deploy/site/cluster-addons/flux-system/gotk-components.yaml

   1 ---
   2 # This manifest was generated by flux. DO NOT EDIT.
   3 # Flux Version: v0.27.0
   4 # Components: source-controller,kustomize-controller,helm-controller,notification-controller
   5 apiVersion: v1
   6 kind: Namespace
   7 metadata:
   8   labels:
   9     app.kubernetes.io/instance: flux-system
  10     app.kubernetes.io/part-of: flux
  11     app.kubernetes.io/version: v0.27.0
  12     pod-security.kubernetes.io/warn: restricted
  13     pod-security.kubernetes.io/warn-version: latest
  14   name: flux-system
  15 ---
  16 apiVersion: apiextensions.k8s.io/v1
  17 kind: CustomResourceDefinition
  18 metadata:
  19   annotations:
  20     controller-gen.kubebuilder.io/version: v0.7.0
  21   creationTimestamp: null
  22   labels:
  23     app.kubernetes.io/instance: flux-system
  24     app.kubernetes.io/part-of: flux
  25     app.kubernetes.io/version: v0.27.0
  26   name: alerts.notification.toolkit.fluxcd.io
  27 spec:
  28   group: notification.toolkit.fluxcd.io
  29   names:
  30     kind: Alert
  31     listKind: AlertList
  32     plural: alerts
  33     singular: alert
  34   scope: Namespaced
  35   versions:
  36   - additionalPrinterColumns:
  37     - jsonPath: .status.conditions[?(@.type=="Ready")].status
  38       name: Ready
  39       type: string
  40     - jsonPath: .status.conditions[?(@.type=="Ready")].message
  41       name: Status
  42       type: string
  43     - jsonPath: .metadata.creationTimestamp
  44       name: Age
  45       type: date
  46     name: v1beta1
  47     schema:
  48       openAPIV3Schema:
  49         description: Alert is the Schema for the alerts API
  50         properties:
  51           apiVersion:
  52             description: 'APIVersion defines the versioned schema of this representation
  53               of an object. Servers should convert recognized schemas to the latest
  54               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  55             type: string
  56           kind:
  57             description: 'Kind is a string value representing the REST resource this
  58               object represents. Servers may infer this from the endpoint the client
  59               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  60             type: string
  61           metadata:
  62             type: object
  63           spec:
  64             description: AlertSpec defines an alerting rule for events involving a
  65               list of objects
  66             properties:
  67               eventSeverity:
  68                 default: info
  69                 description: Filter events based on severity, defaults to ('info').
  70                   If set to 'info' no events will be filtered.
  71                 enum:
  72                 - info
  73                 - error
  74                 type: string
  75               eventSources:
  76                 description: Filter events based on the involved objects.
  77                 items:
  78                   description: CrossNamespaceObjectReference contains enough information
  79                     to let you locate the typed referenced object at cluster level
  80                   properties:
  81                     apiVersion:
  82                       description: API version of the referent
  83                       type: string
  84                     kind:
  85                       description: Kind of the referent
  86                       enum:
  87                       - Bucket
  88                       - GitRepository
  89                       - Kustomization
  90                       - HelmRelease
  91                       - HelmChart
  92                       - HelmRepository
  93                       - ImageRepository
  94                       - ImagePolicy
  95                       - ImageUpdateAutomation
  96                       type: string
  97                     matchLabels:
  98                       additionalProperties:
  99                         type: string
 100                       description: MatchLabels is a map of {key,value} pairs. A single
 101                         {key,value} in the matchLabels map is equivalent to an element
 102                         of matchExpressions, whose key field is "key", the operator
 103                         is "In", and the values array contains only "value". The requirements
 104                         are ANDed.
 105                       type: object
 106                     name:
 107                       description: Name of the referent
 108                       maxLength: 53
 109                       minLength: 1
 110                       type: string
 111                     namespace:
 112                       description: Namespace of the referent
 113                       maxLength: 53
 114                       minLength: 1
 115                       type: string
 116                   required:
 117                   - name
 118                   type: object
 119                 type: array
 120               exclusionList:
 121                 description: A list of Golang regular expressions to be used for excluding
 122                   messages.
 123                 items:
 124                   type: string
 125                 type: array
 126               providerRef:
 127                 description: Send events using this provider.
 128                 properties:
 129                   name:
 130                     description: Name of the referent
 131                     type: string
 132                 required:
 133                 - name
 134                 type: object
 135               summary:
 136                 description: Short description of the impact and affected cluster.
 137                 type: string
 138               suspend:
 139                 description: This flag tells the controller to suspend subsequent
 140                   events dispatching. Defaults to false.
 141                 type: boolean
 142             required:
 143             - eventSources
 144             - providerRef
 145             type: object
 146           status:
 147             default:
 148               observedGeneration: -1
 149             description: AlertStatus defines the observed state of Alert
 150             properties:
 151               conditions:
 152                 items:
 153                   description: "Condition contains details for one aspect of the current
 154                     state of this API Resource. --- This struct is intended for direct
 155                     use as an array at the field path .status.conditions.  For example,
 156                     type FooStatus struct{     // Represents the observations of a
 157                     foo's current state.     // Known .status.conditions.type are:
 158                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
 159                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
 160                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
 161                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
 162                     \n     // other fields }"
 163                   properties:
 164                     lastTransitionTime:
 165                       description: lastTransitionTime is the last time the condition
 166                         transitioned from one status to another. This should be when
 167                         the underlying condition changed.  If that is not known, then
 168                         using the time when the API field changed is acceptable.
 169                       format: date-time
 170                       type: string
 171                     message:
 172                       description: message is a human readable message indicating
 173                         details about the transition. This may be an empty string.
 174                       maxLength: 32768
 175                       type: string
 176                     observedGeneration:
 177                       description: observedGeneration represents the .metadata.generation
 178                         that the condition was set based upon. For instance, if .metadata.generation
 179                         is currently 12, but the .status.conditions[x].observedGeneration
 180                         is 9, the condition is out of date with respect to the current
 181                         state of the instance.
 182                       format: int64
 183                       minimum: 0
 184                       type: integer
 185                     reason:
 186                       description: reason contains a programmatic identifier indicating
 187                         the reason for the condition's last transition. Producers
 188                         of specific condition types may define expected values and
 189                         meanings for this field, and whether the values are considered
 190                         a guaranteed API. The value should be a CamelCase string.
 191                         This field may not be empty.
 192                       maxLength: 1024
 193                       minLength: 1
 194                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
 195                       type: string
 196                     status:
 197                       description: status of the condition, one of True, False, Unknown.
 198                       enum:
 199                       - "True"
 200                       - "False"
 201                       - Unknown
 202                       type: string
 203                     type:
 204                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
 205                         --- Many .condition.type values are consistent across resources
 206                         like Available, but because arbitrary conditions can be useful
 207                         (see .node.status.conditions), the ability to deconflict is
 208                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
 209                       maxLength: 316
 210                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
 211                       type: string
 212                   required:
 213                   - lastTransitionTime
 214                   - message
 215                   - reason
 216                   - status
 217                   - type
 218                   type: object
 219                 type: array
 220               observedGeneration:
 221                 description: ObservedGeneration is the last observed generation.
 222                 format: int64
 223                 type: integer
 224             type: object
 225         type: object
 226     served: true
 227     storage: true
 228     subresources:
 229       status: {}
 230 status:
 231   acceptedNames:
 232     kind: ""
 233     plural: ""
 234   conditions: []
 235   storedVersions: []
 236 ---
 237 apiVersion: apiextensions.k8s.io/v1
 238 kind: CustomResourceDefinition
 239 metadata:
 240   annotations:
 241     controller-gen.kubebuilder.io/version: v0.7.0
 242   creationTimestamp: null
 243   labels:
 244     app.kubernetes.io/instance: flux-system
 245     app.kubernetes.io/part-of: flux
 246     app.kubernetes.io/version: v0.27.0
 247   name: buckets.source.toolkit.fluxcd.io
 248 spec:
 249   group: source.toolkit.fluxcd.io
 250   names:
 251     kind: Bucket
 252     listKind: BucketList
 253     plural: buckets
 254     singular: bucket
 255   scope: Namespaced
 256   versions:
 257   - additionalPrinterColumns:
 258     - jsonPath: .spec.endpoint
 259       name: Endpoint
 260       type: string
 261     - jsonPath: .status.conditions[?(@.type=="Ready")].status
 262       name: Ready
 263       type: string
 264     - jsonPath: .status.conditions[?(@.type=="Ready")].message
 265       name: Status
 266       type: string
 267     - jsonPath: .metadata.creationTimestamp
 268       name: Age
 269       type: date
 270     name: v1beta1
 271     schema:
 272       openAPIV3Schema:
 273         description: Bucket is the Schema for the buckets API
 274         properties:
 275           apiVersion:
 276             description: 'APIVersion defines the versioned schema of this representation
 277               of an object. Servers should convert recognized schemas to the latest
 278               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
 279             type: string
 280           kind:
 281             description: 'Kind is a string value representing the REST resource this
 282               object represents. Servers may infer this from the endpoint the client
 283               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
 284             type: string
 285           metadata:
 286             type: object
 287           spec:
 288             description: BucketSpec defines the desired state of an S3 compatible
 289               bucket
 290             properties:
 291               accessFrom:
 292                 description: AccessFrom defines an Access Control List for allowing
 293                   cross-namespace references to this object.
 294                 properties:
 295                   namespaceSelectors:
 296                     description: NamespaceSelectors is the list of namespace selectors
 297                       to which this ACL applies. Items in this list are evaluated
 298                       using a logical OR operation.
 299                     items:
 300                       description: NamespaceSelector selects the namespaces to which
 301                         this ACL applies. An empty map of MatchLabels matches all
 302                         namespaces in a cluster.
 303                       properties:
 304                         matchLabels:
 305                           additionalProperties:
 306                             type: string
 307                           description: MatchLabels is a map of {key,value} pairs.
 308                             A single {key,value} in the matchLabels map is equivalent
 309                             to an element of matchExpressions, whose key field is
 310                             "key", the operator is "In", and the values array contains
 311                             only "value". The requirements are ANDed.
 312                           type: object
 313                       type: object
 314                     type: array
 315                 required:
 316                 - namespaceSelectors
 317                 type: object
 318               bucketName:
 319                 description: The bucket name.
 320                 type: string
 321               endpoint:
 322                 description: The bucket endpoint address.
 323                 type: string
 324               ignore:
 325                 description: Ignore overrides the set of excluded patterns in the
 326                   .sourceignore format (which is the same as .gitignore). If not provided,
 327                   a default will be used, consult the documentation for your version
 328                   to find out what those are.
 329                 type: string
 330               insecure:
 331                 description: Insecure allows connecting to a non-TLS S3 HTTP endpoint.
 332                 type: boolean
 333               interval:
 334                 description: The interval at which to check for bucket updates.
 335                 type: string
 336               provider:
 337                 default: generic
 338                 description: The S3 compatible storage provider name, default ('generic').
 339                 enum:
 340                 - generic
 341                 - aws
 342                 - gcp
 343                 type: string
 344               region:
 345                 description: The bucket region.
 346                 type: string
 347               secretRef:
 348                 description: The name of the secret containing authentication credentials
 349                   for the Bucket.
 350                 properties:
 351                   name:
 352                     description: Name of the referent
 353                     type: string
 354                 required:
 355                 - name
 356                 type: object
 357               suspend:
 358                 description: This flag tells the controller to suspend the reconciliation
 359                   of this source.
 360                 type: boolean
 361               timeout:
 362                 default: 60s
 363                 description: The timeout for download operations, defaults to 60s.
 364                 type: string
 365             required:
 366             - bucketName
 367             - endpoint
 368             - interval
 369             type: object
 370           status:
 371             default:
 372               observedGeneration: -1
 373             description: BucketStatus defines the observed state of a bucket
 374             properties:
 375               artifact:
 376                 description: Artifact represents the output of the last successful
 377                   Bucket sync.
 378                 properties:
 379                   checksum:
 380                     description: Checksum is the SHA256 checksum of the artifact.
 381                     type: string
 382                   lastUpdateTime:
 383                     description: LastUpdateTime is the timestamp corresponding to
 384                       the last update of this artifact.
 385                     format: date-time
 386                     type: string
 387                   path:
 388                     description: Path is the relative file path of this artifact.
 389                     type: string
 390                   revision:
 391                     description: Revision is a human readable identifier traceable
 392                       in the origin source system. It can be a Git commit SHA, Git
 393                       tag, a Helm index timestamp, a Helm chart version, etc.
 394                     type: string
 395                   url:
 396                     description: URL is the HTTP address of this artifact.
 397                     type: string
 398                 required:
 399                 - path
 400                 - url
 401                 type: object
 402               conditions:
 403                 description: Conditions holds the conditions for the Bucket.
 404                 items:
 405                   description: "Condition contains details for one aspect of the current
 406                     state of this API Resource. --- This struct is intended for direct
 407                     use as an array at the field path .status.conditions.  For example,
 408                     type FooStatus struct{     // Represents the observations of a
 409                     foo's current state.     // Known .status.conditions.type are:
 410                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
 411                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
 412                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
 413                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
 414                     \n     // other fields }"
 415                   properties:
 416                     lastTransitionTime:
 417                       description: lastTransitionTime is the last time the condition
 418                         transitioned from one status to another. This should be when
 419                         the underlying condition changed.  If that is not known, then
 420                         using the time when the API field changed is acceptable.
 421                       format: date-time
 422                       type: string
 423                     message:
 424                       description: message is a human readable message indicating
 425                         details about the transition. This may be an empty string.
 426                       maxLength: 32768
 427                       type: string
 428                     observedGeneration:
 429                       description: observedGeneration represents the .metadata.generation
 430                         that the condition was set based upon. For instance, if .metadata.generation
 431                         is currently 12, but the .status.conditions[x].observedGeneration
 432                         is 9, the condition is out of date with respect to the current
 433                         state of the instance.
 434                       format: int64
 435                       minimum: 0
 436                       type: integer
 437                     reason:
 438                       description: reason contains a programmatic identifier indicating
 439                         the reason for the condition's last transition. Producers
 440                         of specific condition types may define expected values and
 441                         meanings for this field, and whether the values are considered
 442                         a guaranteed API. The value should be a CamelCase string.
 443                         This field may not be empty.
 444                       maxLength: 1024
 445                       minLength: 1
 446                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
 447                       type: string
 448                     status:
 449                       description: status of the condition, one of True, False, Unknown.
 450                       enum:
 451                       - "True"
 452                       - "False"
 453                       - Unknown
 454                       type: string
 455                     type:
 456                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
 457                         --- Many .condition.type values are consistent across resources
 458                         like Available, but because arbitrary conditions can be useful
 459                         (see .node.status.conditions), the ability to deconflict is
 460                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
 461                       maxLength: 316
 462                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
 463                       type: string
 464                   required:
 465                   - lastTransitionTime
 466                   - message
 467                   - reason
 468                   - status
 469                   - type
 470                   type: object
 471                 type: array
 472               lastHandledReconcileAt:
 473                 description: LastHandledReconcileAt holds the value of the most recent
 474                   reconcile request value, so a change can be detected.
 475                 type: string
 476               observedGeneration:
 477                 description: ObservedGeneration is the last observed generation.
 478                 format: int64
 479                 type: integer
 480               url:
 481                 description: URL is the download link for the artifact output of the
 482                   last Bucket sync.
 483                 type: string
 484             type: object
 485         type: object
 486     served: true
 487     storage: true
 488     subresources:
 489       status: {}
 490 status:
 491   acceptedNames:
 492     kind: ""
 493     plural: ""
 494   conditions: []
 495   storedVersions: []
 496 ---
 497 apiVersion: apiextensions.k8s.io/v1
 498 kind: CustomResourceDefinition
 499 metadata:
 500   annotations:
 501     controller-gen.kubebuilder.io/version: v0.7.0
 502   creationTimestamp: null
 503   labels:
 504     app.kubernetes.io/instance: flux-system
 505     app.kubernetes.io/part-of: flux
 506     app.kubernetes.io/version: v0.27.0
 507   name: gitrepositories.source.toolkit.fluxcd.io
 508 spec:
 509   group: source.toolkit.fluxcd.io
 510   names:
 511     kind: GitRepository
 512     listKind: GitRepositoryList
 513     plural: gitrepositories
 514     shortNames:
 515     - gitrepo
 516     singular: gitrepository
 517   scope: Namespaced
 518   versions:
 519   - additionalPrinterColumns:
 520     - jsonPath: .spec.url
 521       name: URL
 522       type: string
 523     - jsonPath: .status.conditions[?(@.type=="Ready")].status
 524       name: Ready
 525       type: string
 526     - jsonPath: .status.conditions[?(@.type=="Ready")].message
 527       name: Status
 528       type: string
 529     - jsonPath: .metadata.creationTimestamp
 530       name: Age
 531       type: date
 532     name: v1beta1
 533     schema:
 534       openAPIV3Schema:
 535         description: GitRepository is the Schema for the gitrepositories API
 536         properties:
 537           apiVersion:
 538             description: 'APIVersion defines the versioned schema of this representation
 539               of an object. Servers should convert recognized schemas to the latest
 540               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
 541             type: string
 542           kind:
 543             description: 'Kind is a string value representing the REST resource this
 544               object represents. Servers may infer this from the endpoint the client
 545               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
 546             type: string
 547           metadata:
 548             type: object
 549           spec:
 550             description: GitRepositorySpec defines the desired state of a Git repository.
 551             properties:
 552               accessFrom:
 553                 description: AccessFrom defines an Access Control List for allowing
 554                   cross-namespace references to this object.
 555                 properties:
 556                   namespaceSelectors:
 557                     description: NamespaceSelectors is the list of namespace selectors
 558                       to which this ACL applies. Items in this list are evaluated
 559                       using a logical OR operation.
 560                     items:
 561                       description: NamespaceSelector selects the namespaces to which
 562                         this ACL applies. An empty map of MatchLabels matches all
 563                         namespaces in a cluster.
 564                       properties:
 565                         matchLabels:
 566                           additionalProperties:
 567                             type: string
 568                           description: MatchLabels is a map of {key,value} pairs.
 569                             A single {key,value} in the matchLabels map is equivalent
 570                             to an element of matchExpressions, whose key field is
 571                             "key", the operator is "In", and the values array contains
 572                             only "value". The requirements are ANDed.
 573                           type: object
 574                       type: object
 575                     type: array
 576                 required:
 577                 - namespaceSelectors
 578                 type: object
 579               gitImplementation:
 580                 default: go-git
 581                 description: Determines which git client library to use. Defaults
 582                   to go-git, valid values are ('go-git', 'libgit2').
 583                 enum:
 584                 - go-git
 585                 - libgit2
 586                 type: string
 587               ignore:
 588                 description: Ignore overrides the set of excluded patterns in the
 589                   .sourceignore format (which is the same as .gitignore). If not provided,
 590                   a default will be used, consult the documentation for your version
 591                   to find out what those are.
 592                 type: string
 593               include:
 594                 description: Extra git repositories to map into the repository
 595                 items:
 596                   description: GitRepositoryInclude defines a source with a from and
 597                     to path.
 598                   properties:
 599                     fromPath:
 600                       description: The path to copy contents from, defaults to the
 601                         root directory.
 602                       type: string
 603                     repository:
 604                       description: Reference to a GitRepository to include.
 605                       properties:
 606                         name:
 607                           description: Name of the referent
 608                           type: string
 609                       required:
 610                       - name
 611                       type: object
 612                     toPath:
 613                       description: The path to copy contents to, defaults to the name
 614                         of the source ref.
 615                       type: string
 616                   required:
 617                   - repository
 618                   type: object
 619                 type: array
 620               interval:
 621                 description: The interval at which to check for repository updates.
 622                 type: string
 623               recurseSubmodules:
 624                 description: When enabled, after the clone is created, initializes
 625                   all submodules within, using their default settings. This option
 626                   is available only when using the 'go-git' GitImplementation.
 627                 type: boolean
 628               ref:
 629                 description: The Git reference to checkout and monitor for changes,
 630                   defaults to master branch.
 631                 properties:
 632                   branch:
 633                     description: The Git branch to checkout, defaults to master.
 634                     type: string
 635                   commit:
 636                     description: The Git commit SHA to checkout, if specified Tag
 637                       filters will be ignored.
 638                     type: string
 639                   semver:
 640                     description: The Git tag semver expression, takes precedence over
 641                       Tag.
 642                     type: string
 643                   tag:
 644                     description: The Git tag to checkout, takes precedence over Branch.
 645                     type: string
 646                 type: object
 647               secretRef:
 648                 description: The secret name containing the Git credentials. For HTTPS
 649                   repositories the secret must contain username and password fields.
 650                   For SSH repositories the secret must contain identity, identity.pub
 651                   and known_hosts fields.
 652                 properties:
 653                   name:
 654                     description: Name of the referent
 655                     type: string
 656                 required:
 657                 - name
 658                 type: object
 659               suspend:
 660                 description: This flag tells the controller to suspend the reconciliation
 661                   of this source.
 662                 type: boolean
 663               timeout:
 664                 default: 60s
 665                 description: The timeout for remote Git operations like cloning, defaults
 666                   to 60s.
 667                 type: string
 668               url:
 669                 description: The repository URL, can be a HTTP/S or SSH address.
 670                 pattern: ^(http|https|ssh)://
 671                 type: string
 672               verify:
 673                 description: Verify OpenPGP signature for the Git commit HEAD points
 674                   to.
 675                 properties:
 676                   mode:
 677                     description: Mode describes what git object should be verified,
 678                       currently ('head').
 679                     enum:
 680                     - head
 681                     type: string
 682                   secretRef:
 683                     description: The secret name containing the public keys of all
 684                       trusted Git authors.
 685                     properties:
 686                       name:
 687                         description: Name of the referent
 688                         type: string
 689                     required:
 690                     - name
 691                     type: object
 692                 required:
 693                 - mode
 694                 type: object
 695             required:
 696             - interval
 697             - url
 698             type: object
 699           status:
 700             default:
 701               observedGeneration: -1
 702             description: GitRepositoryStatus defines the observed state of a Git repository.
 703             properties:
 704               artifact:
 705                 description: Artifact represents the output of the last successful
 706                   repository sync.
 707                 properties:
 708                   checksum:
 709                     description: Checksum is the SHA256 checksum of the artifact.
 710                     type: string
 711                   lastUpdateTime:
 712                     description: LastUpdateTime is the timestamp corresponding to
 713                       the last update of this artifact.
 714                     format: date-time
 715                     type: string
 716                   path:
 717                     description: Path is the relative file path of this artifact.
 718                     type: string
 719                   revision:
 720                     description: Revision is a human readable identifier traceable
 721                       in the origin source system. It can be a Git commit SHA, Git
 722                       tag, a Helm index timestamp, a Helm chart version, etc.
 723                     type: string
 724                   url:
 725                     description: URL is the HTTP address of this artifact.
 726                     type: string
 727                 required:
 728                 - path
 729                 - url
 730                 type: object
 731               conditions:
 732                 description: Conditions holds the conditions for the GitRepository.
 733                 items:
 734                   description: "Condition contains details for one aspect of the current
 735                     state of this API Resource. --- This struct is intended for direct
 736                     use as an array at the field path .status.conditions.  For example,
 737                     type FooStatus struct{     // Represents the observations of a
 738                     foo's current state.     // Known .status.conditions.type are:
 739                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
 740                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
 741                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
 742                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
 743                     \n     // other fields }"
 744                   properties:
 745                     lastTransitionTime:
 746                       description: lastTransitionTime is the last time the condition
 747                         transitioned from one status to another. This should be when
 748                         the underlying condition changed.  If that is not known, then
 749                         using the time when the API field changed is acceptable.
 750                       format: date-time
 751                       type: string
 752                     message:
 753                       description: message is a human readable message indicating
 754                         details about the transition. This may be an empty string.
 755                       maxLength: 32768
 756                       type: string
 757                     observedGeneration:
 758                       description: observedGeneration represents the .metadata.generation
 759                         that the condition was set based upon. For instance, if .metadata.generation
 760                         is currently 12, but the .status.conditions[x].observedGeneration
 761                         is 9, the condition is out of date with respect to the current
 762                         state of the instance.
 763                       format: int64
 764                       minimum: 0
 765                       type: integer
 766                     reason:
 767                       description: reason contains a programmatic identifier indicating
 768                         the reason for the condition's last transition. Producers
 769                         of specific condition types may define expected values and
 770                         meanings for this field, and whether the values are considered
 771                         a guaranteed API. The value should be a CamelCase string.
 772                         This field may not be empty.
 773                       maxLength: 1024
 774                       minLength: 1
 775                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
 776                       type: string
 777                     status:
 778                       description: status of the condition, one of True, False, Unknown.
 779                       enum:
 780                       - "True"
 781                       - "False"
 782                       - Unknown
 783                       type: string
 784                     type:
 785                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
 786                         --- Many .condition.type values are consistent across resources
 787                         like Available, but because arbitrary conditions can be useful
 788                         (see .node.status.conditions), the ability to deconflict is
 789                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
 790                       maxLength: 316
 791                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
 792                       type: string
 793                   required:
 794                   - lastTransitionTime
 795                   - message
 796                   - reason
 797                   - status
 798                   - type
 799                   type: object
 800                 type: array
 801               includedArtifacts:
 802                 description: IncludedArtifacts represents the included artifacts from
 803                   the last successful repository sync.
 804                 items:
 805                   description: Artifact represents the output of a source synchronisation.
 806                   properties:
 807                     checksum:
 808                       description: Checksum is the SHA256 checksum of the artifact.
 809                       type: string
 810                     lastUpdateTime:
 811                       description: LastUpdateTime is the timestamp corresponding to
 812                         the last update of this artifact.
 813                       format: date-time
 814                       type: string
 815                     path:
 816                       description: Path is the relative file path of this artifact.
 817                       type: string
 818                     revision:
 819                       description: Revision is a human readable identifier traceable
 820                         in the origin source system. It can be a Git commit SHA, Git
 821                         tag, a Helm index timestamp, a Helm chart version, etc.
 822                       type: string
 823                     url:
 824                       description: URL is the HTTP address of this artifact.
 825                       type: string
 826                   required:
 827                   - path
 828                   - url
 829                   type: object
 830                 type: array
 831               lastHandledReconcileAt:
 832                 description: LastHandledReconcileAt holds the value of the most recent
 833                   reconcile request value, so a change can be detected.
 834                 type: string
 835               observedGeneration:
 836                 description: ObservedGeneration is the last observed generation.
 837                 format: int64
 838                 type: integer
 839               url:
 840                 description: URL is the download link for the artifact output of the
 841                   last repository sync.
 842                 type: string
 843             type: object
 844         type: object
 845     served: true
 846     storage: true
 847     subresources:
 848       status: {}
 849 status:
 850   acceptedNames:
 851     kind: ""
 852     plural: ""
 853   conditions: []
 854   storedVersions: []
 855 ---
 856 apiVersion: apiextensions.k8s.io/v1
 857 kind: CustomResourceDefinition
 858 metadata:
 859   annotations:
 860     controller-gen.kubebuilder.io/version: v0.7.0
 861   creationTimestamp: null
 862   labels:
 863     app.kubernetes.io/instance: flux-system
 864     app.kubernetes.io/part-of: flux
 865     app.kubernetes.io/version: v0.27.0
 866   name: helmcharts.source.toolkit.fluxcd.io
 867 spec:
 868   group: source.toolkit.fluxcd.io
 869   names:
 870     kind: HelmChart
 871     listKind: HelmChartList
 872     plural: helmcharts
 873     shortNames:
 874     - hc
 875     singular: helmchart
 876   scope: Namespaced
 877   versions:
 878   - additionalPrinterColumns:
 879     - jsonPath: .spec.chart
 880       name: Chart
 881       type: string
 882     - jsonPath: .spec.version
 883       name: Version
 884       type: string
 885     - jsonPath: .spec.sourceRef.kind
 886       name: Source Kind
 887       type: string
 888     - jsonPath: .spec.sourceRef.name
 889       name: Source Name
 890       type: string
 891     - jsonPath: .status.conditions[?(@.type=="Ready")].status
 892       name: Ready
 893       type: string
 894     - jsonPath: .status.conditions[?(@.type=="Ready")].message
 895       name: Status
 896       type: string
 897     - jsonPath: .metadata.creationTimestamp
 898       name: Age
 899       type: date
 900     name: v1beta1
 901     schema:
 902       openAPIV3Schema:
 903         description: HelmChart is the Schema for the helmcharts API
 904         properties:
 905           apiVersion:
 906             description: 'APIVersion defines the versioned schema of this representation
 907               of an object. Servers should convert recognized schemas to the latest
 908               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
 909             type: string
 910           kind:
 911             description: 'Kind is a string value representing the REST resource this
 912               object represents. Servers may infer this from the endpoint the client
 913               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
 914             type: string
 915           metadata:
 916             type: object
 917           spec:
 918             description: HelmChartSpec defines the desired state of a Helm chart.
 919             properties:
 920               accessFrom:
 921                 description: AccessFrom defines an Access Control List for allowing
 922                   cross-namespace references to this object.
 923                 properties:
 924                   namespaceSelectors:
 925                     description: NamespaceSelectors is the list of namespace selectors
 926                       to which this ACL applies. Items in this list are evaluated
 927                       using a logical OR operation.
 928                     items:
 929                       description: NamespaceSelector selects the namespaces to which
 930                         this ACL applies. An empty map of MatchLabels matches all
 931                         namespaces in a cluster.
 932                       properties:
 933                         matchLabels:
 934                           additionalProperties:
 935                             type: string
 936                           description: MatchLabels is a map of {key,value} pairs.
 937                             A single {key,value} in the matchLabels map is equivalent
 938                             to an element of matchExpressions, whose key field is
 939                             "key", the operator is "In", and the values array contains
 940                             only "value". The requirements are ANDed.
 941                           type: object
 942                       type: object
 943                     type: array
 944                 required:
 945                 - namespaceSelectors
 946                 type: object
 947               chart:
 948                 description: The name or path the Helm chart is available at in the
 949                   SourceRef.
 950                 type: string
 951               interval:
 952                 description: The interval at which to check the Source for updates.
 953                 type: string
 954               reconcileStrategy:
 955                 default: ChartVersion
 956                 description: Determines what enables the creation of a new artifact.
 957                   Valid values are ('ChartVersion', 'Revision'). See the documentation
 958                   of the values for an explanation on their behavior. Defaults to
 959                   ChartVersion when omitted.
 960                 enum:
 961                 - ChartVersion
 962                 - Revision
 963                 type: string
 964               sourceRef:
 965                 description: The reference to the Source the chart is available at.
 966                 properties:
 967                   apiVersion:
 968                     description: APIVersion of the referent.
 969                     type: string
 970                   kind:
 971                     description: Kind of the referent, valid values are ('HelmRepository',
 972                       'GitRepository', 'Bucket').
 973                     enum:
 974                     - HelmRepository
 975                     - GitRepository
 976                     - Bucket
 977                     type: string
 978                   name:
 979                     description: Name of the referent.
 980                     type: string
 981                 required:
 982                 - kind
 983                 - name
 984                 type: object
 985               suspend:
 986                 description: This flag tells the controller to suspend the reconciliation
 987                   of this source.
 988                 type: boolean
 989               valuesFile:
 990                 description: Alternative values file to use as the default chart values,
 991                   expected to be a relative path in the SourceRef. Deprecated in favor
 992                   of ValuesFiles, for backwards compatibility the file defined here
 993                   is merged before the ValuesFiles items. Ignored when omitted.
 994                 type: string
 995               valuesFiles:
 996                 description: Alternative list of values files to use as the chart
 997                   values (values.yaml is not included by default), expected to be
 998                   a relative path in the SourceRef. Values files are merged in the
 999                   order of this list with the last file overriding the first. Ignored
1000                   when omitted.
1001                 items:
1002                   type: string
1003                 type: array
1004               version:
1005                 default: '*'
1006                 description: The chart version semver expression, ignored for charts
1007                   from GitRepository and Bucket sources. Defaults to latest when omitted.
1008                 type: string
1009             required:
1010             - chart
1011             - interval
1012             - sourceRef
1013             type: object
1014           status:
1015             default:
1016               observedGeneration: -1
1017             description: HelmChartStatus defines the observed state of the HelmChart.
1018             properties:
1019               artifact:
1020                 description: Artifact represents the output of the last successful
1021                   chart sync.
1022                 properties:
1023                   checksum:
1024                     description: Checksum is the SHA256 checksum of the artifact.
1025                     type: string
1026                   lastUpdateTime:
1027                     description: LastUpdateTime is the timestamp corresponding to
1028                       the last update of this artifact.
1029                     format: date-time
1030                     type: string
1031                   path:
1032                     description: Path is the relative file path of this artifact.
1033                     type: string
1034                   revision:
1035                     description: Revision is a human readable identifier traceable
1036                       in the origin source system. It can be a Git commit SHA, Git
1037                       tag, a Helm index timestamp, a Helm chart version, etc.
1038                     type: string
1039                   url:
1040                     description: URL is the HTTP address of this artifact.
1041                     type: string
1042                 required:
1043                 - path
1044                 - url
1045                 type: object
1046               conditions:
1047                 description: Conditions holds the conditions for the HelmChart.
1048                 items:
1049                   description: "Condition contains details for one aspect of the current
1050                     state of this API Resource. --- This struct is intended for direct
1051                     use as an array at the field path .status.conditions.  For example,
1052                     type FooStatus struct{     // Represents the observations of a
1053                     foo's current state.     // Known .status.conditions.type are:
1054                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
1055                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
1056                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
1057                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
1058                     \n     // other fields }"
1059                   properties:
1060                     lastTransitionTime:
1061                       description: lastTransitionTime is the last time the condition
1062                         transitioned from one status to another. This should be when
1063                         the underlying condition changed.  If that is not known, then
1064                         using the time when the API field changed is acceptable.
1065                       format: date-time
1066                       type: string
1067                     message:
1068                       description: message is a human readable message indicating
1069                         details about the transition. This may be an empty string.
1070                       maxLength: 32768
1071                       type: string
1072                     observedGeneration:
1073                       description: observedGeneration represents the .metadata.generation
1074                         that the condition was set based upon. For instance, if .metadata.generation
1075                         is currently 12, but the .status.conditions[x].observedGeneration
1076                         is 9, the condition is out of date with respect to the current
1077                         state of the instance.
1078                       format: int64
1079                       minimum: 0
1080                       type: integer
1081                     reason:
1082                       description: reason contains a programmatic identifier indicating
1083                         the reason for the condition's last transition. Producers
1084                         of specific condition types may define expected values and
1085                         meanings for this field, and whether the values are considered
1086                         a guaranteed API. The value should be a CamelCase string.
1087                         This field may not be empty.
1088                       maxLength: 1024
1089                       minLength: 1
1090                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
1091                       type: string
1092                     status:
1093                       description: status of the condition, one of True, False, Unknown.
1094                       enum:
1095                       - "True"
1096                       - "False"
1097                       - Unknown
1098                       type: string
1099                     type:
1100                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
1101                         --- Many .condition.type values are consistent across resources
1102                         like Available, but because arbitrary conditions can be useful
1103                         (see .node.status.conditions), the ability to deconflict is
1104                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
1105                       maxLength: 316
1106                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
1107                       type: string
1108                   required:
1109                   - lastTransitionTime
1110                   - message
1111                   - reason
1112                   - status
1113                   - type
1114                   type: object
1115                 type: array
1116               lastHandledReconcileAt:
1117                 description: LastHandledReconcileAt holds the value of the most recent
1118                   reconcile request value, so a change can be detected.
1119                 type: string
1120               observedGeneration:
1121                 description: ObservedGeneration is the last observed generation.
1122                 format: int64
1123                 type: integer
1124               url:
1125                 description: URL is the download link for the last chart pulled.
1126                 type: string
1127             type: object
1128         type: object
1129     served: true
1130     storage: true
1131     subresources:
1132       status: {}
1133 status:
1134   acceptedNames:
1135     kind: ""
1136     plural: ""
1137   conditions: []
1138   storedVersions: []
1139 ---
1140 apiVersion: apiextensions.k8s.io/v1
1141 kind: CustomResourceDefinition
1142 metadata:
1143   annotations:
1144     controller-gen.kubebuilder.io/version: v0.7.0
1145   creationTimestamp: null
1146   labels:
1147     app.kubernetes.io/instance: flux-system
1148     app.kubernetes.io/part-of: flux
1149     app.kubernetes.io/version: v0.27.0
1150   name: helmreleases.helm.toolkit.fluxcd.io
1151 spec:
1152   group: helm.toolkit.fluxcd.io
1153   names:
1154     kind: HelmRelease
1155     listKind: HelmReleaseList
1156     plural: helmreleases
1157     shortNames:
1158     - hr
1159     singular: helmrelease
1160   scope: Namespaced
1161   versions:
1162   - additionalPrinterColumns:
1163     - jsonPath: .status.conditions[?(@.type=="Ready")].status
1164       name: Ready
1165       type: string
1166     - jsonPath: .status.conditions[?(@.type=="Ready")].message
1167       name: Status
1168       type: string
1169     - jsonPath: .metadata.creationTimestamp
1170       name: Age
1171       type: date
1172     name: v2beta1
1173     schema:
1174       openAPIV3Schema:
1175         description: HelmRelease is the Schema for the helmreleases API
1176         properties:
1177           apiVersion:
1178             description: 'APIVersion defines the versioned schema of this representation
1179               of an object. Servers should convert recognized schemas to the latest
1180               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
1181             type: string
1182           kind:
1183             description: 'Kind is a string value representing the REST resource this
1184               object represents. Servers may infer this from the endpoint the client
1185               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
1186             type: string
1187           metadata:
1188             type: object
1189           spec:
1190             description: HelmReleaseSpec defines the desired state of a Helm release.
1191             properties:
1192               chart:
1193                 description: Chart defines the template of the v1beta1.HelmChart that
1194                   should be created for this HelmRelease.
1195                 properties:
1196                   spec:
1197                     description: Spec holds the template for the v1beta1.HelmChartSpec
1198                       for this HelmRelease.
1199                     properties:
1200                       chart:
1201                         description: The name or path the Helm chart is available
1202                           at in the SourceRef.
1203                         type: string
1204                       interval:
1205                         description: Interval at which to check the v1beta1.Source
1206                           for updates. Defaults to 'HelmReleaseSpec.Interval'.
1207                         type: string
1208                       reconcileStrategy:
1209                         default: ChartVersion
1210                         description: Determines what enables the creation of a new
1211                           artifact. Valid values are ('ChartVersion', 'Revision').
1212                           See the documentation of the values for an explanation on
1213                           their behavior. Defaults to ChartVersion when omitted.
1214                         enum:
1215                         - ChartVersion
1216                         - Revision
1217                         type: string
1218                       sourceRef:
1219                         description: The name and namespace of the v1beta1.Source
1220                           the chart is available at.
1221                         properties:
1222                           apiVersion:
1223                             description: APIVersion of the referent.
1224                             type: string
1225                           kind:
1226                             description: Kind of the referent.
1227                             enum:
1228                             - HelmRepository
1229                             - GitRepository
1230                             - Bucket
1231                             type: string
1232                           name:
1233                             description: Name of the referent.
1234                             maxLength: 253
1235                             minLength: 1
1236                             type: string
1237                           namespace:
1238                             description: Namespace of the referent.
1239                             maxLength: 63
1240                             minLength: 1
1241                             type: string
1242                         required:
1243                         - name
1244                         type: object
1245                       valuesFile:
1246                         description: Alternative values file to use as the default
1247                           chart values, expected to be a relative path in the SourceRef.
1248                           Deprecated in favor of ValuesFiles, for backwards compatibility
1249                           the file defined here is merged before the ValuesFiles items.
1250                           Ignored when omitted.
1251                         type: string
1252                       valuesFiles:
1253                         description: Alternative list of values files to use as the
1254                           chart values (values.yaml is not included by default), expected
1255                           to be a relative path in the SourceRef. Values files are
1256                           merged in the order of this list with the last file overriding
1257                           the first. Ignored when omitted.
1258                         items:
1259                           type: string
1260                         type: array
1261                       version:
1262                         default: '*'
1263                         description: Version semver expression, ignored for charts
1264                           from v1beta1.GitRepository and v1beta1.Bucket sources. Defaults
1265                           to latest when omitted.
1266                         type: string
1267                     required:
1268                     - chart
1269                     - sourceRef
1270                     type: object
1271                 required:
1272                 - spec
1273                 type: object
1274               dependsOn:
1275                 description: DependsOn may contain a dependency.CrossNamespaceDependencyReference
1276                   slice with references to HelmRelease resources that must be ready
1277                   before this HelmRelease can be reconciled.
1278                 items:
1279                   description: CrossNamespaceDependencyReference holds the reference
1280                     to a dependency.
1281                   properties:
1282                     name:
1283                       description: Name holds the name reference of a dependency.
1284                       type: string
1285                     namespace:
1286                       description: Namespace holds the namespace reference of a dependency.
1287                       type: string
1288                   required:
1289                   - name
1290                   type: object
1291                 type: array
1292               install:
1293                 description: Install holds the configuration for Helm install actions
1294                   for this HelmRelease.
1295                 properties:
1296                   crds:
1297                     description: "CRDs upgrade CRDs from the Helm Chart's crds directory
1298                       according to the CRD upgrade policy provided here. Valid values
1299                       are `Skip`, `Create` or `CreateReplace`. Default is `Create`
1300                       and if omitted CRDs are installed but not updated. \n Skip:
1301                       do neither install nor replace (update) any CRDs. \n Create:
1302                       new CRDs are created, existing CRDs are neither updated nor
1303                       deleted. \n CreateReplace: new CRDs are created, existing CRDs
1304                       are updated (replaced) but not deleted. \n By default, CRDs
1305                       are applied (installed) during Helm install action. With this
1306                       option users can opt-in to CRD replace existing CRDs on Helm
1307                       install actions, which is not (yet) natively supported by Helm.
1308                       https://helm.sh/docs/chart_best_practices/custom_resource_definitions."
1309                     enum:
1310                     - Skip
1311                     - Create
1312                     - CreateReplace
1313                     type: string
1314                   createNamespace:
1315                     description: CreateNamespace tells the Helm install action to
1316                       create the HelmReleaseSpec.TargetNamespace if it does not exist
1317                       yet. On uninstall, the namespace will not be garbage collected.
1318                     type: boolean
1319                   disableHooks:
1320                     description: DisableHooks prevents hooks from running during the
1321                       Helm install action.
1322                     type: boolean
1323                   disableOpenAPIValidation:
1324                     description: DisableOpenAPIValidation prevents the Helm install
1325                       action from validating rendered templates against the Kubernetes
1326                       OpenAPI Schema.
1327                     type: boolean
1328                   disableWait:
1329                     description: DisableWait disables the waiting for resources to
1330                       be ready after a Helm install has been performed.
1331                     type: boolean
1332                   disableWaitForJobs:
1333                     description: DisableWaitForJobs disables waiting for jobs to complete
1334                       after a Helm install has been performed.
1335                     type: boolean
1336                   remediation:
1337                     description: Remediation holds the remediation configuration for
1338                       when the Helm install action for the HelmRelease fails. The
1339                       default is to not perform any action.
1340                     properties:
1341                       ignoreTestFailures:
1342                         description: IgnoreTestFailures tells the controller to skip
1343                           remediation when the Helm tests are run after an install
1344                           action but fail. Defaults to 'Test.IgnoreFailures'.
1345                         type: boolean
1346                       remediateLastFailure:
1347                         description: RemediateLastFailure tells the controller to
1348                           remediate the last failure, when no retries remain. Defaults
1349                           to 'false'.
1350                         type: boolean
1351                       retries:
1352                         description: Retries is the number of retries that should
1353                           be attempted on failures before bailing. Remediation, using
1354                           an uninstall, is performed between each attempt. Defaults
1355                           to '0', a negative integer equals to unlimited retries.
1356                         type: integer
1357                     type: object
1358                   replace:
1359                     description: Replace tells the Helm install action to re-use the
1360                       'ReleaseName', but only if that name is a deleted release which
1361                       remains in the history.
1362                     type: boolean
1363                   skipCRDs:
1364                     description: "SkipCRDs tells the Helm install action to not install
1365                       any CRDs. By default, CRDs are installed if not already present.
1366                       \n Deprecated use CRD policy (`crds`) attribute with value `Skip`
1367                       instead."
1368                     type: boolean
1369                   timeout:
1370                     description: Timeout is the time to wait for any individual Kubernetes
1371                       operation (like Jobs for hooks) during the performance of a
1372                       Helm install action. Defaults to 'HelmReleaseSpec.Timeout'.
1373                     type: string
1374                 type: object
1375               interval:
1376                 description: Interval at which to reconcile the Helm release.
1377                 type: string
1378               kubeConfig:
1379                 description: KubeConfig for reconciling the HelmRelease on a remote
1380                   cluster. When specified, KubeConfig takes precedence over ServiceAccountName.
1381                 properties:
1382                   secretRef:
1383                     description: SecretRef holds the name to a secret that contains
1384                       a 'value' key with the kubeconfig file as the value. It must
1385                       be in the same namespace as the HelmRelease. It is recommended
1386                       that the kubeconfig is self-contained, and the secret is regularly
1387                       updated if credentials such as a cloud-access-token expire.
1388                       Cloud specific `cmd-path` auth helpers will not function without
1389                       adding binaries and credentials to the Pod that is responsible
1390                       for reconciling the HelmRelease.
1391                     properties:
1392                       name:
1393                         description: Name of the referent
1394                         type: string
1395                     required:
1396                     - name
1397                     type: object
1398                 type: object
1399               maxHistory:
1400                 description: MaxHistory is the number of revisions saved by Helm for
1401                   this HelmRelease. Use '0' for an unlimited number of revisions;
1402                   defaults to '10'.
1403                 type: integer
1404               postRenderers:
1405                 description: PostRenderers holds an array of Helm PostRenderers, which
1406                   will be applied in order of their definition.
1407                 items:
1408                   description: PostRenderer contains a Helm PostRenderer specification.
1409                   properties:
1410                     kustomize:
1411                       description: Kustomization to apply as PostRenderer.
1412                       properties:
1413                         images:
1414                           description: Images is a list of (image name, new name,
1415                             new tag or digest) for changing image names, tags or digests.
1416                             This can also be achieved with a patch, but this operator
1417                             is simpler to specify.
1418                           items:
1419                             description: Image contains an image name, a new name,
1420                               a new tag or digest, which will replace the original
1421                               name and tag.
1422                             properties:
1423                               digest:
1424                                 description: Digest is the value used to replace the
1425                                   original image tag. If digest is present NewTag
1426                                   value is ignored.
1427                                 type: string
1428                               name:
1429                                 description: Name is a tag-less image name.
1430                                 type: string
1431                               newName:
1432                                 description: NewName is the value used to replace
1433                                   the original name.
1434                                 type: string
1435                               newTag:
1436                                 description: NewTag is the value used to replace the
1437                                   original tag.
1438                                 type: string
1439                             required:
1440                             - name
1441                             type: object
1442                           type: array
1443                         patchesJson6902:
1444                           description: JSON 6902 patches, defined as inline YAML objects.
1445                           items:
1446                             description: JSON6902Patch contains a JSON6902 patch and
1447                               the target the patch should be applied to.
1448                             properties:
1449                               patch:
1450                                 description: Patch contains the JSON6902 patch document
1451                                   with an array of operation objects.
1452                                 items:
1453                                   description: JSON6902 is a JSON6902 operation object.
1454                                     https://datatracker.ietf.org/doc/html/rfc6902#section-4
1455                                   properties:
1456                                     from:
1457                                       description: From contains a JSON-pointer value
1458                                         that references a location within the target
1459                                         document where the operation is performed.
1460                                         The meaning of the value depends on the value
1461                                         of Op, and is NOT taken into account by all
1462                                         operations.
1463                                       type: string
1464                                     op:
1465                                       description: Op indicates the operation to perform.
1466                                         Its value MUST be one of "add", "remove",
1467                                         "replace", "move", "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4
1468                                       enum:
1469                                       - test
1470                                       - remove
1471                                       - add
1472                                       - replace
1473                                       - move
1474                                       - copy
1475                                       type: string
1476                                     path:
1477                                       description: Path contains the JSON-pointer
1478                                         value that references a location within the
1479                                         target document where the operation is performed.
1480                                         The meaning of the value depends on the value
1481                                         of Op.
1482                                       type: string
1483                                     value:
1484                                       description: Value contains a valid JSON structure.
1485                                         The meaning of the value depends on the value
1486                                         of Op, and is NOT taken into account by all
1487                                         operations.
1488                                       x-kubernetes-preserve-unknown-fields: true
1489                                   required:
1490                                   - op
1491                                   - path
1492                                   type: object
1493                                 type: array
1494                               target:
1495                                 description: Target points to the resources that the
1496                                   patch document should be applied to.
1497                                 properties:
1498                                   annotationSelector:
1499                                     description: AnnotationSelector is a string that
1500                                       follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
1501                                       It matches with the resource annotations.
1502                                     type: string
1503                                   group:
1504                                     description: Group is the API group to select
1505                                       resources from. Together with Version and Kind
1506                                       it is capable of unambiguously identifying and/or
1507                                       selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
1508                                     type: string
1509                                   kind:
1510                                     description: Kind of the API Group to select resources
1511                                       from. Together with Group and Version it is
1512                                       capable of unambiguously identifying and/or
1513                                       selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
1514                                     type: string
1515                                   labelSelector:
1516                                     description: LabelSelector is a string that follows
1517                                       the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
1518                                       It matches with the resource labels.
1519                                     type: string
1520                                   name:
1521                                     description: Name to match resources with.
1522                                     type: string
1523                                   namespace:
1524                                     description: Namespace to select resources from.
1525                                     type: string
1526                                   version:
1527                                     description: Version of the API Group to select
1528                                       resources from. Together with Group and Kind
1529                                       it is capable of unambiguously identifying and/or
1530                                       selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
1531                                     type: string
1532                                 type: object
1533                             required:
1534                             - patch
1535                             - target
1536                             type: object
1537                           type: array
1538                         patchesStrategicMerge:
1539                           description: Strategic merge patches, defined as inline
1540                             YAML objects.
1541                           items:
1542                             x-kubernetes-preserve-unknown-fields: true
1543                           type: array
1544                       type: object
1545                   type: object
1546                 type: array
1547               releaseName:
1548                 description: ReleaseName used for the Helm release. Defaults to a
1549                   composition of '[TargetNamespace-]Name'.
1550                 maxLength: 53
1551                 minLength: 1
1552                 type: string
1553               rollback:
1554                 description: Rollback holds the configuration for Helm rollback actions
1555                   for this HelmRelease.
1556                 properties:
1557                   cleanupOnFail:
1558                     description: CleanupOnFail allows deletion of new resources created
1559                       during the Helm rollback action when it fails.
1560                     type: boolean
1561                   disableHooks:
1562                     description: DisableHooks prevents hooks from running during the
1563                       Helm rollback action.
1564                     type: boolean
1565                   disableWait:
1566                     description: DisableWait disables the waiting for resources to
1567                       be ready after a Helm rollback has been performed.
1568                     type: boolean
1569                   disableWaitForJobs:
1570                     description: DisableWaitForJobs disables waiting for jobs to complete
1571                       after a Helm rollback has been performed.
1572                     type: boolean
1573                   force:
1574                     description: Force forces resource updates through a replacement
1575                       strategy.
1576                     type: boolean
1577                   recreate:
1578                     description: Recreate performs pod restarts for the resource if
1579                       applicable.
1580                     type: boolean
1581                   timeout:
1582                     description: Timeout is the time to wait for any individual Kubernetes
1583                       operation (like Jobs for hooks) during the performance of a
1584                       Helm rollback action. Defaults to 'HelmReleaseSpec.Timeout'.
1585                     type: string
1586                 type: object
1587               serviceAccountName:
1588                 description: The name of the Kubernetes service account to impersonate
1589                   when reconciling this HelmRelease.
1590                 type: string
1591               storageNamespace:
1592                 description: StorageNamespace used for the Helm storage. Defaults
1593                   to the namespace of the HelmRelease.
1594                 maxLength: 63
1595                 minLength: 1
1596                 type: string
1597               suspend:
1598                 description: Suspend tells the controller to suspend reconciliation
1599                   for this HelmRelease, it does not apply to already started reconciliations.
1600                   Defaults to false.
1601                 type: boolean
1602               targetNamespace:
1603                 description: TargetNamespace to target when performing operations
1604                   for the HelmRelease. Defaults to the namespace of the HelmRelease.
1605                 maxLength: 63
1606                 minLength: 1
1607                 type: string
1608               test:
1609                 description: Test holds the configuration for Helm test actions for
1610                   this HelmRelease.
1611                 properties:
1612                   enable:
1613                     description: Enable enables Helm test actions for this HelmRelease
1614                       after an Helm install or upgrade action has been performed.
1615                     type: boolean
1616                   ignoreFailures:
1617                     description: IgnoreFailures tells the controller to skip remediation
1618                       when the Helm tests are run but fail. Can be overwritten for
1619                       tests run after install or upgrade actions in 'Install.IgnoreTestFailures'
1620                       and 'Upgrade.IgnoreTestFailures'.
1621                     type: boolean
1622                   timeout:
1623                     description: Timeout is the time to wait for any individual Kubernetes
1624                       operation during the performance of a Helm test action. Defaults
1625                       to 'HelmReleaseSpec.Timeout'.
1626                     type: string
1627                 type: object
1628               timeout:
1629                 description: Timeout is the time to wait for any individual Kubernetes
1630                   operation (like Jobs for hooks) during the performance of a Helm
1631                   action. Defaults to '5m0s'.
1632                 type: string
1633               uninstall:
1634                 description: Uninstall holds the configuration for Helm uninstall
1635                   actions for this HelmRelease.
1636                 properties:
1637                   disableHooks:
1638                     description: DisableHooks prevents hooks from running during the
1639                       Helm rollback action.
1640                     type: boolean
1641                   disableWait:
1642                     description: DisableWait disables waiting for all the resources
1643                       to be deleted after a Helm uninstall is performed.
1644                     type: boolean
1645                   keepHistory:
1646                     description: KeepHistory tells Helm to remove all associated resources
1647                       and mark the release as deleted, but retain the release history.
1648                     type: boolean
1649                   timeout:
1650                     description: Timeout is the time to wait for any individual Kubernetes
1651                       operation (like Jobs for hooks) during the performance of a
1652                       Helm uninstall action. Defaults to 'HelmReleaseSpec.Timeout'.
1653                     type: string
1654                 type: object
1655               upgrade:
1656                 description: Upgrade holds the configuration for Helm upgrade actions
1657                   for this HelmRelease.
1658                 properties:
1659                   cleanupOnFail:
1660                     description: CleanupOnFail allows deletion of new resources created
1661                       during the Helm upgrade action when it fails.
1662                     type: boolean
1663                   crds:
1664                     description: "CRDs upgrade CRDs from the Helm Chart's crds directory
1665                       according to the CRD upgrade policy provided here. Valid values
1666                       are `Skip`, `Create` or `CreateReplace`. Default is `Skip` and
1667                       if omitted CRDs are neither installed nor upgraded. \n Skip:
1668                       do neither install nor replace (update) any CRDs. \n Create:
1669                       new CRDs are created, existing CRDs are neither updated nor
1670                       deleted. \n CreateReplace: new CRDs are created, existing CRDs
1671                       are updated (replaced) but not deleted. \n By default, CRDs
1672                       are not applied during Helm upgrade action. With this option
1673                       users can opt-in to CRD upgrade, which is not (yet) natively
1674                       supported by Helm. https://helm.sh/docs/chart_best_practices/custom_resource_definitions."
1675                     enum:
1676                     - Skip
1677                     - Create
1678                     - CreateReplace
1679                     type: string
1680                   disableHooks:
1681                     description: DisableHooks prevents hooks from running during the
1682                       Helm upgrade action.
1683                     type: boolean
1684                   disableOpenAPIValidation:
1685                     description: DisableOpenAPIValidation prevents the Helm upgrade
1686                       action from validating rendered templates against the Kubernetes
1687                       OpenAPI Schema.
1688                     type: boolean
1689                   disableWait:
1690                     description: DisableWait disables the waiting for resources to
1691                       be ready after a Helm upgrade has been performed.
1692                     type: boolean
1693                   disableWaitForJobs:
1694                     description: DisableWaitForJobs disables waiting for jobs to complete
1695                       after a Helm upgrade has been performed.
1696                     type: boolean
1697                   force:
1698                     description: Force forces resource updates through a replacement
1699                       strategy.
1700                     type: boolean
1701                   preserveValues:
1702                     description: PreserveValues will make Helm reuse the last release's
1703                       values and merge in overrides from 'Values'. Setting this flag
1704                       makes the HelmRelease non-declarative.
1705                     type: boolean
1706                   remediation:
1707                     description: Remediation holds the remediation configuration for
1708                       when the Helm upgrade action for the HelmRelease fails. The
1709                       default is to not perform any action.
1710                     properties:
1711                       ignoreTestFailures:
1712                         description: IgnoreTestFailures tells the controller to skip
1713                           remediation when the Helm tests are run after an upgrade
1714                           action but fail. Defaults to 'Test.IgnoreFailures'.
1715                         type: boolean
1716                       remediateLastFailure:
1717                         description: RemediateLastFailure tells the controller to
1718                           remediate the last failure, when no retries remain. Defaults
1719                           to 'false' unless 'Retries' is greater than 0.
1720                         type: boolean
1721                       retries:
1722                         description: Retries is the number of retries that should
1723                           be attempted on failures before bailing. Remediation, using
1724                           'Strategy', is performed between each attempt. Defaults
1725                           to '0', a negative integer equals to unlimited retries.
1726                         type: integer
1727                       strategy:
1728                         description: Strategy to use for failure remediation. Defaults
1729                           to 'rollback'.
1730                         enum:
1731                         - rollback
1732                         - uninstall
1733                         type: string
1734                     type: object
1735                   timeout:
1736                     description: Timeout is the time to wait for any individual Kubernetes
1737                       operation (like Jobs for hooks) during the performance of a
1738                       Helm upgrade action. Defaults to 'HelmReleaseSpec.Timeout'.
1739                     type: string
1740                 type: object
1741               values:
1742                 description: Values holds the values for this Helm release.
1743                 x-kubernetes-preserve-unknown-fields: true
1744               valuesFrom:
1745                 description: ValuesFrom holds references to resources containing Helm
1746                   values for this HelmRelease, and information about how they should
1747                   be merged.
1748                 items:
1749                   description: ValuesReference contains a reference to a resource
1750                     containing Helm values, and optionally the key they can be found
1751                     at.
1752                   properties:
1753                     kind:
1754                       description: Kind of the values referent, valid values are ('Secret',
1755                         'ConfigMap').
1756                       enum:
1757                       - Secret
1758                       - ConfigMap
1759                       type: string
1760                     name:
1761                       description: Name of the values referent. Should reside in the
1762                         same namespace as the referring resource.
1763                       maxLength: 253
1764                       minLength: 1
1765                       type: string
1766                     optional:
1767                       description: Optional marks this ValuesReference as optional.
1768                         When set, a not found error for the values reference is ignored,
1769                         but any ValuesKey, TargetPath or transient error will still
1770                         result in a reconciliation failure.
1771                       type: boolean
1772                     targetPath:
1773                       description: TargetPath is the YAML dot notation path the value
1774                         should be merged at. When set, the ValuesKey is expected to
1775                         be a single flat value. Defaults to 'None', which results
1776                         in the values getting merged at the root.
1777                       type: string
1778                     valuesKey:
1779                       description: ValuesKey is the data key where the values.yaml
1780                         or a specific value can be found at. Defaults to 'values.yaml'.
1781                       type: string
1782                   required:
1783                   - kind
1784                   - name
1785                   type: object
1786                 type: array
1787             required:
1788             - chart
1789             - interval
1790             type: object
1791           status:
1792             default:
1793               observedGeneration: -1
1794             description: HelmReleaseStatus defines the observed state of a HelmRelease.
1795             properties:
1796               conditions:
1797                 description: Conditions holds the conditions for the HelmRelease.
1798                 items:
1799                   description: "Condition contains details for one aspect of the current
1800                     state of this API Resource. --- This struct is intended for direct
1801                     use as an array at the field path .status.conditions.  For example,
1802                     type FooStatus struct{     // Represents the observations of a
1803                     foo's current state.     // Known .status.conditions.type are:
1804                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
1805                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
1806                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
1807                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
1808                     \n     // other fields }"
1809                   properties:
1810                     lastTransitionTime:
1811                       description: lastTransitionTime is the last time the condition
1812                         transitioned from one status to another. This should be when
1813                         the underlying condition changed.  If that is not known, then
1814                         using the time when the API field changed is acceptable.
1815                       format: date-time
1816                       type: string
1817                     message:
1818                       description: message is a human readable message indicating
1819                         details about the transition. This may be an empty string.
1820                       maxLength: 32768
1821                       type: string
1822                     observedGeneration:
1823                       description: observedGeneration represents the .metadata.generation
1824                         that the condition was set based upon. For instance, if .metadata.generation
1825                         is currently 12, but the .status.conditions[x].observedGeneration
1826                         is 9, the condition is out of date with respect to the current
1827                         state of the instance.
1828                       format: int64
1829                       minimum: 0
1830                       type: integer
1831                     reason:
1832                       description: reason contains a programmatic identifier indicating
1833                         the reason for the condition's last transition. Producers
1834                         of specific condition types may define expected values and
1835                         meanings for this field, and whether the values are considered
1836                         a guaranteed API. The value should be a CamelCase string.
1837                         This field may not be empty.
1838                       maxLength: 1024
1839                       minLength: 1
1840                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
1841                       type: string
1842                     status:
1843                       description: status of the condition, one of True, False, Unknown.
1844                       enum:
1845                       - "True"
1846                       - "False"
1847                       - Unknown
1848                       type: string
1849                     type:
1850                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
1851                         --- Many .condition.type values are consistent across resources
1852                         like Available, but because arbitrary conditions can be useful
1853                         (see .node.status.conditions), the ability to deconflict is
1854                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
1855                       maxLength: 316
1856                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
1857                       type: string
1858                   required:
1859                   - lastTransitionTime
1860                   - message
1861                   - reason
1862                   - status
1863                   - type
1864                   type: object
1865                 type: array
1866               failures:
1867                 description: Failures is the reconciliation failure count against
1868                   the latest desired state. It is reset after a successful reconciliation.
1869                 format: int64
1870                 type: integer
1871               helmChart:
1872                 description: HelmChart is the namespaced name of the HelmChart resource
1873                   created by the controller for the HelmRelease.
1874                 type: string
1875               installFailures:
1876                 description: InstallFailures is the install failure count against
1877                   the latest desired state. It is reset after a successful reconciliation.
1878                 format: int64
1879                 type: integer
1880               lastAppliedRevision:
1881                 description: LastAppliedRevision is the revision of the last successfully
1882                   applied source.
1883                 type: string
1884               lastAttemptedRevision:
1885                 description: LastAttemptedRevision is the revision of the last reconciliation
1886                   attempt.
1887                 type: string
1888               lastAttemptedValuesChecksum:
1889                 description: LastAttemptedValuesChecksum is the SHA1 checksum of the
1890                   values of the last reconciliation attempt.
1891                 type: string
1892               lastHandledReconcileAt:
1893                 description: LastHandledReconcileAt holds the value of the most recent
1894                   reconcile request value, so a change can be detected.
1895                 type: string
1896               lastReleaseRevision:
1897                 description: LastReleaseRevision is the revision of the last successful
1898                   Helm release.
1899                 type: integer
1900               observedGeneration:
1901                 description: ObservedGeneration is the last observed generation.
1902                 format: int64
1903                 type: integer
1904               upgradeFailures:
1905                 description: UpgradeFailures is the upgrade failure count against
1906                   the latest desired state. It is reset after a successful reconciliation.
1907                 format: int64
1908                 type: integer
1909             type: object
1910         type: object
1911     served: true
1912     storage: true
1913     subresources:
1914       status: {}
1915 status:
1916   acceptedNames:
1917     kind: ""
1918     plural: ""
1919   conditions: []
1920   storedVersions: []
1921 ---
1922 apiVersion: apiextensions.k8s.io/v1
1923 kind: CustomResourceDefinition
1924 metadata:
1925   annotations:
1926     controller-gen.kubebuilder.io/version: v0.7.0
1927   creationTimestamp: null
1928   labels:
1929     app.kubernetes.io/instance: flux-system
1930     app.kubernetes.io/part-of: flux
1931     app.kubernetes.io/version: v0.27.0
1932   name: helmrepositories.source.toolkit.fluxcd.io
1933 spec:
1934   group: source.toolkit.fluxcd.io
1935   names:
1936     kind: HelmRepository
1937     listKind: HelmRepositoryList
1938     plural: helmrepositories
1939     shortNames:
1940     - helmrepo
1941     singular: helmrepository
1942   scope: Namespaced
1943   versions:
1944   - additionalPrinterColumns:
1945     - jsonPath: .spec.url
1946       name: URL
1947       type: string
1948     - jsonPath: .status.conditions[?(@.type=="Ready")].status
1949       name: Ready
1950       type: string
1951     - jsonPath: .status.conditions[?(@.type=="Ready")].message
1952       name: Status
1953       type: string
1954     - jsonPath: .metadata.creationTimestamp
1955       name: Age
1956       type: date
1957     name: v1beta1
1958     schema:
1959       openAPIV3Schema:
1960         description: HelmRepository is the Schema for the helmrepositories API
1961         properties:
1962           apiVersion:
1963             description: 'APIVersion defines the versioned schema of this representation
1964               of an object. Servers should convert recognized schemas to the latest
1965               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
1966             type: string
1967           kind:
1968             description: 'Kind is a string value representing the REST resource this
1969               object represents. Servers may infer this from the endpoint the client
1970               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
1971             type: string
1972           metadata:
1973             type: object
1974           spec:
1975             description: HelmRepositorySpec defines the reference to a Helm repository.
1976             properties:
1977               accessFrom:
1978                 description: AccessFrom defines an Access Control List for allowing
1979                   cross-namespace references to this object.
1980                 properties:
1981                   namespaceSelectors:
1982                     description: NamespaceSelectors is the list of namespace selectors
1983                       to which this ACL applies. Items in this list are evaluated
1984                       using a logical OR operation.
1985                     items:
1986                       description: NamespaceSelector selects the namespaces to which
1987                         this ACL applies. An empty map of MatchLabels matches all
1988                         namespaces in a cluster.
1989                       properties:
1990                         matchLabels:
1991                           additionalProperties:
1992                             type: string
1993                           description: MatchLabels is a map of {key,value} pairs.
1994                             A single {key,value} in the matchLabels map is equivalent
1995                             to an element of matchExpressions, whose key field is
1996                             "key", the operator is "In", and the values array contains
1997                             only "value". The requirements are ANDed.
1998                           type: object
1999                       type: object
2000                     type: array
2001                 required:
2002                 - namespaceSelectors
2003                 type: object
2004               interval:
2005                 description: The interval at which to check the upstream for updates.
2006                 type: string
2007               passCredentials:
2008                 description: PassCredentials allows the credentials from the SecretRef
2009                   to be passed on to a host that does not match the host as defined
2010                   in URL. This may be required if the host of the advertised chart
2011                   URLs in the index differ from the defined URL. Enabling this should
2012                   be done with caution, as it can potentially result in credentials
2013                   getting stolen in a MITM-attack.
2014                 type: boolean
2015               secretRef:
2016                 description: The name of the secret containing authentication credentials
2017                   for the Helm repository. For HTTP/S basic auth the secret must contain
2018                   username and password fields. For TLS the secret must contain a
2019                   certFile and keyFile, and/or caCert fields.
2020                 properties:
2021                   name:
2022                     description: Name of the referent
2023                     type: string
2024                 required:
2025                 - name
2026                 type: object
2027               suspend:
2028                 description: This flag tells the controller to suspend the reconciliation
2029                   of this source.
2030                 type: boolean
2031               timeout:
2032                 default: 60s
2033                 description: The timeout of index downloading, defaults to 60s.
2034                 type: string
2035               url:
2036                 description: The Helm repository URL, a valid URL contains at least
2037                   a protocol and host.
2038                 type: string
2039             required:
2040             - interval
2041             - url
2042             type: object
2043           status:
2044             default:
2045               observedGeneration: -1
2046             description: HelmRepositoryStatus defines the observed state of the HelmRepository.
2047             properties:
2048               artifact:
2049                 description: Artifact represents the output of the last successful
2050                   repository sync.
2051                 properties:
2052                   checksum:
2053                     description: Checksum is the SHA256 checksum of the artifact.
2054                     type: string
2055                   lastUpdateTime:
2056                     description: LastUpdateTime is the timestamp corresponding to
2057                       the last update of this artifact.
2058                     format: date-time
2059                     type: string
2060                   path:
2061                     description: Path is the relative file path of this artifact.
2062                     type: string
2063                   revision:
2064                     description: Revision is a human readable identifier traceable
2065                       in the origin source system. It can be a Git commit SHA, Git
2066                       tag, a Helm index timestamp, a Helm chart version, etc.
2067                     type: string
2068                   url:
2069                     description: URL is the HTTP address of this artifact.
2070                     type: string
2071                 required:
2072                 - path
2073                 - url
2074                 type: object
2075               conditions:
2076                 description: Conditions holds the conditions for the HelmRepository.
2077                 items:
2078                   description: "Condition contains details for one aspect of the current
2079                     state of this API Resource. --- This struct is intended for direct
2080                     use as an array at the field path .status.conditions.  For example,
2081                     type FooStatus struct{     // Represents the observations of a
2082                     foo's current state.     // Known .status.conditions.type are:
2083                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
2084                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
2085                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
2086                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
2087                     \n     // other fields }"
2088                   properties:
2089                     lastTransitionTime:
2090                       description: lastTransitionTime is the last time the condition
2091                         transitioned from one status to another. This should be when
2092                         the underlying condition changed.  If that is not known, then
2093                         using the time when the API field changed is acceptable.
2094                       format: date-time
2095                       type: string
2096                     message:
2097                       description: message is a human readable message indicating
2098                         details about the transition. This may be an empty string.
2099                       maxLength: 32768
2100                       type: string
2101                     observedGeneration:
2102                       description: observedGeneration represents the .metadata.generation
2103                         that the condition was set based upon. For instance, if .metadata.generation
2104                         is currently 12, but the .status.conditions[x].observedGeneration
2105                         is 9, the condition is out of date with respect to the current
2106                         state of the instance.
2107                       format: int64
2108                       minimum: 0
2109                       type: integer
2110                     reason:
2111                       description: reason contains a programmatic identifier indicating
2112                         the reason for the condition's last transition. Producers
2113                         of specific condition types may define expected values and
2114                         meanings for this field, and whether the values are considered
2115                         a guaranteed API. The value should be a CamelCase string.
2116                         This field may not be empty.
2117                       maxLength: 1024
2118                       minLength: 1
2119                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
2120                       type: string
2121                     status:
2122                       description: status of the condition, one of True, False, Unknown.
2123                       enum:
2124                       - "True"
2125                       - "False"
2126                       - Unknown
2127                       type: string
2128                     type:
2129                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
2130                         --- Many .condition.type values are consistent across resources
2131                         like Available, but because arbitrary conditions can be useful
2132                         (see .node.status.conditions), the ability to deconflict is
2133                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
2134                       maxLength: 316
2135                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
2136                       type: string
2137                   required:
2138                   - lastTransitionTime
2139                   - message
2140                   - reason
2141                   - status
2142                   - type
2143                   type: object
2144                 type: array
2145               lastHandledReconcileAt:
2146                 description: LastHandledReconcileAt holds the value of the most recent
2147                   reconcile request value, so a change can be detected.
2148                 type: string
2149               observedGeneration:
2150                 description: ObservedGeneration is the last observed generation.
2151                 format: int64
2152                 type: integer
2153               url:
2154                 description: URL is the download link for the last index fetched.
2155                 type: string
2156             type: object
2157         type: object
2158     served: true
2159     storage: true
2160     subresources:
2161       status: {}
2162 status:
2163   acceptedNames:
2164     kind: ""
2165     plural: ""
2166   conditions: []
2167   storedVersions: []
2168 ---
2169 apiVersion: apiextensions.k8s.io/v1
2170 kind: CustomResourceDefinition
2171 metadata:
2172   annotations:
2173     controller-gen.kubebuilder.io/version: v0.7.0
2174   creationTimestamp: null
2175   labels:
2176     app.kubernetes.io/instance: flux-system
2177     app.kubernetes.io/part-of: flux
2178     app.kubernetes.io/version: v0.27.0
2179   name: kustomizations.kustomize.toolkit.fluxcd.io
2180 spec:
2181   group: kustomize.toolkit.fluxcd.io
2182   names:
2183     kind: Kustomization
2184     listKind: KustomizationList
2185     plural: kustomizations
2186     shortNames:
2187     - ks
2188     singular: kustomization
2189   scope: Namespaced
2190   versions:
2191   - additionalPrinterColumns:
2192     - jsonPath: .status.conditions[?(@.type=="Ready")].status
2193       name: Ready
2194       type: string
2195     - jsonPath: .status.conditions[?(@.type=="Ready")].message
2196       name: Status
2197       type: string
2198     - jsonPath: .metadata.creationTimestamp
2199       name: Age
2200       type: date
2201     name: v1beta1
2202     schema:
2203       openAPIV3Schema:
2204         description: Kustomization is the Schema for the kustomizations API.
2205         properties:
2206           apiVersion:
2207             description: 'APIVersion defines the versioned schema of this representation
2208               of an object. Servers should convert recognized schemas to the latest
2209               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
2210             type: string
2211           kind:
2212             description: 'Kind is a string value representing the REST resource this
2213               object represents. Servers may infer this from the endpoint the client
2214               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
2215             type: string
2216           metadata:
2217             type: object
2218           spec:
2219             description: KustomizationSpec defines the desired state of a kustomization.
2220             properties:
2221               decryption:
2222                 description: Decrypt Kubernetes secrets before applying them on the
2223                   cluster.
2224                 properties:
2225                   provider:
2226                     description: Provider is the name of the decryption engine.
2227                     enum:
2228                     - sops
2229                     type: string
2230                   secretRef:
2231                     description: The secret name containing the private OpenPGP keys
2232                       used for decryption.
2233                     properties:
2234                       name:
2235                         description: Name of the referent
2236                         type: string
2237                     required:
2238                     - name
2239                     type: object
2240                 required:
2241                 - provider
2242                 type: object
2243               dependsOn:
2244                 description: DependsOn may contain a dependency.CrossNamespaceDependencyReference
2245                   slice with references to Kustomization resources that must be ready
2246                   before this Kustomization can be reconciled.
2247                 items:
2248                   description: CrossNamespaceDependencyReference holds the reference
2249                     to a dependency.
2250                   properties:
2251                     name:
2252                       description: Name holds the name reference of a dependency.
2253                       type: string
2254                     namespace:
2255                       description: Namespace holds the namespace reference of a dependency.
2256                       type: string
2257                   required:
2258                   - name
2259                   type: object
2260                 type: array
2261               force:
2262                 default: false
2263                 description: Force instructs the controller to recreate resources
2264                   when patching fails due to an immutable field change.
2265                 type: boolean
2266               healthChecks:
2267                 description: A list of resources to be included in the health assessment.
2268                 items:
2269                   description: NamespacedObjectKindReference contains enough information
2270                     to let you locate the typed referenced object in any namespace
2271                   properties:
2272                     apiVersion:
2273                       description: API version of the referent, if not specified the
2274                         Kubernetes preferred version will be used
2275                       type: string
2276                     kind:
2277                       description: Kind of the referent
2278                       type: string
2279                     name:
2280                       description: Name of the referent
2281                       type: string
2282                     namespace:
2283                       description: Namespace of the referent, when not specified it
2284                         acts as LocalObjectReference
2285                       type: string
2286                   required:
2287                   - kind
2288                   - name
2289                   type: object
2290                 type: array
2291               images:
2292                 description: Images is a list of (image name, new name, new tag or
2293                   digest) for changing image names, tags or digests. This can also
2294                   be achieved with a patch, but this operator is simpler to specify.
2295                 items:
2296                   description: Image contains an image name, a new name, a new tag
2297                     or digest, which will replace the original name and tag.
2298                   properties:
2299                     digest:
2300                       description: Digest is the value used to replace the original
2301                         image tag. If digest is present NewTag value is ignored.
2302                       type: string
2303                     name:
2304                       description: Name is a tag-less image name.
2305                       type: string
2306                     newName:
2307                       description: NewName is the value used to replace the original
2308                         name.
2309                       type: string
2310                     newTag:
2311                       description: NewTag is the value used to replace the original
2312                         tag.
2313                       type: string
2314                   required:
2315                   - name
2316                   type: object
2317                 type: array
2318               interval:
2319                 description: The interval at which to reconcile the Kustomization.
2320                 type: string
2321               kubeConfig:
2322                 description: The KubeConfig for reconciling the Kustomization on a
2323                   remote cluster. When specified, KubeConfig takes precedence over
2324                   ServiceAccountName.
2325                 properties:
2326                   secretRef:
2327                     description: SecretRef holds the name to a secret that contains
2328                       a 'value' key with the kubeconfig file as the value. It must
2329                       be in the same namespace as the Kustomization. It is recommended
2330                       that the kubeconfig is self-contained, and the secret is regularly
2331                       updated if credentials such as a cloud-access-token expire.
2332                       Cloud specific `cmd-path` auth helpers will not function without
2333                       adding binaries and credentials to the Pod that is responsible
2334                       for reconciling the Kustomization.
2335                     properties:
2336                       name:
2337                         description: Name of the referent
2338                         type: string
2339                     required:
2340                     - name
2341                     type: object
2342                 type: object
2343               patches:
2344                 description: Strategic merge and JSON patches, defined as inline YAML
2345                   objects, capable of targeting objects based on kind, label and annotation
2346                   selectors.
2347                 items:
2348                   description: Patch contains an inline StrategicMerge or JSON6902
2349                     patch, and the target the patch should be applied to.
2350                   properties:
2351                     patch:
2352                       description: Patch contains an inline StrategicMerge patch or
2353                         an inline JSON6902 patch with an array of operation objects.
2354                       type: string
2355                     target:
2356                       description: Target points to the resources that the patch document
2357                         should be applied to.
2358                       properties:
2359                         annotationSelector:
2360                           description: AnnotationSelector is a string that follows
2361                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2362                             It matches with the resource annotations.
2363                           type: string
2364                         group:
2365                           description: Group is the API group to select resources
2366                             from. Together with Version and Kind it is capable of
2367                             unambiguously identifying and/or selecting resources.
2368                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2369                           type: string
2370                         kind:
2371                           description: Kind of the API Group to select resources from.
2372                             Together with Group and Version it is capable of unambiguously
2373                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2374                           type: string
2375                         labelSelector:
2376                           description: LabelSelector is a string that follows the
2377                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2378                             It matches with the resource labels.
2379                           type: string
2380                         name:
2381                           description: Name to match resources with.
2382                           type: string
2383                         namespace:
2384                           description: Namespace to select resources from.
2385                           type: string
2386                         version:
2387                           description: Version of the API Group to select resources
2388                             from. Together with Group and Kind it is capable of unambiguously
2389                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2390                           type: string
2391                       type: object
2392                   type: object
2393                 type: array
2394               patchesJson6902:
2395                 description: JSON 6902 patches, defined as inline YAML objects.
2396                 items:
2397                   description: JSON6902Patch contains a JSON6902 patch and the target
2398                     the patch should be applied to.
2399                   properties:
2400                     patch:
2401                       description: Patch contains the JSON6902 patch document with
2402                         an array of operation objects.
2403                       items:
2404                         description: JSON6902 is a JSON6902 operation object. https://datatracker.ietf.org/doc/html/rfc6902#section-4
2405                         properties:
2406                           from:
2407                             description: From contains a JSON-pointer value that references
2408                               a location within the target document where the operation
2409                               is performed. The meaning of the value depends on the
2410                               value of Op, and is NOT taken into account by all operations.
2411                             type: string
2412                           op:
2413                             description: Op indicates the operation to perform. Its
2414                               value MUST be one of "add", "remove", "replace", "move",
2415                               "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4
2416                             enum:
2417                             - test
2418                             - remove
2419                             - add
2420                             - replace
2421                             - move
2422                             - copy
2423                             type: string
2424                           path:
2425                             description: Path contains the JSON-pointer value that
2426                               references a location within the target document where
2427                               the operation is performed. The meaning of the value
2428                               depends on the value of Op.
2429                             type: string
2430                           value:
2431                             description: Value contains a valid JSON structure. The
2432                               meaning of the value depends on the value of Op, and
2433                               is NOT taken into account by all operations.
2434                             x-kubernetes-preserve-unknown-fields: true
2435                         required:
2436                         - op
2437                         - path
2438                         type: object
2439                       type: array
2440                     target:
2441                       description: Target points to the resources that the patch document
2442                         should be applied to.
2443                       properties:
2444                         annotationSelector:
2445                           description: AnnotationSelector is a string that follows
2446                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2447                             It matches with the resource annotations.
2448                           type: string
2449                         group:
2450                           description: Group is the API group to select resources
2451                             from. Together with Version and Kind it is capable of
2452                             unambiguously identifying and/or selecting resources.
2453                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2454                           type: string
2455                         kind:
2456                           description: Kind of the API Group to select resources from.
2457                             Together with Group and Version it is capable of unambiguously
2458                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2459                           type: string
2460                         labelSelector:
2461                           description: LabelSelector is a string that follows the
2462                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2463                             It matches with the resource labels.
2464                           type: string
2465                         name:
2466                           description: Name to match resources with.
2467                           type: string
2468                         namespace:
2469                           description: Namespace to select resources from.
2470                           type: string
2471                         version:
2472                           description: Version of the API Group to select resources
2473                             from. Together with Group and Kind it is capable of unambiguously
2474                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2475                           type: string
2476                       type: object
2477                   required:
2478                   - patch
2479                   - target
2480                   type: object
2481                 type: array
2482               patchesStrategicMerge:
2483                 description: Strategic merge patches, defined as inline YAML objects.
2484                 items:
2485                   x-kubernetes-preserve-unknown-fields: true
2486                 type: array
2487               path:
2488                 description: Path to the directory containing the kustomization.yaml
2489                   file, or the set of plain YAMLs a kustomization.yaml should be generated
2490                   for. Defaults to 'None', which translates to the root path of the
2491                   SourceRef.
2492                 type: string
2493               postBuild:
2494                 description: PostBuild describes which actions to perform on the YAML
2495                   manifest generated by building the kustomize overlay.
2496                 properties:
2497                   substitute:
2498                     additionalProperties:
2499                       type: string
2500                     description: Substitute holds a map of key/value pairs. The variables
2501                       defined in your YAML manifests that match any of the keys defined
2502                       in the map will be substituted with the set value. Includes
2503                       support for bash string replacement functions e.g. ${var:=default},
2504                       ${var:position} and ${var/substring/replacement}.
2505                     type: object
2506                   substituteFrom:
2507                     description: SubstituteFrom holds references to ConfigMaps and
2508                       Secrets containing the variables and their values to be substituted
2509                       in the YAML manifests. The ConfigMap and the Secret data keys
2510                       represent the var names and they must match the vars declared
2511                       in the manifests for the substitution to happen.
2512                     items:
2513                       description: SubstituteReference contains a reference to a resource
2514                         containing the variables name and value.
2515                       properties:
2516                         kind:
2517                           description: Kind of the values referent, valid values are
2518                             ('Secret', 'ConfigMap').
2519                           enum:
2520                           - Secret
2521                           - ConfigMap
2522                           type: string
2523                         name:
2524                           description: Name of the values referent. Should reside
2525                             in the same namespace as the referring resource.
2526                           maxLength: 253
2527                           minLength: 1
2528                           type: string
2529                       required:
2530                       - kind
2531                       - name
2532                       type: object
2533                     type: array
2534                 type: object
2535               prune:
2536                 description: Prune enables garbage collection.
2537                 type: boolean
2538               retryInterval:
2539                 description: The interval at which to retry a previously failed reconciliation.
2540                   When not specified, the controller uses the KustomizationSpec.Interval
2541                   value to retry failures.
2542                 type: string
2543               serviceAccountName:
2544                 description: The name of the Kubernetes service account to impersonate
2545                   when reconciling this Kustomization.
2546                 type: string
2547               sourceRef:
2548                 description: Reference of the source where the kustomization file
2549                   is.
2550                 properties:
2551                   apiVersion:
2552                     description: API version of the referent
2553                     type: string
2554                   kind:
2555                     description: Kind of the referent
2556                     enum:
2557                     - GitRepository
2558                     - Bucket
2559                     type: string
2560                   name:
2561                     description: Name of the referent
2562                     type: string
2563                   namespace:
2564                     description: Namespace of the referent, defaults to the Kustomization
2565                       namespace
2566                     type: string
2567                 required:
2568                 - kind
2569                 - name
2570                 type: object
2571               suspend:
2572                 description: This flag tells the controller to suspend subsequent
2573                   kustomize executions, it does not apply to already started executions.
2574                   Defaults to false.
2575                 type: boolean
2576               targetNamespace:
2577                 description: TargetNamespace sets or overrides the namespace in the
2578                   kustomization.yaml file.
2579                 maxLength: 63
2580                 minLength: 1
2581                 type: string
2582               timeout:
2583                 description: Timeout for validation, apply and health checking operations.
2584                   Defaults to 'Interval' duration.
2585                 type: string
2586               validation:
2587                 description: Validate the Kubernetes objects before applying them
2588                   on the cluster. The validation strategy can be 'client' (local dry-run),
2589                   'server' (APIServer dry-run) or 'none'. When 'Force' is 'true',
2590                   validation will fallback to 'client' if set to 'server' because
2591                   server-side validation is not supported in this scenario.
2592                 enum:
2593                 - none
2594                 - client
2595                 - server
2596                 type: string
2597             required:
2598             - interval
2599             - prune
2600             - sourceRef
2601             type: object
2602           status:
2603             default:
2604               observedGeneration: -1
2605             description: KustomizationStatus defines the observed state of a kustomization.
2606             properties:
2607               conditions:
2608                 items:
2609                   description: "Condition contains details for one aspect of the current
2610                     state of this API Resource. --- This struct is intended for direct
2611                     use as an array at the field path .status.conditions.  For example,
2612                     type FooStatus struct{     // Represents the observations of a
2613                     foo's current state.     // Known .status.conditions.type are:
2614                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
2615                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
2616                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
2617                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
2618                     \n     // other fields }"
2619                   properties:
2620                     lastTransitionTime:
2621                       description: lastTransitionTime is the last time the condition
2622                         transitioned from one status to another. This should be when
2623                         the underlying condition changed.  If that is not known, then
2624                         using the time when the API field changed is acceptable.
2625                       format: date-time
2626                       type: string
2627                     message:
2628                       description: message is a human readable message indicating
2629                         details about the transition. This may be an empty string.
2630                       maxLength: 32768
2631                       type: string
2632                     observedGeneration:
2633                       description: observedGeneration represents the .metadata.generation
2634                         that the condition was set based upon. For instance, if .metadata.generation
2635                         is currently 12, but the .status.conditions[x].observedGeneration
2636                         is 9, the condition is out of date with respect to the current
2637                         state of the instance.
2638                       format: int64
2639                       minimum: 0
2640                       type: integer
2641                     reason:
2642                       description: reason contains a programmatic identifier indicating
2643                         the reason for the condition's last transition. Producers
2644                         of specific condition types may define expected values and
2645                         meanings for this field, and whether the values are considered
2646                         a guaranteed API. The value should be a CamelCase string.
2647                         This field may not be empty.
2648                       maxLength: 1024
2649                       minLength: 1
2650                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
2651                       type: string
2652                     status:
2653                       description: status of the condition, one of True, False, Unknown.
2654                       enum:
2655                       - "True"
2656                       - "False"
2657                       - Unknown
2658                       type: string
2659                     type:
2660                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
2661                         --- Many .condition.type values are consistent across resources
2662                         like Available, but because arbitrary conditions can be useful
2663                         (see .node.status.conditions), the ability to deconflict is
2664                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
2665                       maxLength: 316
2666                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
2667                       type: string
2668                   required:
2669                   - lastTransitionTime
2670                   - message
2671                   - reason
2672                   - status
2673                   - type
2674                   type: object
2675                 type: array
2676               lastAppliedRevision:
2677                 description: The last successfully applied revision. The revision
2678                   format for Git sources is <branch|tag>/<commit-sha>.
2679                 type: string
2680               lastAttemptedRevision:
2681                 description: LastAttemptedRevision is the revision of the last reconciliation
2682                   attempt.
2683                 type: string
2684               lastHandledReconcileAt:
2685                 description: LastHandledReconcileAt holds the value of the most recent
2686                   reconcile request value, so a change can be detected.
2687                 type: string
2688               observedGeneration:
2689                 description: ObservedGeneration is the last reconciled generation.
2690                 format: int64
2691                 type: integer
2692               snapshot:
2693                 description: The last successfully applied revision metadata.
2694                 properties:
2695                   checksum:
2696                     description: The manifests sha1 checksum.
2697                     type: string
2698                   entries:
2699                     description: A list of Kubernetes kinds grouped by namespace.
2700                     items:
2701                       description: Snapshot holds the metadata of namespaced Kubernetes
2702                         objects
2703                       properties:
2704                         kinds:
2705                           additionalProperties:
2706                             type: string
2707                           description: The list of Kubernetes kinds.
2708                           type: object
2709                         namespace:
2710                           description: The namespace of this entry.
2711                           type: string
2712                       required:
2713                       - kinds
2714                       type: object
2715                     type: array
2716                 required:
2717                 - checksum
2718                 - entries
2719                 type: object
2720             type: object
2721         type: object
2722     served: true
2723     storage: false
2724     subresources:
2725       status: {}
2726   - additionalPrinterColumns:
2727     - jsonPath: .status.conditions[?(@.type=="Ready")].status
2728       name: Ready
2729       type: string
2730     - jsonPath: .status.conditions[?(@.type=="Ready")].message
2731       name: Status
2732       type: string
2733     - jsonPath: .metadata.creationTimestamp
2734       name: Age
2735       type: date
2736     name: v1beta2
2737     schema:
2738       openAPIV3Schema:
2739         description: Kustomization is the Schema for the kustomizations API.
2740         properties:
2741           apiVersion:
2742             description: 'APIVersion defines the versioned schema of this representation
2743               of an object. Servers should convert recognized schemas to the latest
2744               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
2745             type: string
2746           kind:
2747             description: 'Kind is a string value representing the REST resource this
2748               object represents. Servers may infer this from the endpoint the client
2749               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
2750             type: string
2751           metadata:
2752             type: object
2753           spec:
2754             description: KustomizationSpec defines the configuration to calculate
2755               the desired state from a Source using Kustomize.
2756             properties:
2757               decryption:
2758                 description: Decrypt Kubernetes secrets before applying them on the
2759                   cluster.
2760                 properties:
2761                   provider:
2762                     description: Provider is the name of the decryption engine.
2763                     enum:
2764                     - sops
2765                     type: string
2766                   secretRef:
2767                     description: The secret name containing the private OpenPGP keys
2768                       used for decryption.
2769                     properties:
2770                       name:
2771                         description: Name of the referent
2772                         type: string
2773                     required:
2774                     - name
2775                     type: object
2776                 required:
2777                 - provider
2778                 type: object
2779               dependsOn:
2780                 description: DependsOn may contain a dependency.CrossNamespaceDependencyReference
2781                   slice with references to Kustomization resources that must be ready
2782                   before this Kustomization can be reconciled.
2783                 items:
2784                   description: CrossNamespaceDependencyReference holds the reference
2785                     to a dependency.
2786                   properties:
2787                     name:
2788                       description: Name holds the name reference of a dependency.
2789                       type: string
2790                     namespace:
2791                       description: Namespace holds the namespace reference of a dependency.
2792                       type: string
2793                   required:
2794                   - name
2795                   type: object
2796                 type: array
2797               force:
2798                 default: false
2799                 description: Force instructs the controller to recreate resources
2800                   when patching fails due to an immutable field change.
2801                 type: boolean
2802               healthChecks:
2803                 description: A list of resources to be included in the health assessment.
2804                 items:
2805                   description: NamespacedObjectKindReference contains enough information
2806                     to let you locate the typed referenced object in any namespace
2807                   properties:
2808                     apiVersion:
2809                       description: API version of the referent, if not specified the
2810                         Kubernetes preferred version will be used
2811                       type: string
2812                     kind:
2813                       description: Kind of the referent
2814                       type: string
2815                     name:
2816                       description: Name of the referent
2817                       type: string
2818                     namespace:
2819                       description: Namespace of the referent, when not specified it
2820                         acts as LocalObjectReference
2821                       type: string
2822                   required:
2823                   - kind
2824                   - name
2825                   type: object
2826                 type: array
2827               images:
2828                 description: Images is a list of (image name, new name, new tag or
2829                   digest) for changing image names, tags or digests. This can also
2830                   be achieved with a patch, but this operator is simpler to specify.
2831                 items:
2832                   description: Image contains an image name, a new name, a new tag
2833                     or digest, which will replace the original name and tag.
2834                   properties:
2835                     digest:
2836                       description: Digest is the value used to replace the original
2837                         image tag. If digest is present NewTag value is ignored.
2838                       type: string
2839                     name:
2840                       description: Name is a tag-less image name.
2841                       type: string
2842                     newName:
2843                       description: NewName is the value used to replace the original
2844                         name.
2845                       type: string
2846                     newTag:
2847                       description: NewTag is the value used to replace the original
2848                         tag.
2849                       type: string
2850                   required:
2851                   - name
2852                   type: object
2853                 type: array
2854               interval:
2855                 description: The interval at which to reconcile the Kustomization.
2856                 type: string
2857               kubeConfig:
2858                 description: The KubeConfig for reconciling the Kustomization on a
2859                   remote cluster. When specified, KubeConfig takes precedence over
2860                   ServiceAccountName.
2861                 properties:
2862                   secretRef:
2863                     description: SecretRef holds the name to a secret that contains
2864                       a 'value' key with the kubeconfig file as the value. It must
2865                       be in the same namespace as the Kustomization. It is recommended
2866                       that the kubeconfig is self-contained, and the secret is regularly
2867                       updated if credentials such as a cloud-access-token expire.
2868                       Cloud specific `cmd-path` auth helpers will not function without
2869                       adding binaries and credentials to the Pod that is responsible
2870                       for reconciling the Kustomization.
2871                     properties:
2872                       name:
2873                         description: Name of the referent
2874                         type: string
2875                     required:
2876                     - name
2877                     type: object
2878                 type: object
2879               patches:
2880                 description: Strategic merge and JSON patches, defined as inline YAML
2881                   objects, capable of targeting objects based on kind, label and annotation
2882                   selectors.
2883                 items:
2884                   description: Patch contains an inline StrategicMerge or JSON6902
2885                     patch, and the target the patch should be applied to.
2886                   properties:
2887                     patch:
2888                       description: Patch contains an inline StrategicMerge patch or
2889                         an inline JSON6902 patch with an array of operation objects.
2890                       type: string
2891                     target:
2892                       description: Target points to the resources that the patch document
2893                         should be applied to.
2894                       properties:
2895                         annotationSelector:
2896                           description: AnnotationSelector is a string that follows
2897                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2898                             It matches with the resource annotations.
2899                           type: string
2900                         group:
2901                           description: Group is the API group to select resources
2902                             from. Together with Version and Kind it is capable of
2903                             unambiguously identifying and/or selecting resources.
2904                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2905                           type: string
2906                         kind:
2907                           description: Kind of the API Group to select resources from.
2908                             Together with Group and Version it is capable of unambiguously
2909                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2910                           type: string
2911                         labelSelector:
2912                           description: LabelSelector is a string that follows the
2913                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2914                             It matches with the resource labels.
2915                           type: string
2916                         name:
2917                           description: Name to match resources with.
2918                           type: string
2919                         namespace:
2920                           description: Namespace to select resources from.
2921                           type: string
2922                         version:
2923                           description: Version of the API Group to select resources
2924                             from. Together with Group and Kind it is capable of unambiguously
2925                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2926                           type: string
2927                       type: object
2928                   type: object
2929                 type: array
2930               patchesJson6902:
2931                 description: 'JSON 6902 patches, defined as inline YAML objects. Deprecated:
2932                   Use Patches instead.'
2933                 items:
2934                   description: JSON6902Patch contains a JSON6902 patch and the target
2935                     the patch should be applied to.
2936                   properties:
2937                     patch:
2938                       description: Patch contains the JSON6902 patch document with
2939                         an array of operation objects.
2940                       items:
2941                         description: JSON6902 is a JSON6902 operation object. https://datatracker.ietf.org/doc/html/rfc6902#section-4
2942                         properties:
2943                           from:
2944                             description: From contains a JSON-pointer value that references
2945                               a location within the target document where the operation
2946                               is performed. The meaning of the value depends on the
2947                               value of Op, and is NOT taken into account by all operations.
2948                             type: string
2949                           op:
2950                             description: Op indicates the operation to perform. Its
2951                               value MUST be one of "add", "remove", "replace", "move",
2952                               "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4
2953                             enum:
2954                             - test
2955                             - remove
2956                             - add
2957                             - replace
2958                             - move
2959                             - copy
2960                             type: string
2961                           path:
2962                             description: Path contains the JSON-pointer value that
2963                               references a location within the target document where
2964                               the operation is performed. The meaning of the value
2965                               depends on the value of Op.
2966                             type: string
2967                           value:
2968                             description: Value contains a valid JSON structure. The
2969                               meaning of the value depends on the value of Op, and
2970                               is NOT taken into account by all operations.
2971                             x-kubernetes-preserve-unknown-fields: true
2972                         required:
2973                         - op
2974                         - path
2975                         type: object
2976                       type: array
2977                     target:
2978                       description: Target points to the resources that the patch document
2979                         should be applied to.
2980                       properties:
2981                         annotationSelector:
2982                           description: AnnotationSelector is a string that follows
2983                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
2984                             It matches with the resource annotations.
2985                           type: string
2986                         group:
2987                           description: Group is the API group to select resources
2988                             from. Together with Version and Kind it is capable of
2989                             unambiguously identifying and/or selecting resources.
2990                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2991                           type: string
2992                         kind:
2993                           description: Kind of the API Group to select resources from.
2994                             Together with Group and Version it is capable of unambiguously
2995                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
2996                           type: string
2997                         labelSelector:
2998                           description: LabelSelector is a string that follows the
2999                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
3000                             It matches with the resource labels.
3001                           type: string
3002                         name:
3003                           description: Name to match resources with.
3004                           type: string
3005                         namespace:
3006                           description: Namespace to select resources from.
3007                           type: string
3008                         version:
3009                           description: Version of the API Group to select resources
3010                             from. Together with Group and Kind it is capable of unambiguously
3011                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
3012                           type: string
3013                       type: object
3014                   required:
3015                   - patch
3016                   - target
3017                   type: object
3018                 type: array
3019               patchesStrategicMerge:
3020                 description: 'Strategic merge patches, defined as inline YAML objects.
3021                   Deprecated: Use Patches instead.'
3022                 items:
3023                   x-kubernetes-preserve-unknown-fields: true
3024                 type: array
3025               path:
3026                 description: Path to the directory containing the kustomization.yaml
3027                   file, or the set of plain YAMLs a kustomization.yaml should be generated
3028                   for. Defaults to 'None', which translates to the root path of the
3029                   SourceRef.
3030                 type: string
3031               postBuild:
3032                 description: PostBuild describes which actions to perform on the YAML
3033                   manifest generated by building the kustomize overlay.
3034                 properties:
3035                   substitute:
3036                     additionalProperties:
3037                       type: string
3038                     description: Substitute holds a map of key/value pairs. The variables
3039                       defined in your YAML manifests that match any of the keys defined
3040                       in the map will be substituted with the set value. Includes
3041                       support for bash string replacement functions e.g. ${var:=default},
3042                       ${var:position} and ${var/substring/replacement}.
3043                     type: object
3044                   substituteFrom:
3045                     description: SubstituteFrom holds references to ConfigMaps and
3046                       Secrets containing the variables and their values to be substituted
3047                       in the YAML manifests. The ConfigMap and the Secret data keys
3048                       represent the var names and they must match the vars declared
3049                       in the manifests for the substitution to happen.
3050                     items:
3051                       description: SubstituteReference contains a reference to a resource
3052                         containing the variables name and value.
3053                       properties:
3054                         kind:
3055                           description: Kind of the values referent, valid values are
3056                             ('Secret', 'ConfigMap').
3057                           enum:
3058                           - Secret
3059                           - ConfigMap
3060                           type: string
3061                         name:
3062                           description: Name of the values referent. Should reside
3063                             in the same namespace as the referring resource.
3064                           maxLength: 253
3065                           minLength: 1
3066                           type: string
3067                         optional:
3068                           default: false
3069                           description: Optional indicates whether the referenced resource
3070                             must exist, or whether to tolerate its absence. If true
3071                             and the referenced resource is absent, proceed as if the
3072                             resource was present but empty, without any variables
3073                             defined.
3074                           type: boolean
3075                       required:
3076                       - kind
3077                       - name
3078                       type: object
3079                     type: array
3080                 type: object
3081               prune:
3082                 description: Prune enables garbage collection.
3083                 type: boolean
3084               retryInterval:
3085                 description: The interval at which to retry a previously failed reconciliation.
3086                   When not specified, the controller uses the KustomizationSpec.Interval
3087                   value to retry failures.
3088                 type: string
3089               serviceAccountName:
3090                 description: The name of the Kubernetes service account to impersonate
3091                   when reconciling this Kustomization.
3092                 type: string
3093               sourceRef:
3094                 description: Reference of the source where the kustomization file
3095                   is.
3096                 properties:
3097                   apiVersion:
3098                     description: API version of the referent.
3099                     type: string
3100                   kind:
3101                     description: Kind of the referent.
3102                     enum:
3103                     - GitRepository
3104                     - Bucket
3105                     type: string
3106                   name:
3107                     description: Name of the referent.
3108                     type: string
3109                   namespace:
3110                     description: Namespace of the referent, defaults to the namespace
3111                       of the Kubernetes resource object that contains the reference.
3112                     type: string
3113                 required:
3114                 - kind
3115                 - name
3116                 type: object
3117               suspend:
3118                 description: This flag tells the controller to suspend subsequent
3119                   kustomize executions, it does not apply to already started executions.
3120                   Defaults to false.
3121                 type: boolean
3122               targetNamespace:
3123                 description: TargetNamespace sets or overrides the namespace in the
3124                   kustomization.yaml file.
3125                 maxLength: 63
3126                 minLength: 1
3127                 type: string
3128               timeout:
3129                 description: Timeout for validation, apply and health checking operations.
3130                   Defaults to 'Interval' duration.
3131                 type: string
3132               validation:
3133                 description: 'Deprecated: Not used in v1beta2.'
3134                 enum:
3135                 - none
3136                 - client
3137                 - server
3138                 type: string
3139               wait:
3140                 description: Wait instructs the controller to check the health of
3141                   all the reconciled resources. When enabled, the HealthChecks are
3142                   ignored. Defaults to false.
3143                 type: boolean
3144             required:
3145             - interval
3146             - prune
3147             - sourceRef
3148             type: object
3149           status:
3150             default:
3151               observedGeneration: -1
3152             description: KustomizationStatus defines the observed state of a kustomization.
3153             properties:
3154               conditions:
3155                 items:
3156                   description: "Condition contains details for one aspect of the current
3157                     state of this API Resource. --- This struct is intended for direct
3158                     use as an array at the field path .status.conditions.  For example,
3159                     type FooStatus struct{     // Represents the observations of a
3160                     foo's current state.     // Known .status.conditions.type are:
3161                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
3162                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
3163                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
3164                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
3165                     \n     // other fields }"
3166                   properties:
3167                     lastTransitionTime:
3168                       description: lastTransitionTime is the last time the condition
3169                         transitioned from one status to another. This should be when
3170                         the underlying condition changed.  If that is not known, then
3171                         using the time when the API field changed is acceptable.
3172                       format: date-time
3173                       type: string
3174                     message:
3175                       description: message is a human readable message indicating
3176                         details about the transition. This may be an empty string.
3177                       maxLength: 32768
3178                       type: string
3179                     observedGeneration:
3180                       description: observedGeneration represents the .metadata.generation
3181                         that the condition was set based upon. For instance, if .metadata.generation
3182                         is currently 12, but the .status.conditions[x].observedGeneration
3183                         is 9, the condition is out of date with respect to the current
3184                         state of the instance.
3185                       format: int64
3186                       minimum: 0
3187                       type: integer
3188                     reason:
3189                       description: reason contains a programmatic identifier indicating
3190                         the reason for the condition's last transition. Producers
3191                         of specific condition types may define expected values and
3192                         meanings for this field, and whether the values are considered
3193                         a guaranteed API. The value should be a CamelCase string.
3194                         This field may not be empty.
3195                       maxLength: 1024
3196                       minLength: 1
3197                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3198                       type: string
3199                     status:
3200                       description: status of the condition, one of True, False, Unknown.
3201                       enum:
3202                       - "True"
3203                       - "False"
3204                       - Unknown
3205                       type: string
3206                     type:
3207                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
3208                         --- Many .condition.type values are consistent across resources
3209                         like Available, but because arbitrary conditions can be useful
3210                         (see .node.status.conditions), the ability to deconflict is
3211                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
3212                       maxLength: 316
3213                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3214                       type: string
3215                   required:
3216                   - lastTransitionTime
3217                   - message
3218                   - reason
3219                   - status
3220                   - type
3221                   type: object
3222                 type: array
3223               inventory:
3224                 description: Inventory contains the list of Kubernetes resource object
3225                   references that have been successfully applied.
3226                 properties:
3227                   entries:
3228                     description: Entries of Kubernetes resource object references.
3229                     items:
3230                       description: ResourceRef contains the information necessary
3231                         to locate a resource within a cluster.
3232                       properties:
3233                         id:
3234                           description: ID is the string representation of the Kubernetes
3235                             resource object's metadata, in the format '<namespace>_<name>_<group>_<kind>'.
3236                           type: string
3237                         v:
3238                           description: Version is the API version of the Kubernetes
3239                             resource object's kind.
3240                           type: string
3241                       required:
3242                       - id
3243                       - v
3244                       type: object
3245                     type: array
3246                 required:
3247                 - entries
3248                 type: object
3249               lastAppliedRevision:
3250                 description: The last successfully applied revision. The revision
3251                   format for Git sources is <branch|tag>/<commit-sha>.
3252                 type: string
3253               lastAttemptedRevision:
3254                 description: LastAttemptedRevision is the revision of the last reconciliation
3255                   attempt.
3256                 type: string
3257               lastHandledReconcileAt:
3258                 description: LastHandledReconcileAt holds the value of the most recent
3259                   reconcile request value, so a change can be detected.
3260                 type: string
3261               observedGeneration:
3262                 description: ObservedGeneration is the last reconciled generation.
3263                 format: int64
3264                 type: integer
3265             type: object
3266         type: object
3267     served: true
3268     storage: true
3269     subresources:
3270       status: {}
3271 status:
3272   acceptedNames:
3273     kind: ""
3274     plural: ""
3275   conditions: []
3276   storedVersions: []
3277 ---
3278 apiVersion: apiextensions.k8s.io/v1
3279 kind: CustomResourceDefinition
3280 metadata:
3281   annotations:
3282     controller-gen.kubebuilder.io/version: v0.7.0
3283   creationTimestamp: null
3284   labels:
3285     app.kubernetes.io/instance: flux-system
3286     app.kubernetes.io/part-of: flux
3287     app.kubernetes.io/version: v0.27.0
3288   name: providers.notification.toolkit.fluxcd.io
3289 spec:
3290   group: notification.toolkit.fluxcd.io
3291   names:
3292     kind: Provider
3293     listKind: ProviderList
3294     plural: providers
3295     singular: provider
3296   scope: Namespaced
3297   versions:
3298   - additionalPrinterColumns:
3299     - jsonPath: .status.conditions[?(@.type=="Ready")].status
3300       name: Ready
3301       type: string
3302     - jsonPath: .status.conditions[?(@.type=="Ready")].message
3303       name: Status
3304       type: string
3305     - jsonPath: .metadata.creationTimestamp
3306       name: Age
3307       type: date
3308     name: v1beta1
3309     schema:
3310       openAPIV3Schema:
3311         description: Provider is the Schema for the providers API
3312         properties:
3313           apiVersion:
3314             description: 'APIVersion defines the versioned schema of this representation
3315               of an object. Servers should convert recognized schemas to the latest
3316               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
3317             type: string
3318           kind:
3319             description: 'Kind is a string value representing the REST resource this
3320               object represents. Servers may infer this from the endpoint the client
3321               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
3322             type: string
3323           metadata:
3324             type: object
3325           spec:
3326             description: ProviderSpec defines the desired state of Provider
3327             properties:
3328               address:
3329                 description: HTTP/S webhook address of this provider
3330                 pattern: ^(http|https)://
3331                 type: string
3332               certSecretRef:
3333                 description: CertSecretRef can be given the name of a secret containing
3334                   a PEM-encoded CA certificate (`caFile`)
3335                 properties:
3336                   name:
3337                     description: Name of the referent
3338                     type: string
3339                 required:
3340                 - name
3341                 type: object
3342               channel:
3343                 description: Alert channel for this provider
3344                 type: string
3345               proxy:
3346                 description: HTTP/S address of the proxy
3347                 pattern: ^(http|https)://
3348                 type: string
3349               secretRef:
3350                 description: Secret reference containing the provider webhook URL
3351                   using "address" as data key
3352                 properties:
3353                   name:
3354                     description: Name of the referent
3355                     type: string
3356                 required:
3357                 - name
3358                 type: object
3359               suspend:
3360                 description: This flag tells the controller to suspend subsequent
3361                   events handling. Defaults to false.
3362                 type: boolean
3363               type:
3364                 description: Type of provider
3365                 enum:
3366                 - slack
3367                 - discord
3368                 - msteams
3369                 - rocket
3370                 - generic
3371                 - github
3372                 - gitlab
3373                 - bitbucket
3374                 - azuredevops
3375                 - googlechat
3376                 - webex
3377                 - sentry
3378                 - azureeventhub
3379                 - telegram
3380                 - lark
3381                 - matrix
3382                 - opsgenie
3383                 - alertmanager
3384                 - grafana
3385                 type: string
3386               username:
3387                 description: Bot username for this provider
3388                 type: string
3389             required:
3390             - type
3391             type: object
3392           status:
3393             default:
3394               observedGeneration: -1
3395             description: ProviderStatus defines the observed state of Provider
3396             properties:
3397               conditions:
3398                 items:
3399                   description: "Condition contains details for one aspect of the current
3400                     state of this API Resource. --- This struct is intended for direct
3401                     use as an array at the field path .status.conditions.  For example,
3402                     type FooStatus struct{     // Represents the observations of a
3403                     foo's current state.     // Known .status.conditions.type are:
3404                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
3405                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
3406                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
3407                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
3408                     \n     // other fields }"
3409                   properties:
3410                     lastTransitionTime:
3411                       description: lastTransitionTime is the last time the condition
3412                         transitioned from one status to another. This should be when
3413                         the underlying condition changed.  If that is not known, then
3414                         using the time when the API field changed is acceptable.
3415                       format: date-time
3416                       type: string
3417                     message:
3418                       description: message is a human readable message indicating
3419                         details about the transition. This may be an empty string.
3420                       maxLength: 32768
3421                       type: string
3422                     observedGeneration:
3423                       description: observedGeneration represents the .metadata.generation
3424                         that the condition was set based upon. For instance, if .metadata.generation
3425                         is currently 12, but the .status.conditions[x].observedGeneration
3426                         is 9, the condition is out of date with respect to the current
3427                         state of the instance.
3428                       format: int64
3429                       minimum: 0
3430                       type: integer
3431                     reason:
3432                       description: reason contains a programmatic identifier indicating
3433                         the reason for the condition's last transition. Producers
3434                         of specific condition types may define expected values and
3435                         meanings for this field, and whether the values are considered
3436                         a guaranteed API. The value should be a CamelCase string.
3437                         This field may not be empty.
3438                       maxLength: 1024
3439                       minLength: 1
3440                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3441                       type: string
3442                     status:
3443                       description: status of the condition, one of True, False, Unknown.
3444                       enum:
3445                       - "True"
3446                       - "False"
3447                       - Unknown
3448                       type: string
3449                     type:
3450                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
3451                         --- Many .condition.type values are consistent across resources
3452                         like Available, but because arbitrary conditions can be useful
3453                         (see .node.status.conditions), the ability to deconflict is
3454                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
3455                       maxLength: 316
3456                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3457                       type: string
3458                   required:
3459                   - lastTransitionTime
3460                   - message
3461                   - reason
3462                   - status
3463                   - type
3464                   type: object
3465                 type: array
3466               observedGeneration:
3467                 description: ObservedGeneration is the last reconciled generation.
3468                 format: int64
3469                 type: integer
3470             type: object
3471         type: object
3472     served: true
3473     storage: true
3474     subresources:
3475       status: {}
3476 status:
3477   acceptedNames:
3478     kind: ""
3479     plural: ""
3480   conditions: []
3481   storedVersions: []
3482 ---
3483 apiVersion: apiextensions.k8s.io/v1
3484 kind: CustomResourceDefinition
3485 metadata:
3486   annotations:
3487     controller-gen.kubebuilder.io/version: v0.7.0
3488   creationTimestamp: null
3489   labels:
3490     app.kubernetes.io/instance: flux-system
3491     app.kubernetes.io/part-of: flux
3492     app.kubernetes.io/version: v0.27.0
3493   name: receivers.notification.toolkit.fluxcd.io
3494 spec:
3495   group: notification.toolkit.fluxcd.io
3496   names:
3497     kind: Receiver
3498     listKind: ReceiverList
3499     plural: receivers
3500     singular: receiver
3501   scope: Namespaced
3502   versions:
3503   - additionalPrinterColumns:
3504     - jsonPath: .status.conditions[?(@.type=="Ready")].status
3505       name: Ready
3506       type: string
3507     - jsonPath: .status.conditions[?(@.type=="Ready")].message
3508       name: Status
3509       type: string
3510     - jsonPath: .metadata.creationTimestamp
3511       name: Age
3512       type: date
3513     name: v1beta1
3514     schema:
3515       openAPIV3Schema:
3516         description: Receiver is the Schema for the receivers API
3517         properties:
3518           apiVersion:
3519             description: 'APIVersion defines the versioned schema of this representation
3520               of an object. Servers should convert recognized schemas to the latest
3521               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
3522             type: string
3523           kind:
3524             description: 'Kind is a string value representing the REST resource this
3525               object represents. Servers may infer this from the endpoint the client
3526               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
3527             type: string
3528           metadata:
3529             type: object
3530           spec:
3531             description: ReceiverSpec defines the desired state of Receiver
3532             properties:
3533               events:
3534                 description: A list of events to handle, e.g. 'push' for GitHub or
3535                   'Push Hook' for GitLab.
3536                 items:
3537                   type: string
3538                 type: array
3539               resources:
3540                 description: A list of resources to be notified about changes.
3541                 items:
3542                   description: CrossNamespaceObjectReference contains enough information
3543                     to let you locate the typed referenced object at cluster level
3544                   properties:
3545                     apiVersion:
3546                       description: API version of the referent
3547                       type: string
3548                     kind:
3549                       description: Kind of the referent
3550                       enum:
3551                       - Bucket
3552                       - GitRepository
3553                       - Kustomization
3554                       - HelmRelease
3555                       - HelmChart
3556                       - HelmRepository
3557                       - ImageRepository
3558                       - ImagePolicy
3559                       - ImageUpdateAutomation
3560                       type: string
3561                     matchLabels:
3562                       additionalProperties:
3563                         type: string
3564                       description: MatchLabels is a map of {key,value} pairs. A single
3565                         {key,value} in the matchLabels map is equivalent to an element
3566                         of matchExpressions, whose key field is "key", the operator
3567                         is "In", and the values array contains only "value". The requirements
3568                         are ANDed.
3569                       type: object
3570                     name:
3571                       description: Name of the referent
3572                       maxLength: 53
3573                       minLength: 1
3574                       type: string
3575                     namespace:
3576                       description: Namespace of the referent
3577                       maxLength: 53
3578                       minLength: 1
3579                       type: string
3580                   required:
3581                   - name
3582                   type: object
3583                 type: array
3584               secretRef:
3585                 description: Secret reference containing the token used to validate
3586                   the payload authenticity
3587                 properties:
3588                   name:
3589                     description: Name of the referent
3590                     type: string
3591                 required:
3592                 - name
3593                 type: object
3594               suspend:
3595                 description: This flag tells the controller to suspend subsequent
3596                   events handling. Defaults to false.
3597                 type: boolean
3598               type:
3599                 description: Type of webhook sender, used to determine the validation
3600                   procedure and payload deserialization.
3601                 enum:
3602                 - generic
3603                 - generic-hmac
3604                 - github
3605                 - gitlab
3606                 - bitbucket
3607                 - harbor
3608                 - dockerhub
3609                 - quay
3610                 - gcr
3611                 - nexus
3612                 - acr
3613                 type: string
3614             required:
3615             - resources
3616             - type
3617             type: object
3618           status:
3619             default:
3620               observedGeneration: -1
3621             description: ReceiverStatus defines the observed state of Receiver
3622             properties:
3623               conditions:
3624                 items:
3625                   description: "Condition contains details for one aspect of the current
3626                     state of this API Resource. --- This struct is intended for direct
3627                     use as an array at the field path .status.conditions.  For example,
3628                     type FooStatus struct{     // Represents the observations of a
3629                     foo's current state.     // Known .status.conditions.type are:
3630                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
3631                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
3632                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
3633                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
3634                     \n     // other fields }"
3635                   properties:
3636                     lastTransitionTime:
3637                       description: lastTransitionTime is the last time the condition
3638                         transitioned from one status to another. This should be when
3639                         the underlying condition changed.  If that is not known, then
3640                         using the time when the API field changed is acceptable.
3641                       format: date-time
3642                       type: string
3643                     message:
3644                       description: message is a human readable message indicating
3645                         details about the transition. This may be an empty string.
3646                       maxLength: 32768
3647                       type: string
3648                     observedGeneration:
3649                       description: observedGeneration represents the .metadata.generation
3650                         that the condition was set based upon. For instance, if .metadata.generation
3651                         is currently 12, but the .status.conditions[x].observedGeneration
3652                         is 9, the condition is out of date with respect to the current
3653                         state of the instance.
3654                       format: int64
3655                       minimum: 0
3656                       type: integer
3657                     reason:
3658                       description: reason contains a programmatic identifier indicating
3659                         the reason for the condition's last transition. Producers
3660                         of specific condition types may define expected values and
3661                         meanings for this field, and whether the values are considered
3662                         a guaranteed API. The value should be a CamelCase string.
3663                         This field may not be empty.
3664                       maxLength: 1024
3665                       minLength: 1
3666                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3667                       type: string
3668                     status:
3669                       description: status of the condition, one of True, False, Unknown.
3670                       enum:
3671                       - "True"
3672                       - "False"
3673                       - Unknown
3674                       type: string
3675                     type:
3676                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
3677                         --- Many .condition.type values are consistent across resources
3678                         like Available, but because arbitrary conditions can be useful
3679                         (see .node.status.conditions), the ability to deconflict is
3680                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
3681                       maxLength: 316
3682                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3683                       type: string
3684                   required:
3685                   - lastTransitionTime
3686                   - message
3687                   - reason
3688                   - status
3689                   - type
3690                   type: object
3691                 type: array
3692               observedGeneration:
3693                 description: ObservedGeneration is the last observed generation.
3694                 format: int64
3695                 type: integer
3696               url:
3697                 description: Generated webhook URL in the format of '/hook/sha256sum(token+name+namespace)'.
3698                 type: string
3699             type: object
3700         type: object
3701     served: true
3702     storage: true
3703     subresources:
3704       status: {}
3705 status:
3706   acceptedNames:
3707     kind: ""
3708     plural: ""
3709   conditions: []
3710   storedVersions: []
3711 ---
3712 apiVersion: v1
3713 kind: ServiceAccount
3714 metadata:
3715   labels:
3716     app.kubernetes.io/instance: flux-system
3717     app.kubernetes.io/part-of: flux
3718     app.kubernetes.io/version: v0.27.0
3719   name: helm-controller
3720   namespace: flux-system
3721 ---
3722 apiVersion: v1
3723 kind: ServiceAccount
3724 metadata:
3725   labels:
3726     app.kubernetes.io/instance: flux-system
3727     app.kubernetes.io/part-of: flux
3728     app.kubernetes.io/version: v0.27.0
3729   name: kustomize-controller
3730   namespace: flux-system
3731 ---
3732 apiVersion: v1
3733 kind: ServiceAccount
3734 metadata:
3735   labels:
3736     app.kubernetes.io/instance: flux-system
3737     app.kubernetes.io/part-of: flux
3738     app.kubernetes.io/version: v0.27.0
3739   name: notification-controller
3740   namespace: flux-system
3741 ---
3742 apiVersion: v1
3743 kind: ServiceAccount
3744 metadata:
3745   labels:
3746     app.kubernetes.io/instance: flux-system
3747     app.kubernetes.io/part-of: flux
3748     app.kubernetes.io/version: v0.27.0
3749   name: source-controller
3750   namespace: flux-system
3751 ---
3752 apiVersion: rbac.authorization.k8s.io/v1
3753 kind: ClusterRole
3754 metadata:
3755   labels:
3756     app.kubernetes.io/instance: flux-system
3757     app.kubernetes.io/part-of: flux
3758     app.kubernetes.io/version: v0.27.0
3759   name: crd-controller-flux-system
3760 rules:
3761 - apiGroups:
3762   - source.toolkit.fluxcd.io
3763   resources:
3764   - '*'
3765   verbs:
3766   - '*'
3767 - apiGroups:
3768   - kustomize.toolkit.fluxcd.io
3769   resources:
3770   - '*'
3771   verbs:
3772   - '*'
3773 - apiGroups:
3774   - helm.toolkit.fluxcd.io
3775   resources:
3776   - '*'
3777   verbs:
3778   - '*'
3779 - apiGroups:
3780   - notification.toolkit.fluxcd.io
3781   resources:
3782   - '*'
3783   verbs:
3784   - '*'
3785 - apiGroups:
3786   - image.toolkit.fluxcd.io
3787   resources:
3788   - '*'
3789   verbs:
3790   - '*'
3791 - apiGroups:
3792   - ""
3793   resources:
3794   - namespaces
3795   - secrets
3796   verbs:
3797   - get
3798   - list
3799   - watch
3800 - apiGroups:
3801   - ""
3802   resources:
3803   - events
3804   verbs:
3805   - create
3806   - patch
3807 - apiGroups:
3808   - ""
3809   resources:
3810   - configmaps
3811   - configmaps/status
3812   verbs:
3813   - get
3814   - list
3815   - watch
3816   - create
3817   - update
3818   - patch
3819   - delete
3820 - apiGroups:
3821   - coordination.k8s.io
3822   resources:
3823   - leases
3824   verbs:
3825   - get
3826   - list
3827   - watch
3828   - create
3829   - update
3830   - patch
3831   - delete
3832 ---
3833 apiVersion: rbac.authorization.k8s.io/v1
3834 kind: ClusterRoleBinding
3835 metadata:
3836   labels:
3837     app.kubernetes.io/instance: flux-system
3838     app.kubernetes.io/part-of: flux
3839     app.kubernetes.io/version: v0.27.0
3840   name: cluster-reconciler-flux-system
3841 roleRef:
3842   apiGroup: rbac.authorization.k8s.io
3843   kind: ClusterRole
3844   name: cluster-admin
3845 subjects:
3846 - kind: ServiceAccount
3847   name: kustomize-controller
3848   namespace: flux-system
3849 - kind: ServiceAccount
3850   name: helm-controller
3851   namespace: flux-system
3852 ---
3853 apiVersion: rbac.authorization.k8s.io/v1
3854 kind: ClusterRoleBinding
3855 metadata:
3856   labels:
3857     app.kubernetes.io/instance: flux-system
3858     app.kubernetes.io/part-of: flux
3859     app.kubernetes.io/version: v0.27.0
3860   name: crd-controller-flux-system
3861 roleRef:
3862   apiGroup: rbac.authorization.k8s.io
3863   kind: ClusterRole
3864   name: crd-controller-flux-system
3865 subjects:
3866 - kind: ServiceAccount
3867   name: kustomize-controller
3868   namespace: flux-system
3869 - kind: ServiceAccount
3870   name: helm-controller
3871   namespace: flux-system
3872 - kind: ServiceAccount
3873   name: source-controller
3874   namespace: flux-system
3875 - kind: ServiceAccount
3876   name: notification-controller
3877   namespace: flux-system
3878 - kind: ServiceAccount
3879   name: image-reflector-controller
3880   namespace: flux-system
3881 - kind: ServiceAccount
3882   name: image-automation-controller
3883   namespace: flux-system
3884 ---
3885 apiVersion: v1
3886 kind: Service
3887 metadata:
3888   labels:
3889     app.kubernetes.io/instance: flux-system
3890     app.kubernetes.io/part-of: flux
3891     app.kubernetes.io/version: v0.27.0
3892     control-plane: controller
3893   name: notification-controller
3894   namespace: flux-system
3895 spec:
3896   ports:
3897   - name: http
3898     port: 80
3899     protocol: TCP
3900     targetPort: http
3901   selector:
3902     app: notification-controller
3903   type: ClusterIP
3904 ---
3905 apiVersion: v1
3906 kind: Service
3907 metadata:
3908   labels:
3909     app.kubernetes.io/instance: flux-system
3910     app.kubernetes.io/part-of: flux
3911     app.kubernetes.io/version: v0.27.0
3912     control-plane: controller
3913   name: source-controller
3914   namespace: flux-system
3915 spec:
3916   ports:
3917   - name: http
3918     port: 80
3919     protocol: TCP
3920     targetPort: http
3921   selector:
3922     app: source-controller
3923   type: ClusterIP
3924 ---
3925 apiVersion: v1
3926 kind: Service
3927 metadata:
3928   labels:
3929     app.kubernetes.io/instance: flux-system
3930     app.kubernetes.io/part-of: flux
3931     app.kubernetes.io/version: v0.27.0
3932     control-plane: controller
3933   name: webhook-receiver
3934   namespace: flux-system
3935 spec:
3936   ports:
3937   - name: http
3938     port: 80
3939     protocol: TCP
3940     targetPort: http-webhook
3941   selector:
3942     app: notification-controller
3943   type: ClusterIP
3944 ---
3945 apiVersion: apps/v1
3946 kind: Deployment
3947 metadata:
3948   labels:
3949     app.kubernetes.io/instance: flux-system
3950     app.kubernetes.io/part-of: flux
3951     app.kubernetes.io/version: v0.27.0
3952     control-plane: controller
3953   name: helm-controller
3954   namespace: flux-system
3955 spec:
3956   replicas: 1
3957   selector:
3958     matchLabels:
3959       app: helm-controller
3960   template:
3961     metadata:
3962       annotations:
3963         prometheus.io/port: "8080"
3964         prometheus.io/scrape: "true"
3965       labels:
3966         app: helm-controller
3967     spec:
3968       containers:
3969       - args:
3970         - --events-addr=http://notification-controller.flux-system.svc.cluster.local/
3971         - --watch-all-namespaces=true
3972         - --log-level=info
3973         - --log-encoding=json
3974         - --enable-leader-election
3975         env:
3976         - name: RUNTIME_NAMESPACE
3977           valueFrom:
3978             fieldRef:
3979               fieldPath: metadata.namespace
3980         image: ghcr.io/fluxcd/helm-controller:v0.17.0
3981         imagePullPolicy: IfNotPresent
3982         livenessProbe:
3983           httpGet:
3984             path: /healthz
3985             port: healthz
3986         name: manager
3987         ports:
3988         - containerPort: 8080
3989           name: http-prom
3990           protocol: TCP
3991         - containerPort: 9440
3992           name: healthz
3993           protocol: TCP
3994         readinessProbe:
3995           httpGet:
3996             path: /readyz
3997             port: healthz
3998         resources:
3999           limits:
4000             cpu: 1000m
4001             memory: 1Gi
4002           requests:
4003             cpu: 100m
4004             memory: 64Mi
4005         securityContext:
4006           allowPrivilegeEscalation: false
4007           capabilities:
4008             drop:
4009             - ALL
4010           readOnlyRootFilesystem: true
4011           runAsNonRoot: true
4012           seccompProfile:
4013             type: RuntimeDefault
4014         volumeMounts:
4015         - mountPath: /tmp
4016           name: temp
4017       nodeSelector:
4018         kubernetes.io/os: linux
4019       serviceAccountName: helm-controller
4020       terminationGracePeriodSeconds: 600
4021       volumes:
4022       - emptyDir: {}
4023         name: temp
4024 ---
4025 apiVersion: apps/v1
4026 kind: Deployment
4027 metadata:
4028   labels:
4029     app.kubernetes.io/instance: flux-system
4030     app.kubernetes.io/part-of: flux
4031     app.kubernetes.io/version: v0.27.0
4032     control-plane: controller
4033   name: kustomize-controller
4034   namespace: flux-system
4035 spec:
4036   replicas: 1
4037   selector:
4038     matchLabels:
4039       app: kustomize-controller
4040   template:
4041     metadata:
4042       annotations:
4043         prometheus.io/port: "8080"
4044         prometheus.io/scrape: "true"
4045       labels:
4046         app: kustomize-controller
4047     spec:
4048       containers:
4049       - args:
4050         - --events-addr=http://notification-controller.flux-system.svc.cluster.local/
4051         - --watch-all-namespaces=true
4052         - --log-level=info
4053         - --log-encoding=json
4054         - --enable-leader-election
4055         env:
4056         - name: RUNTIME_NAMESPACE
4057           valueFrom:
4058             fieldRef:
4059               fieldPath: metadata.namespace
4060         image: ghcr.io/fluxcd/kustomize-controller:v0.21.0
4061         imagePullPolicy: IfNotPresent
4062         livenessProbe:
4063           httpGet:
4064             path: /healthz
4065             port: healthz
4066         name: manager
4067         ports:
4068         - containerPort: 8080
4069           name: http-prom
4070           protocol: TCP
4071         - containerPort: 9440
4072           name: healthz
4073           protocol: TCP
4074         readinessProbe:
4075           httpGet:
4076             path: /readyz
4077             port: healthz
4078         resources:
4079           limits:
4080             cpu: 1000m
4081             memory: 1Gi
4082           requests:
4083             cpu: 100m
4084             memory: 64Mi
4085         securityContext:
4086           allowPrivilegeEscalation: false
4087           capabilities:
4088             drop:
4089             - ALL
4090           readOnlyRootFilesystem: true
4091           runAsNonRoot: true
4092           seccompProfile:
4093             type: RuntimeDefault
4094         volumeMounts:
4095         - mountPath: /tmp
4096           name: temp
4097       nodeSelector:
4098         kubernetes.io/os: linux
4099       securityContext:
4100         fsGroup: 1337
4101       serviceAccountName: kustomize-controller
4102       terminationGracePeriodSeconds: 60
4103       volumes:
4104       - emptyDir: {}
4105         name: temp
4106 ---
4107 apiVersion: apps/v1
4108 kind: Deployment
4109 metadata:
4110   labels:
4111     app.kubernetes.io/instance: flux-system
4112     app.kubernetes.io/part-of: flux
4113     app.kubernetes.io/version: v0.27.0
4114     control-plane: controller
4115   name: notification-controller
4116   namespace: flux-system
4117 spec:
4118   replicas: 1
4119   selector:
4120     matchLabels:
4121       app: notification-controller
4122   template:
4123     metadata:
4124       annotations:
4125         prometheus.io/port: "8080"
4126         prometheus.io/scrape: "true"
4127       labels:
4128         app: notification-controller
4129     spec:
4130       containers:
4131       - args:
4132         - --watch-all-namespaces=true
4133         - --log-level=info
4134         - --log-encoding=json
4135         - --enable-leader-election
4136         env:
4137         - name: RUNTIME_NAMESPACE
4138           valueFrom:
4139             fieldRef:
4140               fieldPath: metadata.namespace
4141         image: ghcr.io/fluxcd/notification-controller:v0.22.0
4142         imagePullPolicy: IfNotPresent
4143         livenessProbe:
4144           httpGet:
4145             path: /healthz
4146             port: healthz
4147         name: manager
4148         ports:
4149         - containerPort: 9090
4150           name: http
4151           protocol: TCP
4152         - containerPort: 9292
4153           name: http-webhook
4154           protocol: TCP
4155         - containerPort: 8080
4156           name: http-prom
4157           protocol: TCP
4158         - containerPort: 9440
4159           name: healthz
4160           protocol: TCP
4161         readinessProbe:
4162           httpGet:
4163             path: /readyz
4164             port: healthz
4165         resources:
4166           limits:
4167             cpu: 1000m
4168             memory: 1Gi
4169           requests:
4170             cpu: 100m
4171             memory: 64Mi
4172         securityContext:
4173           allowPrivilegeEscalation: false
4174           capabilities:
4175             drop:
4176             - ALL
4177           readOnlyRootFilesystem: true
4178           runAsNonRoot: true
4179           seccompProfile:
4180             type: RuntimeDefault
4181         volumeMounts:
4182         - mountPath: /tmp
4183           name: temp
4184       nodeSelector:
4185         kubernetes.io/os: linux
4186       serviceAccountName: notification-controller
4187       terminationGracePeriodSeconds: 10
4188       volumes:
4189       - emptyDir: {}
4190         name: temp
4191 ---
4192 apiVersion: apps/v1
4193 kind: Deployment
4194 metadata:
4195   labels:
4196     app.kubernetes.io/instance: flux-system
4197     app.kubernetes.io/part-of: flux
4198     app.kubernetes.io/version: v0.27.0
4199     control-plane: controller
4200   name: source-controller
4201   namespace: flux-system
4202 spec:
4203   replicas: 1
4204   selector:
4205     matchLabels:
4206       app: source-controller
4207   strategy:
4208     type: Recreate
4209   template:
4210     metadata:
4211       annotations:
4212         prometheus.io/port: "8080"
4213         prometheus.io/scrape: "true"
4214       labels:
4215         app: source-controller
4216     spec:
4217       containers:
4218       - args:
4219         - --events-addr=http://notification-controller.flux-system.svc.cluster.local/
4220         - --watch-all-namespaces=true
4221         - --log-level=info
4222         - --log-encoding=json
4223         - --enable-leader-election
4224         - --storage-path=/data
4225         - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local.
4226         env:
4227         - name: RUNTIME_NAMESPACE
4228           valueFrom:
4229             fieldRef:
4230               fieldPath: metadata.namespace
4231         image: ghcr.io/fluxcd/source-controller:v0.21.2
4232         imagePullPolicy: IfNotPresent
4233         livenessProbe:
4234           httpGet:
4235             path: /healthz
4236             port: healthz
4237         name: manager
4238         ports:
4239         - containerPort: 9090
4240           name: http
4241           protocol: TCP
4242         - containerPort: 8080
4243           name: http-prom
4244           protocol: TCP
4245         - containerPort: 9440
4246           name: healthz
4247           protocol: TCP
4248         readinessProbe:
4249           httpGet:
4250             path: /
4251             port: http
4252         resources:
4253           limits:
4254             cpu: 1000m
4255             memory: 1Gi
4256           requests:
4257             cpu: 50m
4258             memory: 64Mi
4259         securityContext:
4260           allowPrivilegeEscalation: false
4261           capabilities:
4262             drop:
4263             - ALL
4264           readOnlyRootFilesystem: true
4265           runAsNonRoot: true
4266           seccompProfile:
4267             type: RuntimeDefault
4268         volumeMounts:
4269         - mountPath: /data
4270           name: data
4271         - mountPath: /tmp
4272           name: tmp
4273       nodeSelector:
4274         kubernetes.io/os: linux
4275       securityContext:
4276         fsGroup: 1337
4277       serviceAccountName: source-controller
4278       terminationGracePeriodSeconds: 10
4279       volumes:
4280       - emptyDir: {}
4281         name: data
4282       - emptyDir: {}
4283         name: tmp
4284 ---
4285 apiVersion: networking.k8s.io/v1
4286 kind: NetworkPolicy
4287 metadata:
4288   labels:
4289     app.kubernetes.io/instance: flux-system
4290     app.kubernetes.io/part-of: flux
4291     app.kubernetes.io/version: v0.27.0
4292   name: allow-egress
4293   namespace: flux-system
4294 spec:
4295   egress:
4296   - {}
4297   ingress:
4298   - from:
4299     - podSelector: {}
4300   podSelector: {}
4301   policyTypes:
4302   - Ingress
4303   - Egress
4304 ---
4305 apiVersion: networking.k8s.io/v1
4306 kind: NetworkPolicy
4307 metadata:
4308   labels:
4309     app.kubernetes.io/instance: flux-system
4310     app.kubernetes.io/part-of: flux
4311     app.kubernetes.io/version: v0.27.0
4312   name: allow-scraping
4313   namespace: flux-system
4314 spec:
4315   ingress:
4316   - from:
4317     - namespaceSelector: {}
4318     ports:
4319     - port: 8080
4320       protocol: TCP
4321   podSelector: {}
4322   policyTypes:
4323   - Ingress
4324 ---
4325 apiVersion: networking.k8s.io/v1
4326 kind: NetworkPolicy
4327 metadata:
4328   labels:
4329     app.kubernetes.io/instance: flux-system
4330     app.kubernetes.io/part-of: flux
4331     app.kubernetes.io/version: v0.27.0
4332   name: allow-webhooks
4333   namespace: flux-system
4334 spec:
4335   ingress:
4336   - from:
4337     - namespaceSelector: {}
4338   podSelector:
4339     matchLabels:
4340       app: notification-controller
4341   policyTypes:
4342   - Ingress