auto-update crds catalog
This commit is contained in:
parent
43d581767b
commit
7670aa91f5
|
|
@ -5,6 +5,12 @@
|
|||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/helm.toolkit.fluxcd.io/all-anyOf.json"
|
||||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/helm.toolkit.fluxcd.io/helmrelease_v2beta2.json"
|
||||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/helm.toolkit.fluxcd.io/all-oneOf.json"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
|
|
|||
|
|
@ -6,6 +6,9 @@
|
|||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/helm.toolkit.fluxcd.io/all-anyOf.json"
|
||||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/helm.toolkit.fluxcd.io/helmrelease_v2beta2.json"
|
||||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/helm.toolkit.fluxcd.io/all-oneOf.json"
|
||||
}
|
||||
|
|
|
|||
|
|
@ -811,6 +811,105 @@
|
|||
"description": "HelmChart is the namespaced name of the HelmChart resource created by the controller for the HelmRelease.",
|
||||
"type": "string"
|
||||
},
|
||||
"history": {
|
||||
"description": "History holds the history of Helm releases performed for this HelmRelease up to the last successfully completed release. \n Note: this field is provisional to the v2beta2 API, and not actively used by v2beta1 HelmReleases.",
|
||||
"items": {
|
||||
"description": "Snapshot captures a point-in-time copy of the status information for a Helm release, as managed by the controller.",
|
||||
"properties": {
|
||||
"apiVersion": {
|
||||
"description": "APIVersion is the API version of the Snapshot. Provisional: when the calculation method of the Digest field is changed, this field will be used to distinguish between the old and new methods.",
|
||||
"type": "string"
|
||||
},
|
||||
"chartName": {
|
||||
"description": "ChartName is the chart name of the release object in storage.",
|
||||
"type": "string"
|
||||
},
|
||||
"chartVersion": {
|
||||
"description": "ChartVersion is the chart version of the release object in storage.",
|
||||
"type": "string"
|
||||
},
|
||||
"configDigest": {
|
||||
"description": "ConfigDigest is the checksum of the config (better known as \"values\") of the release object in storage. It has the format of `<algo>:<checksum>`.",
|
||||
"type": "string"
|
||||
},
|
||||
"deleted": {
|
||||
"description": "Deleted is when the release was deleted.",
|
||||
"format": "date-time",
|
||||
"type": "string"
|
||||
},
|
||||
"digest": {
|
||||
"description": "Digest is the checksum of the release object in storage. It has the format of `<algo>:<checksum>`.",
|
||||
"type": "string"
|
||||
},
|
||||
"firstDeployed": {
|
||||
"description": "FirstDeployed is when the release was first deployed.",
|
||||
"format": "date-time",
|
||||
"type": "string"
|
||||
},
|
||||
"lastDeployed": {
|
||||
"description": "LastDeployed is when the release was last deployed.",
|
||||
"format": "date-time",
|
||||
"type": "string"
|
||||
},
|
||||
"name": {
|
||||
"description": "Name is the name of the release.",
|
||||
"type": "string"
|
||||
},
|
||||
"namespace": {
|
||||
"description": "Namespace is the namespace the release is deployed to.",
|
||||
"type": "string"
|
||||
},
|
||||
"status": {
|
||||
"description": "Status is the current state of the release.",
|
||||
"type": "string"
|
||||
},
|
||||
"testHooks": {
|
||||
"additionalProperties": {
|
||||
"description": "TestHookStatus holds the status information for a test hook as observed to be run by the controller.",
|
||||
"properties": {
|
||||
"lastCompleted": {
|
||||
"description": "LastCompleted is the time the test hook last completed.",
|
||||
"format": "date-time",
|
||||
"type": "string"
|
||||
},
|
||||
"lastStarted": {
|
||||
"description": "LastStarted is the time the test hook was last started.",
|
||||
"format": "date-time",
|
||||
"type": "string"
|
||||
},
|
||||
"phase": {
|
||||
"description": "Phase the test hook was observed to be in.",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"description": "TestHooks is the list of test hooks for the release as observed to be run by the controller.",
|
||||
"type": "object"
|
||||
},
|
||||
"version": {
|
||||
"description": "Version is the version of the release object in storage.",
|
||||
"type": "integer"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"chartName",
|
||||
"chartVersion",
|
||||
"configDigest",
|
||||
"digest",
|
||||
"firstDeployed",
|
||||
"lastDeployed",
|
||||
"name",
|
||||
"namespace",
|
||||
"status",
|
||||
"version"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"installFailures": {
|
||||
"description": "InstallFailures is the install failure count against the latest desired state. It is reset after a successful reconciliation.",
|
||||
"format": "int64",
|
||||
|
|
@ -820,6 +919,19 @@
|
|||
"description": "LastAppliedRevision is the revision of the last successfully applied source.",
|
||||
"type": "string"
|
||||
},
|
||||
"lastAttemptedConfigDigest": {
|
||||
"description": "LastAttemptedConfigDigest is the digest for the config (better known as \"values\") of the last reconciliation attempt. \n Note: this field is provisional to the v2beta2 API, and not actively used by v2beta1 HelmReleases.",
|
||||
"type": "string"
|
||||
},
|
||||
"lastAttemptedGeneration": {
|
||||
"description": "LastAttemptedGeneration is the last generation the controller attempted to reconcile. \n Note: this field is provisional to the v2beta2 API, and not actively used by v2beta1 HelmReleases.",
|
||||
"format": "int64",
|
||||
"type": "integer"
|
||||
},
|
||||
"lastAttemptedReleaseAction": {
|
||||
"description": "LastAttemptedReleaseAction is the last release action performed for this HelmRelease. It is used to determine the active remediation strategy. \n Note: this field is provisional to the v2beta2 API, and not actively used by v2beta1 HelmReleases.",
|
||||
"type": "string"
|
||||
},
|
||||
"lastAttemptedRevision": {
|
||||
"description": "LastAttemptedRevision is the revision of the last reconciliation attempt.",
|
||||
"type": "string"
|
||||
|
|
@ -841,6 +953,10 @@
|
|||
"format": "int64",
|
||||
"type": "integer"
|
||||
},
|
||||
"storageNamespace": {
|
||||
"description": "StorageNamespace is the namespace of the Helm release storage for the current release. \n Note: this field is provisional to the v2beta2 API, and not actively used by v2beta1 HelmReleases.",
|
||||
"type": "string"
|
||||
},
|
||||
"upgradeFailures": {
|
||||
"description": "UpgradeFailures is the upgrade failure count against the latest desired state. It is reset after a successful reconciliation.",
|
||||
"format": "int64",
|
||||
|
|
|
|||
File diff suppressed because it is too large
Load Diff
|
|
@ -72,6 +72,10 @@
|
|||
"description": "Image is the name of the image repository",
|
||||
"type": "string"
|
||||
},
|
||||
"insecure": {
|
||||
"description": "Insecure allows connecting to a non-TLS HTTP container registry.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"interval": {
|
||||
"description": "Interval is the length of time to wait between scans of the image repository.",
|
||||
"pattern": "^([0-9]+(\\.[0-9]+)?(ms|s|m|h))+$",
|
||||
|
|
|
|||
|
|
@ -0,0 +1,135 @@
|
|||
{
|
||||
"description": "Alert is the Schema for the alerts API",
|
||||
"properties": {
|
||||
"apiVersion": {
|
||||
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
|
||||
"type": "string"
|
||||
},
|
||||
"kind": {
|
||||
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
|
||||
"type": "string"
|
||||
},
|
||||
"metadata": {
|
||||
"type": "object"
|
||||
},
|
||||
"spec": {
|
||||
"description": "AlertSpec defines an alerting rule for events involving a list of objects.",
|
||||
"properties": {
|
||||
"eventMetadata": {
|
||||
"additionalProperties": {
|
||||
"type": "string"
|
||||
},
|
||||
"description": "EventMetadata is an optional field for adding metadata to events dispatched by the controller. This can be used for enhancing the context of the event. If a field would override one already present on the original event as generated by the emitter, then the override doesn't happen, i.e. the original value is preserved, and an info log is printed.",
|
||||
"type": "object"
|
||||
},
|
||||
"eventSeverity": {
|
||||
"default": "info",
|
||||
"description": "EventSeverity specifies how to filter events based on severity. If set to 'info' no events will be filtered.",
|
||||
"enum": [
|
||||
"info",
|
||||
"error"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"eventSources": {
|
||||
"description": "EventSources specifies how to filter events based on the involved object kind, name and namespace.",
|
||||
"items": {
|
||||
"description": "CrossNamespaceObjectReference contains enough information to let you locate the typed referenced object at cluster level",
|
||||
"properties": {
|
||||
"apiVersion": {
|
||||
"description": "API version of the referent",
|
||||
"type": "string"
|
||||
},
|
||||
"kind": {
|
||||
"description": "Kind of the referent",
|
||||
"enum": [
|
||||
"Bucket",
|
||||
"GitRepository",
|
||||
"Kustomization",
|
||||
"HelmRelease",
|
||||
"HelmChart",
|
||||
"HelmRepository",
|
||||
"ImageRepository",
|
||||
"ImagePolicy",
|
||||
"ImageUpdateAutomation",
|
||||
"OCIRepository"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"matchLabels": {
|
||||
"additionalProperties": {
|
||||
"type": "string"
|
||||
},
|
||||
"description": "MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed. MatchLabels requires the name to be set to `*`.",
|
||||
"type": "object"
|
||||
},
|
||||
"name": {
|
||||
"description": "Name of the referent If multiple resources are targeted `*` may be set.",
|
||||
"maxLength": 53,
|
||||
"minLength": 1,
|
||||
"type": "string"
|
||||
},
|
||||
"namespace": {
|
||||
"description": "Namespace of the referent",
|
||||
"maxLength": 53,
|
||||
"minLength": 1,
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"kind",
|
||||
"name"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"exclusionList": {
|
||||
"description": "ExclusionList specifies a list of Golang regular expressions to be used for excluding messages.",
|
||||
"items": {
|
||||
"type": "string"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"inclusionList": {
|
||||
"description": "InclusionList specifies a list of Golang regular expressions to be used for including messages.",
|
||||
"items": {
|
||||
"type": "string"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"providerRef": {
|
||||
"description": "ProviderRef specifies which Provider this Alert should use.",
|
||||
"properties": {
|
||||
"name": {
|
||||
"description": "Name of the referent.",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"name"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"summary": {
|
||||
"description": "Summary holds a short description of the impact and affected cluster.",
|
||||
"maxLength": 255,
|
||||
"type": "string"
|
||||
},
|
||||
"suspend": {
|
||||
"description": "Suspend tells the controller to suspend subsequent events handling for this Alert.",
|
||||
"type": "boolean"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"eventSources",
|
||||
"providerRef"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"type": "object"
|
||||
}
|
||||
|
|
@ -15,6 +15,9 @@
|
|||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/notification.toolkit.fluxcd.io/alert_v1beta2.json"
|
||||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/notification.toolkit.fluxcd.io/provider_v1beta3.json"
|
||||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/notification.toolkit.fluxcd.io/receiver_v1beta1.json"
|
||||
},
|
||||
|
|
@ -24,6 +27,9 @@
|
|||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/notification.toolkit.fluxcd.io/receiver_v1beta2.json"
|
||||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/notification.toolkit.fluxcd.io/alert_v1beta3.json"
|
||||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/notification.toolkit.fluxcd.io/all-oneOf.json"
|
||||
}
|
||||
|
|
|
|||
|
|
@ -15,6 +15,9 @@
|
|||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/notification.toolkit.fluxcd.io/alert_v1beta2.json"
|
||||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/notification.toolkit.fluxcd.io/provider_v1beta3.json"
|
||||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/notification.toolkit.fluxcd.io/receiver_v1beta1.json"
|
||||
},
|
||||
|
|
@ -24,6 +27,9 @@
|
|||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/notification.toolkit.fluxcd.io/receiver_v1beta2.json"
|
||||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/notification.toolkit.fluxcd.io/alert_v1beta3.json"
|
||||
},
|
||||
{
|
||||
"$ref": "https://gitea.rknet.org/infra/crds-catalog/raw/branch/catalog/notification.toolkit.fluxcd.io/all-oneOf.json"
|
||||
}
|
||||
|
|
|
|||
|
|
@ -85,6 +85,7 @@
|
|||
"github",
|
||||
"gitlab",
|
||||
"gitea",
|
||||
"bitbucketserver",
|
||||
"bitbucket",
|
||||
"azuredevops",
|
||||
"googlechat",
|
||||
|
|
|
|||
|
|
@ -0,0 +1,118 @@
|
|||
{
|
||||
"description": "Provider is the Schema for the providers API",
|
||||
"properties": {
|
||||
"apiVersion": {
|
||||
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
|
||||
"type": "string"
|
||||
},
|
||||
"kind": {
|
||||
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
|
||||
"type": "string"
|
||||
},
|
||||
"metadata": {
|
||||
"type": "object"
|
||||
},
|
||||
"spec": {
|
||||
"description": "ProviderSpec defines the desired state of the Provider.",
|
||||
"properties": {
|
||||
"address": {
|
||||
"description": "Address specifies the endpoint, in a generic sense, to where alerts are sent. What kind of endpoint depends on the specific Provider type being used. For the generic Provider, for example, this is an HTTP/S address. For other Provider types this could be a project ID or a namespace.",
|
||||
"maxLength": 2048,
|
||||
"type": "string"
|
||||
},
|
||||
"certSecretRef": {
|
||||
"description": "CertSecretRef specifies the Secret containing a PEM-encoded CA certificate (in the `ca.crt` key). \n Note: Support for the `caFile` key has been deprecated.",
|
||||
"properties": {
|
||||
"name": {
|
||||
"description": "Name of the referent.",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"name"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"channel": {
|
||||
"description": "Channel specifies the destination channel where events should be posted.",
|
||||
"maxLength": 2048,
|
||||
"type": "string"
|
||||
},
|
||||
"proxy": {
|
||||
"description": "Proxy the HTTP/S address of the proxy server.",
|
||||
"maxLength": 2048,
|
||||
"pattern": "^(http|https)://.*$",
|
||||
"type": "string"
|
||||
},
|
||||
"secretRef": {
|
||||
"description": "SecretRef specifies the Secret containing the authentication credentials for this Provider.",
|
||||
"properties": {
|
||||
"name": {
|
||||
"description": "Name of the referent.",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"name"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"suspend": {
|
||||
"description": "Suspend tells the controller to suspend subsequent events handling for this Provider.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"timeout": {
|
||||
"description": "Timeout for sending alerts to the Provider.",
|
||||
"pattern": "^([0-9]+(\\.[0-9]+)?(ms|s|m))+$",
|
||||
"type": "string"
|
||||
},
|
||||
"type": {
|
||||
"description": "Type specifies which Provider implementation to use.",
|
||||
"enum": [
|
||||
"slack",
|
||||
"discord",
|
||||
"msteams",
|
||||
"rocket",
|
||||
"generic",
|
||||
"generic-hmac",
|
||||
"github",
|
||||
"gitlab",
|
||||
"gitea",
|
||||
"bitbucketserver",
|
||||
"bitbucket",
|
||||
"azuredevops",
|
||||
"googlechat",
|
||||
"googlepubsub",
|
||||
"webex",
|
||||
"sentry",
|
||||
"azureeventhub",
|
||||
"telegram",
|
||||
"lark",
|
||||
"matrix",
|
||||
"opsgenie",
|
||||
"alertmanager",
|
||||
"grafana",
|
||||
"githubdispatch",
|
||||
"pagerduty",
|
||||
"datadog",
|
||||
"nats"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"username": {
|
||||
"description": "Username specifies the name under which events are posted.",
|
||||
"maxLength": 2048,
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"type": "object"
|
||||
}
|
||||
|
|
@ -64,6 +64,10 @@
|
|||
"pattern": "^([0-9]+(\\.[0-9]+)?(ms|s|m|h))+$",
|
||||
"type": "string"
|
||||
},
|
||||
"prefix": {
|
||||
"description": "Prefix to use for server-side filtering of files in the Bucket.",
|
||||
"type": "string"
|
||||
},
|
||||
"provider": {
|
||||
"default": "generic",
|
||||
"description": "Provider of the object storage bucket. Defaults to 'generic', which expects an S3 (API) compatible object storage.",
|
||||
|
|
|
|||
|
|
@ -107,6 +107,29 @@
|
|||
"verify": {
|
||||
"description": "Verify contains the secret name containing the trusted public keys used to verify the signature and specifies which provider to use to check whether OCI image is authentic. This field is only supported when using HelmRepository source with spec.type 'oci'. Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified.",
|
||||
"properties": {
|
||||
"matchOIDCIdentity": {
|
||||
"description": "MatchOIDCIdentity specifies the identity matching criteria to use while verifying an OCI artifact which was signed using Cosign keyless signing. The artifact's identity is deemed to be verified if any of the specified matchers match against the identity.",
|
||||
"items": {
|
||||
"description": "OIDCIdentityMatch specifies options for verifying the certificate identity, i.e. the issuer and the subject of the certificate.",
|
||||
"properties": {
|
||||
"issuer": {
|
||||
"description": "Issuer specifies the regex pattern to match against to verify the OIDC issuer in the Fulcio certificate. The pattern must be a valid Go regular expression.",
|
||||
"type": "string"
|
||||
},
|
||||
"subject": {
|
||||
"description": "Subject specifies the regex pattern to match against to verify the identity subject in the Fulcio certificate. The pattern must be a valid Go regular expression.",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"issuer",
|
||||
"subject"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"provider": {
|
||||
"default": "cosign",
|
||||
"description": "Provider specifies the technology used to sign the OCI Artifact.",
|
||||
|
|
|
|||
|
|
@ -57,6 +57,10 @@
|
|||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"insecure": {
|
||||
"description": "Insecure allows connecting to a non-TLS HTTP container registry. This field is only taken into account if the .spec.type field is set to 'oci'.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"interval": {
|
||||
"description": "Interval at which the HelmRepository URL is checked for updates. This interval is approximate and may be subject to jitter to ensure efficient use of resources.",
|
||||
"pattern": "^([0-9]+(\\.[0-9]+)?(ms|s|m|h))+$",
|
||||
|
|
@ -96,8 +100,7 @@
|
|||
"type": "boolean"
|
||||
},
|
||||
"timeout": {
|
||||
"default": "60s",
|
||||
"description": "Timeout is used for the index fetch operation for an HTTPS helm repository, and for remote OCI Repository operations like pulling for an OCI helm repository. Its default value is 60s.",
|
||||
"description": "Timeout is used for the index fetch operation for an HTTPS helm repository, and for remote OCI Repository operations like pulling for an OCI helm chart by the associated HelmChart. Its default value is 60s.",
|
||||
"pattern": "^([0-9]+(\\.[0-9]+)?(ms|s|m))+$",
|
||||
"type": "string"
|
||||
},
|
||||
|
|
@ -111,11 +114,11 @@
|
|||
},
|
||||
"url": {
|
||||
"description": "URL of the Helm repository, a valid URL contains at least a protocol and host.",
|
||||
"pattern": "^(http|https|oci)://.*$",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"interval",
|
||||
"url"
|
||||
],
|
||||
"type": "object",
|
||||
|
|
|
|||
|
|
@ -127,6 +127,29 @@
|
|||
"verify": {
|
||||
"description": "Verify contains the secret name containing the trusted public keys used to verify the signature and specifies which provider to use to check whether OCI image is authentic.",
|
||||
"properties": {
|
||||
"matchOIDCIdentity": {
|
||||
"description": "MatchOIDCIdentity specifies the identity matching criteria to use while verifying an OCI artifact which was signed using Cosign keyless signing. The artifact's identity is deemed to be verified if any of the specified matchers match against the identity.",
|
||||
"items": {
|
||||
"description": "OIDCIdentityMatch specifies options for verifying the certificate identity, i.e. the issuer and the subject of the certificate.",
|
||||
"properties": {
|
||||
"issuer": {
|
||||
"description": "Issuer specifies the regex pattern to match against to verify the OIDC issuer in the Fulcio certificate. The pattern must be a valid Go regular expression.",
|
||||
"type": "string"
|
||||
},
|
||||
"subject": {
|
||||
"description": "Subject specifies the regex pattern to match against to verify the identity subject in the Fulcio certificate. The pattern must be a valid Go regular expression.",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"issuer",
|
||||
"subject"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"provider": {
|
||||
"default": "cosign",
|
||||
"description": "Provider specifies the technology used to sign the OCI Artifact.",
|
||||
|
|
|
|||
Loading…
Reference in New Issue