|
| 1 | +apiVersion: apiextensions.k8s.io/v1 |
| 2 | +kind: CustomResourceDefinition |
| 3 | +metadata: |
| 4 | + annotations: |
| 5 | + controller-gen.kubebuilder.io/version: v0.11.1 |
| 6 | + creationTimestamp: null |
| 7 | + name: barbicankeystonelisteners.barbican.openstack.org |
| 8 | +spec: |
| 9 | + group: barbican.openstack.org |
| 10 | + names: |
| 11 | + kind: BarbicanKeystoneListener |
| 12 | + listKind: BarbicanKeystoneListenerList |
| 13 | + plural: barbicankeystonelisteners |
| 14 | + singular: barbicankeystonelistener |
| 15 | + scope: Namespaced |
| 16 | + versions: |
| 17 | + - additionalPrinterColumns: |
| 18 | + - description: Status |
| 19 | + jsonPath: .status.conditions[0].status |
| 20 | + name: Status |
| 21 | + type: string |
| 22 | + - description: Message |
| 23 | + jsonPath: .status.conditions[0].message |
| 24 | + name: Message |
| 25 | + type: string |
| 26 | + name: v1beta1 |
| 27 | + schema: |
| 28 | + openAPIV3Schema: |
| 29 | + description: BarbicanKeystoneListener is the Schema for the barbicankeystonelistener |
| 30 | + API |
| 31 | + properties: |
| 32 | + apiVersion: |
| 33 | + description: 'APIVersion defines the versioned schema of this representation |
| 34 | + of an object. Servers should convert recognized schemas to the latest |
| 35 | + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' |
| 36 | + type: string |
| 37 | + kind: |
| 38 | + description: 'Kind is a string value representing the REST resource this |
| 39 | + object represents. Servers may infer this from the endpoint the client |
| 40 | + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' |
| 41 | + type: string |
| 42 | + metadata: |
| 43 | + type: object |
| 44 | + spec: |
| 45 | + description: BarbicanKeystoneListenerSpec defines the desired state of |
| 46 | + BarbicanKeystoneListener |
| 47 | + properties: |
| 48 | + containerImage: |
| 49 | + description: ContainerImage - Barbican Container Image URL (will be |
| 50 | + set to environmental default if empty) |
| 51 | + type: string |
| 52 | + customServiceConfig: |
| 53 | + description: CustomServiceConfig - customize the service config using |
| 54 | + this parameter to change service defaults, or overwrite rendered |
| 55 | + information using raw OpenStack config format. The content gets |
| 56 | + added to to /etc/<service>/<service>.conf.d directory as a custom |
| 57 | + config file. |
| 58 | + type: string |
| 59 | + customServiceConfigSecrets: |
| 60 | + description: CustomServiceConfigSecrets - customize the service config |
| 61 | + using this parameter to specify Secrets that contain sensitive service |
| 62 | + config data. The content of each Secret gets added to the /etc/<service>/<service>.conf.d |
| 63 | + directory as a custom config file. |
| 64 | + items: |
| 65 | + type: string |
| 66 | + type: array |
| 67 | + databaseAccount: |
| 68 | + default: barbican |
| 69 | + description: DatabaseAccount - optional MariaDBAccount CR name used |
| 70 | + for barbican DB, defaults to barbican |
| 71 | + type: string |
| 72 | + databaseHostname: |
| 73 | + type: string |
| 74 | + databaseInstance: |
| 75 | + description: 'MariaDB instance name TODO(dmendiza): Is this comment |
| 76 | + right? Right now required by the maridb-operator to get the credentials |
| 77 | + from the instance to create the DB Might not be required in future' |
| 78 | + type: string |
| 79 | + defaultConfigOverwrite: |
| 80 | + additionalProperties: |
| 81 | + type: string |
| 82 | + description: 'ConfigOverwrite - interface to overwrite default config |
| 83 | + files like e.g. policy.json. But can also be used to add additional |
| 84 | + files. Those get added to the service config dir in /etc/<service> |
| 85 | + . TODO: -> implement' |
| 86 | + type: object |
| 87 | + networkAttachments: |
| 88 | + description: NetworkAttachments is a list of NetworkAttachment resource |
| 89 | + names to expose the services to the given network |
| 90 | + items: |
| 91 | + type: string |
| 92 | + type: array |
| 93 | + nodeSelector: |
| 94 | + additionalProperties: |
| 95 | + type: string |
| 96 | + description: NodeSelector to target subset of worker nodes running |
| 97 | + this component. Setting here overrides any global NodeSelector settings |
| 98 | + within the Barbican CR. |
| 99 | + type: object |
| 100 | + passwordSelectors: |
| 101 | + default: |
| 102 | + service: BarbicanPassword |
| 103 | + simplecryptokek: BarbicanSimpleCryptoKEK |
| 104 | + description: PasswordSelectors - Selectors to identify the ServiceUser |
| 105 | + password from the Secret |
| 106 | + properties: |
| 107 | + service: |
| 108 | + default: BarbicanPassword |
| 109 | + description: Service - Selector to get the barbican service user |
| 110 | + password from the Secret |
| 111 | + type: string |
| 112 | + simplecryptokek: |
| 113 | + default: SimpleCryptoKEK |
| 114 | + type: string |
| 115 | + type: object |
| 116 | + rabbitMqClusterName: |
| 117 | + default: rabbitmq |
| 118 | + description: RabbitMQ instance name Needed to request a transportURL |
| 119 | + that is created and used in Barbican |
| 120 | + type: string |
| 121 | + replicas: |
| 122 | + default: 1 |
| 123 | + description: Replicas of Barbican API to run |
| 124 | + format: int32 |
| 125 | + maximum: 32 |
| 126 | + minimum: 0 |
| 127 | + type: integer |
| 128 | + resources: |
| 129 | + description: Resources - Compute Resources required by this service |
| 130 | + (Limits/Requests). https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ |
| 131 | + properties: |
| 132 | + claims: |
| 133 | + description: "Claims lists the names of resources, defined in |
| 134 | + spec.resourceClaims, that are used by this container. \n This |
| 135 | + is an alpha field and requires enabling the DynamicResourceAllocation |
| 136 | + feature gate. \n This field is immutable. It can only be set |
| 137 | + for containers." |
| 138 | + items: |
| 139 | + description: ResourceClaim references one entry in PodSpec.ResourceClaims. |
| 140 | + properties: |
| 141 | + name: |
| 142 | + description: Name must match the name of one entry in pod.spec.resourceClaims |
| 143 | + of the Pod where this field is used. It makes that resource |
| 144 | + available inside a container. |
| 145 | + type: string |
| 146 | + required: |
| 147 | + - name |
| 148 | + type: object |
| 149 | + type: array |
| 150 | + x-kubernetes-list-map-keys: |
| 151 | + - name |
| 152 | + x-kubernetes-list-type: map |
| 153 | + limits: |
| 154 | + additionalProperties: |
| 155 | + anyOf: |
| 156 | + - type: integer |
| 157 | + - type: string |
| 158 | + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ |
| 159 | + x-kubernetes-int-or-string: true |
| 160 | + description: 'Limits describes the maximum amount of compute resources |
| 161 | + allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/' |
| 162 | + type: object |
| 163 | + requests: |
| 164 | + additionalProperties: |
| 165 | + anyOf: |
| 166 | + - type: integer |
| 167 | + - type: string |
| 168 | + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ |
| 169 | + x-kubernetes-int-or-string: true |
| 170 | + description: 'Requests describes the minimum amount of compute |
| 171 | + resources required. If Requests is omitted for a container, |
| 172 | + it defaults to Limits if that is explicitly specified, otherwise |
| 173 | + to an implementation-defined value. Requests cannot exceed Limits. |
| 174 | + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/' |
| 175 | + type: object |
| 176 | + type: object |
| 177 | + secret: |
| 178 | + default: osp-secret |
| 179 | + description: Secret containing all passwords / keys needed |
| 180 | + type: string |
| 181 | + serviceAccount: |
| 182 | + description: ServiceAccount - service account name used internally |
| 183 | + to provide Barbican services the default SA name |
| 184 | + type: string |
| 185 | + serviceUser: |
| 186 | + default: barbican |
| 187 | + description: ServiceUser - optional username used for this service |
| 188 | + to register in keystone |
| 189 | + type: string |
| 190 | + simpleCryptoBackendSecret: |
| 191 | + default: osp-secret |
| 192 | + description: Secret containing the Key Encryption Key (KEK) used for |
| 193 | + the Simple Crypto backend |
| 194 | + type: string |
| 195 | + tls: |
| 196 | + description: TLS - Parameters related to the TLS |
| 197 | + properties: |
| 198 | + caBundleSecretName: |
| 199 | + description: CaBundleSecretName - holding the CA certs in a pre-created |
| 200 | + bundle file |
| 201 | + type: string |
| 202 | + type: object |
| 203 | + transportURLSecret: |
| 204 | + type: string |
| 205 | + required: |
| 206 | + - containerImage |
| 207 | + - databaseHostname |
| 208 | + - databaseInstance |
| 209 | + - rabbitMqClusterName |
| 210 | + - serviceAccount |
| 211 | + type: object |
| 212 | + status: |
| 213 | + description: BarbicanKeystoneListenerStatus defines the observed state |
| 214 | + of BarbicanKeystoneListener |
| 215 | + properties: |
| 216 | + conditions: |
| 217 | + description: Conditions |
| 218 | + items: |
| 219 | + description: Condition defines an observation of a API resource |
| 220 | + operational state. |
| 221 | + properties: |
| 222 | + lastTransitionTime: |
| 223 | + description: Last time the condition transitioned from one status |
| 224 | + to another. This should be when the underlying condition changed. |
| 225 | + If that is not known, then using the time when the API field |
| 226 | + changed is acceptable. |
| 227 | + format: date-time |
| 228 | + type: string |
| 229 | + message: |
| 230 | + description: A human readable message indicating details about |
| 231 | + the transition. |
| 232 | + type: string |
| 233 | + reason: |
| 234 | + description: The reason for the condition's last transition |
| 235 | + in CamelCase. |
| 236 | + type: string |
| 237 | + severity: |
| 238 | + description: Severity provides a classification of Reason code, |
| 239 | + so the current situation is immediately understandable and |
| 240 | + could act accordingly. It is meant for situations where Status=False |
| 241 | + and it should be indicated if it is just informational, warning |
| 242 | + (next reconciliation might fix it) or an error (e.g. DB create |
| 243 | + issue and no actions to automatically resolve the issue can/should |
| 244 | + be done). For conditions where Status=Unknown or Status=True |
| 245 | + the Severity should be SeverityNone. |
| 246 | + type: string |
| 247 | + status: |
| 248 | + description: Status of the condition, one of True, False, Unknown. |
| 249 | + type: string |
| 250 | + type: |
| 251 | + description: Type of condition in CamelCase. |
| 252 | + type: string |
| 253 | + required: |
| 254 | + - lastTransitionTime |
| 255 | + - status |
| 256 | + - type |
| 257 | + type: object |
| 258 | + type: array |
| 259 | + databaseHostname: |
| 260 | + description: Barbican Database Hostname |
| 261 | + type: string |
| 262 | + hash: |
| 263 | + additionalProperties: |
| 264 | + type: string |
| 265 | + description: Map of hashes to track e.g. job status |
| 266 | + type: object |
| 267 | + networkAttachments: |
| 268 | + additionalProperties: |
| 269 | + items: |
| 270 | + type: string |
| 271 | + type: array |
| 272 | + description: NetworkAttachments status of the deployment pods |
| 273 | + type: object |
| 274 | + readyCount: |
| 275 | + description: 'INSERT ADDITIONAL STATUS FIELD - define observed state |
| 276 | + of cluster Important: Run "make" to regenerate code after modifying |
| 277 | + this file ReadyCount of barbican API instances' |
| 278 | + format: int32 |
| 279 | + type: integer |
| 280 | + type: object |
| 281 | + type: object |
| 282 | + served: true |
| 283 | + storage: true |
| 284 | + subresources: |
| 285 | + status: {} |
| 286 | +status: |
| 287 | + acceptedNames: |
| 288 | + kind: "" |
| 289 | + plural: "" |
| 290 | + conditions: null |
| 291 | + storedVersions: null |
0 commit comments