). If not provided,
 579                   a default will be used, consult the documentation for your version
 580                   to find out what those are.
 581                 type: string
 582               include:
 583                 description: Extra git repositories to map into the repository
 584                 items:
 585                   description: GitRepositoryInclude defines a source with a from and
 586                     to path.
 587                   properties:
 588                     fromPath:
 589                       description: The path to copy contents from, defaults to the
 590                         root directory.
 591                       type: string
 592                     repository:
 593                       description: Reference to a GitRepository to include.
 594                       properties:
 595                         name:
 596                           description: Name of the referent
 597                           type: string
 598                       required:
 599                       - name
 600                       type: object
 601                     toPath:
 602                       description: The path to copy contents to, defaults to the name
 603                         of the source ref.
 604                       type: string
 605                   required:
 606                   - repository
 607                   type: object
 608                 type: array
 609               interval:
 610                 description: The interval at which to check for repository updates.
 611                 type: string
 612               recurseSubmodules:
 613                 description: When enabled, after the clone is created, initializes
 614                   all submodules within, using their default settings. This option
 615                   is available only when using the 'go-git' GitImplementation.
 616                 type: boolean
 617               ref:
 618                 description: The Git reference to checkout and monitor for changes,
 619                   defaults to master branch.
 620                 properties:
 621                   branch:
 622                     description: The Git branch to checkout, defaults to master.
 623                     type: string
 624                   commit:
 625                     description: The Git commit SHA to checkout, if specified Tag
 626                       filters will be ignored.
 627                     type: string
 628                   semver:
 629                     description: The Git tag semver expression, takes precedence over
 630                       Tag.
 631                     type: string
 632                   tag:
 633                     description: The Git tag to checkout, takes precedence over Branch.
 634                     type: string
 635                 type: object
 636               secretRef:
 637                 description: The secret name containing the Git credentials. For HTTPS
 638                   repositories the secret must contain username and password fields.
 639                   For SSH repositories the secret must contain identity, identity.pub
 640                   and known_hosts fields.
 641                 properties:
 642                   name:
 643                     description: Name of the referent
 644                     type: string
 645                 required:
 646                 - name
 647                 type: object
 648               suspend:
 649                 description: This flag tells the controller to suspend the reconciliation
 650                   of this source.
 651                 type: boolean
 652               timeout:
 653                 default: 20s
 654                 description: The timeout for remote Git operations like cloning, defaults
 655                   to 20s.
 656                 type: string
 657               url:
 658                 description: The repository URL, can be a HTTP/S or SSH address.
 659                 pattern: ^(http|https|ssh)://
 660                 type: string
 661               verify:
 662                 description: Verify OpenPGP signature for the Git commit HEAD points
 663                   to.
 664                 properties:
 665                   mode:
 666                     description: Mode describes what git object should be verified,
 667                       currently ('head').
 668                     enum:
 669                     - head
 670                     type: string
 671                   secretRef:
 672                     description: The secret name containing the public keys of all
 673                       trusted Git authors.
 674                     properties:
 675                       name:
 676                         description: Name of the referent
 677                         type: string
 678                     required:
 679                     - name
 680                     type: object
 681                 required:
 682                 - mode
 683                 type: object
 684             required:
 685             - interval
 686             - url
 687             type: object
 688           status:
 689             default:
 690               observedGeneration: -1
 691             description: GitRepositoryStatus defines the observed state of a Git repository.
 692             properties:
 693               artifact:
 694                 description: Artifact represents the output of the last successful
 695                   repository sync.
 696                 properties:
 697                   checksum:
 698                     description: Checksum is the SHA256 checksum of the artifact.
 699                     type: string
 700                   lastUpdateTime:
 701                     description: LastUpdateTime is the timestamp corresponding to
 702                       the last update of this artifact.
 703                     format: date-time
 704                     type: string
 705                   path:
 706                     description: Path is the relative file path of this artifact.
 707                     type: string
 708                   revision:
 709                     description: Revision is a human readable identifier traceable
 710                       in the origin source system. It can be a Git commit SHA, Git
 711                       tag, a Helm index timestamp, a Helm chart version, etc.
 712                     type: string
 713                   url:
 714                     description: URL is the HTTP address of this artifact.
 715                     type: string
 716                 required:
 717                 - path
 718                 - url
 719                 type: object
 720               conditions:
 721                 description: Conditions holds the conditions for the GitRepository.
 722                 items:
 723                   description: "Condition contains details for one aspect of the current
 724                     state of this API Resource. --- This struct is intended for direct
 725                     use as an array at the field path .status.conditions.  For example,
 726                     type FooStatus struct{     // Represents the observations of a
 727                     foo's current state.     // Known .status.conditions.type are:
 728                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
 729                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
 730                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
 731                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
 732                     \n     // other fields }"
 733                   properties:
 734                     lastTransitionTime:
 735                       description: lastTransitionTime is the last time the condition
 736                         transitioned from one status to another. This should be when
 737                         the underlying condition changed.  If that is not known, then
 738                         using the time when the API field changed is acceptable.
 739                       format: date-time
 740                       type: string
 741                     message:
 742                       description: message is a human readable message indicating
 743                         details about the transition. This may be an empty string.
 744                       maxLength: 32768
 745                       type: string
 746                     observedGeneration:
 747                       description: observedGeneration represents the .metadata.generation
 748                         that the condition was set based upon. For instance, if .metadata.generation
 749                         is currently 12, but the .status.conditions[x].observedGeneration
 750                         is 9, the condition is out of date with respect to the current
 751                         state of the instance.
 752                       format: int64
 753                       minimum: 0
 754                       type: integer
 755                     reason:
 756                       description: reason contains a programmatic identifier indicating
 757                         the reason for the condition's last transition. Producers
 758                         of specific condition types may define expected values and
 759                         meanings for this field, and whether the values are considered
 760                         a guaranteed API. The value should be a CamelCase string.
 761                         This field may not be empty.
 762                       maxLength: 1024
 763                       minLength: 1
 764                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
 765                       type: string
 766                     status:
 767                       description: status of the condition, one of True, False, Unknown.
 768                       enum:
 769                       - "True"
 770                       - "False"
 771                       - Unknown
 772                       type: string
 773                     type:
 774                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
 775                         --- Many .condition.type values are consistent across resources
 776                         like Available, but because arbitrary conditions can be useful
 777                         (see .node.status.conditions), the ability to deconflict is
 778                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
 779                       maxLength: 316
 780                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
 781                       type: string
 782                   required:
 783                   - lastTransitionTime
 784                   - message
 785                   - reason
 786                   - status
 787                   - type
 788                   type: object
 789                 type: array
 790               includedArtifacts:
 791                 description: IncludedArtifacts represents the included artifacts from
 792                   the last successful repository sync.
 793                 items:
 794                   description: Artifact represents the output of a source synchronisation.
 795                   properties:
 796                     checksum:
 797                       description: Checksum is the SHA256 checksum of the artifact.
 798                       type: string
 799                     lastUpdateTime:
 800                       description: LastUpdateTime is the timestamp corresponding to
 801                         the last update of this artifact.
 802                       format: date-time
 803                       type: string
 804                     path:
 805                       description: Path is the relative file path of this artifact.
 806                       type: string
 807                     revision:
 808                       description: Revision is a human readable identifier traceable
 809                         in the origin source system. It can be a Git commit SHA, Git
 810                         tag, a Helm index timestamp, a Helm chart version, etc.
 811                       type: string
 812                     url:
 813                       description: URL is the HTTP address of this artifact.
 814                       type: string
 815                   required:
 816                   - path
 817                   - url
 818                   type: object
 819                 type: array
 820               lastHandledReconcileAt:
 821                 description: LastHandledReconcileAt holds the value of the most recent
 822                   reconcile request value, so a change can be detected.
 823                 type: string
 824               observedGeneration:
 825                 description: ObservedGeneration is the last observed generation.
 826                 format: int64
 827                 type: integer
 828               url:
 829                 description: URL is the download link for the artifact output of the
 830                   last repository sync.
 831                 type: string
 832             type: object
 833         type: object
 834     served: true
 835     storage: true
 836     subresources:
 837       status: {}
 838 status:
 839   acceptedNames:
 840     kind: ""
 841     plural: ""
 842   conditions: []
 843   storedVersions: []
 844 ---
 845 apiVersion: apiextensions.k8s.io/v1
 846 kind: CustomResourceDefinition
 847 metadata:
 848   annotations:
 849     controller-gen.kubebuilder.io/version: v0.5.0
 850   creationTimestamp: null
 851   labels:
 852     app.kubernetes.io/instance: flux-system
 853     app.kubernetes.io/part-of: flux
 854     app.kubernetes.io/version: v0.25.3
 855   name: helmcharts.source.toolkit.fluxcd.io
 856 spec:
 857   group: source.toolkit.fluxcd.io
 858   names:
 859     kind: HelmChart
 860     listKind: HelmChartList
 861     plural: helmcharts
 862     shortNames:
 863     - hc
 864     singular: helmchart
 865   scope: Namespaced
 866   versions:
 867   - additionalPrinterColumns:
 868     - jsonPath: .spec.chart
 869       name: Chart
 870       type: string
 871     - jsonPath: .spec.version
 872       name: Version
 873       type: string
 874     - jsonPath: .spec.sourceRef.kind
 875       name: Source Kind
 876       type: string
 877     - jsonPath: .spec.sourceRef.name
 878       name: Source Name
 879       type: string
 880     - jsonPath: .status.conditions[?(@.type=="Ready")].status
 881       name: Ready
 882       type: string
 883     - jsonPath: .status.conditions[?(@.type=="Ready")].message
 884       name: Status
 885       type: string
 886     - jsonPath: .metadata.creationTimestamp
 887       name: Age
 888       type: date
 889     name: v1beta1
 890     schema:
 891       openAPIV3Schema:
 892         description: HelmChart is the Schema for the helmcharts API
 893         properties:
 894           apiVersion:
 895             description: 'APIVersion defines the versioned schema of this representation
 896               of an object. Servers should convert recognized schemas to the latest
 897               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
 898             type: string
 899           kind:
 900             description: 'Kind is a string value representing the REST resource this
 901               object represents. Servers may infer this from the endpoint the client
 902               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
 903             type: string
 904           metadata:
 905             type: object
 906           spec:
 907             description: HelmChartSpec defines the desired state of a Helm chart.
 908             properties:
 909               accessFrom:
 910                 description: AccessFrom defines an Access Control List for allowing
 911                   cross-namespace references to this object.
 912                 properties:
 913                   namespaceSelectors:
 914                     description: NamespaceSelectors is the list of namespace selectors
 915                       to which this ACL applies. Items in this list are evaluated
 916                       using a logical OR operation.
 917                     items:
 918                       description: NamespaceSelector selects the namespaces to which
 919                         this ACL applies. An empty map of MatchLabels matches all
 920                         namespaces in a cluster.
 921                       properties:
 922                         matchLabels:
 923                           additionalProperties:
 924                             type: string
 925                           description: MatchLabels is a map of {key,value} pairs.
 926                             A single {key,value} in the matchLabels map is equivalent
 927                             to an element of matchExpressions, whose key field is
 928                             "key", the operator is "In", and the values array contains
 929                             only "value". The requirements are ANDed.
 930                           type: object
 931                       type: object
 932                     type: array
 933                 required:
 934                 - namespaceSelectors
 935                 type: object
 936               chart:
 937                 description: The name or path the Helm chart is available at in the
 938                   SourceRef.
 939                 type: string
 940               interval:
 941                 description: The interval at which to check the Source for updates.
 942                 type: string
 943               reconcileStrategy:
 944                 default: ChartVersion
 945                 description: Determines what enables the creation of a new artifact.
 946                   Valid values are ('ChartVersion', 'Revision'). See the documentation
 947                   of the values for an explanation on their behavior. Defaults to
 948                   ChartVersion when omitted.
 949                 enum:
 950                 - ChartVersion
 951                 - Revision
 952                 type: string
 953               sourceRef:
 954                 description: The reference to the Source the chart is available at.
 955                 properties:
 956                   apiVersion:
 957                     description: APIVersion of the referent.
 958                     type: string
 959                   kind:
 960                     description: Kind of the referent, valid values are ('HelmRepository',
 961                       'GitRepository', 'Bucket').
 962                     enum:
 963                     - HelmRepository
 964                     - GitRepository
 965                     - Bucket
 966                     type: string
 967                   name:
 968                     description: Name of the referent.
 969                     type: string
 970                 required:
 971                 - kind
 972                 - name
 973                 type: object
 974               suspend:
 975                 description: This flag tells the controller to suspend the reconciliation
 976                   of this source.
 977                 type: boolean
 978               valuesFile:
 979                 description: Alternative values file to use as the default chart values,
 980                   expected to be a relative path in the SourceRef. Deprecated in favor
 981                   of ValuesFiles, for backwards compatibility the file defined here
 982                   is merged before the ValuesFiles items. Ignored when omitted.
 983                 type: string
 984               valuesFiles:
 985                 description: Alternative list of values files to use as the chart
 986                   values (values.yaml is not included by default), expected to be
 987                   a relative path in the SourceRef. Values files are merged in the
 988                   order of this list with the last file overriding the first. Ignored
 989                   when omitted.
 990                 items:
 991                   type: string
 992                 type: array
 993               version:
 994                 default: '*'
 995                 description: The chart version semver expression, ignored for charts
 996                   from GitRepository and Bucket sources. Defaults to latest when omitted.
 997                 type: string
 998             required:
 999             - chart
1000             - interval
1001             - sourceRef
1002             type: object
1003           status:
1004             default:
1005               observedGeneration: -1
1006             description: HelmChartStatus defines the observed state of the HelmChart.
1007             properties:
1008               artifact:
1009                 description: Artifact represents the output of the last successful
1010                   chart sync.
1011                 properties:
1012                   checksum:
1013                     description: Checksum is the SHA256 checksum of the artifact.
1014                     type: string
1015                   lastUpdateTime:
1016                     description: LastUpdateTime is the timestamp corresponding to
1017                       the last update of this artifact.
1018                     format: date-time
1019                     type: string
1020                   path:
1021                     description: Path is the relative file path of this artifact.
1022                     type: string
1023                   revision:
1024                     description: Revision is a human readable identifier traceable
1025                       in the origin source system. It can be a Git commit SHA, Git
1026                       tag, a Helm index timestamp, a Helm chart version, etc.
1027                     type: string
1028                   url:
1029                     description: URL is the HTTP address of this artifact.
1030                     type: string
1031                 required:
1032                 - path
1033                 - url
1034                 type: object
1035               conditions:
1036                 description: Conditions holds the conditions for the HelmChart.
1037                 items:
1038                   description: "Condition contains details for one aspect of the current
1039                     state of this API Resource. --- This struct is intended for direct
1040                     use as an array at the field path .status.conditions.  For example,
1041                     type FooStatus struct{     // Represents the observations of a
1042                     foo's current state.     // Known .status.conditions.type are:
1043                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
1044                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
1045                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
1046                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
1047                     \n     // other fields }"
1048                   properties:
1049                     lastTransitionTime:
1050                       description: lastTransitionTime is the last time the condition
1051                         transitioned from one status to another. This should be when
1052                         the underlying condition changed.  If that is not known, then
1053                         using the time when the API field changed is acceptable.
1054                       format: date-time
1055                       type: string
1056                     message:
1057                       description: message is a human readable message indicating
1058                         details about the transition. This may be an empty string.
1059                       maxLength: 32768
1060                       type: string
1061                     observedGeneration:
1062                       description: observedGeneration represents the .metadata.generation
1063                         that the condition was set based upon. For instance, if .metadata.generation
1064                         is currently 12, but the .status.conditions[x].observedGeneration
1065                         is 9, the condition is out of date with respect to the current
1066                         state of the instance.
1067                       format: int64
1068                       minimum: 0
1069                       type: integer
1070                     reason:
1071                       description: reason contains a programmatic identifier indicating
1072                         the reason for the condition's last transition. Producers
1073                         of specific condition types may define expected values and
1074                         meanings for this field, and whether the values are considered
1075                         a guaranteed API. The value should be a CamelCase string.
1076                         This field may not be empty.
1077                       maxLength: 1024
1078                       minLength: 1
1079                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
1080                       type: string
1081                     status:
1082                       description: status of the condition, one of True, False, Unknown.
1083                       enum:
1084                       - "True"
1085                       - "False"
1086                       - Unknown
1087                       type: string
1088                     type:
1089                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
1090                         --- Many .condition.type values are consistent across resources
1091                         like Available, but because arbitrary conditions can be useful
1092                         (see .node.status.conditions), the ability to deconflict is
1093                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
1094                       maxLength: 316
1095                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
1096                       type: string
1097                   required:
1098                   - lastTransitionTime
1099                   - message
1100                   - reason
1101                   - status
1102                   - type
1103                   type: object
1104                 type: array
1105               lastHandledReconcileAt:
1106                 description: LastHandledReconcileAt holds the value of the most recent
1107                   reconcile request value, so a change can be detected.
1108                 type: string
1109               observedGeneration:
1110                 description: ObservedGeneration is the last observed generation.
1111                 format: int64
1112                 type: integer
1113               url:
1114                 description: URL is the download link for the last chart pulled.
1115                 type: string
1116             type: object
1117         type: object
1118     served: true
1119     storage: true
1120     subresources:
1121       status: {}
1122 status:
1123   acceptedNames:
1124     kind: ""
1125     plural: ""
1126   conditions: []
1127   storedVersions: []
1128 ---
1129 apiVersion: apiextensions.k8s.io/v1
1130 kind: CustomResourceDefinition
1131 metadata:
1132   annotations:
1133     controller-gen.kubebuilder.io/version: v0.7.0
1134   creationTimestamp: null
1135   labels:
1136     app.kubernetes.io/instance: flux-system
1137     app.kubernetes.io/part-of: flux
1138     app.kubernetes.io/version: v0.25.3
1139   name: helmreleases.helm.toolkit.fluxcd.io
1140 spec:
1141   group: helm.toolkit.fluxcd.io
1142   names:
1143     kind: HelmRelease
1144     listKind: HelmReleaseList
1145     plural: helmreleases
1146     shortNames:
1147     - hr
1148     singular: helmrelease
1149   scope: Namespaced
1150   versions:
1151   - additionalPrinterColumns:
1152     - jsonPath: .status.conditions[?(@.type=="Ready")].status
1153       name: Ready
1154       type: string
1155     - jsonPath: .status.conditions[?(@.type=="Ready")].message
1156       name: Status
1157       type: string
1158     - jsonPath: .metadata.creationTimestamp
1159       name: Age
1160       type: date
1161     name: v2beta1
1162     schema:
1163       openAPIV3Schema:
1164         description: HelmRelease is the Schema for the helmreleases API
1165         properties:
1166           apiVersion:
1167             description: 'APIVersion defines the versioned schema of this representation
1168               of an object. Servers should convert recognized schemas to the latest
1169               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
1170             type: string
1171           kind:
1172             description: 'Kind is a string value representing the REST resource this
1173               object represents. Servers may infer this from the endpoint the client
1174               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
1175             type: string
1176           metadata:
1177             type: object
1178           spec:
1179             description: HelmReleaseSpec defines the desired state of a Helm release.
1180             properties:
1181               chart:
1182                 description: Chart defines the template of the v1beta1.HelmChart that
1183                   should be created for this HelmRelease.
1184                 properties:
1185                   spec:
1186                     description: Spec holds the template for the v1beta1.HelmChartSpec
1187                       for this HelmRelease.
1188                     properties:
1189                       chart:
1190                         description: The name or path the Helm chart is available
1191                           at in the SourceRef.
1192                         type: string
1193                       interval:
1194                         description: Interval at which to check the v1beta1.Source
1195                           for updates. Defaults to 'HelmReleaseSpec.Interval'.
1196                         type: string
1197                       reconcileStrategy:
1198                         default: ChartVersion
1199                         description: Determines what enables the creation of a new
1200                           artifact. Valid values are ('ChartVersion', 'Revision').
1201                           See the documentation of the values for an explanation on
1202                           their behavior. Defaults to ChartVersion when omitted.
1203                         enum:
1204                         - ChartVersion
1205                         - Revision
1206                         type: string
1207                       sourceRef:
1208                         description: The name and namespace of the v1beta1.Source
1209                           the chart is available at.
1210                         properties:
1211                           apiVersion:
1212                             description: APIVersion of the referent.
1213                             type: string
1214                           kind:
1215                             description: Kind of the referent.
1216                             enum:
1217                             - HelmRepository
1218                             - GitRepository
1219                             - Bucket
1220                             type: string
1221                           name:
1222                             description: Name of the referent.
1223                             maxLength: 253
1224                             minLength: 1
1225                             type: string
1226                           namespace:
1227                             description: Namespace of the referent.
1228                             maxLength: 63
1229                             minLength: 1
1230                             type: string
1231                         required:
1232                         - name
1233                         type: object
1234                       valuesFile:
1235                         description: Alternative values file to use as the default
1236                           chart values, expected to be a relative path in the SourceRef.
1237                           Deprecated in favor of ValuesFiles, for backwards compatibility
1238                           the file defined here is merged before the ValuesFiles items.
1239                           Ignored when omitted.
1240                         type: string
1241                       valuesFiles:
1242                         description: Alternative list of values files to use as the
1243                           chart values (values.yaml is not included by default), expected
1244                           to be a relative path in the SourceRef. Values files are
1245                           merged in the order of this list with the last file overriding
1246                           the first. Ignored when omitted.
1247                         items:
1248                           type: string
1249                         type: array
1250                       version:
1251                         default: '*'
1252                         description: Version semver expression, ignored for charts
1253                           from v1beta1.GitRepository and v1beta1.Bucket sources. Defaults
1254                           to latest when omitted.
1255                         type: string
1256                     required:
1257                     - chart
1258                     - sourceRef
1259                     type: object
1260                 required:
1261                 - spec
1262                 type: object
1263               dependsOn:
1264                 description: DependsOn may contain a dependency.CrossNamespaceDependencyReference
1265                   slice with references to HelmRelease resources that must be ready
1266                   before this HelmRelease can be reconciled.
1267                 items:
1268                   description: CrossNamespaceDependencyReference holds the reference
1269                     to a dependency.
1270                   properties:
1271                     name:
1272                       description: Name holds the name reference of a dependency.
1273                       type: string
1274                     namespace:
1275                       description: Namespace holds the namespace reference of a dependency.
1276                       type: string
1277                   required:
1278                   - name
1279                   type: object
1280                 type: array
1281               install:
1282                 description: Install holds the configuration for Helm install actions
1283                   for this HelmRelease.
1284                 properties:
1285                   crds:
1286                     description: "CRDs upgrade CRDs from the Helm Chart's crds directory
1287                       according to the CRD upgrade policy provided here. Valid values
1288                       are `Skip`, `Create` or `CreateReplace`. Default is `Create`
1289                       and if omitted CRDs are installed but not updated. \n Skip:
1290                       do neither install nor replace (update) any CRDs. \n Create:
1291                       new CRDs are created, existing CRDs are neither updated nor
1292                       deleted. \n CreateReplace: new CRDs are created, existing CRDs
1293                       are updated (replaced) but not deleted. \n By default, CRDs
1294                       are applied (installed) during Helm install action. With this
1295                       option users can opt-in to CRD replace existing CRDs on Helm
1296                       install actions, which is not (yet) natively supported by Helm.
1297                       https://helm.sh/docs/chart_best_practices/custom_resource_definitions."
1298                     enum:
1299                     - Skip
1300                     - Create
1301                     - CreateReplace
1302                     type: string
1303                   createNamespace:
1304                     description: CreateNamespace tells the Helm install action to
1305                       create the HelmReleaseSpec.TargetNamespace if it does not exist
1306                       yet. On uninstall, the namespace will not be garbage collected.
1307                     type: boolean
1308                   disableHooks:
1309                     description: DisableHooks prevents hooks from running during the
1310                       Helm install action.
1311                     type: boolean
1312                   disableOpenAPIValidation:
1313                     description: DisableOpenAPIValidation prevents the Helm install
1314                       action from validating rendered templates against the Kubernetes
1315                       OpenAPI Schema.
1316                     type: boolean
1317                   disableWait:
1318                     description: DisableWait disables the waiting for resources to
1319                       be ready after a Helm install has been performed.
1320                     type: boolean
1321                   disableWaitForJobs:
1322                     description: DisableWaitForJobs disables waiting for jobs to complete
1323                       after a Helm install has been performed.
1324                     type: boolean
1325                   remediation:
1326                     description: Remediation holds the remediation configuration for
1327                       when the Helm install action for the HelmRelease fails. The
1328                       default is to not perform any action.
1329                     properties:
1330                       ignoreTestFailures:
1331                         description: IgnoreTestFailures tells the controller to skip
1332                           remediation when the Helm tests are run after an install
1333                           action but fail. Defaults to 'Test.IgnoreFailures'.
1334                         type: boolean
1335                       remediateLastFailure:
1336                         description: RemediateLastFailure tells the controller to
1337                           remediate the last failure, when no retries remain. Defaults
1338                           to 'false'.
1339                         type: boolean
1340                       retries:
1341                         description: Retries is the number of retries that should
1342                           be attempted on failures before bailing. Remediation, using
1343                           an uninstall, is performed between each attempt. Defaults
1344                           to '0', a negative integer equals to unlimited retries.
1345                         type: integer
1346                     type: object
1347                   replace:
1348                     description: Replace tells the Helm install action to re-use the
1349                       'ReleaseName', but only if that name is a deleted release which
1350                       remains in the history.
1351                     type: boolean
1352                   skipCRDs:
1353                     description: "SkipCRDs tells the Helm install action to not install
1354                       any CRDs. By default, CRDs are installed if not already present.
1355                       \n Deprecated use CRD policy (`crds`) attribute with value `Skip`
1356                       instead."
1357                     type: boolean
1358                   timeout:
1359                     description: Timeout is the time to wait for any individual Kubernetes
1360                       operation (like Jobs for hooks) during the performance of a
1361                       Helm install action. Defaults to 'HelmReleaseSpec.Timeout'.
1362                     type: string
1363                 type: object
1364               interval:
1365                 description: Interval at which to reconcile the Helm release.
1366                 type: string
1367               kubeConfig:
1368                 description: KubeConfig for reconciling the HelmRelease on a remote
1369                   cluster. When specified, KubeConfig takes precedence over ServiceAccountName.
1370                 properties:
1371                   secretRef:
1372                     description: SecretRef holds the name to a secret that contains
1373                       a 'value' key with the kubeconfig file as the value. It must
1374                       be in the same namespace as the HelmRelease. It is recommended
1375                       that the kubeconfig is self-contained, and the secret is regularly
1376                       updated if credentials such as a cloud-access-token expire.
1377                       Cloud specific `cmd-path` auth helpers will not function without
1378                       adding binaries and credentials to the Pod that is responsible
1379                       for reconciling the HelmRelease.
1380                     properties:
1381                       name:
1382                         description: Name of the referent
1383                         type: string
1384                     required:
1385                     - name
1386                     type: object
1387                 type: object
1388               maxHistory:
1389                 description: MaxHistory is the number of revisions saved by Helm for
1390                   this HelmRelease. Use '0' for an unlimited number of revisions;
1391                   defaults to '10'.
1392                 type: integer
1393               postRenderers:
1394                 description: PostRenderers holds an array of Helm PostRenderers, which
1395                   will be applied in order of their definition.
1396                 items:
1397                   description: PostRenderer contains a Helm PostRenderer specification.
1398                   properties:
1399                     kustomize:
1400                       description: Kustomization to apply as PostRenderer.
1401                       properties:
1402                         images:
1403                           description: Images is a list of (image name, new name,
1404                             new tag or digest) for changing image names, tags or digests.
1405                             This can also be achieved with a patch, but this operator
1406                             is simpler to specify.
1407                           items:
1408                             description: Image contains an image name, a new name,
1409                               a new tag or digest, which will replace the original
1410                               name and tag.
1411                             properties:
1412                               digest:
1413                                 description: Digest is the value used to replace the
1414                                   original image tag. If digest is present NewTag
1415                                   value is ignored.
1416                                 type: string
1417                               name:
1418                                 description: Name is a tag-less image name.
1419                                 type: string
1420                               newName:
1421                                 description: NewName is the value used to replace
1422                                   the original name.
1423                                 type: string
1424                               newTag:
1425                                 description: NewTag is the value used to replace the
1426                                   original tag.
1427                                 type: string
1428                             required:
1429                             - name
1430                             type: object
1431                           type: array
1432                         patchesJson6902:
1433                           description: JSON 6902 patches, defined as inline YAML objects.
1434                           items:
1435                             description: JSON6902Patch contains a JSON6902 patch and
1436                               the target the patch should be applied to.
1437                             properties:
1438                               patch:
1439                                 description: Patch contains the JSON6902 patch document
1440                                   with an array of operation objects.
1441                                 items:
1442                                   description: JSON6902 is a JSON6902 operation object.
1443                                     https://datatracker.ietf.org/doc/html/rfc6902#section-4
1444                                   properties:
1445                                     from:
1446                                       description: From contains a JSON-pointer value
1447                                         that references a location within the target
1448                                         document where the operation is performed.
1449                                         The meaning of the value depends on the value
1450                                         of Op, and is NOT taken into account by all
1451                                         operations.
1452                                       type: string
1453                                     op:
1454                                       description: Op indicates the operation to perform.
1455                                         Its value MUST be one of "add", "remove",
1456                                         "replace", "move", "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4
1457                                       enum:
1458                                       - test
1459                                       - remove
1460                                       - add
1461                                       - replace
1462                                       - move
1463                                       - copy
1464                                       type: string
1465                                     path:
1466                                       description: Path contains the JSON-pointer
1467                                         value that references a location within the
1468                                         target document where the operation is performed.
1469                                         The meaning of the value depends on the value
1470                                         of Op.
1471                                       type: string
1472                                     value:
1473                                       description: Value contains a valid JSON structure.
1474                                         The meaning of the value depends on the value
1475                                         of Op, and is NOT taken into account by all
1476                                         operations.
1477                                       x-kubernetes-preserve-unknown-fields: true
1478                                   required:
1479                                   - op
1480                                   - path
1481                                   type: object
1482                                 type: array
1483                               target:
1484                                 description: Target points to the resources that the
1485                                   patch document should be applied to.
1486                                 properties:
1487                                   annotationSelector:
1488                                     description: AnnotationSelector is a string that
1489                                       follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
1490                                       It matches with the resource annotations.
1491                                     type: string
1492                                   group:
1493                                     description: Group is the API group to select
1494                                       resources from. Together with Version and Kind
1495                                       it is capable of unambiguously identifying and/or
1496                                       selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
1497                                     type: string
1498                                   kind:
1499                                     description: Kind of the API Group to select resources
1500                                       from. Together with Group and Version it is
1501                                       capable of unambiguously identifying and/or
1502                                       selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
1503                                     type: string
1504                                   labelSelector:
1505                                     description: LabelSelector is a string that follows
1506                                       the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
1507                                       It matches with the resource labels.
1508                                     type: string
1509                                   name:
1510                                     description: Name to match resources with.
1511                                     type: string
1512                                   namespace:
1513                                     description: Namespace to select resources from.
1514                                     type: string
1515                                   version:
1516                                     description: Version of the API Group to select
1517                                       resources from. Together with Group and Kind
1518                                       it is capable of unambiguously identifying and/or
1519                                       selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
1520                                     type: string
1521                                 type: object
1522                             required:
1523                             - patch
1524                             - target
1525                             type: object
1526                           type: array
1527                         patchesStrategicMerge:
1528                           description: Strategic merge patches, defined as inline
1529                             YAML objects.
1530                           items:
1531                             x-kubernetes-preserve-unknown-fields: true
1532                           type: array
1533                       type: object
1534                   type: object
1535                 type: array
1536               releaseName:
1537                 description: ReleaseName used for the Helm release. Defaults to a
1538                   composition of '[TargetNamespace-]Name'.
1539                 maxLength: 53
1540                 minLength: 1
1541                 type: string
1542               rollback:
1543                 description: Rollback holds the configuration for Helm rollback actions
1544                   for this HelmRelease.
1545                 properties:
1546                   cleanupOnFail:
1547                     description: CleanupOnFail allows deletion of new resources created
1548                       during the Helm rollback action when it fails.
1549                     type: boolean
1550                   disableHooks:
1551                     description: DisableHooks prevents hooks from running during the
1552                       Helm rollback action.
1553                     type: boolean
1554                   disableWait:
1555                     description: DisableWait disables the waiting for resources to
1556                       be ready after a Helm rollback has been performed.
1557                     type: boolean
1558                   disableWaitForJobs:
1559                     description: DisableWaitForJobs disables waiting for jobs to complete
1560                       after a Helm rollback has been performed.
1561                     type: boolean
1562                   force:
1563                     description: Force forces resource updates through a replacement
1564                       strategy.
1565                     type: boolean
1566                   recreate:
1567                     description: Recreate performs pod restarts for the resource if
1568                       applicable.
1569                     type: boolean
1570                   timeout:
1571                     description: Timeout is the time to wait for any individual Kubernetes
1572                       operation (like Jobs for hooks) during the performance of a
1573                       Helm rollback action. Defaults to 'HelmReleaseSpec.Timeout'.
1574                     type: string
1575                 type: object
1576               serviceAccountName:
1577                 description: The name of the Kubernetes service account to impersonate
1578                   when reconciling this HelmRelease.
1579                 type: string
1580               storageNamespace:
1581                 description: StorageNamespace used for the Helm storage. Defaults
1582                   to the namespace of the HelmRelease.
1583                 maxLength: 63
1584                 minLength: 1
1585                 type: string
1586               suspend:
1587                 description: Suspend tells the controller to suspend reconciliation
1588                   for this HelmRelease, it does not apply to already started reconciliations.
1589                   Defaults to false.
1590                 type: boolean
1591               targetNamespace:
1592                 description: TargetNamespace to target when performing operations
1593                   for the HelmRelease. Defaults to the namespace of the HelmRelease.
1594                 maxLength: 63
1595                 minLength: 1
1596                 type: string
1597               test:
1598                 description: Test holds the configuration for Helm test actions for
1599                   this HelmRelease.
1600                 properties:
1601                   enable:
1602                     description: Enable enables Helm test actions for this HelmRelease
1603                       after an Helm install or upgrade action has been performed.
1604                     type: boolean
1605                   ignoreFailures:
1606                     description: IgnoreFailures tells the controller to skip remediation
1607                       when the Helm tests are run but fail. Can be overwritten for
1608                       tests run after install or upgrade actions in 'Install.IgnoreTestFailures'
1609                       and 'Upgrade.IgnoreTestFailures'.
1610                     type: boolean
1611                   timeout:
1612                     description: Timeout is the time to wait for any individual Kubernetes
1613                       operation during the performance of a Helm test action. Defaults
1614                       to 'HelmReleaseSpec.Timeout'.
1615                     type: string
1616                 type: object
1617               timeout:
1618                 description: Timeout is the time to wait for any individual Kubernetes
1619                   operation (like Jobs for hooks) during the performance of a Helm
1620                   action. Defaults to '5m0s'.
1621                 type: string
1622               uninstall:
1623                 description: Uninstall holds the configuration for Helm uninstall
1624                   actions for this HelmRelease.
1625                 properties:
1626                   disableHooks:
1627                     description: DisableHooks prevents hooks from running during the
1628                       Helm rollback action.
1629                     type: boolean
1630                   keepHistory:
1631                     description: KeepHistory tells Helm to remove all associated resources
1632                       and mark the release as deleted, but retain the release history.
1633                     type: boolean
1634                   timeout:
1635                     description: Timeout is the time to wait for any individual Kubernetes
1636                       operation (like Jobs for hooks) during the performance of a
1637                       Helm uninstall action. Defaults to 'HelmReleaseSpec.Timeout'.
1638                     type: string
1639                 type: object
1640               upgrade:
1641                 description: Upgrade holds the configuration for Helm upgrade actions
1642                   for this HelmRelease.
1643                 properties:
1644                   cleanupOnFail:
1645                     description: CleanupOnFail allows deletion of new resources created
1646                       during the Helm upgrade action when it fails.
1647                     type: boolean
1648                   crds:
1649                     description: "CRDs upgrade CRDs from the Helm Chart's crds directory
1650                       according to the CRD upgrade policy provided here. Valid values
1651                       are `Skip`, `Create` or `CreateReplace`. Default is `Skip` and
1652                       if omitted CRDs are neither installed nor upgraded. \n Skip:
1653                       do neither install nor replace (update) any CRDs. \n Create:
1654                       new CRDs are created, existing CRDs are neither updated nor
1655                       deleted. \n CreateReplace: new CRDs are created, existing CRDs
1656                       are updated (replaced) but not deleted. \n By default, CRDs
1657                       are not applied during Helm upgrade action. With this option
1658                       users can opt-in to CRD upgrade, which is not (yet) natively
1659                       supported by Helm. https://helm.sh/docs/chart_best_practices/custom_resource_definitions."
1660                     enum:
1661                     - Skip
1662                     - Create
1663                     - CreateReplace
1664                     type: string
1665                   disableHooks:
1666                     description: DisableHooks prevents hooks from running during the
1667                       Helm upgrade action.
1668                     type: boolean
1669                   disableOpenAPIValidation:
1670                     description: DisableOpenAPIValidation prevents the Helm upgrade
1671                       action from validating rendered templates against the Kubernetes
1672                       OpenAPI Schema.
1673                     type: boolean
1674                   disableWait:
1675                     description: DisableWait disables the waiting for resources to
1676                       be ready after a Helm upgrade has been performed.
1677                     type: boolean
1678                   disableWaitForJobs:
1679                     description: DisableWaitForJobs disables waiting for jobs to complete
1680                       after a Helm upgrade has been performed.
1681                     type: boolean
1682                   force:
1683                     description: Force forces resource updates through a replacement
1684                       strategy.
1685                     type: boolean
1686                   preserveValues:
1687                     description: PreserveValues will make Helm reuse the last release's
1688                       values and merge in overrides from 'Values'. Setting this flag
1689                       makes the HelmRelease non-declarative.
1690                     type: boolean
1691                   remediation:
1692                     description: Remediation holds the remediation configuration for
1693                       when the Helm upgrade action for the HelmRelease fails. The
1694                       default is to not perform any action.
1695                     properties:
1696                       ignoreTestFailures:
1697                         description: IgnoreTestFailures tells the controller to skip
1698                           remediation when the Helm tests are run after an upgrade
1699                           action but fail. Defaults to 'Test.IgnoreFailures'.
1700                         type: boolean
1701                       remediateLastFailure:
1702                         description: RemediateLastFailure tells the controller to
1703                           remediate the last failure, when no retries remain. Defaults
1704                           to 'false' unless 'Retries' is greater than 0.
1705                         type: boolean
1706                       retries:
1707                         description: Retries is the number of retries that should
1708                           be attempted on failures before bailing. Remediation, using
1709                           'Strategy', is performed between each attempt. Defaults
1710                           to '0', a negative integer equals to unlimited retries.
1711                         type: integer
1712                       strategy:
1713                         description: Strategy to use for failure remediation. Defaults
1714                           to 'rollback'.
1715                         enum:
1716                         - rollback
1717                         - uninstall
1718                         type: string
1719                     type: object
1720                   timeout:
1721                     description: Timeout is the time to wait for any individual Kubernetes
1722                       operation (like Jobs for hooks) during the performance of a
1723                       Helm upgrade action. Defaults to 'HelmReleaseSpec.Timeout'.
1724                     type: string
1725                 type: object
1726               values:
1727                 description: Values holds the values for this Helm release.
1728                 x-kubernetes-preserve-unknown-fields: true
1729               valuesFrom:
1730                 description: ValuesFrom holds references to resources containing Helm
1731                   values for this HelmRelease, and information about how they should
1732                   be merged.
1733                 items:
1734                   description: ValuesReference contains a reference to a resource
1735                     containing Helm values, and optionally the key they can be found
1736                     at.
1737                   properties:
1738                     kind:
1739                       description: Kind of the values referent, valid values are ('Secret',
1740                         'ConfigMap').
1741                       enum:
1742                       - Secret
1743                       - ConfigMap
1744                       type: string
1745                     name:
1746                       description: Name of the values referent. Should reside in the
1747                         same namespace as the referring resource.
1748                       maxLength: 253
1749                       minLength: 1
1750                       type: string
1751                     optional:
1752                       description: Optional marks this ValuesReference as optional.
1753                         When set, a not found error for the values reference is ignored,
1754                         but any ValuesKey, TargetPath or transient error will still
1755                         result in a reconciliation failure.
1756                       type: boolean
1757                     targetPath:
1758                       description: TargetPath is the YAML dot notation path the value
1759                         should be merged at. When set, the ValuesKey is expected to
1760                         be a single flat value. Defaults to 'None', which results
1761                         in the values getting merged at the root.
1762                       type: string
1763                     valuesKey:
1764                       description: ValuesKey is the data key where the values.yaml
1765                         or a specific value can be found at. Defaults to 'values.yaml'.
1766                       type: string
1767                   required:
1768                   - kind
1769                   - name
1770                   type: object
1771                 type: array
1772             required:
1773             - chart
1774             - interval
1775             type: object
1776           status:
1777             default:
1778               observedGeneration: -1
1779             description: HelmReleaseStatus defines the observed state of a HelmRelease.
1780             properties:
1781               conditions:
1782                 description: Conditions holds the conditions for the HelmRelease.
1783                 items:
1784                   description: "Condition contains details for one aspect of the current
1785                     state of this API Resource. --- This struct is intended for direct
1786                     use as an array at the field path .status.conditions.  For example,
1787                     type FooStatus struct{     // Represents the observations of a
1788                     foo's current state.     // Known .status.conditions.type are:
1789                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
1790                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
1791                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
1792                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
1793                     \n     // other fields }"
1794                   properties:
1795                     lastTransitionTime:
1796                       description: lastTransitionTime is the last time the condition
1797                         transitioned from one status to another. This should be when
1798                         the underlying condition changed.  If that is not known, then
1799                         using the time when the API field changed is acceptable.
1800                       format: date-time
1801                       type: string
1802                     message:
1803                       description: message is a human readable message indicating
1804                         details about the transition. This may be an empty string.
1805                       maxLength: 32768
1806                       type: string
1807                     observedGeneration:
1808                       description: observedGeneration represents the .metadata.generation
1809                         that the condition was set based upon. For instance, if .metadata.generation
1810                         is currently 12, but the .status.conditions[x].observedGeneration
1811                         is 9, the condition is out of date with respect to the current
1812                         state of the instance.
1813                       format: int64
1814                       minimum: 0
1815                       type: integer
1816                     reason:
1817                       description: reason contains a programmatic identifier indicating
1818                         the reason for the condition's last transition. Producers
1819                         of specific condition types may define expected values and
1820                         meanings for this field, and whether the values are considered
1821                         a guaranteed API. The value should be a CamelCase string.
1822                         This field may not be empty.
1823                       maxLength: 1024
1824                       minLength: 1
1825                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
1826                       type: string
1827                     status:
1828                       description: status of the condition, one of True, False, Unknown.
1829                       enum:
1830                       - "True"
1831                       - "False"
1832                       - Unknown
1833                       type: string
1834                     type:
1835                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
1836                         --- Many .condition.type values are consistent across resources
1837                         like Available, but because arbitrary conditions can be useful
1838                         (see .node.status.conditions), the ability to deconflict is
1839                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
1840                       maxLength: 316
1841                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
1842                       type: string
1843                   required:
1844                   - lastTransitionTime
1845                   - message
1846                   - reason
1847                   - status
1848                   - type
1849                   type: object
1850                 type: array
1851               failures:
1852                 description: Failures is the reconciliation failure count against
1853                   the latest desired state. It is reset after a successful reconciliation.
1854                 format: int64
1855                 type: integer
1856               helmChart:
1857                 description: HelmChart is the namespaced name of the HelmChart resource
1858                   created by the controller for the HelmRelease.
1859                 type: string
1860               installFailures:
1861                 description: InstallFailures is the install failure count against
1862                   the latest desired state. It is reset after a successful reconciliation.
1863                 format: int64
1864                 type: integer
1865               lastAppliedRevision:
1866                 description: LastAppliedRevision is the revision of the last successfully
1867                   applied source.
1868                 type: string
1869               lastAttemptedRevision:
1870                 description: LastAttemptedRevision is the revision of the last reconciliation
1871                   attempt.
1872                 type: string
1873               lastAttemptedValuesChecksum:
1874                 description: LastAttemptedValuesChecksum is the SHA1 checksum of the
1875                   values of the last reconciliation attempt.
1876                 type: string
1877               lastHandledReconcileAt:
1878                 description: LastHandledReconcileAt holds the value of the most recent
1879                   reconcile request value, so a change can be detected.
1880                 type: string
1881               lastReleaseRevision:
1882                 description: LastReleaseRevision is the revision of the last successful
1883                   Helm release.
1884                 type: integer
1885               observedGeneration:
1886                 description: ObservedGeneration is the last observed generation.
1887                 format: int64
1888                 type: integer
1889               upgradeFailures:
1890                 description: UpgradeFailures is the upgrade failure count against
1891                   the latest desired state. It is reset after a successful reconciliation.
1892                 format: int64
1893                 type: integer
1894             type: object
1895         type: object
1896     served: true
1897     storage: true
1898     subresources:
1899       status: {}
1900 status:
1901   acceptedNames:
1902     kind: ""
1903     plural: ""
1904   conditions: []
1905   storedVersions: []
1906 ---
1907 apiVersion: apiextensions.k8s.io/v1
1908 kind: CustomResourceDefinition
1909 metadata:
1910   annotations:
1911     controller-gen.kubebuilder.io/version: v0.5.0
1912   creationTimestamp: null
1913   labels:
1914     app.kubernetes.io/instance: flux-system
1915     app.kubernetes.io/part-of: flux
1916     app.kubernetes.io/version: v0.25.3
1917   name: helmrepositories.source.toolkit.fluxcd.io
1918 spec:
1919   group: source.toolkit.fluxcd.io
1920   names:
1921     kind: HelmRepository
1922     listKind: HelmRepositoryList
1923     plural: helmrepositories
1924     shortNames:
1925     - helmrepo
1926     singular: helmrepository
1927   scope: Namespaced
1928   versions:
1929   - additionalPrinterColumns:
1930     - jsonPath: .spec.url
1931       name: URL
1932       type: string
1933     - jsonPath: .status.conditions[?(@.type=="Ready")].status
1934       name: Ready
1935       type: string
1936     - jsonPath: .status.conditions[?(@.type=="Ready")].message
1937       name: Status
1938       type: string
1939     - jsonPath: .metadata.creationTimestamp
1940       name: Age
1941       type: date
1942     name: v1beta1
1943     schema:
1944       openAPIV3Schema:
1945         description: HelmRepository is the Schema for the helmrepositories API
1946         properties:
1947           apiVersion:
1948             description: 'APIVersion defines the versioned schema of this representation
1949               of an object. Servers should convert recognized schemas to the latest
1950               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
1951             type: string
1952           kind:
1953             description: 'Kind is a string value representing the REST resource this
1954               object represents. Servers may infer this from the endpoint the client
1955               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
1956             type: string
1957           metadata:
1958             type: object
1959           spec:
1960             description: HelmRepositorySpec defines the reference to a Helm repository.
1961             properties:
1962               accessFrom:
1963                 description: AccessFrom defines an Access Control List for allowing
1964                   cross-namespace references to this object.
1965                 properties:
1966                   namespaceSelectors:
1967                     description: NamespaceSelectors is the list of namespace selectors
1968                       to which this ACL applies. Items in this list are evaluated
1969                       using a logical OR operation.
1970                     items:
1971                       description: NamespaceSelector selects the namespaces to which
1972                         this ACL applies. An empty map of MatchLabels matches all
1973                         namespaces in a cluster.
1974                       properties:
1975                         matchLabels:
1976                           additionalProperties:
1977                             type: string
1978                           description: MatchLabels is a map of {key,value} pairs.
1979                             A single {key,value} in the matchLabels map is equivalent
1980                             to an element of matchExpressions, whose key field is
1981                             "key", the operator is "In", and the values array contains
1982                             only "value". The requirements are ANDed.
1983                           type: object
1984                       type: object
1985                     type: array
1986                 required:
1987                 - namespaceSelectors
1988                 type: object
1989               interval:
1990                 description: The interval at which to check the upstream for updates.
1991                 type: string
1992               passCredentials:
1993                 description: PassCredentials allows the credentials from the SecretRef
1994                   to be passed on to a host that does not match the host as defined
1995                   in URL. This may be required if the host of the advertised chart
1996                   URLs in the index differ from the defined URL. Enabling this should
1997                   be done with caution, as it can potentially result in credentials
1998                   getting stolen in a MITM-attack.
1999                 type: boolean
2000               secretRef:
2001                 description: The name of the secret containing authentication credentials
2002                   for the Helm repository. For HTTP/S basic auth the secret must contain
2003                   username and password fields. For TLS the secret must contain a
2004                   certFile and keyFile, and/or caCert fields.
2005                 properties:
2006                   name:
2007                     description: Name of the referent
2008                     type: string
2009                 required:
2010                 - name
2011                 type: object
2012               suspend:
2013                 description: This flag tells the controller to suspend the reconciliation
2014                   of this source.
2015                 type: boolean
2016               timeout:
2017                 default: 60s
2018                 description: The timeout of index downloading, defaults to 60s.
2019                 type: string
2020               url:
2021                 description: The Helm repository URL, a valid URL contains at least
2022                   a protocol and host.
2023                 type: string
2024             required:
2025             - interval
2026             - url
2027             type: object
2028           status:
2029             default:
2030               observedGeneration: -1
2031             description: HelmRepositoryStatus defines the observed state of the HelmRepository.
2032             properties:
2033               artifact:
2034                 description: Artifact represents the output of the last successful
2035                   repository sync.
2036                 properties:
2037                   checksum:
2038                     description: Checksum is the SHA256 checksum of the artifact.
2039                     type: string
2040                   lastUpdateTime:
2041                     description: LastUpdateTime is the timestamp corresponding to
2042                       the last update of this artifact.
2043                     format: date-time
2044                     type: string
2045                   path:
2046                     description: Path is the relative file path of this artifact.
2047                     type: string
2048                   revision:
2049                     description: Revision is a human readable identifier traceable
2050                       in the origin source system. It can be a Git commit SHA, Git
2051                       tag, a Helm index timestamp, a Helm chart version, etc.
2052                     type: string
2053                   url:
2054                     description: URL is the HTTP address of this artifact.
2055                     type: string
2056                 required:
2057                 - path
2058                 - url
2059                 type: object
2060               conditions:
2061                 description: Conditions holds the conditions for the HelmRepository.
2062                 items:
2063                   description: "Condition contains details for one aspect of the current
2064                     state of this API Resource. --- This struct is intended for direct
2065                     use as an array at the field path .status.conditions.  For example,
2066                     type FooStatus struct{     // Represents the observations of a
2067                     foo's current state.     // Known .status.conditions.type are:
2068                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
2069                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
2070                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
2071                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
2072                     \n     // other fields }"
2073                   properties:
2074                     lastTransitionTime:
2075                       description: lastTransitionTime is the last time the condition
2076                         transitioned from one status to another. This should be when
2077                         the underlying condition changed.  If that is not known, then
2078                         using the time when the API field changed is acceptable.
2079                       format: date-time
2080                       type: string
2081                     message:
2082                       description: message is a human readable message indicating
2083                         details about the transition. This may be an empty string.
2084                       maxLength: 32768
2085                       type: string
2086                     observedGeneration:
2087                       description: observedGeneration represents the .metadata.generation
2088                         that the condition was set based upon. For instance, if .metadata.generation
2089                         is currently 12, but the .status.conditions[x].observedGeneration
2090                         is 9, the condition is out of date with respect to the current
2091                         state of the instance.
2092                       format: int64
2093                       minimum: 0
2094                       type: integer
2095                     reason:
2096                       description: reason contains a programmatic identifier indicating
2097                         the reason for the condition's last transition. Producers
2098                         of specific condition types may define expected values and
2099                         meanings for this field, and whether the values are considered
2100                         a guaranteed API. The value should be a CamelCase string.
2101                         This field may not be empty.
2102                       maxLength: 1024
2103                       minLength: 1
2104                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
2105                       type: string
2106                     status:
2107                       description: status of the condition, one of True, False, Unknown.
2108                       enum:
2109                       - "True"
2110                       - "False"
2111                       - Unknown
2112                       type: string
2113                     type:
2114                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
2115                         --- Many .condition.type values are consistent across resources
2116                         like Available, but because arbitrary conditions can be useful
2117                         (see .node.status.conditions), the ability to deconflict is
2118                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
2119                       maxLength: 316
2120                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
2121                       type: string
2122                   required:
2123                   - lastTransitionTime
2124                   - message
2125                   - reason
2126                   - status
2127                   - type
2128                   type: object
2129                 type: array
2130               lastHandledReconcileAt:
2131                 description: LastHandledReconcileAt holds the value of the most recent
2132                   reconcile request value, so a change can be detected.
2133                 type: string
2134               observedGeneration:
2135                 description: ObservedGeneration is the last observed generation.
2136                 format: int64
2137                 type: integer
2138               url:
2139                 description: URL is the download link for the last index fetched.
2140                 type: string
2141             type: object
2142         type: object
2143     served: true
2144     storage: true
2145     subresources:
2146       status: {}
2147 status:
2148   acceptedNames:
2149     kind: ""
2150     plural: ""
2151   conditions: []
2152   storedVersions: []
2153 ---
2154 apiVersion: apiextensions.k8s.io/v1
2155 kind: CustomResourceDefinition
2156 metadata:
2157   annotations:
2158     controller-gen.kubebuilder.io/version: v0.7.0
2159   creationTimestamp: null
2160   labels:
2161     app.kubernetes.io/instance: flux-system
2162     app.kubernetes.io/part-of: flux
2163     app.kubernetes.io/version: v0.25.3
2164   name: kustomizations.kustomize.toolkit.fluxcd.io
2165 spec:
2166   group: kustomize.toolkit.fluxcd.io
2167   names:
2168     kind: Kustomization
2169     listKind: KustomizationList
2170     plural: kustomizations
2171     shortNames:
2172     - ks
2173     singular: kustomization
2174   scope: Namespaced
2175   versions:
2176   - additionalPrinterColumns:
2177     - jsonPath: .status.conditions[?(@.type=="Ready")].status
2178       name: Ready
2179       type: string
2180     - jsonPath: .status.conditions[?(@.type=="Ready")].message
2181       name: Status
2182       type: string
2183     - jsonPath: .metadata.creationTimestamp
2184       name: Age
2185       type: date
2186     name: v1beta1
2187     schema:
2188       openAPIV3Schema:
2189         description: Kustomization is the Schema for the kustomizations API.
2190         properties:
2191           apiVersion:
2192             description: 'APIVersion defines the versioned schema of this representation
2193               of an object. Servers should convert recognized schemas to the latest
2194               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
2195             type: string
2196           kind:
2197             description: 'Kind is a string value representing the REST resource this
2198               object represents. Servers may infer this from the endpoint the client
2199               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
2200             type: string
2201           metadata:
2202             type: object
2203           spec:
2204             description: KustomizationSpec defines the desired state of a kustomization.
2205             properties:
2206               decryption:
2207                 description: Decrypt Kubernetes secrets before applying them on the
2208                   cluster.
2209                 properties:
2210                   provider:
2211                     description: Provider is the name of the decryption engine.
2212                     enum:
2213                     - sops
2214                     type: string
2215                   secretRef:
2216                     description: The secret name containing the private OpenPGP keys
2217                       used for decryption.
2218                     properties:
2219                       name:
2220                         description: Name of the referent
2221                         type: string
2222                     required:
2223                     - name
2224                     type: object
2225                 required:
2226                 - provider
2227                 type: object
2228               dependsOn:
2229                 description: DependsOn may contain a dependency.CrossNamespaceDependencyReference
2230                   slice with references to Kustomization resources that must be ready
2231                   before this Kustomization can be reconciled.
2232                 items:
2233                   description: CrossNamespaceDependencyReference holds the reference
2234                     to a dependency.
2235                   properties:
2236                     name:
2237                       description: Name holds the name reference of a dependency.
2238                       type: string
2239                     namespace:
2240                       description: Namespace holds the namespace reference of a dependency.
2241                       type: string
2242                   required:
2243                   - name
2244                   type: object
2245                 type: array
2246               force:
2247                 default: false
2248                 description: Force instructs the controller to recreate resources
2249                   when patching fails due to an immutable field change.
2250                 type: boolean
2251               healthChecks:
2252                 description: A list of resources to be included in the health assessment.
2253                 items:
2254                   description: NamespacedObjectKindReference contains enough information
2255                     to let you locate the typed referenced object in any namespace
2256                   properties:
2257                     apiVersion:
2258                       description: API version of the referent, if not specified the
2259                         Kubernetes preferred version will be used
2260                       type: string
2261                     kind:
2262                       description: Kind of the referent
2263                       type: string
2264                     name:
2265                       description: Name of the referent
2266                       type: string
2267                     namespace:
2268                       description: Namespace of the referent, when not specified it
2269                         acts as LocalObjectReference
2270                       type: string
2271                   required:
2272                   - kind
2273                   - name
2274                   type: object
2275                 type: array
2276               images:
2277                 description: Images is a list of (image name, new name, new tag or
2278                   digest) for changing image names, tags or digests. This can also
2279                   be achieved with a patch, but this operator is simpler to specify.
2280                 items:
2281                   description: Image contains an image name, a new name, a new tag
2282                     or digest, which will replace the original name and tag.
2283                   properties:
2284                     digest:
2285                       description: Digest is the value used to replace the original
2286                         image tag. If digest is present NewTag value is ignored.
2287                       type: string
2288                     name:
2289                       description: Name is a tag-less image name.
2290                       type: string
2291                     newName:
2292                       description: NewName is the value used to replace the original
2293                         name.
2294                       type: string
2295                     newTag:
2296                       description: NewTag is the value used to replace the original
2297                         tag.
2298                       type: string
2299                   required:
2300                   - name
2301                   type: object
2302                 type: array
2303               interval:
2304                 description: The interval at which to reconcile the Kustomization.
2305                 type: string
2306               kubeConfig:
2307                 description: The KubeConfig for reconciling the Kustomization on a
2308                   remote cluster. When specified, KubeConfig takes precedence over
2309                   ServiceAccountName.
2310                 properties:
2311                   secretRef:
2312                     description: SecretRef holds the name to a secret that contains
2313                       a 'value' key with the kubeconfig file as the value. It must
2314                       be in the same namespace as the Kustomization. It is recommended
2315                       that the kubeconfig is self-contained, and the secret is regularly
2316                       updated if credentials such as a cloud-access-token expire.
2317                       Cloud specific `cmd-path` auth helpers will not function without
2318                       adding binaries and credentials to the Pod that is responsible
2319                       for reconciling the Kustomization.
2320                     properties:
2321                       name:
2322                         description: Name of the referent
2323                         type: string
2324                     required:
2325                     - name
2326                     type: object
2327                 type: object
2328               patches:
2329                 description: Strategic merge and JSON patches, defined as inline YAML
2330                   objects, capable of targeting objects based on kind, label and annotation
2331                   selectors.
2332                 items:
2333                   description: Patch contains an inline StrategicMerge or JSON6902
2334                     patch, and the target the patch should be applied to.
2335                   properties:
2336                     patch:
2337                       description: Patch contains an inline StrategicMerge patch or
2338                         an inline JSON6902 patch with an array of operation objects.
2339                       type: string
2340                     target:
2341                       description: Target points to the resources that the patch document
2342                         should be applied to.
2343                       properties:
2344                         annotationSelector:
2345                           description: AnnotationSelector is a string that follows
2346                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2347                             It matches with the resource annotations.
2348                           type: string
2349                         group:
2350                           description: Group is the API group to select resources
2351                             from. Together with Version and Kind it is capable of
2352                             unambiguously identifying and/or selecting resources.
2353                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2354                           type: string
2355                         kind:
2356                           description: Kind of the API Group to select resources from.
2357                             Together with Group and Version it is capable of unambiguously
2358                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2359                           type: string
2360                         labelSelector:
2361                           description: LabelSelector is a string that follows the
2362                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2363                             It matches with the resource labels.
2364                           type: string
2365                         name:
2366                           description: Name to match resources with.
2367                           type: string
2368                         namespace:
2369                           description: Namespace to select resources from.
2370                           type: string
2371                         version:
2372                           description: Version of the API Group to select resources
2373                             from. Together with Group and Kind it is capable of unambiguously
2374                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2375                           type: string
2376                       type: object
2377                   type: object
2378                 type: array
2379               patchesJson6902:
2380                 description: JSON 6902 patches, defined as inline YAML objects.
2381                 items:
2382                   description: JSON6902Patch contains a JSON6902 patch and the target
2383                     the patch should be applied to.
2384                   properties:
2385                     patch:
2386                       description: Patch contains the JSON6902 patch document with
2387                         an array of operation objects.
2388                       items:
2389                         description: JSON6902 is a JSON6902 operation object. https://datatracker.ietf.org/doc/html/rfc6902#section-4
2390                         properties:
2391                           from:
2392                             description: From contains a JSON-pointer value that references
2393                               a location within the target document where the operation
2394                               is performed. The meaning of the value depends on the
2395                               value of Op, and is NOT taken into account by all operations.
2396                             type: string
2397                           op:
2398                             description: Op indicates the operation to perform. Its
2399                               value MUST be one of "add", "remove", "replace", "move",
2400                               "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4
2401                             enum:
2402                             - test
2403                             - remove
2404                             - add
2405                             - replace
2406                             - move
2407                             - copy
2408                             type: string
2409                           path:
2410                             description: Path contains the JSON-pointer value that
2411                               references a location within the target document where
2412                               the operation is performed. The meaning of the value
2413                               depends on the value of Op.
2414                             type: string
2415                           value:
2416                             description: Value contains a valid JSON structure. The
2417                               meaning of the value depends on the value of Op, and
2418                               is NOT taken into account by all operations.
2419                             x-kubernetes-preserve-unknown-fields: true
2420                         required:
2421                         - op
2422                         - path
2423                         type: object
2424                       type: array
2425                     target:
2426                       description: Target points to the resources that the patch document
2427                         should be applied to.
2428                       properties:
2429                         annotationSelector:
2430                           description: AnnotationSelector is a string that follows
2431                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2432                             It matches with the resource annotations.
2433                           type: string
2434                         group:
2435                           description: Group is the API group to select resources
2436                             from. Together with Version and Kind it is capable of
2437                             unambiguously identifying and/or selecting resources.
2438                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2439                           type: string
2440                         kind:
2441                           description: Kind of the API Group to select resources from.
2442                             Together with Group and Version it is capable of unambiguously
2443                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2444                           type: string
2445                         labelSelector:
2446                           description: LabelSelector is a string that follows the
2447                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2448                             It matches with the resource labels.
2449                           type: string
2450                         name:
2451                           description: Name to match resources with.
2452                           type: string
2453                         namespace:
2454                           description: Namespace to select resources from.
2455                           type: string
2456                         version:
2457                           description: Version of the API Group to select resources
2458                             from. Together with Group and Kind it is capable of unambiguously
2459                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2460                           type: string
2461                       type: object
2462                   required:
2463                   - patch
2464                   - target
2465                   type: object
2466                 type: array
2467               patchesStrategicMerge:
2468                 description: Strategic merge patches, defined as inline YAML objects.
2469                 items:
2470                   x-kubernetes-preserve-unknown-fields: true
2471                 type: array
2472               path:
2473                 description: Path to the directory containing the kustomization.yaml
2474                   file, or the set of plain YAMLs a kustomization.yaml should be generated
2475                   for. Defaults to 'None', which translates to the root path of the
2476                   SourceRef.
2477                 type: string
2478               postBuild:
2479                 description: PostBuild describes which actions to perform on the YAML
2480                   manifest generated by building the kustomize overlay.
2481                 properties:
2482                   substitute:
2483                     additionalProperties:
2484                       type: string
2485                     description: Substitute holds a map of key/value pairs. The variables
2486                       defined in your YAML manifests that match any of the keys defined
2487                       in the map will be substituted with the set value. Includes
2488                       support for bash string replacement functions e.g. ${var:=default},
2489                       ${var:position} and ${var/substring/replacement}.
2490                     type: object
2491                   substituteFrom:
2492                     description: SubstituteFrom holds references to ConfigMaps and
2493                       Secrets containing the variables and their values to be substituted
2494                       in the YAML manifests. The ConfigMap and the Secret data keys
2495                       represent the var names and they must match the vars declared
2496                       in the manifests for the substitution to happen.
2497                     items:
2498                       description: SubstituteReference contains a reference to a resource
2499                         containing the variables name and value.
2500                       properties:
2501                         kind:
2502                           description: Kind of the values referent, valid values are
2503                             ('Secret', 'ConfigMap').
2504                           enum:
2505                           - Secret
2506                           - ConfigMap
2507                           type: string
2508                         name:
2509                           description: Name of the values referent. Should reside
2510                             in the same namespace as the referring resource.
2511                           maxLength: 253
2512                           minLength: 1
2513                           type: string
2514                       required:
2515                       - kind
2516                       - name
2517                       type: object
2518                     type: array
2519                 type: object
2520               prune:
2521                 description: Prune enables garbage collection.
2522                 type: boolean
2523               retryInterval:
2524                 description: The interval at which to retry a previously failed reconciliation.
2525                   When not specified, the controller uses the KustomizationSpec.Interval
2526                   value to retry failures.
2527                 type: string
2528               serviceAccountName:
2529                 description: The name of the Kubernetes service account to impersonate
2530                   when reconciling this Kustomization.
2531                 type: string
2532               sourceRef:
2533                 description: Reference of the source where the kustomization file
2534                   is.
2535                 properties:
2536                   apiVersion:
2537                     description: API version of the referent
2538                     type: string
2539                   kind:
2540                     description: Kind of the referent
2541                     enum:
2542                     - GitRepository
2543                     - Bucket
2544                     type: string
2545                   name:
2546                     description: Name of the referent
2547                     type: string
2548                   namespace:
2549                     description: Namespace of the referent, defaults to the Kustomization
2550                       namespace
2551                     type: string
2552                 required:
2553                 - kind
2554                 - name
2555                 type: object
2556               suspend:
2557                 description: This flag tells the controller to suspend subsequent
2558                   kustomize executions, it does not apply to already started executions.
2559                   Defaults to false.
2560                 type: boolean
2561               targetNamespace:
2562                 description: TargetNamespace sets or overrides the namespace in the
2563                   kustomization.yaml file.
2564                 maxLength: 63
2565                 minLength: 1
2566                 type: string
2567               timeout:
2568                 description: Timeout for validation, apply and health checking operations.
2569                   Defaults to 'Interval' duration.
2570                 type: string
2571               validation:
2572                 description: Validate the Kubernetes objects before applying them
2573                   on the cluster. The validation strategy can be 'client' (local dry-run),
2574                   'server' (APIServer dry-run) or 'none'. When 'Force' is 'true',
2575                   validation will fallback to 'client' if set to 'server' because
2576                   server-side validation is not supported in this scenario.
2577                 enum:
2578                 - none
2579                 - client
2580                 - server
2581                 type: string
2582             required:
2583             - interval
2584             - prune
2585             - sourceRef
2586             type: object
2587           status:
2588             default:
2589               observedGeneration: -1
2590             description: KustomizationStatus defines the observed state of a kustomization.
2591             properties:
2592               conditions:
2593                 items:
2594                   description: "Condition contains details for one aspect of the current
2595                     state of this API Resource. --- This struct is intended for direct
2596                     use as an array at the field path .status.conditions.  For example,
2597                     type FooStatus struct{     // Represents the observations of a
2598                     foo's current state.     // Known .status.conditions.type are:
2599                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
2600                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
2601                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
2602                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
2603                     \n     // other fields }"
2604                   properties:
2605                     lastTransitionTime:
2606                       description: lastTransitionTime is the last time the condition
2607                         transitioned from one status to another. This should be when
2608                         the underlying condition changed.  If that is not known, then
2609                         using the time when the API field changed is acceptable.
2610                       format: date-time
2611                       type: string
2612                     message:
2613                       description: message is a human readable message indicating
2614                         details about the transition. This may be an empty string.
2615                       maxLength: 32768
2616                       type: string
2617                     observedGeneration:
2618                       description: observedGeneration represents the .metadata.generation
2619                         that the condition was set based upon. For instance, if .metadata.generation
2620                         is currently 12, but the .status.conditions[x].observedGeneration
2621                         is 9, the condition is out of date with respect to the current
2622                         state of the instance.
2623                       format: int64
2624                       minimum: 0
2625                       type: integer
2626                     reason:
2627                       description: reason contains a programmatic identifier indicating
2628                         the reason for the condition's last transition. Producers
2629                         of specific condition types may define expected values and
2630                         meanings for this field, and whether the values are considered
2631                         a guaranteed API. The value should be a CamelCase string.
2632                         This field may not be empty.
2633                       maxLength: 1024
2634                       minLength: 1
2635                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
2636                       type: string
2637                     status:
2638                       description: status of the condition, one of True, False, Unknown.
2639                       enum:
2640                       - "True"
2641                       - "False"
2642                       - Unknown
2643                       type: string
2644                     type:
2645                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
2646                         --- Many .condition.type values are consistent across resources
2647                         like Available, but because arbitrary conditions can be useful
2648                         (see .node.status.conditions), the ability to deconflict is
2649                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
2650                       maxLength: 316
2651                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
2652                       type: string
2653                   required:
2654                   - lastTransitionTime
2655                   - message
2656                   - reason
2657                   - status
2658                   - type
2659                   type: object
2660                 type: array
2661               lastAppliedRevision:
2662                 description: The last successfully applied revision. The revision
2663                   format for Git sources is <branch|tag>/<commit-sha>.
2664                 type: string
2665               lastAttemptedRevision:
2666                 description: LastAttemptedRevision is the revision of the last reconciliation
2667                   attempt.
2668                 type: string
2669               lastHandledReconcileAt:
2670                 description: LastHandledReconcileAt holds the value of the most recent
2671                   reconcile request value, so a change can be detected.
2672                 type: string
2673               observedGeneration:
2674                 description: ObservedGeneration is the last reconciled generation.
2675                 format: int64
2676                 type: integer
2677               snapshot:
2678                 description: The last successfully applied revision metadata.
2679                 properties:
2680                   checksum:
2681                     description: The manifests sha1 checksum.
2682                     type: string
2683                   entries:
2684                     description: A list of Kubernetes kinds grouped by namespace.
2685                     items:
2686                       description: Snapshot holds the metadata of namespaced Kubernetes
2687                         objects
2688                       properties:
2689                         kinds:
2690                           additionalProperties:
2691                             type: string
2692                           description: The list of Kubernetes kinds.
2693                           type: object
2694                         namespace:
2695                           description: The namespace of this entry.
2696                           type: string
2697                       required:
2698                       - kinds
2699                       type: object
2700                     type: array
2701                 required:
2702                 - checksum
2703                 - entries
2704                 type: object
2705             type: object
2706         type: object
2707     served: true
2708     storage: false
2709     subresources:
2710       status: {}
2711   - additionalPrinterColumns:
2712     - jsonPath: .status.conditions[?(@.type=="Ready")].status
2713       name: Ready
2714       type: string
2715     - jsonPath: .status.conditions[?(@.type=="Ready")].message
2716       name: Status
2717       type: string
2718     - jsonPath: .metadata.creationTimestamp
2719       name: Age
2720       type: date
2721     name: v1beta2
2722     schema:
2723       openAPIV3Schema:
2724         description: Kustomization is the Schema for the kustomizations API.
2725         properties:
2726           apiVersion:
2727             description: 'APIVersion defines the versioned schema of this representation
2728               of an object. Servers should convert recognized schemas to the latest
2729               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
2730             type: string
2731           kind:
2732             description: 'Kind is a string value representing the REST resource this
2733               object represents. Servers may infer this from the endpoint the client
2734               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
2735             type: string
2736           metadata:
2737             type: object
2738           spec:
2739             description: KustomizationSpec defines the configuration to calculate
2740               the desired state from a Source using Kustomize.
2741             properties:
2742               decryption:
2743                 description: Decrypt Kubernetes secrets before applying them on the
2744                   cluster.
2745                 properties:
2746                   provider:
2747                     description: Provider is the name of the decryption engine.
2748                     enum:
2749                     - sops
2750                     type: string
2751                   secretRef:
2752                     description: The secret name containing the private OpenPGP keys
2753                       used for decryption.
2754                     properties:
2755                       name:
2756                         description: Name of the referent
2757                         type: string
2758                     required:
2759                     - name
2760                     type: object
2761                 required:
2762                 - provider
2763                 type: object
2764               dependsOn:
2765                 description: DependsOn may contain a dependency.CrossNamespaceDependencyReference
2766                   slice with references to Kustomization resources that must be ready
2767                   before this Kustomization can be reconciled.
2768                 items:
2769                   description: CrossNamespaceDependencyReference holds the reference
2770                     to a dependency.
2771                   properties:
2772                     name:
2773                       description: Name holds the name reference of a dependency.
2774                       type: string
2775                     namespace:
2776                       description: Namespace holds the namespace reference of a dependency.
2777                       type: string
2778                   required:
2779                   - name
2780                   type: object
2781                 type: array
2782               force:
2783                 default: false
2784                 description: Force instructs the controller to recreate resources
2785                   when patching fails due to an immutable field change.
2786                 type: boolean
2787               healthChecks:
2788                 description: A list of resources to be included in the health assessment.
2789                 items:
2790                   description: NamespacedObjectKindReference contains enough information
2791                     to let you locate the typed referenced object in any namespace
2792                   properties:
2793                     apiVersion:
2794                       description: API version of the referent, if not specified the
2795                         Kubernetes preferred version will be used
2796                       type: string
2797                     kind:
2798                       description: Kind of the referent
2799                       type: string
2800                     name:
2801                       description: Name of the referent
2802                       type: string
2803                     namespace:
2804                       description: Namespace of the referent, when not specified it
2805                         acts as LocalObjectReference
2806                       type: string
2807                   required:
2808                   - kind
2809                   - name
2810                   type: object
2811                 type: array
2812               images:
2813                 description: Images is a list of (image name, new name, new tag or
2814                   digest) for changing image names, tags or digests. This can also
2815                   be achieved with a patch, but this operator is simpler to specify.
2816                 items:
2817                   description: Image contains an image name, a new name, a new tag
2818                     or digest, which will replace the original name and tag.
2819                   properties:
2820                     digest:
2821                       description: Digest is the value used to replace the original
2822                         image tag. If digest is present NewTag value is ignored.
2823                       type: string
2824                     name:
2825                       description: Name is a tag-less image name.
2826                       type: string
2827                     newName:
2828                       description: NewName is the value used to replace the original
2829                         name.
2830                       type: string
2831                     newTag:
2832                       description: NewTag is the value used to replace the original
2833                         tag.
2834                       type: string
2835                   required:
2836                   - name
2837                   type: object
2838                 type: array
2839               interval:
2840                 description: The interval at which to reconcile the Kustomization.
2841                 type: string
2842               kubeConfig:
2843                 description: The KubeConfig for reconciling the Kustomization on a
2844                   remote cluster. When specified, KubeConfig takes precedence over
2845                   ServiceAccountName.
2846                 properties:
2847                   secretRef:
2848                     description: SecretRef holds the name to a secret that contains
2849                       a 'value' key with the kubeconfig file as the value. It must
2850                       be in the same namespace as the Kustomization. It is recommended
2851                       that the kubeconfig is self-contained, and the secret is regularly
2852                       updated if credentials such as a cloud-access-token expire.
2853                       Cloud specific `cmd-path` auth helpers will not function without
2854                       adding binaries and credentials to the Pod that is responsible
2855                       for reconciling the Kustomization.
2856                     properties:
2857                       name:
2858                         description: Name of the referent
2859                         type: string
2860                     required:
2861                     - name
2862                     type: object
2863                 type: object
2864               patches:
2865                 description: Strategic merge and JSON patches, defined as inline YAML
2866                   objects, capable of targeting objects based on kind, label and annotation
2867                   selectors.
2868                 items:
2869                   description: Patch contains an inline StrategicMerge or JSON6902
2870                     patch, and the target the patch should be applied to.
2871                   properties:
2872                     patch:
2873                       description: Patch contains an inline StrategicMerge patch or
2874                         an inline JSON6902 patch with an array of operation objects.
2875                       type: string
2876                     target:
2877                       description: Target points to the resources that the patch document
2878                         should be applied to.
2879                       properties:
2880                         annotationSelector:
2881                           description: AnnotationSelector is a string that follows
2882                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2883                             It matches with the resource annotations.
2884                           type: string
2885                         group:
2886                           description: Group is the API group to select resources
2887                             from. Together with Version and Kind it is capable of
2888                             unambiguously identifying and/or selecting resources.
2889                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2890                           type: string
2891                         kind:
2892                           description: Kind of the API Group to select resources from.
2893                             Together with Group and Version it is capable of unambiguously
2894                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2895                           type: string
2896                         labelSelector:
2897                           description: LabelSelector is a string that follows the
2898                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2899                             It matches with the resource labels.
2900                           type: string
2901                         name:
2902                           description: Name to match resources with.
2903                           type: string
2904                         namespace:
2905                           description: Namespace to select resources from.
2906                           type: string
2907                         version:
2908                           description: Version of the API Group to select resources
2909                             from. Together with Group and Kind it is capable of unambiguously
2910                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2911                           type: string
2912                       type: object
2913                   type: object
2914                 type: array
2915               patchesJson6902:
2916                 description: 'JSON 6902 patches, defined as inline YAML objects. Deprecated:
2917                   Use Patches instead.'
2918                 items:
2919                   description: JSON6902Patch contains a JSON6902 patch and the target
2920                     the patch should be applied to.
2921                   properties:
2922                     patch:
2923                       description: Patch contains the JSON6902 patch document with
2924                         an array of operation objects.
2925                       items:
2926                         description: JSON6902 is a JSON6902 operation object. https://datatracker.ietf.org/doc/html/rfc6902#section-4
2927                         properties:
2928                           from:
2929                             description: From contains a JSON-pointer value that references
2930                               a location within the target document where the operation
2931                               is performed. The meaning of the value depends on the
2932                               value of Op, and is NOT taken into account by all operations.
2933                             type: string
2934                           op:
2935                             description: Op indicates the operation to perform. Its
2936                               value MUST be one of "add", "remove", "replace", "move",
2937                               "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4
2938                             enum:
2939                             - test
2940                             - remove
2941                             - add
2942                             - replace
2943                             - move
2944                             - copy
2945                             type: string
2946                           path:
2947                             description: Path contains the JSON-pointer value that
2948                               references a location within the target document where
2949                               the operation is performed. The meaning of the value
2950                               depends on the value of Op.
2951                             type: string
2952                           value:
2953                             description: Value contains a valid JSON structure. The
2954                               meaning of the value depends on the value of Op, and
2955                               is NOT taken into account by all operations.
2956                             x-kubernetes-preserve-unknown-fields: true
2957                         required:
2958                         - op
2959                         - path
2960                         type: object
2961                       type: array
2962                     target:
2963                       description: Target points to the resources that the patch document
2964                         should be applied to.
2965                       properties:
2966                         annotationSelector:
2967                           description: AnnotationSelector is a string that follows
2968                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2969                             It matches with the resource annotations.
2970                           type: string
2971                         group:
2972                           description: Group is the API group to select resources
2973                             from. Together with Version and Kind it is capable of
2974                             unambiguously identifying and/or selecting resources.
2975                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2976                           type: string
2977                         kind:
2978                           description: Kind of the API Group to select resources from.
2979                             Together with Group and Version it is capable of unambiguously
2980                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2981                           type: string
2982                         labelSelector:
2983                           description: LabelSelector is a string that follows the
2984                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2985                             It matches with the resource labels.
2986                           type: string
2987                         name:
2988                           description: Name to match resources with.
2989                           type: string
2990                         namespace:
2991                           description: Namespace to select resources from.
2992                           type: string
2993                         version:
2994                           description: Version of the API Group to select resources
2995                             from. Together with Group and Kind it is capable of unambiguously
2996                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2997                           type: string
2998                       type: object
2999                   required:
3000                   - patch
3001                   - target
3002                   type: object
3003                 type: array
3004               patchesStrategicMerge:
3005                 description: 'Strategic merge patches, defined as inline YAML objects.
3006                   Deprecated: Use Patches instead.'
3007                 items:
3008                   x-kubernetes-preserve-unknown-fields: true
3009                 type: array
3010               path:
3011                 description: Path to the directory containing the kustomization.yaml
3012                   file, or the set of plain YAMLs a kustomization.yaml should be generated
3013                   for. Defaults to 'None', which translates to the root path of the
3014                   SourceRef.
3015                 type: string
3016               postBuild:
3017                 description: PostBuild describes which actions to perform on the YAML
3018                   manifest generated by building the kustomize overlay.
3019                 properties:
3020                   substitute:
3021                     additionalProperties:
3022                       type: string
3023                     description: Substitute holds a map of key/value pairs. The variables
3024                       defined in your YAML manifests that match any of the keys defined
3025                       in the map will be substituted with the set value. Includes
3026                       support for bash string replacement functions e.g. ${var:=default},
3027                       ${var:position} and ${var/substring/replacement}.
3028                     type: object
3029                   substituteFrom:
3030                     description: SubstituteFrom holds references to ConfigMaps and
3031                       Secrets containing the variables and their values to be substituted
3032                       in the YAML manifests. The ConfigMap and the Secret data keys
3033                       represent the var names and they must match the vars declared
3034                       in the manifests for the substitution to happen.
3035                     items:
3036                       description: SubstituteReference contains a reference to a resource
3037                         containing the variables name and value.
3038                       properties:
3039                         kind:
3040                           description: Kind of the values referent, valid values are
3041                             ('Secret', 'ConfigMap').
3042                           enum:
3043                           - Secret
3044                           - ConfigMap
3045                           type: string
3046                         name:
3047                           description: Name of the values referent. Should reside
3048                             in the same namespace as the referring resource.
3049                           maxLength: 253
3050                           minLength: 1
3051                           type: string
3052                       required:
3053                       - kind
3054                       - name
3055                       type: object
3056                     type: array
3057                 type: object
3058               prune:
3059                 description: Prune enables garbage collection.
3060                 type: boolean
3061               retryInterval:
3062                 description: The interval at which to retry a previously failed reconciliation.
3063                   When not specified, the controller uses the KustomizationSpec.Interval
3064                   value to retry failures.
3065                 type: string
3066               serviceAccountName:
3067                 description: The name of the Kubernetes service account to impersonate
3068                   when reconciling this Kustomization.
3069                 type: string
3070               sourceRef:
3071                 description: Reference of the source where the kustomization file
3072                   is.
3073                 properties:
3074                   apiVersion:
3075                     description: API version of the referent.
3076                     type: string
3077                   kind:
3078                     description: Kind of the referent.
3079                     enum:
3080                     - GitRepository
3081                     - Bucket
3082                     type: string
3083                   name:
3084                     description: Name of the referent.
3085                     type: string
3086                   namespace:
3087                     description: Namespace of the referent, defaults to the namespace
3088                       of the Kubernetes resource object that contains the reference.
3089                     type: string
3090                 required:
3091                 - kind
3092                 - name
3093                 type: object
3094               suspend:
3095                 description: This flag tells the controller to suspend subsequent
3096                   kustomize executions, it does not apply to already started executions.
3097                   Defaults to false.
3098                 type: boolean
3099               targetNamespace:
3100                 description: TargetNamespace sets or overrides the namespace in the
3101                   kustomization.yaml file.
3102                 maxLength: 63
3103                 minLength: 1
3104                 type: string
3105               timeout:
3106                 description: Timeout for validation, apply and health checking operations.
3107                   Defaults to 'Interval' duration.
3108                 type: string
3109               validation:
3110                 description: 'Deprecated: Not used in v1beta2.'
3111                 enum:
3112                 - none
3113                 - client
3114                 - server
3115                 type: string
3116               wait:
3117                 description: Wait instructs the controller to check the health of
3118                   all the reconciled resources. When enabled, the HealthChecks are
3119                   ignored. Defaults to false.
3120                 type: boolean
3121             required:
3122             - interval
3123             - prune
3124             - sourceRef
3125             type: object
3126           status:
3127             default:
3128               observedGeneration: -1
3129             description: KustomizationStatus defines the observed state of a kustomization.
3130             properties:
3131               conditions:
3132                 items:
3133                   description: "Condition contains details for one aspect of the current
3134                     state of this API Resource. --- This struct is intended for direct
3135                     use as an array at the field path .status.conditions.  For example,
3136                     type FooStatus struct{     // Represents the observations of a
3137                     foo's current state.     // Known .status.conditions.type are:
3138                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
3139                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
3140                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
3141                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
3142                     \n     // other fields }"
3143                   properties:
3144                     lastTransitionTime:
3145                       description: lastTransitionTime is the last time the condition
3146                         transitioned from one status to another. This should be when
3147                         the underlying condition changed.  If that is not known, then
3148                         using the time when the API field changed is acceptable.
3149                       format: date-time
3150                       type: string
3151                     message:
3152                       description: message is a human readable message indicating
3153                         details about the transition. This may be an empty string.
3154                       maxLength: 32768
3155                       type: string
3156                     observedGeneration:
3157                       description: observedGeneration represents the .metadata.generation
3158                         that the condition was set based upon. For instance, if .metadata.generation
3159                         is currently 12, but the .status.conditions[x].observedGeneration
3160                         is 9, the condition is out of date with respect to the current
3161                         state of the instance.
3162                       format: int64
3163                       minimum: 0
3164                       type: integer
3165                     reason:
3166                       description: reason contains a programmatic identifier indicating
3167                         the reason for the condition's last transition. Producers
3168                         of specific condition types may define expected values and
3169                         meanings for this field, and whether the values are considered
3170                         a guaranteed API. The value should be a CamelCase string.
3171                         This field may not be empty.
3172                       maxLength: 1024
3173                       minLength: 1
3174                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3175                       type: string
3176                     status:
3177                       description: status of the condition, one of True, False, Unknown.
3178                       enum:
3179                       - "True"
3180                       - "False"
3181                       - Unknown
3182                       type: string
3183                     type:
3184                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
3185                         --- Many .condition.type values are consistent across resources
3186                         like Available, but because arbitrary conditions can be useful
3187                         (see .node.status.conditions), the ability to deconflict is
3188                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
3189                       maxLength: 316
3190                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3191                       type: string
3192                   required:
3193                   - lastTransitionTime
3194                   - message
3195                   - reason
3196                   - status
3197                   - type
3198                   type: object
3199                 type: array
3200               inventory:
3201                 description: Inventory contains the list of Kubernetes resource object
3202                   references that have been successfully applied.
3203                 properties:
3204                   entries:
3205                     description: Entries of Kubernetes resource object references.
3206                     items:
3207                       description: ResourceRef contains the information necessary
3208                         to locate a resource within a cluster.
3209                       properties:
3210                         id:
3211                           description: ID is the string representation of the Kubernetes
3212                             resource object's metadata, in the format '<namespace>_<name>_<group>_<kind>'.
3213                           type: string
3214                         v:
3215                           description: Version is the API version of the Kubernetes
3216                             resource object's kind.
3217                           type: string
3218                       required:
3219                       - id
3220                       - v
3221                       type: object
3222                     type: array
3223                 required:
3224                 - entries
3225                 type: object
3226               lastAppliedRevision:
3227                 description: The last successfully applied revision. The revision
3228                   format for Git sources is <branch|tag>/<commit-sha>.
3229                 type: string
3230               lastAttemptedRevision:
3231                 description: LastAttemptedRevision is the revision of the last reconciliation
3232                   attempt.
3233                 type: string
3234               lastHandledReconcileAt:
3235                 description: LastHandledReconcileAt holds the value of the most recent
3236                   reconcile request value, so a change can be detected.
3237                 type: string
3238               observedGeneration:
3239                 description: ObservedGeneration is the last reconciled generation.
3240                 format: int64
3241                 type: integer
3242             type: object
3243         type: object
3244     served: true
3245     storage: true
3246     subresources:
3247       status: {}
3248 status:
3249   acceptedNames:
3250     kind: ""
3251     plural: ""
3252   conditions: []
3253   storedVersions: []
3254 ---
3255 apiVersion: apiextensions.k8s.io/v1
3256 kind: CustomResourceDefinition
3257 metadata:
3258   annotations:
3259     controller-gen.kubebuilder.io/version: v0.7.0
3260   creationTimestamp: null
3261   labels:
3262     app.kubernetes.io/instance: flux-system
3263     app.kubernetes.io/part-of: flux
3264     app.kubernetes.io/version: v0.25.3
3265   name: providers.notification.toolkit.fluxcd.io
3266 spec:
3267   group: notification.toolkit.fluxcd.io
3268   names:
3269     kind: Provider
3270     listKind: ProviderList
3271     plural: providers
3272     singular: provider
3273   scope: Namespaced
3274   versions:
3275   - additionalPrinterColumns:
3276     - jsonPath: .status.conditions[?(@.type=="Ready")].status
3277       name: Ready
3278       type: string
3279     - jsonPath: .status.conditions[?(@.type=="Ready")].message
3280       name: Status
3281       type: string
3282     - jsonPath: .metadata.creationTimestamp
3283       name: Age
3284       type: date
3285     name: v1beta1
3286     schema:
3287       openAPIV3Schema:
3288         description: Provider is the Schema for the providers API
3289         properties:
3290           apiVersion:
3291             description: 'APIVersion defines the versioned schema of this representation
3292               of an object. Servers should convert recognized schemas to the latest
3293               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
3294             type: string
3295           kind:
3296             description: 'Kind is a string value representing the REST resource this
3297               object represents. Servers may infer this from the endpoint the client
3298               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
3299             type: string
3300           metadata:
3301             type: object
3302           spec:
3303             description: ProviderSpec defines the desired state of Provider
3304             properties:
3305               address:
3306                 description: HTTP/S webhook address of this provider
3307                 pattern: ^(http|https)://
3308                 type: string
3309               certSecretRef:
3310                 description: CertSecretRef can be given the name of a secret containing
3311                   a PEM-encoded CA certificate (`caFile`)
3312                 properties:
3313                   name:
3314                     description: Name of the referent
3315                     type: string
3316                 required:
3317                 - name
3318                 type: object
3319               channel:
3320                 description: Alert channel for this provider
3321                 type: string
3322               proxy:
3323                 description: HTTP/S address of the proxy
3324                 pattern: ^(http|https)://
3325                 type: string
3326               secretRef:
3327                 description: Secret reference containing the provider webhook URL
3328                   using "address" as data key
3329                 properties:
3330                   name:
3331                     description: Name of the referent
3332                     type: string
3333                 required:
3334                 - name
3335                 type: object
3336               suspend:
3337                 description: This flag tells the controller to suspend subsequent
3338                   events handling. Defaults to false.
3339                 type: boolean
3340               type:
3341                 description: Type of provider
3342                 enum:
3343                 - slack
3344                 - discord
3345                 - msteams
3346                 - rocket
3347                 - generic
3348                 - github
3349                 - gitlab
3350                 - bitbucket
3351                 - azuredevops
3352                 - googlechat
3353                 - webex
3354                 - sentry
3355                 - azureeventhub
3356                 - telegram
3357                 - lark
3358                 - matrix
3359                 - opsgenie
3360                 - alertmanager
3361                 type: string
3362               username:
3363                 description: Bot username for this provider
3364                 type: string
3365             required:
3366             - type
3367             type: object
3368           status:
3369             default:
3370               observedGeneration: -1
3371             description: ProviderStatus defines the observed state of Provider
3372             properties:
3373               conditions:
3374                 items:
3375                   description: "Condition contains details for one aspect of the current
3376                     state of this API Resource. --- This struct is intended for direct
3377                     use as an array at the field path .status.conditions.  For example,
3378                     type FooStatus struct{     // Represents the observations of a
3379                     foo's current state.     // Known .status.conditions.type are:
3380                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
3381                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
3382                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
3383                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
3384                     \n     // other fields }"
3385                   properties:
3386                     lastTransitionTime:
3387                       description: lastTransitionTime is the last time the condition
3388                         transitioned from one status to another. This should be when
3389                         the underlying condition changed.  If that is not known, then
3390                         using the time when the API field changed is acceptable.
3391                       format: date-time
3392                       type: string
3393                     message:
3394                       description: message is a human readable message indicating
3395                         details about the transition. This may be an empty string.
3396                       maxLength: 32768
3397                       type: string
3398                     observedGeneration:
3399                       description: observedGeneration represents the .metadata.generation
3400                         that the condition was set based upon. For instance, if .metadata.generation
3401                         is currently 12, but the .status.conditions[x].observedGeneration
3402                         is 9, the condition is out of date with respect to the current
3403                         state of the instance.
3404                       format: int64
3405                       minimum: 0
3406                       type: integer
3407                     reason:
3408                       description: reason contains a programmatic identifier indicating
3409                         the reason for the condition's last transition. Producers
3410                         of specific condition types may define expected values and
3411                         meanings for this field, and whether the values are considered
3412                         a guaranteed API. The value should be a CamelCase string.
3413                         This field may not be empty.
3414                       maxLength: 1024
3415                       minLength: 1
3416                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3417                       type: string
3418                     status:
3419                       description: status of the condition, one of True, False, Unknown.
3420                       enum:
3421                       - "True"
3422                       - "False"
3423                       - Unknown
3424                       type: string
3425                     type:
3426                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
3427                         --- Many .condition.type values are consistent across resources
3428                         like Available, but because arbitrary conditions can be useful
3429                         (see .node.status.conditions), the ability to deconflict is
3430                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
3431                       maxLength: 316
3432                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3433                       type: string
3434                   required:
3435                   - lastTransitionTime
3436                   - message
3437                   - reason
3438                   - status
3439                   - type
3440                   type: object
3441                 type: array
3442               observedGeneration:
3443                 description: ObservedGeneration is the last reconciled generation.
3444                 format: int64
3445                 type: integer
3446             type: object
3447         type: object
3448     served: true
3449     storage: true
3450     subresources:
3451       status: {}
3452 status:
3453   acceptedNames:
3454     kind: ""
3455     plural: ""
3456   conditions: []
3457   storedVersions: []
3458 ---
3459 apiVersion: apiextensions.k8s.io/v1
3460 kind: CustomResourceDefinition
3461 metadata:
3462   annotations:
3463     controller-gen.kubebuilder.io/version: v0.7.0
3464   creationTimestamp: null
3465   labels:
3466     app.kubernetes.io/instance: flux-system
3467     app.kubernetes.io/part-of: flux
3468     app.kubernetes.io/version: v0.25.3
3469   name: receivers.notification.toolkit.fluxcd.io
3470 spec:
3471   group: notification.toolkit.fluxcd.io
3472   names:
3473     kind: Receiver
3474     listKind: ReceiverList
3475     plural: receivers
3476     singular: receiver
3477   scope: Namespaced
3478   versions:
3479   - additionalPrinterColumns:
3480     - jsonPath: .status.conditions[?(@.type=="Ready")].status
3481       name: Ready
3482       type: string
3483     - jsonPath: .status.conditions[?(@.type=="Ready")].message
3484       name: Status
3485       type: string
3486     - jsonPath: .metadata.creationTimestamp
3487       name: Age
3488       type: date
3489     name: v1beta1
3490     schema:
3491       openAPIV3Schema:
3492         description: Receiver is the Schema for the receivers API
3493         properties:
3494           apiVersion:
3495             description: 'APIVersion defines the versioned schema of this representation
3496               of an object. Servers should convert recognized schemas to the latest
3497               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
3498             type: string
3499           kind:
3500             description: 'Kind is a string value representing the REST resource this
3501               object represents. Servers may infer this from the endpoint the client
3502               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
3503             type: string
3504           metadata:
3505             type: object
3506           spec:
3507             description: ReceiverSpec defines the desired state of Receiver
3508             properties:
3509               events:
3510                 description: A list of events to handle, e.g. 'push' for GitHub or
3511                   'Push Hook' for GitLab.
3512                 items:
3513                   type: string
3514                 type: array
3515               resources:
3516                 description: A list of resources to be notified about changes.
3517                 items:
3518                   description: CrossNamespaceObjectReference contains enough information
3519                     to let you locate the typed referenced object at cluster level
3520                   properties:
3521                     apiVersion:
3522                       description: API version of the referent
3523                       type: string
3524                     kind:
3525                       description: Kind of the referent
3526                       enum:
3527                       - Bucket
3528                       - GitRepository
3529                       - Kustomization
3530                       - HelmRelease
3531                       - HelmChart
3532                       - HelmRepository
3533                       - ImageRepository
3534                       - ImagePolicy
3535                       - ImageUpdateAutomation
3536                       type: string
3537                     name:
3538                       description: Name of the referent
3539                       maxLength: 53
3540                       minLength: 1
3541                       type: string
3542                     namespace:
3543                       description: Namespace of the referent
3544                       maxLength: 53
3545                       minLength: 1
3546                       type: string
3547                   required:
3548                   - name
3549                   type: object
3550                 type: array
3551               secretRef:
3552                 description: Secret reference containing the token used to validate
3553                   the payload authenticity
3554                 properties:
3555                   name:
3556                     description: Name of the referent
3557                     type: string
3558                 required:
3559                 - name
3560                 type: object
3561               suspend:
3562                 description: This flag tells the controller to suspend subsequent
3563                   events handling. Defaults to false.
3564                 type: boolean
3565               type:
3566                 description: Type of webhook sender, used to determine the validation
3567                   procedure and payload deserialization.
3568                 enum:
3569                 - generic
3570                 - generic-hmac
3571                 - github
3572                 - gitlab
3573                 - bitbucket
3574                 - harbor
3575                 - dockerhub
3576                 - quay
3577                 - gcr
3578                 - nexus
3579                 - acr
3580                 type: string
3581             required:
3582             - resources
3583             - type
3584             type: object
3585           status:
3586             default:
3587               observedGeneration: -1
3588             description: ReceiverStatus defines the observed state of Receiver
3589             properties:
3590               conditions:
3591                 items:
3592                   description: "Condition contains details for one aspect of the current
3593                     state of this API Resource. --- This struct is intended for direct
3594                     use as an array at the field path .status.conditions.  For example,
3595                     type FooStatus struct{     // Represents the observations of a
3596                     foo's current state.     // Known .status.conditions.type are:
3597                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
3598                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
3599                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
3600                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
3601                     \n     // other fields }"
3602                   properties:
3603                     lastTransitionTime:
3604                       description: lastTransitionTime is the last time the condition
3605                         transitioned from one status to another. This should be when
3606                         the underlying condition changed.  If that is not known, then
3607                         using the time when the API field changed is acceptable.
3608                       format: date-time
3609                       type: string
3610                     message:
3611                       description: message is a human readable message indicating
3612                         details about the transition. This may be an empty string.
3613                       maxLength: 32768
3614                       type: string
3615                     observedGeneration:
3616                       description: observedGeneration represents the .metadata.generation
3617                         that the condition was set based upon. For instance, if .metadata.generation
3618                         is currently 12, but the .status.conditions[x].observedGeneration
3619                         is 9, the condition is out of date with respect to the current
3620                         state of the instance.
3621                       format: int64
3622                       minimum: 0
3623                       type: integer
3624                     reason:
3625                       description: reason contains a programmatic identifier indicating
3626                         the reason for the condition's last transition. Producers
3627                         of specific condition types may define expected values and
3628                         meanings for this field, and whether the values are considered
3629                         a guaranteed API. The value should be a CamelCase string.
3630                         This field may not be empty.
3631                       maxLength: 1024
3632                       minLength: 1
3633                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3634                       type: string
3635                     status:
3636                       description: status of the condition, one of True, False, Unknown.
3637                       enum:
3638                       - "True"
3639                       - "False"
3640                       - Unknown
3641                       type: string
3642                     type:
3643                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
3644                         --- Many .condition.type values are consistent across resources
3645                         like Available, but because arbitrary conditions can be useful
3646                         (see .node.status.conditions), the ability to deconflict is
3647                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
3648                       maxLength: 316
3649                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3650                       type: string
3651                   required:
3652                   - lastTransitionTime
3653                   - message
3654                   - reason
3655                   - status
3656                   - type
3657                   type: object
3658                 type: array
3659               observedGeneration:
3660                 description: ObservedGeneration is the last observed generation.
3661                 format: int64
3662                 type: integer
3663               url:
3664                 description: Generated webhook URL in the format of '/hook/sha256sum(token+name+namespace)'.
3665                 type: string
3666             type: object
3667         type: object
3668     served: true
3669     storage: true
3670     subresources:
3671       status: {}
3672 status:
3673   acceptedNames:
3674     kind: ""
3675     plural: ""
3676   conditions: []
3677   storedVersions: []
3678 ---
3679 apiVersion: v1
3680 kind: ServiceAccount
3681 metadata:
3682   labels:
3683     app.kubernetes.io/instance: flux-system
3684     app.kubernetes.io/part-of: flux
3685     app.kubernetes.io/version: v0.25.3
3686   name: helm-controller
3687   namespace: flux-system
3688 ---
3689 apiVersion: v1
3690 kind: ServiceAccount
3691 metadata:
3692   labels:
3693     app.kubernetes.io/instance: flux-system
3694     app.kubernetes.io/part-of: flux
3695     app.kubernetes.io/version: v0.25.3
3696   name: kustomize-controller
3697   namespace: flux-system
3698 ---
3699 apiVersion: v1
3700 kind: ServiceAccount
3701 metadata:
3702   labels:
3703     app.kubernetes.io/instance: flux-system
3704     app.kubernetes.io/part-of: flux
3705     app.kubernetes.io/version: v0.25.3
3706   name: notification-controller
3707   namespace: flux-system
3708 ---
3709 apiVersion: v1
3710 kind: ServiceAccount
3711 metadata:
3712   labels:
3713     app.kubernetes.io/instance: flux-system
3714     app.kubernetes.io/part-of: flux
3715     app.kubernetes.io/version: v0.25.3
3716   name: source-controller
3717   namespace: flux-system
3718 ---
3719 apiVersion: rbac.authorization.k8s.io/v1
3720 kind: ClusterRole
3721 metadata:
3722   labels:
3723     app.kubernetes.io/instance: flux-system
3724     app.kubernetes.io/part-of: flux
3725     app.kubernetes.io/version: v0.25.3
3726   name: crd-controller-flux-system
3727 rules:
3728 - apiGroups:
3729   - source.toolkit.fluxcd.io
3730   resources:
3731   - '*'
3732   verbs:
3733   - '*'
3734 - apiGroups:
3735   - kustomize.toolkit.fluxcd.io
3736   resources:
3737   - '*'
3738   verbs:
3739   - '*'
3740 - apiGroups:
3741   - helm.toolkit.fluxcd.io
3742   resources:
3743   - '*'
3744   verbs:
3745   - '*'
3746 - apiGroups:
3747   - notification.toolkit.fluxcd.io
3748   resources:
3749   - '*'
3750   verbs:
3751   - '*'
3752 - apiGroups:
3753   - image.toolkit.fluxcd.io
3754   resources:
3755   - '*'
3756   verbs:
3757   - '*'
3758 - apiGroups:
3759   - ""
3760   resources:
3761   - namespaces
3762   - secrets
3763   verbs:
3764   - get
3765   - list
3766   - watch
3767 - apiGroups:
3768   - ""
3769   resources:
3770   - events
3771   verbs:
3772   - create
3773   - patch
3774 - apiGroups:
3775   - ""
3776   resources:
3777   - configmaps
3778   - configmaps/status
3779   verbs:
3780   - get
3781   - list
3782   - watch
3783   - create
3784   - update
3785   - patch
3786   - delete
3787 - apiGroups:
3788   - coordination.k8s.io
3789   resources:
3790   - leases
3791   verbs:
3792   - get
3793   - list
3794   - watch
3795   - create
3796   - update
3797   - patch
3798   - delete
3799 ---
3800 apiVersion: rbac.authorization.k8s.io/v1
3801 kind: ClusterRoleBinding
3802 metadata:
3803   labels:
3804     app.kubernetes.io/instance: flux-system
3805     app.kubernetes.io/part-of: flux
3806     app.kubernetes.io/version: v0.25.3
3807   name: cluster-reconciler-flux-system
3808 roleRef:
3809   apiGroup: rbac.authorization.k8s.io
3810   kind: ClusterRole
3811   name: cluster-admin
3812 subjects:
3813 - kind: ServiceAccount
3814   name: kustomize-controller
3815   namespace: flux-system
3816 - kind: ServiceAccount
3817   name: helm-controller
3818   namespace: flux-system
3819 ---
3820 apiVersion: rbac.authorization.k8s.io/v1
3821 kind: ClusterRoleBinding
3822 metadata:
3823   labels:
3824     app.kubernetes.io/instance: flux-system
3825     app.kubernetes.io/part-of: flux
3826     app.kubernetes.io/version: v0.25.3
3827   name: crd-controller-flux-system
3828 roleRef:
3829   apiGroup: rbac.authorization.k8s.io
3830   kind: ClusterRole
3831   name: crd-controller-flux-system
3832 subjects:
3833 - kind: ServiceAccount
3834   name: kustomize-controller
3835   namespace: flux-system
3836 - kind: ServiceAccount
3837   name: helm-controller
3838   namespace: flux-system
3839 - kind: ServiceAccount
3840   name: source-controller
3841   namespace: flux-system
3842 - kind: ServiceAccount
3843   name: notification-controller
3844   namespace: flux-system
3845 - kind: ServiceAccount
3846   name: image-reflector-controller
3847   namespace: flux-system
3848 - kind: ServiceAccount
3849   name: image-automation-controller
3850   namespace: flux-system
3851 ---
3852 apiVersion: v1
3853 kind: Service
3854 metadata:
3855   labels:
3856     app.kubernetes.io/instance: flux-system
3857     app.kubernetes.io/part-of: flux
3858     app.kubernetes.io/version: v0.25.3
3859     control-plane: controller
3860   name: notification-controller
3861   namespace: flux-system
3862 spec:
3863   ports:
3864   - name: http
3865     port: 80
3866     protocol: TCP
3867     targetPort: http
3868   selector:
3869     app: notification-controller
3870   type: ClusterIP
3871 ---
3872 apiVersion: v1
3873 kind: Service
3874 metadata:
3875   labels:
3876     app.kubernetes.io/instance: flux-system
3877     app.kubernetes.io/part-of: flux
3878     app.kubernetes.io/version: v0.25.3
3879     control-plane: controller
3880   name: source-controller
3881   namespace: flux-system
3882 spec:
3883   ports:
3884   - name: http
3885     port: 80
3886     protocol: TCP
3887     targetPort: http
3888   selector:
3889     app: source-controller
3890   type: ClusterIP
3891 ---
3892 apiVersion: v1
3893 kind: Service
3894 metadata:
3895   labels:
3896     app.kubernetes.io/instance: flux-system
3897     app.kubernetes.io/part-of: flux
3898     app.kubernetes.io/version: v0.25.3
3899     control-plane: controller
3900   name: webhook-receiver
3901   namespace: flux-system
3902 spec:
3903   ports:
3904   - name: http
3905     port: 80
3906     protocol: TCP
3907     targetPort: http-webhook
3908   selector:
3909     app: notification-controller
3910   type: ClusterIP
3911 ---
3912 apiVersion: apps/v1
3913 kind: Deployment
3914 metadata:
3915   labels:
3916     app.kubernetes.io/instance: flux-system
3917     app.kubernetes.io/part-of: flux
3918     app.kubernetes.io/version: v0.25.3
3919     control-plane: controller
3920   name: helm-controller
3921   namespace: flux-system
3922 spec:
3923   replicas: 1
3924   selector:
3925     matchLabels:
3926       app: helm-controller
3927   template:
3928     metadata:
3929       annotations:
3930         prometheus.io/port: "8080"
3931         prometheus.io/scrape: "true"
3932       labels:
3933         app: helm-controller
3934     spec:
3935       containers:
3936       - args:
3937         - --events-addr=http://notification-controller.flux-system.svc.cluster.local/
3938         - --watch-all-namespaces=true
3939         - --log-level=info
3940         - --log-encoding=json
3941         - --enable-leader-election
3942         env:
3943         - name: RUNTIME_NAMESPACE
3944           valueFrom:
3945             fieldRef:
3946               fieldPath: metadata.namespace
3947         image: ghcr.io/fluxcd/helm-controller:v0.15.0
3948         imagePullPolicy: IfNotPresent
3949         livenessProbe:
3950           httpGet:
3951             path: /healthz
3952             port: healthz
3953         name: manager
3954         ports:
3955         - containerPort: 8080
3956           name: http-prom
3957         - containerPort: 9440
3958           name: healthz
3959           protocol: TCP
3960         readinessProbe:
3961           httpGet:
3962             path: /readyz
3963             port: healthz
3964         resources:
3965           limits:
3966             cpu: 1000m
3967             memory: 1Gi
3968           requests:
3969             cpu: 100m
3970             memory: 64Mi
3971         securityContext:
3972           allowPrivilegeEscalation: false
3973           readOnlyRootFilesystem: true
3974         volumeMounts:
3975         - mountPath: /tmp
3976           name: temp
3977       nodeSelector:
3978         kubernetes.io/os: linux
3979       serviceAccountName: helm-controller
3980       terminationGracePeriodSeconds: 600
3981       volumes:
3982       - emptyDir: {}
3983         name: temp
3984 ---
3985 apiVersion: apps/v1
3986 kind: Deployment
3987 metadata:
3988   labels:
3989     app.kubernetes.io/instance: flux-system
3990     app.kubernetes.io/part-of: flux
3991     app.kubernetes.io/version: v0.25.3
3992     control-plane: controller
3993   name: kustomize-controller
3994   namespace: flux-system
3995 spec:
3996   replicas: 1
3997   selector:
3998     matchLabels:
3999       app: kustomize-controller
4000   template:
4001     metadata:
4002       annotations:
4003         prometheus.io/port: "8080"
4004         prometheus.io/scrape: "true"
4005       labels:
4006         app: kustomize-controller
4007     spec:
4008       containers:
4009       - args:
4010         - --events-addr=http://notification-controller.flux-system.svc.cluster.local/
4011         - --watch-all-namespaces=true
4012         - --log-level=info
4013         - --log-encoding=json
4014         - --enable-leader-election
4015         env:
4016         - name: RUNTIME_NAMESPACE
4017           valueFrom:
4018             fieldRef:
4019               fieldPath: metadata.namespace
4020         image: ghcr.io/fluxcd/kustomize-controller:v0.19.1
4021         imagePullPolicy: IfNotPresent
4022         livenessProbe:
4023           httpGet:
4024             path: /healthz
4025             port: healthz
4026         name: manager
4027         ports:
4028         - containerPort: 8080
4029           name: http-prom
4030         - containerPort: 9440
4031           name: healthz
4032           protocol: TCP
4033         readinessProbe:
4034           httpGet:
4035             path: /readyz
4036             port: healthz
4037         resources:
4038           limits:
4039             cpu: 1000m
4040             memory: 1Gi
4041           requests:
4042             cpu: 100m
4043             memory: 64Mi
4044         securityContext:
4045           allowPrivilegeEscalation: false
4046           readOnlyRootFilesystem: true
4047         volumeMounts:
4048         - mountPath: /tmp
4049           name: temp
4050       nodeSelector:
4051         kubernetes.io/os: linux
4052       securityContext:
4053         fsGroup: 1337
4054       serviceAccountName: kustomize-controller
4055       terminationGracePeriodSeconds: 60
4056       volumes:
4057       - emptyDir: {}
4058         name: temp
4059 ---
4060 apiVersion: apps/v1
4061 kind: Deployment
4062 metadata:
4063   labels:
4064     app.kubernetes.io/instance: flux-system
4065     app.kubernetes.io/part-of: flux
4066     app.kubernetes.io/version: v0.25.3
4067     control-plane: controller
4068   name: notification-controller
4069   namespace: flux-system
4070 spec:
4071   replicas: 1
4072   selector:
4073     matchLabels:
4074       app: notification-controller
4075   template:
4076     metadata:
4077       annotations:
4078         prometheus.io/port: "8080"
4079         prometheus.io/scrape: "true"
4080       labels:
4081         app: notification-controller
4082     spec:
4083       containers:
4084       - args:
4085         - --watch-all-namespaces=true
4086         - --log-level=info
4087         - --log-encoding=json
4088         - --enable-leader-election
4089         env:
4090         - name: RUNTIME_NAMESPACE
4091           valueFrom:
4092             fieldRef:
4093               fieldPath: metadata.namespace
4094         image: ghcr.io/fluxcd/notification-controller:v0.20.1
4095         imagePullPolicy: IfNotPresent
4096         livenessProbe:
4097           httpGet:
4098             path: /healthz
4099             port: healthz
4100         name: manager
4101         ports:
4102         - containerPort: 9090
4103           name: http
4104         - containerPort: 9292
4105           name: http-webhook
4106         - containerPort: 8080
4107           name: http-prom
4108         - containerPort: 9440
4109           name: healthz
4110           protocol: TCP
4111         readinessProbe:
4112           httpGet:
4113             path: /readyz
4114             port: healthz
4115         resources:
4116           limits:
4117             cpu: 1000m
4118             memory: 1Gi
4119           requests:
4120             cpu: 100m
4121             memory: 64Mi
4122         securityContext:
4123           allowPrivilegeEscalation: false
4124           readOnlyRootFilesystem: true
4125         volumeMounts:
4126         - mountPath: /tmp
4127           name: temp
4128       nodeSelector:
4129         kubernetes.io/os: linux
4130       serviceAccountName: notification-controller
4131       terminationGracePeriodSeconds: 10
4132       volumes:
4133       - emptyDir: {}
4134         name: temp
4135 ---
4136 apiVersion: apps/v1
4137 kind: Deployment
4138 metadata:
4139   labels:
4140     app.kubernetes.io/instance: flux-system
4141     app.kubernetes.io/part-of: flux
4142     app.kubernetes.io/version: v0.25.3
4143     control-plane: controller
4144   name: source-controller
4145   namespace: flux-system
4146 spec:
4147   replicas: 1
4148   selector:
4149     matchLabels:
4150       app: source-controller
4151   strategy:
4152     type: Recreate
4153   template:
4154     metadata:
4155       annotations:
4156         prometheus.io/port: "8080"
4157         prometheus.io/scrape: "true"
4158       labels:
4159         app: source-controller
4160     spec:
4161       containers:
4162       - args:
4163         - --events-addr=http://notification-controller.flux-system.svc.cluster.local/
4164         - --watch-all-namespaces=true
4165         - --log-level=info
4166         - --log-encoding=json
4167         - --enable-leader-election
4168         - --storage-path=/data
4169         - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local.
4170         env:
4171         - name: RUNTIME_NAMESPACE
4172           valueFrom:
4173             fieldRef:
4174               fieldPath: metadata.namespace
4175         image: ghcr.io/fluxcd/source-controller:v0.20.1
4176         imagePullPolicy: IfNotPresent
4177         livenessProbe:
4178           httpGet:
4179             path: /healthz
4180             port: healthz
4181         name: manager
4182         ports:
4183         - containerPort: 9090
4184           name: http
4185         - containerPort: 8080
4186           name: http-prom
4187         - containerPort: 9440
4188           name: healthz
4189         readinessProbe:
4190           httpGet:
4191             path: /
4192             port: http
4193         resources:
4194           limits:
4195             cpu: 1000m
4196             memory: 1Gi
4197           requests:
4198             cpu: 50m
4199             memory: 64Mi
4200         securityContext:
4201           allowPrivilegeEscalation: false
4202           readOnlyRootFilesystem: true
4203         volumeMounts:
4204         - mountPath: /data
4205           name: data
4206         - mountPath: /tmp
4207           name: tmp
4208       nodeSelector:
4209         kubernetes.io/os: linux
4210       securityContext:
4211         fsGroup: 1337
4212       serviceAccountName: source-controller
4213       terminationGracePeriodSeconds: 10
4214       volumes:
4215       - emptyDir: {}
4216         name: data
4217       - emptyDir: {}
4218         name: tmp
4219 ---
4220 apiVersion: networking.k8s.io/v1
4221 kind: NetworkPolicy
4222 metadata:
4223   labels:
4224     app.kubernetes.io/instance: flux-system
4225     app.kubernetes.io/part-of: flux
4226     app.kubernetes.io/version: v0.25.3
4227   name: allow-egress
4228   namespace: flux-system
4229 spec:
4230   egress:
4231   - {}
4232   ingress:
4233   - from:
4234     - podSelector: {}
4235   podSelector: {}
4236   policyTypes:
4237   - Ingress
4238   - Egress
4239 ---
4240 apiVersion: networking.k8s.io/v1
4241 kind: NetworkPolicy
4242 metadata:
4243   labels:
4244     app.kubernetes.io/instance: flux-system
4245     app.kubernetes.io/part-of: flux
4246     app.kubernetes.io/version: v0.25.3
4247   name: allow-scraping
4248   namespace: flux-system
4249 spec:
4250   ingress:
4251   - from:
4252     - namespaceSelector: {}
4253     ports:
4254     - port: 8080
4255       protocol: TCP
4256   podSelector: {}
4257   policyTypes:
4258   - Ingress
4259 ---
4260 apiVersion: networking.k8s.io/v1
4261 kind: NetworkPolicy
4262 metadata:
4263   labels:
4264     app.kubernetes.io/instance: flux-system
4265     app.kubernetes.io/part-of: flux
4266     app.kubernetes.io/version: v0.25.3
4267   name: allow-webhooks
4268   namespace: flux-system
4269 spec:
4270   ingress:
4271   - from:
4272     - namespaceSelector: {}
4273   podSelector:
4274     matchLabels:
4275       app: notification-controller
4276   policyTypes:
4277   - Ingress