Skip to content

Commit

Permalink
update OPA Gatekeeper CRDs to current v3.16.3 (#334)
Browse files Browse the repository at this point in the history
  • Loading branch information
tmyhu authored Jun 22, 2024
1 parent 71373d4 commit e4f08ef
Show file tree
Hide file tree
Showing 23 changed files with 1,043 additions and 328 deletions.
8 changes: 4 additions & 4 deletions config.gatekeeper.sh/config_v1alpha1.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@
"description": "Config is the Schema for the configs API.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
Expand All @@ -21,8 +21,8 @@
"properties": {
"excludedNamespaces": {
"items": {
"description": "A string that supports globbing at its front or end. Ex: \"kube-*\" will match \"kube-system\" or \"kube-public\", \"*-system\" will match \"kube-system\" or \"gatekeeper-system\". The asterisk is required for wildcard matching.",
"pattern": "^(\\*|\\*-)?[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\*|-\\*)?$",
"description": "A string that supports globbing at its front and end. Ex: \"kube-*\" will match \"kube-system\" or\n\"kube-public\", \"*-system\" will match \"kube-system\" or \"gatekeeper-system\", \"*system*\" will\nmatch \"system-kube\" or \"kube-system\". The asterisk is required for wildcard matching.",
"pattern": "^\\*?[-:a-z0-9]*\\*?$",
"type": "string"
},
"type": "array"
Expand Down
76 changes: 68 additions & 8 deletions expansion.gatekeeper.sh/expansiontemplate_v1alpha1.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,23 +2,30 @@
"description": "ExpansionTemplate is the Schema for the ExpansionTemplate API.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
"type": "object"
"properties": {
"name": {
"maxLength": 63,
"type": "string"
}
},
"type": "object",
"additionalProperties": false
},
"spec": {
"description": "ExpansionTemplateSpec defines the desired state of ExpansionTemplate.",
"properties": {
"applyTo": {
"description": "ApplyTo lists the specific groups, versions and kinds of generator resources which will be expanded.",
"description": "ApplyTo lists the specific groups, versions and kinds of generator resources\nwhich will be expanded.",
"items": {
"description": "ApplyTo determines what GVKs items the mutation should apply to. Globs are not allowed.",
"description": "ApplyTo determines what GVKs items the mutation should apply to.\nGlobs are not allowed.",
"properties": {
"groups": {
"items": {
Expand All @@ -45,11 +52,11 @@
"type": "array"
},
"enforcementAction": {
"description": "EnforcementAction specifies the enforcement action to be used for resources matching the ExpansionTemplate. Specifying an empty value will use the enforcement action specified by the Constraint in violation.",
"description": "EnforcementAction specifies the enforcement action to be used for resources\nmatching the ExpansionTemplate. Specifying an empty value will use the\nenforcement action specified by the Constraint in violation.",
"type": "string"
},
"generatedGVK": {
"description": "GeneratedGVK specifies the GVK of the resources which the generator resource creates.",
"description": "GeneratedGVK specifies the GVK of the resources which the generator\nresource creates.",
"properties": {
"group": {
"type": "string"
Expand All @@ -65,12 +72,65 @@
"additionalProperties": false
},
"templateSource": {
"description": "TemplateSource specifies the source field on the generator resource to use as the base for expanded resource. For Pod-creating generators, this is usually spec.template",
"description": "TemplateSource specifies the source field on the generator resource to\nuse as the base for expanded resource. For Pod-creating generators, this\nis usually spec.template",
"type": "string"
}
},
"type": "object",
"additionalProperties": false
},
"status": {
"description": "ExpansionTemplateStatus defines the observed state of ExpansionTemplate.",
"properties": {
"byPod": {
"items": {
"description": "ExpansionTemplatePodStatusStatus defines the observed state of ExpansionTemplatePodStatus.",
"properties": {
"errors": {
"items": {
"properties": {
"message": {
"type": "string"
},
"type": {
"type": "string"
}
},
"required": [
"message"
],
"type": "object",
"additionalProperties": false
},
"type": "array"
},
"id": {
"description": "Important: Run \"make\" to regenerate code after modifying this file",
"type": "string"
},
"observedGeneration": {
"format": "int64",
"type": "integer"
},
"operations": {
"items": {
"type": "string"
},
"type": "array"
},
"templateUID": {
"description": "UID is a type that holds unique ID values, including UUIDs. Because we\ndon't ONLY use UUIDs, this is an alias to string. Being a type captures\nintent and helps make sure that UIDs and names do not get conflated.",
"type": "string"
}
},
"type": "object",
"additionalProperties": false
},
"type": "array"
}
},
"type": "object",
"additionalProperties": false
}
},
"type": "object"
Expand Down
131 changes: 131 additions & 0 deletions expansion.gatekeeper.sh/expansiontemplate_v1beta1.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,131 @@
{
"description": "ExpansionTemplate is the Schema for the ExpansionTemplate API.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"description": "ExpansionTemplateSpec defines the desired state of ExpansionTemplate.",
"properties": {
"applyTo": {
"description": "ApplyTo lists the specific groups, versions and kinds of generator resources\nwhich will be expanded.",
"items": {
"description": "ApplyTo determines what GVKs items the mutation should apply to.\nGlobs are not allowed.",
"properties": {
"groups": {
"items": {
"type": "string"
},
"type": "array"
},
"kinds": {
"items": {
"type": "string"
},
"type": "array"
},
"versions": {
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object",
"additionalProperties": false
},
"type": "array"
},
"enforcementAction": {
"description": "EnforcementAction specifies the enforcement action to be used for resources\nmatching the ExpansionTemplate. Specifying an empty value will use the\nenforcement action specified by the Constraint in violation.",
"type": "string"
},
"generatedGVK": {
"description": "GeneratedGVK specifies the GVK of the resources which the generator\nresource creates.",
"properties": {
"group": {
"type": "string"
},
"kind": {
"type": "string"
},
"version": {
"type": "string"
}
},
"type": "object",
"additionalProperties": false
},
"templateSource": {
"description": "TemplateSource specifies the source field on the generator resource to\nuse as the base for expanded resource. For Pod-creating generators, this\nis usually spec.template",
"type": "string"
}
},
"type": "object",
"additionalProperties": false
},
"status": {
"description": "ExpansionTemplateStatus defines the observed state of ExpansionTemplate.",
"properties": {
"byPod": {
"items": {
"description": "ExpansionTemplatePodStatusStatus defines the observed state of ExpansionTemplatePodStatus.",
"properties": {
"errors": {
"items": {
"properties": {
"message": {
"type": "string"
},
"type": {
"type": "string"
}
},
"required": [
"message"
],
"type": "object",
"additionalProperties": false
},
"type": "array"
},
"id": {
"description": "Important: Run \"make\" to regenerate code after modifying this file",
"type": "string"
},
"observedGeneration": {
"format": "int64",
"type": "integer"
},
"operations": {
"items": {
"type": "string"
},
"type": "array"
},
"templateUID": {
"description": "UID is a type that holds unique ID values, including UUIDs. Because we\ndon't ONLY use UUIDs, this is an alias to string. Being a type captures\nintent and helps make sure that UIDs and names do not get conflated.",
"type": "string"
}
},
"type": "object",
"additionalProperties": false
},
"type": "array"
}
},
"type": "object",
"additionalProperties": false
}
},
"type": "object"
}

8 changes: 4 additions & 4 deletions externaldata.gatekeeper.sh/provider_v1alpha1.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@
"description": "Provider is the Schema for the Provider API",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
Expand All @@ -16,15 +16,15 @@
"description": "Spec defines the Provider specifications.",
"properties": {
"caBundle": {
"description": "CABundle is a base64-encoded string that contains the TLS CA bundle in PEM format. It is used to verify the signature of the provider's certificate.",
"description": "CABundle is a base64-encoded string that contains the TLS CA bundle in PEM format.\nIt is used to verify the signature of the provider's certificate.",
"type": "string"
},
"timeout": {
"description": "Timeout is the timeout when querying the provider.",
"type": "integer"
},
"url": {
"description": "URL is the url for the provider. URL is prefixed with http:// or https://.",
"description": "URL is the url for the provider. URL is prefixed with https://.",
"type": "string"
}
},
Expand Down
8 changes: 4 additions & 4 deletions externaldata.gatekeeper.sh/provider_v1beta1.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@
"description": "Provider is the Schema for the providers API",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
Expand All @@ -16,15 +16,15 @@
"description": "Spec defines the Provider specifications.",
"properties": {
"caBundle": {
"description": "CABundle is a base64-encoded string that contains the TLS CA bundle in PEM format. It is used to verify the signature of the provider's certificate.",
"description": "CABundle is a base64-encoded string that contains the TLS CA bundle in PEM format.\nIt is used to verify the signature of the provider's certificate.",
"type": "string"
},
"timeout": {
"description": "Timeout is the timeout when querying the provider.",
"type": "integer"
},
"url": {
"description": "URL is the url for the provider. URL is prefixed with http:// or https://.",
"description": "URL is the url for the provider. URL is prefixed with https://.",
"type": "string"
}
},
Expand Down
Loading

0 comments on commit e4f08ef

Please sign in to comment.