The Deckhouse Kubernetes Platform installs CRDs but does not remove them when a module is disabled. If you no longer need the created CRDs, delete them.
Application
Scope: Namespaced
Version: v1alpha1
-
stringapiVersionAPIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-
stringkindKind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-
objectmetadata
-
objectoperationOperation contains information about a requested or running operation
-
array of objectsoperation.infoInfo is a list of informational items for this operation
-
stringoperation.info.name
-
stringoperation.info.value
-
-
objectoperation.initiatedByInitiatedBy contains information about who initiated the operations
-
booleanoperation.initiatedBy.automatedAutomated is set to true if operation was initiated automatically by the application controller.
-
stringoperation.initiatedBy.usernameUsername contains the name of a user who started operation
-
-
objectoperation.retryRetry controls the strategy to apply if a sync fails
-
objectoperation.retry.backoffBackoff controls how to backoff on subsequent retries of failed syncs
-
stringoperation.retry.backoff.durationDuration is the amount to back off. Default unit is seconds, but could also be a duration (e.g. “2m”, “1h”)
-
integeroperation.retry.backoff.factorFactor is a factor to multiply the base duration after each failed retry
-
stringoperation.retry.backoff.maxDurationMaxDuration is the maximum amount of time allowed for the backoff strategy
-
-
integeroperation.retry.limitLimit is the maximum number of attempts for retrying a failed sync. If set to 0, no retries will be performed.
-
-
objectoperation.syncSync contains parameters for the operation
-
integeroperation.sync.autoHealAttemptsCountSelfHealAttemptsCount contains the number of auto-heal attempts
-
booleanoperation.sync.dryRunDryRun specifies to perform a
kubectl apply --dry-runwithout actually performing the sync -
array of stringsoperation.sync.manifestsManifests is an optional field that overrides sync source with a local directory for development
-
booleanoperation.sync.prunePrune specifies to delete resources from the cluster that are no longer tracked in git
-
array of objectsoperation.sync.resourcesResources describes which resources shall be part of the sync
-
stringoperation.sync.resources.group
-
stringoperation.sync.resources.kind
-
stringoperation.sync.resources.name
-
stringoperation.sync.resources.namespace
-
-
stringoperation.sync.revisionRevision is the revision (Git) or chart version (Helm) which to sync the application to If omitted, will use the revision specified in app spec.
-
array of stringsoperation.sync.revisionsRevisions is the list of revision (Git) or chart version (Helm) which to sync each source in sources field for the application to If omitted, will use the revision specified in app spec.
-
objectoperation.sync.sourceSource overrides the source definition set in the application. This is typically set in a Rollback operation and is nil during a Sync operation
-
stringoperation.sync.source.chartChart is a Helm chart name, and must be specified for applications sourced from a Helm repo.
-
objectoperation.sync.source.directoryDirectory holds path/directory specific options
-
stringoperation.sync.source.directory.excludeExclude contains a glob pattern to match paths against that should be explicitly excluded from being used during manifest generation
-
stringoperation.sync.source.directory.includeInclude contains a glob pattern to match paths against that should be explicitly included during manifest generation
-
objectoperation.sync.source.directory.jsonnetJsonnet holds options specific to Jsonnet
-
array of objectsoperation.sync.source.directory.jsonnet.extVarsExtVars is a list of Jsonnet External Variables
-
booleanoperation.sync.source.directory.jsonnet.extVars.code
-
stringoperation.sync.source.directory.jsonnet.extVars.name
-
stringoperation.sync.source.directory.jsonnet.extVars.value
-
-
array of stringsoperation.sync.source.directory.jsonnet.libsAdditional library search dirs
-
array of objectsoperation.sync.source.directory.jsonnet.tlasTLAS is a list of Jsonnet Top-level Arguments
-
booleanoperation.sync.source.directory.jsonnet.tlas.code
-
stringoperation.sync.source.directory.jsonnet.tlas.name
-
stringoperation.sync.source.directory.jsonnet.tlas.value
-
-
-
booleanoperation.sync.source.directory.recurseRecurse specifies whether to scan a directory recursively for manifests
-
-
objectoperation.sync.source.helmHelm holds helm specific options
-
array of stringsoperation.sync.source.helm.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
array of objectsoperation.sync.source.helm.fileParametersFileParameters are file parameters to the helm template
-
stringoperation.sync.source.helm.fileParameters.nameName is the name of the Helm parameter
-
stringoperation.sync.source.helm.fileParameters.pathPath is the path to the file containing the values for the Helm parameter
-
-
booleanoperation.sync.source.helm.ignoreMissingValueFilesIgnoreMissingValueFiles prevents helm template from failing when valueFiles do not exist locally by not appending them to helm template –values
-
stringoperation.sync.source.helm.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
stringoperation.sync.source.helm.namespaceNamespace is an optional namespace to template with. If left empty, defaults to the app’s destination namespace.
-
array of objectsoperation.sync.source.helm.parametersParameters is a list of Helm parameters which are passed to the helm template command upon manifest generation
-
booleanoperation.sync.source.helm.parameters.forceStringForceString determines whether to tell Helm to interpret booleans and numbers as strings
-
stringoperation.sync.source.helm.parameters.nameName is the name of the Helm parameter
-
stringoperation.sync.source.helm.parameters.valueValue is the value for the Helm parameter
-
-
booleanoperation.sync.source.helm.passCredentialsPassCredentials pass credentials to all domains (Helm’s –pass-credentials)
-
stringoperation.sync.source.helm.releaseNameReleaseName is the Helm release name to use. If omitted it will use the application name
-
booleanoperation.sync.source.helm.skipCrdsSkipCrds skips custom resource definition installation step (Helm’s –skip-crds)
-
booleanoperation.sync.source.helm.skipSchemaValidationSkipSchemaValidation skips JSON schema validation (Helm’s –skip-schema-validation)
-
booleanoperation.sync.source.helm.skipTestsSkipTests skips test manifest installation step (Helm’s –skip-tests).
-
array of stringsoperation.sync.source.helm.valueFilesValuesFiles is a list of Helm value files to use when generating a template
-
stringoperation.sync.source.helm.valuesValues specifies Helm values to be passed to helm template, typically defined as a block. ValuesObject takes precedence over Values, so use one or the other.
-
objectoperation.sync.source.helm.valuesObjectValuesObject specifies Helm values to be passed to helm template, defined as a map. This takes precedence over Values.
-
stringoperation.sync.source.helm.versionVersion is the Helm version to use for templating (“3”)
-
-
objectoperation.sync.source.kustomizeKustomize holds kustomize specific options
-
array of stringsoperation.sync.source.kustomize.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
objectoperation.sync.source.kustomize.commonAnnotationsCommonAnnotations is a list of additional annotations to add to rendered manifests
-
booleanoperation.sync.source.kustomize.commonAnnotationsEnvsubstCommonAnnotationsEnvsubst specifies whether to apply env variables substitution for annotation values
-
objectoperation.sync.source.kustomize.commonLabelsCommonLabels is a list of additional labels to add to rendered manifests
-
array of stringsoperation.sync.source.kustomize.componentsComponents specifies a list of kustomize components to add to the kustomization before building
-
booleanoperation.sync.source.kustomize.forceCommonAnnotationsForceCommonAnnotations specifies whether to force applying common annotations to resources for Kustomize apps
-
booleanoperation.sync.source.kustomize.forceCommonLabelsForceCommonLabels specifies whether to force applying common labels to resources for Kustomize apps
-
booleanoperation.sync.source.kustomize.ignoreMissingComponentsIgnoreMissingComponents prevents kustomize from failing when components do not exist locally by not appending them to kustomization file
-
array of stringsoperation.sync.source.kustomize.imagesImages is a list of Kustomize image override specifications
-
stringoperation.sync.source.kustomize.images.Element of the arrayKustomizeImage represents a Kustomize image definition in the format [old_image_name=]<image_name>:<image_tag>
-
-
stringoperation.sync.source.kustomize.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
booleanoperation.sync.source.kustomize.labelIncludeTemplatesLabelIncludeTemplates specifies whether to apply common labels to resource templates or not
-
booleanoperation.sync.source.kustomize.labelWithoutSelectorLabelWithoutSelector specifies whether to apply common labels to resource selectors or not
-
stringoperation.sync.source.kustomize.namePrefixNamePrefix is a prefix appended to resources for Kustomize apps
-
stringoperation.sync.source.kustomize.nameSuffixNameSuffix is a suffix appended to resources for Kustomize apps
-
stringoperation.sync.source.kustomize.namespaceNamespace sets the namespace that Kustomize adds to all resources
-
array of objectsoperation.sync.source.kustomize.patchesPatches is a list of Kustomize patches
-
objectoperation.sync.source.kustomize.patches.options
-
stringoperation.sync.source.kustomize.patches.patch
-
stringoperation.sync.source.kustomize.patches.path
-
objectoperation.sync.source.kustomize.patches.target
-
stringoperation.sync.source.kustomize.patches.target.annotationSelector
-
stringoperation.sync.source.kustomize.patches.target.group
-
stringoperation.sync.source.kustomize.patches.target.kind
-
stringoperation.sync.source.kustomize.patches.target.labelSelector
-
stringoperation.sync.source.kustomize.patches.target.name
-
stringoperation.sync.source.kustomize.patches.target.namespace
-
stringoperation.sync.source.kustomize.patches.target.version
-
-
-
array of objectsoperation.sync.source.kustomize.replicasReplicas is a list of Kustomize Replicas override specifications
-
integer or stringoperation.sync.source.kustomize.replicas.countNumber of replicas
-
stringoperation.sync.source.kustomize.replicas.nameName of Deployment or StatefulSet
-
-
stringoperation.sync.source.kustomize.versionVersion controls which version of Kustomize to use for rendering manifests
-
-
stringoperation.sync.source.nameName is used to refer to a source and is displayed in the UI. It is used in multi-source Applications.
-
stringoperation.sync.source.pathPath is a directory path within the Git repository, and is only valid for applications sourced from Git.
-
objectoperation.sync.source.pluginPlugin holds config management plugin specific options
-
array of objectsoperation.sync.source.plugin.envEnv is a list of environment variable entries
-
stringoperation.sync.source.plugin.env.nameName is the name of the variable, usually expressed in uppercase
-
stringoperation.sync.source.plugin.env.valueValue is the value of the variable
-
-
stringoperation.sync.source.plugin.name
-
array of objectsoperation.sync.source.plugin.parameters
-
array of stringsoperation.sync.source.plugin.parameters.arrayArray is the value of an array type parameter.
-
objectoperation.sync.source.plugin.parameters.mapMap is the value of a map type parameter.
-
stringoperation.sync.source.plugin.parameters.nameName is the name identifying a parameter.
-
stringoperation.sync.source.plugin.parameters.stringString_ is the value of a string type parameter.
-
-
-
stringoperation.sync.source.refRef is reference to another source within sources field. This field will not be used if used with a
sourcetag. -
stringoperation.sync.source.repoURL
Required value
RepoURL is the URL to the repository (Git or Helm) that contains the application manifests -
stringoperation.sync.source.targetRevisionTargetRevision defines the revision of the source to sync the application to. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD. In case of Helm, this is a semver tag for the Chart’s version.
-
-
array of objectsoperation.sync.sourcesSources overrides the source definition set in the application. This is typically set in a Rollback operation and is nil during a Sync operation
-
stringoperation.sync.sources.chartChart is a Helm chart name, and must be specified for applications sourced from a Helm repo.
-
objectoperation.sync.sources.directoryDirectory holds path/directory specific options
-
stringoperation.sync.sources.directory.excludeExclude contains a glob pattern to match paths against that should be explicitly excluded from being used during manifest generation
-
stringoperation.sync.sources.directory.includeInclude contains a glob pattern to match paths against that should be explicitly included during manifest generation
-
objectoperation.sync.sources.directory.jsonnetJsonnet holds options specific to Jsonnet
-
array of objectsoperation.sync.sources.directory.jsonnet.extVarsExtVars is a list of Jsonnet External Variables
-
booleanoperation.sync.sources.directory.jsonnet.extVars.code
-
stringoperation.sync.sources.directory.jsonnet.extVars.name
-
stringoperation.sync.sources.directory.jsonnet.extVars.value
-
-
array of stringsoperation.sync.sources.directory.jsonnet.libsAdditional library search dirs
-
array of objectsoperation.sync.sources.directory.jsonnet.tlasTLAS is a list of Jsonnet Top-level Arguments
-
booleanoperation.sync.sources.directory.jsonnet.tlas.code
-
stringoperation.sync.sources.directory.jsonnet.tlas.name
-
stringoperation.sync.sources.directory.jsonnet.tlas.value
-
-
-
booleanoperation.sync.sources.directory.recurseRecurse specifies whether to scan a directory recursively for manifests
-
-
objectoperation.sync.sources.helmHelm holds helm specific options
-
array of stringsoperation.sync.sources.helm.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
array of objectsoperation.sync.sources.helm.fileParametersFileParameters are file parameters to the helm template
-
stringoperation.sync.sources.helm.fileParameters.nameName is the name of the Helm parameter
-
stringoperation.sync.sources.helm.fileParameters.pathPath is the path to the file containing the values for the Helm parameter
-
-
booleanoperation.sync.sources.helm.ignoreMissingValueFilesIgnoreMissingValueFiles prevents helm template from failing when valueFiles do not exist locally by not appending them to helm template –values
-
stringoperation.sync.sources.helm.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
stringoperation.sync.sources.helm.namespaceNamespace is an optional namespace to template with. If left empty, defaults to the app’s destination namespace.
-
array of objectsoperation.sync.sources.helm.parametersParameters is a list of Helm parameters which are passed to the helm template command upon manifest generation
-
booleanoperation.sync.sources.helm.parameters.forceStringForceString determines whether to tell Helm to interpret booleans and numbers as strings
-
stringoperation.sync.sources.helm.parameters.nameName is the name of the Helm parameter
-
stringoperation.sync.sources.helm.parameters.valueValue is the value for the Helm parameter
-
-
booleanoperation.sync.sources.helm.passCredentialsPassCredentials pass credentials to all domains (Helm’s –pass-credentials)
-
stringoperation.sync.sources.helm.releaseNameReleaseName is the Helm release name to use. If omitted it will use the application name
-
booleanoperation.sync.sources.helm.skipCrdsSkipCrds skips custom resource definition installation step (Helm’s –skip-crds)
-
booleanoperation.sync.sources.helm.skipSchemaValidationSkipSchemaValidation skips JSON schema validation (Helm’s –skip-schema-validation)
-
booleanoperation.sync.sources.helm.skipTestsSkipTests skips test manifest installation step (Helm’s –skip-tests).
-
array of stringsoperation.sync.sources.helm.valueFilesValuesFiles is a list of Helm value files to use when generating a template
-
stringoperation.sync.sources.helm.valuesValues specifies Helm values to be passed to helm template, typically defined as a block. ValuesObject takes precedence over Values, so use one or the other.
-
objectoperation.sync.sources.helm.valuesObjectValuesObject specifies Helm values to be passed to helm template, defined as a map. This takes precedence over Values.
-
stringoperation.sync.sources.helm.versionVersion is the Helm version to use for templating (“3”)
-
-
objectoperation.sync.sources.kustomizeKustomize holds kustomize specific options
-
array of stringsoperation.sync.sources.kustomize.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
objectoperation.sync.sources.kustomize.commonAnnotationsCommonAnnotations is a list of additional annotations to add to rendered manifests
-
booleanoperation.sync.sources.kustomize.commonAnnotationsEnvsubstCommonAnnotationsEnvsubst specifies whether to apply env variables substitution for annotation values
-
objectoperation.sync.sources.kustomize.commonLabelsCommonLabels is a list of additional labels to add to rendered manifests
-
array of stringsoperation.sync.sources.kustomize.componentsComponents specifies a list of kustomize components to add to the kustomization before building
-
booleanoperation.sync.sources.kustomize.forceCommonAnnotationsForceCommonAnnotations specifies whether to force applying common annotations to resources for Kustomize apps
-
booleanoperation.sync.sources.kustomize.forceCommonLabelsForceCommonLabels specifies whether to force applying common labels to resources for Kustomize apps
-
booleanoperation.sync.sources.kustomize.ignoreMissingComponentsIgnoreMissingComponents prevents kustomize from failing when components do not exist locally by not appending them to kustomization file
-
array of stringsoperation.sync.sources.kustomize.imagesImages is a list of Kustomize image override specifications
-
stringoperation.sync.sources.kustomize.images.Element of the arrayKustomizeImage represents a Kustomize image definition in the format [old_image_name=]<image_name>:<image_tag>
-
-
stringoperation.sync.sources.kustomize.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
booleanoperation.sync.sources.kustomize.labelIncludeTemplatesLabelIncludeTemplates specifies whether to apply common labels to resource templates or not
-
booleanoperation.sync.sources.kustomize.labelWithoutSelectorLabelWithoutSelector specifies whether to apply common labels to resource selectors or not
-
stringoperation.sync.sources.kustomize.namePrefixNamePrefix is a prefix appended to resources for Kustomize apps
-
stringoperation.sync.sources.kustomize.nameSuffixNameSuffix is a suffix appended to resources for Kustomize apps
-
stringoperation.sync.sources.kustomize.namespaceNamespace sets the namespace that Kustomize adds to all resources
-
array of objectsoperation.sync.sources.kustomize.patchesPatches is a list of Kustomize patches
-
objectoperation.sync.sources.kustomize.patches.options
-
stringoperation.sync.sources.kustomize.patches.patch
-
stringoperation.sync.sources.kustomize.patches.path
-
objectoperation.sync.sources.kustomize.patches.target
-
stringoperation.sync.sources.kustomize.patches.target.annotationSelector
-
stringoperation.sync.sources.kustomize.patches.target.group
-
stringoperation.sync.sources.kustomize.patches.target.kind
-
stringoperation.sync.sources.kustomize.patches.target.labelSelector
-
stringoperation.sync.sources.kustomize.patches.target.name
-
stringoperation.sync.sources.kustomize.patches.target.namespace
-
stringoperation.sync.sources.kustomize.patches.target.version
-
-
-
array of objectsoperation.sync.sources.kustomize.replicasReplicas is a list of Kustomize Replicas override specifications
-
integer or stringoperation.sync.sources.kustomize.replicas.countNumber of replicas
-
stringoperation.sync.sources.kustomize.replicas.nameName of Deployment or StatefulSet
-
-
stringoperation.sync.sources.kustomize.versionVersion controls which version of Kustomize to use for rendering manifests
-
-
stringoperation.sync.sources.nameName is used to refer to a source and is displayed in the UI. It is used in multi-source Applications.
-
stringoperation.sync.sources.pathPath is a directory path within the Git repository, and is only valid for applications sourced from Git.
-
objectoperation.sync.sources.pluginPlugin holds config management plugin specific options
-
array of objectsoperation.sync.sources.plugin.envEnv is a list of environment variable entries
-
stringoperation.sync.sources.plugin.env.nameName is the name of the variable, usually expressed in uppercase
-
stringoperation.sync.sources.plugin.env.valueValue is the value of the variable
-
-
stringoperation.sync.sources.plugin.name
-
array of objectsoperation.sync.sources.plugin.parameters
-
array of stringsoperation.sync.sources.plugin.parameters.arrayArray is the value of an array type parameter.
-
objectoperation.sync.sources.plugin.parameters.mapMap is the value of a map type parameter.
-
stringoperation.sync.sources.plugin.parameters.nameName is the name identifying a parameter.
-
stringoperation.sync.sources.plugin.parameters.stringString_ is the value of a string type parameter.
-
-
-
stringoperation.sync.sources.refRef is reference to another source within sources field. This field will not be used if used with a
sourcetag. -
stringoperation.sync.sources.repoURLRepoURL is the URL to the repository (Git or Helm) that contains the application manifests
-
stringoperation.sync.sources.targetRevisionTargetRevision defines the revision of the source to sync the application to. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD. In case of Helm, this is a semver tag for the Chart’s version.
-
-
array of stringsoperation.sync.syncOptionsSyncOptions provide per-sync sync-options, e.g. Validate=false
-
objectoperation.sync.syncStrategySyncStrategy describes how to perform the sync
-
objectoperation.sync.syncStrategy.applyApply will perform a
kubectl applyto perform the sync.-
booleanoperation.sync.syncStrategy.apply.forceForce indicates whether or not to supply the –force flag to
kubectl apply. The –force flag deletes and re-create the resource, when PATCH encounters conflict and has retried for 5 times.
-
-
objectoperation.sync.syncStrategy.hookHook will submit any referenced resources to perform the sync. This is the default strategy
-
booleanoperation.sync.syncStrategy.hook.forceForce indicates whether or not to supply the –force flag to
kubectl apply. The –force flag deletes and re-create the resource, when PATCH encounters conflict and has retried for 5 times.
-
-
-
-
-
objectspecApplicationSpec represents desired application state. Contains link to repository with application definition and additional parameters link definition revision.
-
objectspec.destination
Required value
Destination is a reference to the target Kubernetes server and namespace-
stringspec.destination.nameName is an alternate way of specifying the target cluster by its symbolic name. This must be set if Server is not set.
-
stringspec.destination.namespaceNamespace specifies the target namespace for the application’s resources. The namespace will only be set for namespace-scoped resources that have not set a value for .metadata.namespace
-
stringspec.destination.serverServer specifies the URL of the target cluster’s Kubernetes control plane API. This must be set if Name is not set.
-
-
array of objectsspec.ignoreDifferencesIgnoreDifferences is a list of resources and their fields which should be ignored during comparison
-
stringspec.ignoreDifferences.group
-
array of stringsspec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.ignoreDifferences.jsonPointers
-
stringspec.ignoreDifferences.kind
-
array of stringsspec.ignoreDifferences.managedFieldsManagersManagedFieldsManagers is a list of trusted managers. Fields mutated by those managers will take precedence over the desired state defined in the SCM and won’t be displayed in diffs
-
stringspec.ignoreDifferences.name
-
stringspec.ignoreDifferences.namespace
-
-
array of objectsspec.infoInfo contains a list of information (URLs, email addresses, and plain text) that relates to the application
-
stringspec.info.name
-
stringspec.info.value
-
-
stringspec.project
Required value
Project is a reference to the project this application belongs to. The empty string means that application belongs to the ‘default’ project. -
integerspec.revisionHistoryLimitRevisionHistoryLimit limits the number of items kept in the application’s revision history, which is used for informational purposes as well as for rollbacks to previous versions. This should only be changed in exceptional circumstances. Setting to zero will store no history. This will reduce storage used. Increasing will increase the space used to store the history, so we do not recommend increasing it. Default is 10.
-
objectspec.sourceSource is a reference to the location of the application’s manifests or chart
-
stringspec.source.chartChart is a Helm chart name, and must be specified for applications sourced from a Helm repo.
-
objectspec.source.directoryDirectory holds path/directory specific options
-
stringspec.source.directory.excludeExclude contains a glob pattern to match paths against that should be explicitly excluded from being used during manifest generation
-
stringspec.source.directory.includeInclude contains a glob pattern to match paths against that should be explicitly included during manifest generation
-
objectspec.source.directory.jsonnetJsonnet holds options specific to Jsonnet
-
array of objectsspec.source.directory.jsonnet.extVarsExtVars is a list of Jsonnet External Variables
-
booleanspec.source.directory.jsonnet.extVars.code
-
stringspec.source.directory.jsonnet.extVars.name
-
stringspec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.source.directory.jsonnet.libsAdditional library search dirs
-
array of objectsspec.source.directory.jsonnet.tlasTLAS is a list of Jsonnet Top-level Arguments
-
booleanspec.source.directory.jsonnet.tlas.code
-
stringspec.source.directory.jsonnet.tlas.name
-
stringspec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.source.directory.recurseRecurse specifies whether to scan a directory recursively for manifests
-
-
objectspec.source.helmHelm holds helm specific options
-
array of stringsspec.source.helm.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
array of objectsspec.source.helm.fileParametersFileParameters are file parameters to the helm template
-
stringspec.source.helm.fileParameters.nameName is the name of the Helm parameter
-
stringspec.source.helm.fileParameters.pathPath is the path to the file containing the values for the Helm parameter
-
-
booleanspec.source.helm.ignoreMissingValueFilesIgnoreMissingValueFiles prevents helm template from failing when valueFiles do not exist locally by not appending them to helm template –values
-
stringspec.source.helm.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
stringspec.source.helm.namespaceNamespace is an optional namespace to template with. If left empty, defaults to the app’s destination namespace.
-
array of objectsspec.source.helm.parametersParameters is a list of Helm parameters which are passed to the helm template command upon manifest generation
-
booleanspec.source.helm.parameters.forceStringForceString determines whether to tell Helm to interpret booleans and numbers as strings
-
stringspec.source.helm.parameters.nameName is the name of the Helm parameter
-
stringspec.source.helm.parameters.valueValue is the value for the Helm parameter
-
-
booleanspec.source.helm.passCredentialsPassCredentials pass credentials to all domains (Helm’s –pass-credentials)
-
stringspec.source.helm.releaseNameReleaseName is the Helm release name to use. If omitted it will use the application name
-
booleanspec.source.helm.skipCrdsSkipCrds skips custom resource definition installation step (Helm’s –skip-crds)
-
booleanspec.source.helm.skipSchemaValidationSkipSchemaValidation skips JSON schema validation (Helm’s –skip-schema-validation)
-
booleanspec.source.helm.skipTestsSkipTests skips test manifest installation step (Helm’s –skip-tests).
-
array of stringsspec.source.helm.valueFilesValuesFiles is a list of Helm value files to use when generating a template
-
stringspec.source.helm.valuesValues specifies Helm values to be passed to helm template, typically defined as a block. ValuesObject takes precedence over Values, so use one or the other.
-
objectspec.source.helm.valuesObjectValuesObject specifies Helm values to be passed to helm template, defined as a map. This takes precedence over Values.
-
stringspec.source.helm.versionVersion is the Helm version to use for templating (“3”)
-
-
objectspec.source.kustomizeKustomize holds kustomize specific options
-
array of stringsspec.source.kustomize.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
objectspec.source.kustomize.commonAnnotationsCommonAnnotations is a list of additional annotations to add to rendered manifests
-
booleanspec.source.kustomize.commonAnnotationsEnvsubstCommonAnnotationsEnvsubst specifies whether to apply env variables substitution for annotation values
-
objectspec.source.kustomize.commonLabelsCommonLabels is a list of additional labels to add to rendered manifests
-
array of stringsspec.source.kustomize.componentsComponents specifies a list of kustomize components to add to the kustomization before building
-
booleanspec.source.kustomize.forceCommonAnnotationsForceCommonAnnotations specifies whether to force applying common annotations to resources for Kustomize apps
-
booleanspec.source.kustomize.forceCommonLabelsForceCommonLabels specifies whether to force applying common labels to resources for Kustomize apps
-
booleanspec.source.kustomize.ignoreMissingComponentsIgnoreMissingComponents prevents kustomize from failing when components do not exist locally by not appending them to kustomization file
-
array of stringsspec.source.kustomize.imagesImages is a list of Kustomize image override specifications
-
stringspec.source.kustomize.images.Element of the arrayKustomizeImage represents a Kustomize image definition in the format [old_image_name=]<image_name>:<image_tag>
-
-
stringspec.source.kustomize.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
booleanspec.source.kustomize.labelIncludeTemplatesLabelIncludeTemplates specifies whether to apply common labels to resource templates or not
-
booleanspec.source.kustomize.labelWithoutSelectorLabelWithoutSelector specifies whether to apply common labels to resource selectors or not
-
stringspec.source.kustomize.namePrefixNamePrefix is a prefix appended to resources for Kustomize apps
-
stringspec.source.kustomize.nameSuffixNameSuffix is a suffix appended to resources for Kustomize apps
-
stringspec.source.kustomize.namespaceNamespace sets the namespace that Kustomize adds to all resources
-
array of objectsspec.source.kustomize.patchesPatches is a list of Kustomize patches
-
objectspec.source.kustomize.patches.options
-
stringspec.source.kustomize.patches.patch
-
stringspec.source.kustomize.patches.path
-
objectspec.source.kustomize.patches.target
-
stringspec.source.kustomize.patches.target.annotationSelector
-
stringspec.source.kustomize.patches.target.group
-
stringspec.source.kustomize.patches.target.kind
-
stringspec.source.kustomize.patches.target.labelSelector
-
stringspec.source.kustomize.patches.target.name
-
stringspec.source.kustomize.patches.target.namespace
-
stringspec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.source.kustomize.replicasReplicas is a list of Kustomize Replicas override specifications
-
integer or stringspec.source.kustomize.replicas.countNumber of replicas
-
stringspec.source.kustomize.replicas.nameName of Deployment or StatefulSet
-
-
stringspec.source.kustomize.versionVersion controls which version of Kustomize to use for rendering manifests
-
-
stringspec.source.nameName is used to refer to a source and is displayed in the UI. It is used in multi-source Applications.
-
stringspec.source.pathPath is a directory path within the Git repository, and is only valid for applications sourced from Git.
-
objectspec.source.pluginPlugin holds config management plugin specific options
-
array of objectsspec.source.plugin.envEnv is a list of environment variable entries
-
stringspec.source.plugin.env.nameName is the name of the variable, usually expressed in uppercase
-
stringspec.source.plugin.env.valueValue is the value of the variable
-
-
stringspec.source.plugin.name
-
array of objectsspec.source.plugin.parameters
-
array of stringsspec.source.plugin.parameters.arrayArray is the value of an array type parameter.
-
objectspec.source.plugin.parameters.mapMap is the value of a map type parameter.
-
stringspec.source.plugin.parameters.nameName is the name identifying a parameter.
-
stringspec.source.plugin.parameters.stringString_ is the value of a string type parameter.
-
-
-
stringspec.source.refRef is reference to another source within sources field. This field will not be used if used with a
sourcetag. -
stringspec.source.repoURL
Required value
RepoURL is the URL to the repository (Git or Helm) that contains the application manifests -
stringspec.source.targetRevisionTargetRevision defines the revision of the source to sync the application to. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD. In case of Helm, this is a semver tag for the Chart’s version.
-
-
objectspec.sourceHydratorSourceHydrator provides a way to push hydrated manifests back to git before syncing them to the cluster.
-
objectspec.sourceHydrator.drySource
Required value
DrySource specifies where the dry “don’t repeat yourself” manifest source lives.-
stringspec.sourceHydrator.drySource.path
Required value
Path is a directory path within the Git repository where the manifests are located -
stringspec.sourceHydrator.drySource.repoURL
Required value
RepoURL is the URL to the git repository that contains the application manifests -
stringspec.sourceHydrator.drySource.targetRevision
Required value
TargetRevision defines the revision of the source to hydrate
-
-
objectspec.sourceHydrator.hydrateToHydrateTo specifies an optional “staging” location to push hydrated manifests to. An external system would then have to move manifests to the SyncSource, e.g. by pull request.
-
stringspec.sourceHydrator.hydrateTo.targetBranch
Required value
TargetBranch is the branch to which hydrated manifests should be committed
-
-
objectspec.sourceHydrator.syncSource
Required value
SyncSource specifies where to sync hydrated manifests from.-
stringspec.sourceHydrator.syncSource.path
Required value
Path is a directory path within the git repository where hydrated manifests should be committed to and synced from. If hydrateTo is set, this is just the path from which hydrated manifests will be synced. -
stringspec.sourceHydrator.syncSource.targetBranch
Required value
TargetBranch is the branch to which hydrated manifests should be committed
-
-
-
array of objectsspec.sourcesSources is a reference to the location of the application’s manifests or chart
-
stringspec.sources.chartChart is a Helm chart name, and must be specified for applications sourced from a Helm repo.
-
objectspec.sources.directoryDirectory holds path/directory specific options
-
stringspec.sources.directory.excludeExclude contains a glob pattern to match paths against that should be explicitly excluded from being used during manifest generation
-
stringspec.sources.directory.includeInclude contains a glob pattern to match paths against that should be explicitly included during manifest generation
-
objectspec.sources.directory.jsonnetJsonnet holds options specific to Jsonnet
-
array of objectsspec.sources.directory.jsonnet.extVarsExtVars is a list of Jsonnet External Variables
-
booleanspec.sources.directory.jsonnet.extVars.code
-
stringspec.sources.directory.jsonnet.extVars.name
-
stringspec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.sources.directory.jsonnet.libsAdditional library search dirs
-
array of objectsspec.sources.directory.jsonnet.tlasTLAS is a list of Jsonnet Top-level Arguments
-
booleanspec.sources.directory.jsonnet.tlas.code
-
stringspec.sources.directory.jsonnet.tlas.name
-
stringspec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.sources.directory.recurseRecurse specifies whether to scan a directory recursively for manifests
-
-
objectspec.sources.helmHelm holds helm specific options
-
array of stringsspec.sources.helm.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
array of objectsspec.sources.helm.fileParametersFileParameters are file parameters to the helm template
-
stringspec.sources.helm.fileParameters.nameName is the name of the Helm parameter
-
stringspec.sources.helm.fileParameters.pathPath is the path to the file containing the values for the Helm parameter
-
-
booleanspec.sources.helm.ignoreMissingValueFilesIgnoreMissingValueFiles prevents helm template from failing when valueFiles do not exist locally by not appending them to helm template –values
-
stringspec.sources.helm.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
stringspec.sources.helm.namespaceNamespace is an optional namespace to template with. If left empty, defaults to the app’s destination namespace.
-
array of objectsspec.sources.helm.parametersParameters is a list of Helm parameters which are passed to the helm template command upon manifest generation
-
booleanspec.sources.helm.parameters.forceStringForceString determines whether to tell Helm to interpret booleans and numbers as strings
-
stringspec.sources.helm.parameters.nameName is the name of the Helm parameter
-
stringspec.sources.helm.parameters.valueValue is the value for the Helm parameter
-
-
booleanspec.sources.helm.passCredentialsPassCredentials pass credentials to all domains (Helm’s –pass-credentials)
-
stringspec.sources.helm.releaseNameReleaseName is the Helm release name to use. If omitted it will use the application name
-
booleanspec.sources.helm.skipCrdsSkipCrds skips custom resource definition installation step (Helm’s –skip-crds)
-
booleanspec.sources.helm.skipSchemaValidationSkipSchemaValidation skips JSON schema validation (Helm’s –skip-schema-validation)
-
booleanspec.sources.helm.skipTestsSkipTests skips test manifest installation step (Helm’s –skip-tests).
-
array of stringsspec.sources.helm.valueFilesValuesFiles is a list of Helm value files to use when generating a template
-
stringspec.sources.helm.valuesValues specifies Helm values to be passed to helm template, typically defined as a block. ValuesObject takes precedence over Values, so use one or the other.
-
objectspec.sources.helm.valuesObjectValuesObject specifies Helm values to be passed to helm template, defined as a map. This takes precedence over Values.
-
stringspec.sources.helm.versionVersion is the Helm version to use for templating (“3”)
-
-
objectspec.sources.kustomizeKustomize holds kustomize specific options
-
array of stringsspec.sources.kustomize.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
objectspec.sources.kustomize.commonAnnotationsCommonAnnotations is a list of additional annotations to add to rendered manifests
-
booleanspec.sources.kustomize.commonAnnotationsEnvsubstCommonAnnotationsEnvsubst specifies whether to apply env variables substitution for annotation values
-
objectspec.sources.kustomize.commonLabelsCommonLabels is a list of additional labels to add to rendered manifests
-
array of stringsspec.sources.kustomize.componentsComponents specifies a list of kustomize components to add to the kustomization before building
-
booleanspec.sources.kustomize.forceCommonAnnotationsForceCommonAnnotations specifies whether to force applying common annotations to resources for Kustomize apps
-
booleanspec.sources.kustomize.forceCommonLabelsForceCommonLabels specifies whether to force applying common labels to resources for Kustomize apps
-
booleanspec.sources.kustomize.ignoreMissingComponentsIgnoreMissingComponents prevents kustomize from failing when components do not exist locally by not appending them to kustomization file
-
array of stringsspec.sources.kustomize.imagesImages is a list of Kustomize image override specifications
-
stringspec.sources.kustomize.images.Element of the arrayKustomizeImage represents a Kustomize image definition in the format [old_image_name=]<image_name>:<image_tag>
-
-
stringspec.sources.kustomize.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
booleanspec.sources.kustomize.labelIncludeTemplatesLabelIncludeTemplates specifies whether to apply common labels to resource templates or not
-
booleanspec.sources.kustomize.labelWithoutSelectorLabelWithoutSelector specifies whether to apply common labels to resource selectors or not
-
stringspec.sources.kustomize.namePrefixNamePrefix is a prefix appended to resources for Kustomize apps
-
stringspec.sources.kustomize.nameSuffixNameSuffix is a suffix appended to resources for Kustomize apps
-
stringspec.sources.kustomize.namespaceNamespace sets the namespace that Kustomize adds to all resources
-
array of objectsspec.sources.kustomize.patchesPatches is a list of Kustomize patches
-
objectspec.sources.kustomize.patches.options
-
stringspec.sources.kustomize.patches.patch
-
stringspec.sources.kustomize.patches.path
-
objectspec.sources.kustomize.patches.target
-
stringspec.sources.kustomize.patches.target.annotationSelector
-
stringspec.sources.kustomize.patches.target.group
-
stringspec.sources.kustomize.patches.target.kind
-
stringspec.sources.kustomize.patches.target.labelSelector
-
stringspec.sources.kustomize.patches.target.name
-
stringspec.sources.kustomize.patches.target.namespace
-
stringspec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.sources.kustomize.replicasReplicas is a list of Kustomize Replicas override specifications
-
integer or stringspec.sources.kustomize.replicas.countNumber of replicas
-
stringspec.sources.kustomize.replicas.nameName of Deployment or StatefulSet
-
-
stringspec.sources.kustomize.versionVersion controls which version of Kustomize to use for rendering manifests
-
-
stringspec.sources.nameName is used to refer to a source and is displayed in the UI. It is used in multi-source Applications.
-
stringspec.sources.pathPath is a directory path within the Git repository, and is only valid for applications sourced from Git.
-
objectspec.sources.pluginPlugin holds config management plugin specific options
-
array of objectsspec.sources.plugin.envEnv is a list of environment variable entries
-
stringspec.sources.plugin.env.nameName is the name of the variable, usually expressed in uppercase
-
stringspec.sources.plugin.env.valueValue is the value of the variable
-
-
stringspec.sources.plugin.name
-
array of objectsspec.sources.plugin.parameters
-
array of stringsspec.sources.plugin.parameters.arrayArray is the value of an array type parameter.
-
objectspec.sources.plugin.parameters.mapMap is the value of a map type parameter.
-
stringspec.sources.plugin.parameters.nameName is the name identifying a parameter.
-
stringspec.sources.plugin.parameters.stringString_ is the value of a string type parameter.
-
-
-
stringspec.sources.refRef is reference to another source within sources field. This field will not be used if used with a
sourcetag. -
stringspec.sources.repoURLRepoURL is the URL to the repository (Git or Helm) that contains the application manifests
-
stringspec.sources.targetRevisionTargetRevision defines the revision of the source to sync the application to. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD. In case of Helm, this is a semver tag for the Chart’s version.
-
-
objectspec.syncPolicySyncPolicy controls when and how a sync will be performed
-
objectspec.syncPolicy.automatedAutomated will keep an application synced to the target revision
-
booleanspec.syncPolicy.automated.allowEmptyAllowEmpty allows apps have zero live resources (default: false)
-
booleanspec.syncPolicy.automated.enabledEnable allows apps to explicitly control automated sync
-
booleanspec.syncPolicy.automated.prunePrune specifies whether to delete resources from the cluster that are not found in the sources anymore as part of automated sync (default: false)
-
booleanspec.syncPolicy.automated.selfHealSelfHeal specifies whether to revert resources back to their desired state upon modification in the cluster (default: false)
-
-
objectspec.syncPolicy.managedNamespaceMetadataManagedNamespaceMetadata controls metadata in the given namespace (if CreateNamespace=true)
-
objectspec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.syncPolicy.retryRetry controls failed sync retry behavior
-
objectspec.syncPolicy.retry.backoffBackoff controls how to backoff on subsequent retries of failed syncs
-
stringspec.syncPolicy.retry.backoff.durationDuration is the amount to back off. Default unit is seconds, but could also be a duration (e.g. “2m”, “1h”)
-
integerspec.syncPolicy.retry.backoff.factorFactor is a factor to multiply the base duration after each failed retry
-
stringspec.syncPolicy.retry.backoff.maxDurationMaxDuration is the maximum amount of time allowed for the backoff strategy
-
-
integerspec.syncPolicy.retry.limitLimit is the maximum number of attempts for retrying a failed sync. If set to 0, no retries will be performed.
-
-
array of stringsspec.syncPolicy.syncOptionsOptions allow you to specify whole app sync-options
-
-
-
objectstatusApplicationStatus contains status information for the application
-
array of objectsstatus.conditionsConditions is a list of currently observed application conditions
-
stringstatus.conditions.lastTransitionTimeLastTransitionTime is the time the condition was last observed
-
stringstatus.conditions.messageMessage contains human-readable message indicating details about condition
-
stringstatus.conditions.typeType is an application condition type
-
-
stringstatus.controllerNamespaceControllerNamespace indicates the namespace in which the application controller is located
-
objectstatus.healthHealth contains information about the application’s current health status
-
stringstatus.health.lastTransitionTimeLastTransitionTime is the time the HealthStatus was set or updated
-
stringstatus.health.message
Message is a human-readable informational message describing the health status
Deprecated: this field is not used and will be removed in a future release.
-
stringstatus.health.statusStatus holds the status code of the application
-
-
array of objectsstatus.historyHistory contains information about the application’s sync history
-
stringstatus.history.deployStartedAtDeployStartedAt holds the time the sync operation started
-
stringstatus.history.deployedAtDeployedAt holds the time the sync operation completed
-
integerstatus.history.idID is an auto incrementing identifier of the RevisionHistory
-
objectstatus.history.initiatedByInitiatedBy contains information about who initiated the operations
-
booleanstatus.history.initiatedBy.automatedAutomated is set to true if operation was initiated automatically by the application controller.
-
stringstatus.history.initiatedBy.usernameUsername contains the name of a user who started operation
-
-
stringstatus.history.revisionRevision holds the revision the sync was performed against
-
array of stringsstatus.history.revisionsRevisions holds the revision of each source in sources field the sync was performed against
-
objectstatus.history.sourceSource is a reference to the application source used for the sync operation
-
stringstatus.history.source.chartChart is a Helm chart name, and must be specified for applications sourced from a Helm repo.
-
objectstatus.history.source.directoryDirectory holds path/directory specific options
-
stringstatus.history.source.directory.excludeExclude contains a glob pattern to match paths against that should be explicitly excluded from being used during manifest generation
-
stringstatus.history.source.directory.includeInclude contains a glob pattern to match paths against that should be explicitly included during manifest generation
-
objectstatus.history.source.directory.jsonnetJsonnet holds options specific to Jsonnet
-
array of objectsstatus.history.source.directory.jsonnet.extVarsExtVars is a list of Jsonnet External Variables
-
booleanstatus.history.source.directory.jsonnet.extVars.code
-
stringstatus.history.source.directory.jsonnet.extVars.name
-
stringstatus.history.source.directory.jsonnet.extVars.value
-
-
array of stringsstatus.history.source.directory.jsonnet.libsAdditional library search dirs
-
array of objectsstatus.history.source.directory.jsonnet.tlasTLAS is a list of Jsonnet Top-level Arguments
-
booleanstatus.history.source.directory.jsonnet.tlas.code
-
stringstatus.history.source.directory.jsonnet.tlas.name
-
stringstatus.history.source.directory.jsonnet.tlas.value
-
-
-
booleanstatus.history.source.directory.recurseRecurse specifies whether to scan a directory recursively for manifests
-
-
objectstatus.history.source.helmHelm holds helm specific options
-
array of stringsstatus.history.source.helm.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
array of objectsstatus.history.source.helm.fileParametersFileParameters are file parameters to the helm template
-
stringstatus.history.source.helm.fileParameters.nameName is the name of the Helm parameter
-
stringstatus.history.source.helm.fileParameters.pathPath is the path to the file containing the values for the Helm parameter
-
-
booleanstatus.history.source.helm.ignoreMissingValueFilesIgnoreMissingValueFiles prevents helm template from failing when valueFiles do not exist locally by not appending them to helm template –values
-
stringstatus.history.source.helm.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
stringstatus.history.source.helm.namespaceNamespace is an optional namespace to template with. If left empty, defaults to the app’s destination namespace.
-
array of objectsstatus.history.source.helm.parametersParameters is a list of Helm parameters which are passed to the helm template command upon manifest generation
-
booleanstatus.history.source.helm.parameters.forceStringForceString determines whether to tell Helm to interpret booleans and numbers as strings
-
stringstatus.history.source.helm.parameters.nameName is the name of the Helm parameter
-
stringstatus.history.source.helm.parameters.valueValue is the value for the Helm parameter
-
-
booleanstatus.history.source.helm.passCredentialsPassCredentials pass credentials to all domains (Helm’s –pass-credentials)
-
stringstatus.history.source.helm.releaseNameReleaseName is the Helm release name to use. If omitted it will use the application name
-
booleanstatus.history.source.helm.skipCrdsSkipCrds skips custom resource definition installation step (Helm’s –skip-crds)
-
booleanstatus.history.source.helm.skipSchemaValidationSkipSchemaValidation skips JSON schema validation (Helm’s –skip-schema-validation)
-
booleanstatus.history.source.helm.skipTestsSkipTests skips test manifest installation step (Helm’s –skip-tests).
-
array of stringsstatus.history.source.helm.valueFilesValuesFiles is a list of Helm value files to use when generating a template
-
stringstatus.history.source.helm.valuesValues specifies Helm values to be passed to helm template, typically defined as a block. ValuesObject takes precedence over Values, so use one or the other.
-
objectstatus.history.source.helm.valuesObjectValuesObject specifies Helm values to be passed to helm template, defined as a map. This takes precedence over Values.
-
stringstatus.history.source.helm.versionVersion is the Helm version to use for templating (“3”)
-
-
objectstatus.history.source.kustomizeKustomize holds kustomize specific options
-
array of stringsstatus.history.source.kustomize.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
objectstatus.history.source.kustomize.commonAnnotationsCommonAnnotations is a list of additional annotations to add to rendered manifests
-
booleanstatus.history.source.kustomize.commonAnnotationsEnvsubstCommonAnnotationsEnvsubst specifies whether to apply env variables substitution for annotation values
-
objectstatus.history.source.kustomize.commonLabelsCommonLabels is a list of additional labels to add to rendered manifests
-
array of stringsstatus.history.source.kustomize.componentsComponents specifies a list of kustomize components to add to the kustomization before building
-
booleanstatus.history.source.kustomize.forceCommonAnnotationsForceCommonAnnotations specifies whether to force applying common annotations to resources for Kustomize apps
-
booleanstatus.history.source.kustomize.forceCommonLabelsForceCommonLabels specifies whether to force applying common labels to resources for Kustomize apps
-
booleanstatus.history.source.kustomize.ignoreMissingComponentsIgnoreMissingComponents prevents kustomize from failing when components do not exist locally by not appending them to kustomization file
-
array of stringsstatus.history.source.kustomize.imagesImages is a list of Kustomize image override specifications
-
stringstatus.history.source.kustomize.images.Element of the arrayKustomizeImage represents a Kustomize image definition in the format [old_image_name=]<image_name>:<image_tag>
-
-
stringstatus.history.source.kustomize.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
booleanstatus.history.source.kustomize.labelIncludeTemplatesLabelIncludeTemplates specifies whether to apply common labels to resource templates or not
-
booleanstatus.history.source.kustomize.labelWithoutSelectorLabelWithoutSelector specifies whether to apply common labels to resource selectors or not
-
stringstatus.history.source.kustomize.namePrefixNamePrefix is a prefix appended to resources for Kustomize apps
-
stringstatus.history.source.kustomize.nameSuffixNameSuffix is a suffix appended to resources for Kustomize apps
-
stringstatus.history.source.kustomize.namespaceNamespace sets the namespace that Kustomize adds to all resources
-
array of objectsstatus.history.source.kustomize.patchesPatches is a list of Kustomize patches
-
objectstatus.history.source.kustomize.patches.options
-
stringstatus.history.source.kustomize.patches.patch
-
stringstatus.history.source.kustomize.patches.path
-
objectstatus.history.source.kustomize.patches.target
-
stringstatus.history.source.kustomize.patches.target.annotationSelector
-
stringstatus.history.source.kustomize.patches.target.group
-
stringstatus.history.source.kustomize.patches.target.kind
-
stringstatus.history.source.kustomize.patches.target.labelSelector
-
stringstatus.history.source.kustomize.patches.target.name
-
stringstatus.history.source.kustomize.patches.target.namespace
-
stringstatus.history.source.kustomize.patches.target.version
-
-
-
array of objectsstatus.history.source.kustomize.replicasReplicas is a list of Kustomize Replicas override specifications
-
integer or stringstatus.history.source.kustomize.replicas.countNumber of replicas
-
stringstatus.history.source.kustomize.replicas.nameName of Deployment or StatefulSet
-
-
stringstatus.history.source.kustomize.versionVersion controls which version of Kustomize to use for rendering manifests
-
-
stringstatus.history.source.nameName is used to refer to a source and is displayed in the UI. It is used in multi-source Applications.
-
stringstatus.history.source.pathPath is a directory path within the Git repository, and is only valid for applications sourced from Git.
-
objectstatus.history.source.pluginPlugin holds config management plugin specific options
-
array of objectsstatus.history.source.plugin.envEnv is a list of environment variable entries
-
stringstatus.history.source.plugin.env.nameName is the name of the variable, usually expressed in uppercase
-
stringstatus.history.source.plugin.env.valueValue is the value of the variable
-
-
stringstatus.history.source.plugin.name
-
array of objectsstatus.history.source.plugin.parameters
-
array of stringsstatus.history.source.plugin.parameters.arrayArray is the value of an array type parameter.
-
objectstatus.history.source.plugin.parameters.mapMap is the value of a map type parameter.
-
stringstatus.history.source.plugin.parameters.nameName is the name identifying a parameter.
-
stringstatus.history.source.plugin.parameters.stringString_ is the value of a string type parameter.
-
-
-
stringstatus.history.source.refRef is reference to another source within sources field. This field will not be used if used with a
sourcetag. -
stringstatus.history.source.repoURL
Required value
RepoURL is the URL to the repository (Git or Helm) that contains the application manifests -
stringstatus.history.source.targetRevisionTargetRevision defines the revision of the source to sync the application to. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD. In case of Helm, this is a semver tag for the Chart’s version.
-
-
array of objectsstatus.history.sourcesSources is a reference to the application sources used for the sync operation
-
stringstatus.history.sources.chartChart is a Helm chart name, and must be specified for applications sourced from a Helm repo.
-
objectstatus.history.sources.directoryDirectory holds path/directory specific options
-
stringstatus.history.sources.directory.excludeExclude contains a glob pattern to match paths against that should be explicitly excluded from being used during manifest generation
-
stringstatus.history.sources.directory.includeInclude contains a glob pattern to match paths against that should be explicitly included during manifest generation
-
objectstatus.history.sources.directory.jsonnetJsonnet holds options specific to Jsonnet
-
array of objectsstatus.history.sources.directory.jsonnet.extVarsExtVars is a list of Jsonnet External Variables
-
booleanstatus.history.sources.directory.jsonnet.extVars.code
-
stringstatus.history.sources.directory.jsonnet.extVars.name
-
stringstatus.history.sources.directory.jsonnet.extVars.value
-
-
array of stringsstatus.history.sources.directory.jsonnet.libsAdditional library search dirs
-
array of objectsstatus.history.sources.directory.jsonnet.tlasTLAS is a list of Jsonnet Top-level Arguments
-
booleanstatus.history.sources.directory.jsonnet.tlas.code
-
stringstatus.history.sources.directory.jsonnet.tlas.name
-
stringstatus.history.sources.directory.jsonnet.tlas.value
-
-
-
booleanstatus.history.sources.directory.recurseRecurse specifies whether to scan a directory recursively for manifests
-
-
objectstatus.history.sources.helmHelm holds helm specific options
-
array of stringsstatus.history.sources.helm.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
array of objectsstatus.history.sources.helm.fileParametersFileParameters are file parameters to the helm template
-
stringstatus.history.sources.helm.fileParameters.nameName is the name of the Helm parameter
-
stringstatus.history.sources.helm.fileParameters.pathPath is the path to the file containing the values for the Helm parameter
-
-
booleanstatus.history.sources.helm.ignoreMissingValueFilesIgnoreMissingValueFiles prevents helm template from failing when valueFiles do not exist locally by not appending them to helm template –values
-
stringstatus.history.sources.helm.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
stringstatus.history.sources.helm.namespaceNamespace is an optional namespace to template with. If left empty, defaults to the app’s destination namespace.
-
array of objectsstatus.history.sources.helm.parametersParameters is a list of Helm parameters which are passed to the helm template command upon manifest generation
-
booleanstatus.history.sources.helm.parameters.forceStringForceString determines whether to tell Helm to interpret booleans and numbers as strings
-
stringstatus.history.sources.helm.parameters.nameName is the name of the Helm parameter
-
stringstatus.history.sources.helm.parameters.valueValue is the value for the Helm parameter
-
-
booleanstatus.history.sources.helm.passCredentialsPassCredentials pass credentials to all domains (Helm’s –pass-credentials)
-
stringstatus.history.sources.helm.releaseNameReleaseName is the Helm release name to use. If omitted it will use the application name
-
booleanstatus.history.sources.helm.skipCrdsSkipCrds skips custom resource definition installation step (Helm’s –skip-crds)
-
booleanstatus.history.sources.helm.skipSchemaValidationSkipSchemaValidation skips JSON schema validation (Helm’s –skip-schema-validation)
-
booleanstatus.history.sources.helm.skipTestsSkipTests skips test manifest installation step (Helm’s –skip-tests).
-
array of stringsstatus.history.sources.helm.valueFilesValuesFiles is a list of Helm value files to use when generating a template
-
stringstatus.history.sources.helm.valuesValues specifies Helm values to be passed to helm template, typically defined as a block. ValuesObject takes precedence over Values, so use one or the other.
-
objectstatus.history.sources.helm.valuesObjectValuesObject specifies Helm values to be passed to helm template, defined as a map. This takes precedence over Values.
-
stringstatus.history.sources.helm.versionVersion is the Helm version to use for templating (“3”)
-
-
objectstatus.history.sources.kustomizeKustomize holds kustomize specific options
-
array of stringsstatus.history.sources.kustomize.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
objectstatus.history.sources.kustomize.commonAnnotationsCommonAnnotations is a list of additional annotations to add to rendered manifests
-
booleanstatus.history.sources.kustomize.commonAnnotationsEnvsubstCommonAnnotationsEnvsubst specifies whether to apply env variables substitution for annotation values
-
objectstatus.history.sources.kustomize.commonLabelsCommonLabels is a list of additional labels to add to rendered manifests
-
array of stringsstatus.history.sources.kustomize.componentsComponents specifies a list of kustomize components to add to the kustomization before building
-
booleanstatus.history.sources.kustomize.forceCommonAnnotationsForceCommonAnnotations specifies whether to force applying common annotations to resources for Kustomize apps
-
booleanstatus.history.sources.kustomize.forceCommonLabelsForceCommonLabels specifies whether to force applying common labels to resources for Kustomize apps
-
booleanstatus.history.sources.kustomize.ignoreMissingComponentsIgnoreMissingComponents prevents kustomize from failing when components do not exist locally by not appending them to kustomization file
-
array of stringsstatus.history.sources.kustomize.imagesImages is a list of Kustomize image override specifications
-
stringstatus.history.sources.kustomize.images.Element of the arrayKustomizeImage represents a Kustomize image definition in the format [old_image_name=]<image_name>:<image_tag>
-
-
stringstatus.history.sources.kustomize.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
booleanstatus.history.sources.kustomize.labelIncludeTemplatesLabelIncludeTemplates specifies whether to apply common labels to resource templates or not
-
booleanstatus.history.sources.kustomize.labelWithoutSelectorLabelWithoutSelector specifies whether to apply common labels to resource selectors or not
-
stringstatus.history.sources.kustomize.namePrefixNamePrefix is a prefix appended to resources for Kustomize apps
-
stringstatus.history.sources.kustomize.nameSuffixNameSuffix is a suffix appended to resources for Kustomize apps
-
stringstatus.history.sources.kustomize.namespaceNamespace sets the namespace that Kustomize adds to all resources
-
array of objectsstatus.history.sources.kustomize.patchesPatches is a list of Kustomize patches
-
objectstatus.history.sources.kustomize.patches.options
-
stringstatus.history.sources.kustomize.patches.patch
-
stringstatus.history.sources.kustomize.patches.path
-
objectstatus.history.sources.kustomize.patches.target
-
stringstatus.history.sources.kustomize.patches.target.annotationSelector
-
stringstatus.history.sources.kustomize.patches.target.group
-
stringstatus.history.sources.kustomize.patches.target.kind
-
stringstatus.history.sources.kustomize.patches.target.labelSelector
-
stringstatus.history.sources.kustomize.patches.target.name
-
stringstatus.history.sources.kustomize.patches.target.namespace
-
stringstatus.history.sources.kustomize.patches.target.version
-
-
-
array of objectsstatus.history.sources.kustomize.replicasReplicas is a list of Kustomize Replicas override specifications
-
integer or stringstatus.history.sources.kustomize.replicas.countNumber of replicas
-
stringstatus.history.sources.kustomize.replicas.nameName of Deployment or StatefulSet
-
-
stringstatus.history.sources.kustomize.versionVersion controls which version of Kustomize to use for rendering manifests
-
-
stringstatus.history.sources.nameName is used to refer to a source and is displayed in the UI. It is used in multi-source Applications.
-
stringstatus.history.sources.pathPath is a directory path within the Git repository, and is only valid for applications sourced from Git.
-
objectstatus.history.sources.pluginPlugin holds config management plugin specific options
-
array of objectsstatus.history.sources.plugin.envEnv is a list of environment variable entries
-
stringstatus.history.sources.plugin.env.nameName is the name of the variable, usually expressed in uppercase
-
stringstatus.history.sources.plugin.env.valueValue is the value of the variable
-
-
stringstatus.history.sources.plugin.name
-
array of objectsstatus.history.sources.plugin.parameters
-
array of stringsstatus.history.sources.plugin.parameters.arrayArray is the value of an array type parameter.
-
objectstatus.history.sources.plugin.parameters.mapMap is the value of a map type parameter.
-
stringstatus.history.sources.plugin.parameters.nameName is the name identifying a parameter.
-
stringstatus.history.sources.plugin.parameters.stringString_ is the value of a string type parameter.
-
-
-
stringstatus.history.sources.refRef is reference to another source within sources field. This field will not be used if used with a
sourcetag. -
stringstatus.history.sources.repoURLRepoURL is the URL to the repository (Git or Helm) that contains the application manifests
-
stringstatus.history.sources.targetRevisionTargetRevision defines the revision of the source to sync the application to. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD. In case of Helm, this is a semver tag for the Chart’s version.
-
-
-
stringstatus.observedAtObservedAt indicates when the application state was updated without querying latest git state Deprecated: controller no longer updates ObservedAt field
-
objectstatus.operationStateOperationState contains information about any ongoing operations, such as a sync
-
stringstatus.operationState.finishedAtFinishedAt contains time of operation completion
-
stringstatus.operationState.messageMessage holds any pertinent messages when attempting to perform operation (typically errors).
-
objectstatus.operationState.operation
Required value
Operation is the original requested operation-
array of objectsstatus.operationState.operation.infoInfo is a list of informational items for this operation
-
stringstatus.operationState.operation.info.name
-
stringstatus.operationState.operation.info.value
-
-
objectstatus.operationState.operation.initiatedByInitiatedBy contains information about who initiated the operations
-
booleanstatus.operationState.operation.initiatedBy.automatedAutomated is set to true if operation was initiated automatically by the application controller.
-
stringstatus.operationState.operation.initiatedBy.usernameUsername contains the name of a user who started operation
-
-
objectstatus.operationState.operation.retryRetry controls the strategy to apply if a sync fails
-
objectstatus.operationState.operation.retry.backoffBackoff controls how to backoff on subsequent retries of failed syncs
-
stringstatus.operationState.operation.retry.backoff.durationDuration is the amount to back off. Default unit is seconds, but could also be a duration (e.g. “2m”, “1h”)
-
integerstatus.operationState.operation.retry.backoff.factorFactor is a factor to multiply the base duration after each failed retry
-
stringstatus.operationState.operation.retry.backoff.maxDurationMaxDuration is the maximum amount of time allowed for the backoff strategy
-
-
integerstatus.operationState.operation.retry.limitLimit is the maximum number of attempts for retrying a failed sync. If set to 0, no retries will be performed.
-
-
objectstatus.operationState.operation.syncSync contains parameters for the operation
-
integerstatus.operationState.operation.sync.autoHealAttemptsCountSelfHealAttemptsCount contains the number of auto-heal attempts
-
booleanstatus.operationState.operation.sync.dryRunDryRun specifies to perform a
kubectl apply --dry-runwithout actually performing the sync -
array of stringsstatus.operationState.operation.sync.manifestsManifests is an optional field that overrides sync source with a local directory for development
-
booleanstatus.operationState.operation.sync.prunePrune specifies to delete resources from the cluster that are no longer tracked in git
-
array of objectsstatus.operationState.operation.sync.resourcesResources describes which resources shall be part of the sync
-
stringstatus.operationState.operation.sync.resources.group
-
stringstatus.operationState.operation.sync.resources.kind
-
stringstatus.operationState.operation.sync.resources.name
-
stringstatus.operationState.operation.sync.resources.namespace
-
-
stringstatus.operationState.operation.sync.revisionRevision is the revision (Git) or chart version (Helm) which to sync the application to If omitted, will use the revision specified in app spec.
-
array of stringsstatus.operationState.operation.sync.revisionsRevisions is the list of revision (Git) or chart version (Helm) which to sync each source in sources field for the application to If omitted, will use the revision specified in app spec.
-
objectstatus.operationState.operation.sync.sourceSource overrides the source definition set in the application. This is typically set in a Rollback operation and is nil during a Sync operation
-
stringstatus.operationState.operation.sync.source.chartChart is a Helm chart name, and must be specified for applications sourced from a Helm repo.
-
objectstatus.operationState.operation.sync.source.directoryDirectory holds path/directory specific options
-
stringstatus.operationState.operation.sync.source.directory.excludeExclude contains a glob pattern to match paths against that should be explicitly excluded from being used during manifest generation
-
stringstatus.operationState.operation.sync.source.directory.includeInclude contains a glob pattern to match paths against that should be explicitly included during manifest generation
-
objectstatus.operationState.operation.sync.source.directory.jsonnetJsonnet holds options specific to Jsonnet
-
array of objectsstatus.operationState.operation.sync.source.directory.jsonnet.extVarsExtVars is a list of Jsonnet External Variables
-
booleanstatus.operationState.operation.sync.source.directory.jsonnet.extVars.code
-
stringstatus.operationState.operation.sync.source.directory.jsonnet.extVars.name
-
stringstatus.operationState.operation.sync.source.directory.jsonnet.extVars.value
-
-
array of stringsstatus.operationState.operation.sync.source.directory.jsonnet.libsAdditional library search dirs
-
array of objectsstatus.operationState.operation.sync.source.directory.jsonnet.tlasTLAS is a list of Jsonnet Top-level Arguments
-
booleanstatus.operationState.operation.sync.source.directory.jsonnet.tlas.code
-
stringstatus.operationState.operation.sync.source.directory.jsonnet.tlas.name
-
stringstatus.operationState.operation.sync.source.directory.jsonnet.tlas.value
-
-
-
booleanstatus.operationState.operation.sync.source.directory.recurseRecurse specifies whether to scan a directory recursively for manifests
-
-
objectstatus.operationState.operation.sync.source.helmHelm holds helm specific options
-
array of stringsstatus.operationState.operation.sync.source.helm.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
array of objectsstatus.operationState.operation.sync.source.helm.fileParametersFileParameters are file parameters to the helm template
-
stringstatus.operationState.operation.sync.source.helm.fileParameters.nameName is the name of the Helm parameter
-
stringstatus.operationState.operation.sync.source.helm.fileParameters.pathPath is the path to the file containing the values for the Helm parameter
-
-
booleanstatus.operationState.operation.sync.source.helm.ignoreMissingValueFilesIgnoreMissingValueFiles prevents helm template from failing when valueFiles do not exist locally by not appending them to helm template –values
-
stringstatus.operationState.operation.sync.source.helm.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
stringstatus.operationState.operation.sync.source.helm.namespaceNamespace is an optional namespace to template with. If left empty, defaults to the app’s destination namespace.
-
array of objectsstatus.operationState.operation.sync.source.helm.parametersParameters is a list of Helm parameters which are passed to the helm template command upon manifest generation
-
booleanstatus.operationState.operation.sync.source.helm.parameters.forceStringForceString determines whether to tell Helm to interpret booleans and numbers as strings
-
stringstatus.operationState.operation.sync.source.helm.parameters.nameName is the name of the Helm parameter
-
stringstatus.operationState.operation.sync.source.helm.parameters.valueValue is the value for the Helm parameter
-
-
booleanstatus.operationState.operation.sync.source.helm.passCredentialsPassCredentials pass credentials to all domains (Helm’s –pass-credentials)
-
stringstatus.operationState.operation.sync.source.helm.releaseNameReleaseName is the Helm release name to use. If omitted it will use the application name
-
booleanstatus.operationState.operation.sync.source.helm.skipCrdsSkipCrds skips custom resource definition installation step (Helm’s –skip-crds)
-
booleanstatus.operationState.operation.sync.source.helm.skipSchemaValidationSkipSchemaValidation skips JSON schema validation (Helm’s –skip-schema-validation)
-
booleanstatus.operationState.operation.sync.source.helm.skipTestsSkipTests skips test manifest installation step (Helm’s –skip-tests).
-
array of stringsstatus.operationState.operation.sync.source.helm.valueFilesValuesFiles is a list of Helm value files to use when generating a template
-
stringstatus.operationState.operation.sync.source.helm.valuesValues specifies Helm values to be passed to helm template, typically defined as a block. ValuesObject takes precedence over Values, so use one or the other.
-
objectstatus.operationState.operation.sync.source.helm.valuesObjectValuesObject specifies Helm values to be passed to helm template, defined as a map. This takes precedence over Values.
-
stringstatus.operationState.operation.sync.source.helm.versionVersion is the Helm version to use for templating (“3”)
-
-
objectstatus.operationState.operation.sync.source.kustomizeKustomize holds kustomize specific options
-
array of stringsstatus.operationState.operation.sync.source.kustomize.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
objectstatus.operationState.operation.sync.source.kustomize.commonAnnotationsCommonAnnotations is a list of additional annotations to add to rendered manifests
-
booleanstatus.operationState.operation.sync.source.kustomize.commonAnnotationsEnvsubstCommonAnnotationsEnvsubst specifies whether to apply env variables substitution for annotation values
-
objectstatus.operationState.operation.sync.source.kustomize.commonLabelsCommonLabels is a list of additional labels to add to rendered manifests
-
array of stringsstatus.operationState.operation.sync.source.kustomize.componentsComponents specifies a list of kustomize components to add to the kustomization before building
-
booleanstatus.operationState.operation.sync.source.kustomize.forceCommonAnnotationsForceCommonAnnotations specifies whether to force applying common annotations to resources for Kustomize apps
-
booleanstatus.operationState.operation.sync.source.kustomize.forceCommonLabelsForceCommonLabels specifies whether to force applying common labels to resources for Kustomize apps
-
booleanstatus.operationState.operation.sync.source.kustomize.ignoreMissingComponentsIgnoreMissingComponents prevents kustomize from failing when components do not exist locally by not appending them to kustomization file
-
array of stringsstatus.operationState.operation.sync.source.kustomize.imagesImages is a list of Kustomize image override specifications
-
stringstatus.operationState.operation.sync.source.kustomize.images.Element of the arrayKustomizeImage represents a Kustomize image definition in the format [old_image_name=]<image_name>:<image_tag>
-
-
stringstatus.operationState.operation.sync.source.kustomize.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
booleanstatus.operationState.operation.sync.source.kustomize.labelIncludeTemplatesLabelIncludeTemplates specifies whether to apply common labels to resource templates or not
-
booleanstatus.operationState.operation.sync.source.kustomize.labelWithoutSelectorLabelWithoutSelector specifies whether to apply common labels to resource selectors or not
-
stringstatus.operationState.operation.sync.source.kustomize.namePrefixNamePrefix is a prefix appended to resources for Kustomize apps
-
stringstatus.operationState.operation.sync.source.kustomize.nameSuffixNameSuffix is a suffix appended to resources for Kustomize apps
-
stringstatus.operationState.operation.sync.source.kustomize.namespaceNamespace sets the namespace that Kustomize adds to all resources
-
array of objectsstatus.operationState.operation.sync.source.kustomize.patchesPatches is a list of Kustomize patches
-
objectstatus.operationState.operation.sync.source.kustomize.patches.options
-
stringstatus.operationState.operation.sync.source.kustomize.patches.patch
-
stringstatus.operationState.operation.sync.source.kustomize.patches.path
-
objectstatus.operationState.operation.sync.source.kustomize.patches.target
-
stringstatus.operationState.operation.sync.source.kustomize.patches.target.annotationSelector
-
stringstatus.operationState.operation.sync.source.kustomize.patches.target.group
-
stringstatus.operationState.operation.sync.source.kustomize.patches.target.kind
-
stringstatus.operationState.operation.sync.source.kustomize.patches.target.labelSelector
-
stringstatus.operationState.operation.sync.source.kustomize.patches.target.name
-
stringstatus.operationState.operation.sync.source.kustomize.patches.target.namespace
-
stringstatus.operationState.operation.sync.source.kustomize.patches.target.version
-
-
-
array of objectsstatus.operationState.operation.sync.source.kustomize.replicasReplicas is a list of Kustomize Replicas override specifications
-
integer or stringstatus.operationState.operation.sync.source.kustomize.replicas.countNumber of replicas
-
stringstatus.operationState.operation.sync.source.kustomize.replicas.nameName of Deployment or StatefulSet
-
-
stringstatus.operationState.operation.sync.source.kustomize.versionVersion controls which version of Kustomize to use for rendering manifests
-
-
stringstatus.operationState.operation.sync.source.nameName is used to refer to a source and is displayed in the UI. It is used in multi-source Applications.
-
stringstatus.operationState.operation.sync.source.pathPath is a directory path within the Git repository, and is only valid for applications sourced from Git.
-
objectstatus.operationState.operation.sync.source.pluginPlugin holds config management plugin specific options
-
array of objectsstatus.operationState.operation.sync.source.plugin.envEnv is a list of environment variable entries
-
stringstatus.operationState.operation.sync.source.plugin.env.nameName is the name of the variable, usually expressed in uppercase
-
stringstatus.operationState.operation.sync.source.plugin.env.valueValue is the value of the variable
-
-
stringstatus.operationState.operation.sync.source.plugin.name
-
array of objectsstatus.operationState.operation.sync.source.plugin.parameters
-
array of stringsstatus.operationState.operation.sync.source.plugin.parameters.arrayArray is the value of an array type parameter.
-
objectstatus.operationState.operation.sync.source.plugin.parameters.mapMap is the value of a map type parameter.
-
stringstatus.operationState.operation.sync.source.plugin.parameters.nameName is the name identifying a parameter.
-
stringstatus.operationState.operation.sync.source.plugin.parameters.stringString_ is the value of a string type parameter.
-
-
-
stringstatus.operationState.operation.sync.source.refRef is reference to another source within sources field. This field will not be used if used with a
sourcetag. -
stringstatus.operationState.operation.sync.source.repoURL
Required value
RepoURL is the URL to the repository (Git or Helm) that contains the application manifests -
stringstatus.operationState.operation.sync.source.targetRevisionTargetRevision defines the revision of the source to sync the application to. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD. In case of Helm, this is a semver tag for the Chart’s version.
-
-
array of objectsstatus.operationState.operation.sync.sourcesSources overrides the source definition set in the application. This is typically set in a Rollback operation and is nil during a Sync operation
-
stringstatus.operationState.operation.sync.sources.chartChart is a Helm chart name, and must be specified for applications sourced from a Helm repo.
-
objectstatus.operationState.operation.sync.sources.directoryDirectory holds path/directory specific options
-
stringstatus.operationState.operation.sync.sources.directory.excludeExclude contains a glob pattern to match paths against that should be explicitly excluded from being used during manifest generation
-
stringstatus.operationState.operation.sync.sources.directory.includeInclude contains a glob pattern to match paths against that should be explicitly included during manifest generation
-
objectstatus.operationState.operation.sync.sources.directory.jsonnetJsonnet holds options specific to Jsonnet
-
array of objectsstatus.operationState.operation.sync.sources.directory.jsonnet.extVarsExtVars is a list of Jsonnet External Variables
-
booleanstatus.operationState.operation.sync.sources.directory.jsonnet.extVars.code
-
stringstatus.operationState.operation.sync.sources.directory.jsonnet.extVars.name
-
stringstatus.operationState.operation.sync.sources.directory.jsonnet.extVars.value
-
-
array of stringsstatus.operationState.operation.sync.sources.directory.jsonnet.libsAdditional library search dirs
-
array of objectsstatus.operationState.operation.sync.sources.directory.jsonnet.tlasTLAS is a list of Jsonnet Top-level Arguments
-
booleanstatus.operationState.operation.sync.sources.directory.jsonnet.tlas.code
-
stringstatus.operationState.operation.sync.sources.directory.jsonnet.tlas.name
-
stringstatus.operationState.operation.sync.sources.directory.jsonnet.tlas.value
-
-
-
booleanstatus.operationState.operation.sync.sources.directory.recurseRecurse specifies whether to scan a directory recursively for manifests
-
-
objectstatus.operationState.operation.sync.sources.helmHelm holds helm specific options
-
array of stringsstatus.operationState.operation.sync.sources.helm.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
array of objectsstatus.operationState.operation.sync.sources.helm.fileParametersFileParameters are file parameters to the helm template
-
stringstatus.operationState.operation.sync.sources.helm.fileParameters.nameName is the name of the Helm parameter
-
stringstatus.operationState.operation.sync.sources.helm.fileParameters.pathPath is the path to the file containing the values for the Helm parameter
-
-
booleanstatus.operationState.operation.sync.sources.helm.ignoreMissingValueFilesIgnoreMissingValueFiles prevents helm template from failing when valueFiles do not exist locally by not appending them to helm template –values
-
stringstatus.operationState.operation.sync.sources.helm.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
stringstatus.operationState.operation.sync.sources.helm.namespaceNamespace is an optional namespace to template with. If left empty, defaults to the app’s destination namespace.
-
array of objectsstatus.operationState.operation.sync.sources.helm.parametersParameters is a list of Helm parameters which are passed to the helm template command upon manifest generation
-
booleanstatus.operationState.operation.sync.sources.helm.parameters.forceStringForceString determines whether to tell Helm to interpret booleans and numbers as strings
-
stringstatus.operationState.operation.sync.sources.helm.parameters.nameName is the name of the Helm parameter
-
stringstatus.operationState.operation.sync.sources.helm.parameters.valueValue is the value for the Helm parameter
-
-
booleanstatus.operationState.operation.sync.sources.helm.passCredentialsPassCredentials pass credentials to all domains (Helm’s –pass-credentials)
-
stringstatus.operationState.operation.sync.sources.helm.releaseNameReleaseName is the Helm release name to use. If omitted it will use the application name
-
booleanstatus.operationState.operation.sync.sources.helm.skipCrdsSkipCrds skips custom resource definition installation step (Helm’s –skip-crds)
-
booleanstatus.operationState.operation.sync.sources.helm.skipSchemaValidationSkipSchemaValidation skips JSON schema validation (Helm’s –skip-schema-validation)
-
booleanstatus.operationState.operation.sync.sources.helm.skipTestsSkipTests skips test manifest installation step (Helm’s –skip-tests).
-
array of stringsstatus.operationState.operation.sync.sources.helm.valueFilesValuesFiles is a list of Helm value files to use when generating a template
-
stringstatus.operationState.operation.sync.sources.helm.valuesValues specifies Helm values to be passed to helm template, typically defined as a block. ValuesObject takes precedence over Values, so use one or the other.
-
objectstatus.operationState.operation.sync.sources.helm.valuesObjectValuesObject specifies Helm values to be passed to helm template, defined as a map. This takes precedence over Values.
-
stringstatus.operationState.operation.sync.sources.helm.versionVersion is the Helm version to use for templating (“3”)
-
-
objectstatus.operationState.operation.sync.sources.kustomizeKustomize holds kustomize specific options
-
array of stringsstatus.operationState.operation.sync.sources.kustomize.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
objectstatus.operationState.operation.sync.sources.kustomize.commonAnnotationsCommonAnnotations is a list of additional annotations to add to rendered manifests
-
booleanstatus.operationState.operation.sync.sources.kustomize.commonAnnotationsEnvsubstCommonAnnotationsEnvsubst specifies whether to apply env variables substitution for annotation values
-
objectstatus.operationState.operation.sync.sources.kustomize.commonLabelsCommonLabels is a list of additional labels to add to rendered manifests
-
array of stringsstatus.operationState.operation.sync.sources.kustomize.componentsComponents specifies a list of kustomize components to add to the kustomization before building
-
booleanstatus.operationState.operation.sync.sources.kustomize.forceCommonAnnotationsForceCommonAnnotations specifies whether to force applying common annotations to resources for Kustomize apps
-
booleanstatus.operationState.operation.sync.sources.kustomize.forceCommonLabelsForceCommonLabels specifies whether to force applying common labels to resources for Kustomize apps
-
booleanstatus.operationState.operation.sync.sources.kustomize.ignoreMissingComponentsIgnoreMissingComponents prevents kustomize from failing when components do not exist locally by not appending them to kustomization file
-
array of stringsstatus.operationState.operation.sync.sources.kustomize.imagesImages is a list of Kustomize image override specifications
-
stringstatus.operationState.operation.sync.sources.kustomize.images.Element of the arrayKustomizeImage represents a Kustomize image definition in the format [old_image_name=]<image_name>:<image_tag>
-
-
stringstatus.operationState.operation.sync.sources.kustomize.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
booleanstatus.operationState.operation.sync.sources.kustomize.labelIncludeTemplatesLabelIncludeTemplates specifies whether to apply common labels to resource templates or not
-
booleanstatus.operationState.operation.sync.sources.kustomize.labelWithoutSelectorLabelWithoutSelector specifies whether to apply common labels to resource selectors or not
-
stringstatus.operationState.operation.sync.sources.kustomize.namePrefixNamePrefix is a prefix appended to resources for Kustomize apps
-
stringstatus.operationState.operation.sync.sources.kustomize.nameSuffixNameSuffix is a suffix appended to resources for Kustomize apps
-
stringstatus.operationState.operation.sync.sources.kustomize.namespaceNamespace sets the namespace that Kustomize adds to all resources
-
array of objectsstatus.operationState.operation.sync.sources.kustomize.patchesPatches is a list of Kustomize patches
-
objectstatus.operationState.operation.sync.sources.kustomize.patches.options
-
stringstatus.operationState.operation.sync.sources.kustomize.patches.patch
-
stringstatus.operationState.operation.sync.sources.kustomize.patches.path
-
objectstatus.operationState.operation.sync.sources.kustomize.patches.target
-
stringstatus.operationState.operation.sync.sources.kustomize.patches.target.annotationSelector
-
stringstatus.operationState.operation.sync.sources.kustomize.patches.target.group
-
stringstatus.operationState.operation.sync.sources.kustomize.patches.target.kind
-
stringstatus.operationState.operation.sync.sources.kustomize.patches.target.labelSelector
-
stringstatus.operationState.operation.sync.sources.kustomize.patches.target.name
-
stringstatus.operationState.operation.sync.sources.kustomize.patches.target.namespace
-
stringstatus.operationState.operation.sync.sources.kustomize.patches.target.version
-
-
-
array of objectsstatus.operationState.operation.sync.sources.kustomize.replicasReplicas is a list of Kustomize Replicas override specifications
-
integer or stringstatus.operationState.operation.sync.sources.kustomize.replicas.countNumber of replicas
-
stringstatus.operationState.operation.sync.sources.kustomize.replicas.nameName of Deployment or StatefulSet
-
-
stringstatus.operationState.operation.sync.sources.kustomize.versionVersion controls which version of Kustomize to use for rendering manifests
-
-
stringstatus.operationState.operation.sync.sources.nameName is used to refer to a source and is displayed in the UI. It is used in multi-source Applications.
-
stringstatus.operationState.operation.sync.sources.pathPath is a directory path within the Git repository, and is only valid for applications sourced from Git.
-
objectstatus.operationState.operation.sync.sources.pluginPlugin holds config management plugin specific options
-
array of objectsstatus.operationState.operation.sync.sources.plugin.envEnv is a list of environment variable entries
-
stringstatus.operationState.operation.sync.sources.plugin.env.nameName is the name of the variable, usually expressed in uppercase
-
stringstatus.operationState.operation.sync.sources.plugin.env.valueValue is the value of the variable
-
-
stringstatus.operationState.operation.sync.sources.plugin.name
-
array of objectsstatus.operationState.operation.sync.sources.plugin.parameters
-
array of stringsstatus.operationState.operation.sync.sources.plugin.parameters.arrayArray is the value of an array type parameter.
-
objectstatus.operationState.operation.sync.sources.plugin.parameters.mapMap is the value of a map type parameter.
-
stringstatus.operationState.operation.sync.sources.plugin.parameters.nameName is the name identifying a parameter.
-
stringstatus.operationState.operation.sync.sources.plugin.parameters.stringString_ is the value of a string type parameter.
-
-
-
stringstatus.operationState.operation.sync.sources.refRef is reference to another source within sources field. This field will not be used if used with a
sourcetag. -
stringstatus.operationState.operation.sync.sources.repoURLRepoURL is the URL to the repository (Git or Helm) that contains the application manifests
-
stringstatus.operationState.operation.sync.sources.targetRevisionTargetRevision defines the revision of the source to sync the application to. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD. In case of Helm, this is a semver tag for the Chart’s version.
-
-
array of stringsstatus.operationState.operation.sync.syncOptionsSyncOptions provide per-sync sync-options, e.g. Validate=false
-
objectstatus.operationState.operation.sync.syncStrategySyncStrategy describes how to perform the sync
-
objectstatus.operationState.operation.sync.syncStrategy.applyApply will perform a
kubectl applyto perform the sync.-
booleanstatus.operationState.operation.sync.syncStrategy.apply.forceForce indicates whether or not to supply the –force flag to
kubectl apply. The –force flag deletes and re-create the resource, when PATCH encounters conflict and has retried for 5 times.
-
-
objectstatus.operationState.operation.sync.syncStrategy.hookHook will submit any referenced resources to perform the sync. This is the default strategy
-
booleanstatus.operationState.operation.sync.syncStrategy.hook.forceForce indicates whether or not to supply the –force flag to
kubectl apply. The –force flag deletes and re-create the resource, when PATCH encounters conflict and has retried for 5 times.
-
-
-
-
-
stringstatus.operationState.phase
Required value
Phase is the current phase of the operation -
integerstatus.operationState.retryCountRetryCount contains time of operation retries
-
stringstatus.operationState.startedAt
Required value
StartedAt contains time of operation start -
objectstatus.operationState.syncResultSyncResult is the result of a Sync operation
-
objectstatus.operationState.syncResult.managedNamespaceMetadataManagedNamespaceMetadata contains the current sync state of managed namespace metadata
-
objectstatus.operationState.syncResult.managedNamespaceMetadata.annotations
-
objectstatus.operationState.syncResult.managedNamespaceMetadata.labels
-
-
array of objectsstatus.operationState.syncResult.resourcesResources contains a list of sync result items for each individual resource in a sync operation
-
stringstatus.operationState.syncResult.resources.groupGroup specifies the API group of the resource
-
stringstatus.operationState.syncResult.resources.hookPhaseHookPhase contains the state of any operation associated with this resource OR hook This can also contain values for non-hook resources.
-
stringstatus.operationState.syncResult.resources.hookTypeHookType specifies the type of the hook. Empty for non-hook resources
-
array of stringsstatus.operationState.syncResult.resources.imagesImages contains the images related to the ResourceResult
-
stringstatus.operationState.syncResult.resources.kindKind specifies the API kind of the resource
-
stringstatus.operationState.syncResult.resources.messageMessage contains an informational or error message for the last sync OR operation
-
stringstatus.operationState.syncResult.resources.nameName specifies the name of the resource
-
stringstatus.operationState.syncResult.resources.namespaceNamespace specifies the target namespace of the resource
-
stringstatus.operationState.syncResult.resources.statusStatus holds the final result of the sync. Will be empty if the resources is yet to be applied/pruned and is always zero-value for hooks
-
stringstatus.operationState.syncResult.resources.syncPhaseSyncPhase indicates the particular phase of the sync that this result was acquired in
-
stringstatus.operationState.syncResult.resources.versionVersion specifies the API version of the resource
-
-
stringstatus.operationState.syncResult.revision
Required value
Revision holds the revision this sync operation was performed to -
array of stringsstatus.operationState.syncResult.revisionsRevisions holds the revision this sync operation was performed for respective indexed source in sources field
-
objectstatus.operationState.syncResult.sourceSource records the application source information of the sync, used for comparing auto-sync
-
stringstatus.operationState.syncResult.source.chartChart is a Helm chart name, and must be specified for applications sourced from a Helm repo.
-
objectstatus.operationState.syncResult.source.directoryDirectory holds path/directory specific options
-
stringstatus.operationState.syncResult.source.directory.excludeExclude contains a glob pattern to match paths against that should be explicitly excluded from being used during manifest generation
-
stringstatus.operationState.syncResult.source.directory.includeInclude contains a glob pattern to match paths against that should be explicitly included during manifest generation
-
objectstatus.operationState.syncResult.source.directory.jsonnetJsonnet holds options specific to Jsonnet
-
array of objectsstatus.operationState.syncResult.source.directory.jsonnet.extVarsExtVars is a list of Jsonnet External Variables
-
booleanstatus.operationState.syncResult.source.directory.jsonnet.extVars.code
-
stringstatus.operationState.syncResult.source.directory.jsonnet.extVars.name
-
stringstatus.operationState.syncResult.source.directory.jsonnet.extVars.value
-
-
array of stringsstatus.operationState.syncResult.source.directory.jsonnet.libsAdditional library search dirs
-
array of objectsstatus.operationState.syncResult.source.directory.jsonnet.tlasTLAS is a list of Jsonnet Top-level Arguments
-
booleanstatus.operationState.syncResult.source.directory.jsonnet.tlas.code
-
stringstatus.operationState.syncResult.source.directory.jsonnet.tlas.name
-
stringstatus.operationState.syncResult.source.directory.jsonnet.tlas.value
-
-
-
booleanstatus.operationState.syncResult.source.directory.recurseRecurse specifies whether to scan a directory recursively for manifests
-
-
objectstatus.operationState.syncResult.source.helmHelm holds helm specific options
-
array of stringsstatus.operationState.syncResult.source.helm.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
array of objectsstatus.operationState.syncResult.source.helm.fileParametersFileParameters are file parameters to the helm template
-
stringstatus.operationState.syncResult.source.helm.fileParameters.nameName is the name of the Helm parameter
-
stringstatus.operationState.syncResult.source.helm.fileParameters.pathPath is the path to the file containing the values for the Helm parameter
-
-
booleanstatus.operationState.syncResult.source.helm.ignoreMissingValueFilesIgnoreMissingValueFiles prevents helm template from failing when valueFiles do not exist locally by not appending them to helm template –values
-
stringstatus.operationState.syncResult.source.helm.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
stringstatus.operationState.syncResult.source.helm.namespaceNamespace is an optional namespace to template with. If left empty, defaults to the app’s destination namespace.
-
array of objectsstatus.operationState.syncResult.source.helm.parametersParameters is a list of Helm parameters which are passed to the helm template command upon manifest generation
-
booleanstatus.operationState.syncResult.source.helm.parameters.forceStringForceString determines whether to tell Helm to interpret booleans and numbers as strings
-
stringstatus.operationState.syncResult.source.helm.parameters.nameName is the name of the Helm parameter
-
stringstatus.operationState.syncResult.source.helm.parameters.valueValue is the value for the Helm parameter
-
-
booleanstatus.operationState.syncResult.source.helm.passCredentialsPassCredentials pass credentials to all domains (Helm’s –pass-credentials)
-
stringstatus.operationState.syncResult.source.helm.releaseNameReleaseName is the Helm release name to use. If omitted it will use the application name
-
booleanstatus.operationState.syncResult.source.helm.skipCrdsSkipCrds skips custom resource definition installation step (Helm’s –skip-crds)
-
booleanstatus.operationState.syncResult.source.helm.skipSchemaValidationSkipSchemaValidation skips JSON schema validation (Helm’s –skip-schema-validation)
-
booleanstatus.operationState.syncResult.source.helm.skipTestsSkipTests skips test manifest installation step (Helm’s –skip-tests).
-
array of stringsstatus.operationState.syncResult.source.helm.valueFilesValuesFiles is a list of Helm value files to use when generating a template
-
stringstatus.operationState.syncResult.source.helm.valuesValues specifies Helm values to be passed to helm template, typically defined as a block. ValuesObject takes precedence over Values, so use one or the other.
-
objectstatus.operationState.syncResult.source.helm.valuesObjectValuesObject specifies Helm values to be passed to helm template, defined as a map. This takes precedence over Values.
-
stringstatus.operationState.syncResult.source.helm.versionVersion is the Helm version to use for templating (“3”)
-
-
objectstatus.operationState.syncResult.source.kustomizeKustomize holds kustomize specific options
-
array of stringsstatus.operationState.syncResult.source.kustomize.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
objectstatus.operationState.syncResult.source.kustomize.commonAnnotationsCommonAnnotations is a list of additional annotations to add to rendered manifests
-
booleanstatus.operationState.syncResult.source.kustomize.commonAnnotationsEnvsubstCommonAnnotationsEnvsubst specifies whether to apply env variables substitution for annotation values
-
objectstatus.operationState.syncResult.source.kustomize.commonLabelsCommonLabels is a list of additional labels to add to rendered manifests
-
array of stringsstatus.operationState.syncResult.source.kustomize.componentsComponents specifies a list of kustomize components to add to the kustomization before building
-
booleanstatus.operationState.syncResult.source.kustomize.forceCommonAnnotationsForceCommonAnnotations specifies whether to force applying common annotations to resources for Kustomize apps
-
booleanstatus.operationState.syncResult.source.kustomize.forceCommonLabelsForceCommonLabels specifies whether to force applying common labels to resources for Kustomize apps
-
booleanstatus.operationState.syncResult.source.kustomize.ignoreMissingComponentsIgnoreMissingComponents prevents kustomize from failing when components do not exist locally by not appending them to kustomization file
-
array of stringsstatus.operationState.syncResult.source.kustomize.imagesImages is a list of Kustomize image override specifications
-
stringstatus.operationState.syncResult.source.kustomize.images.Element of the arrayKustomizeImage represents a Kustomize image definition in the format [old_image_name=]<image_name>:<image_tag>
-
-
stringstatus.operationState.syncResult.source.kustomize.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
booleanstatus.operationState.syncResult.source.kustomize.labelIncludeTemplatesLabelIncludeTemplates specifies whether to apply common labels to resource templates or not
-
booleanstatus.operationState.syncResult.source.kustomize.labelWithoutSelectorLabelWithoutSelector specifies whether to apply common labels to resource selectors or not
-
stringstatus.operationState.syncResult.source.kustomize.namePrefixNamePrefix is a prefix appended to resources for Kustomize apps
-
stringstatus.operationState.syncResult.source.kustomize.nameSuffixNameSuffix is a suffix appended to resources for Kustomize apps
-
stringstatus.operationState.syncResult.source.kustomize.namespaceNamespace sets the namespace that Kustomize adds to all resources
-
array of objectsstatus.operationState.syncResult.source.kustomize.patchesPatches is a list of Kustomize patches
-
objectstatus.operationState.syncResult.source.kustomize.patches.options
-
stringstatus.operationState.syncResult.source.kustomize.patches.patch
-
stringstatus.operationState.syncResult.source.kustomize.patches.path
-
objectstatus.operationState.syncResult.source.kustomize.patches.target
-
stringstatus.operationState.syncResult.source.kustomize.patches.target.annotationSelector
-
stringstatus.operationState.syncResult.source.kustomize.patches.target.group
-
stringstatus.operationState.syncResult.source.kustomize.patches.target.kind
-
stringstatus.operationState.syncResult.source.kustomize.patches.target.labelSelector
-
stringstatus.operationState.syncResult.source.kustomize.patches.target.name
-
stringstatus.operationState.syncResult.source.kustomize.patches.target.namespace
-
stringstatus.operationState.syncResult.source.kustomize.patches.target.version
-
-
-
array of objectsstatus.operationState.syncResult.source.kustomize.replicasReplicas is a list of Kustomize Replicas override specifications
-
integer or stringstatus.operationState.syncResult.source.kustomize.replicas.countNumber of replicas
-
stringstatus.operationState.syncResult.source.kustomize.replicas.nameName of Deployment or StatefulSet
-
-
stringstatus.operationState.syncResult.source.kustomize.versionVersion controls which version of Kustomize to use for rendering manifests
-
-
stringstatus.operationState.syncResult.source.nameName is used to refer to a source and is displayed in the UI. It is used in multi-source Applications.
-
stringstatus.operationState.syncResult.source.pathPath is a directory path within the Git repository, and is only valid for applications sourced from Git.
-
objectstatus.operationState.syncResult.source.pluginPlugin holds config management plugin specific options
-
array of objectsstatus.operationState.syncResult.source.plugin.envEnv is a list of environment variable entries
-
stringstatus.operationState.syncResult.source.plugin.env.nameName is the name of the variable, usually expressed in uppercase
-
stringstatus.operationState.syncResult.source.plugin.env.valueValue is the value of the variable
-
-
stringstatus.operationState.syncResult.source.plugin.name
-
array of objectsstatus.operationState.syncResult.source.plugin.parameters
-
array of stringsstatus.operationState.syncResult.source.plugin.parameters.arrayArray is the value of an array type parameter.
-
objectstatus.operationState.syncResult.source.plugin.parameters.mapMap is the value of a map type parameter.
-
stringstatus.operationState.syncResult.source.plugin.parameters.nameName is the name identifying a parameter.
-
stringstatus.operationState.syncResult.source.plugin.parameters.stringString_ is the value of a string type parameter.
-
-
-
stringstatus.operationState.syncResult.source.refRef is reference to another source within sources field. This field will not be used if used with a
sourcetag. -
stringstatus.operationState.syncResult.source.repoURL
Required value
RepoURL is the URL to the repository (Git or Helm) that contains the application manifests -
stringstatus.operationState.syncResult.source.targetRevisionTargetRevision defines the revision of the source to sync the application to. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD. In case of Helm, this is a semver tag for the Chart’s version.
-
-
array of objectsstatus.operationState.syncResult.sourcesSource records the application source information of the sync, used for comparing auto-sync
-
stringstatus.operationState.syncResult.sources.chartChart is a Helm chart name, and must be specified for applications sourced from a Helm repo.
-
objectstatus.operationState.syncResult.sources.directoryDirectory holds path/directory specific options
-
stringstatus.operationState.syncResult.sources.directory.excludeExclude contains a glob pattern to match paths against that should be explicitly excluded from being used during manifest generation
-
stringstatus.operationState.syncResult.sources.directory.includeInclude contains a glob pattern to match paths against that should be explicitly included during manifest generation
-
objectstatus.operationState.syncResult.sources.directory.jsonnetJsonnet holds options specific to Jsonnet
-
array of objectsstatus.operationState.syncResult.sources.directory.jsonnet.extVarsExtVars is a list of Jsonnet External Variables
-
booleanstatus.operationState.syncResult.sources.directory.jsonnet.extVars.code
-
stringstatus.operationState.syncResult.sources.directory.jsonnet.extVars.name
-
stringstatus.operationState.syncResult.sources.directory.jsonnet.extVars.value
-
-
array of stringsstatus.operationState.syncResult.sources.directory.jsonnet.libsAdditional library search dirs
-
array of objectsstatus.operationState.syncResult.sources.directory.jsonnet.tlasTLAS is a list of Jsonnet Top-level Arguments
-
booleanstatus.operationState.syncResult.sources.directory.jsonnet.tlas.code
-
stringstatus.operationState.syncResult.sources.directory.jsonnet.tlas.name
-
stringstatus.operationState.syncResult.sources.directory.jsonnet.tlas.value
-
-
-
booleanstatus.operationState.syncResult.sources.directory.recurseRecurse specifies whether to scan a directory recursively for manifests
-
-
objectstatus.operationState.syncResult.sources.helmHelm holds helm specific options
-
array of stringsstatus.operationState.syncResult.sources.helm.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
array of objectsstatus.operationState.syncResult.sources.helm.fileParametersFileParameters are file parameters to the helm template
-
stringstatus.operationState.syncResult.sources.helm.fileParameters.nameName is the name of the Helm parameter
-
stringstatus.operationState.syncResult.sources.helm.fileParameters.pathPath is the path to the file containing the values for the Helm parameter
-
-
booleanstatus.operationState.syncResult.sources.helm.ignoreMissingValueFilesIgnoreMissingValueFiles prevents helm template from failing when valueFiles do not exist locally by not appending them to helm template –values
-
stringstatus.operationState.syncResult.sources.helm.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
stringstatus.operationState.syncResult.sources.helm.namespaceNamespace is an optional namespace to template with. If left empty, defaults to the app’s destination namespace.
-
array of objectsstatus.operationState.syncResult.sources.helm.parametersParameters is a list of Helm parameters which are passed to the helm template command upon manifest generation
-
booleanstatus.operationState.syncResult.sources.helm.parameters.forceStringForceString determines whether to tell Helm to interpret booleans and numbers as strings
-
stringstatus.operationState.syncResult.sources.helm.parameters.nameName is the name of the Helm parameter
-
stringstatus.operationState.syncResult.sources.helm.parameters.valueValue is the value for the Helm parameter
-
-
booleanstatus.operationState.syncResult.sources.helm.passCredentialsPassCredentials pass credentials to all domains (Helm’s –pass-credentials)
-
stringstatus.operationState.syncResult.sources.helm.releaseNameReleaseName is the Helm release name to use. If omitted it will use the application name
-
booleanstatus.operationState.syncResult.sources.helm.skipCrdsSkipCrds skips custom resource definition installation step (Helm’s –skip-crds)
-
booleanstatus.operationState.syncResult.sources.helm.skipSchemaValidationSkipSchemaValidation skips JSON schema validation (Helm’s –skip-schema-validation)
-
booleanstatus.operationState.syncResult.sources.helm.skipTestsSkipTests skips test manifest installation step (Helm’s –skip-tests).
-
array of stringsstatus.operationState.syncResult.sources.helm.valueFilesValuesFiles is a list of Helm value files to use when generating a template
-
stringstatus.operationState.syncResult.sources.helm.valuesValues specifies Helm values to be passed to helm template, typically defined as a block. ValuesObject takes precedence over Values, so use one or the other.
-
objectstatus.operationState.syncResult.sources.helm.valuesObjectValuesObject specifies Helm values to be passed to helm template, defined as a map. This takes precedence over Values.
-
stringstatus.operationState.syncResult.sources.helm.versionVersion is the Helm version to use for templating (“3”)
-
-
objectstatus.operationState.syncResult.sources.kustomizeKustomize holds kustomize specific options
-
array of stringsstatus.operationState.syncResult.sources.kustomize.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
objectstatus.operationState.syncResult.sources.kustomize.commonAnnotationsCommonAnnotations is a list of additional annotations to add to rendered manifests
-
booleanstatus.operationState.syncResult.sources.kustomize.commonAnnotationsEnvsubstCommonAnnotationsEnvsubst specifies whether to apply env variables substitution for annotation values
-
objectstatus.operationState.syncResult.sources.kustomize.commonLabelsCommonLabels is a list of additional labels to add to rendered manifests
-
array of stringsstatus.operationState.syncResult.sources.kustomize.componentsComponents specifies a list of kustomize components to add to the kustomization before building
-
booleanstatus.operationState.syncResult.sources.kustomize.forceCommonAnnotationsForceCommonAnnotations specifies whether to force applying common annotations to resources for Kustomize apps
-
booleanstatus.operationState.syncResult.sources.kustomize.forceCommonLabelsForceCommonLabels specifies whether to force applying common labels to resources for Kustomize apps
-
booleanstatus.operationState.syncResult.sources.kustomize.ignoreMissingComponentsIgnoreMissingComponents prevents kustomize from failing when components do not exist locally by not appending them to kustomization file
-
array of stringsstatus.operationState.syncResult.sources.kustomize.imagesImages is a list of Kustomize image override specifications
-
stringstatus.operationState.syncResult.sources.kustomize.images.Element of the arrayKustomizeImage represents a Kustomize image definition in the format [old_image_name=]<image_name>:<image_tag>
-
-
stringstatus.operationState.syncResult.sources.kustomize.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
booleanstatus.operationState.syncResult.sources.kustomize.labelIncludeTemplatesLabelIncludeTemplates specifies whether to apply common labels to resource templates or not
-
booleanstatus.operationState.syncResult.sources.kustomize.labelWithoutSelectorLabelWithoutSelector specifies whether to apply common labels to resource selectors or not
-
stringstatus.operationState.syncResult.sources.kustomize.namePrefixNamePrefix is a prefix appended to resources for Kustomize apps
-
stringstatus.operationState.syncResult.sources.kustomize.nameSuffixNameSuffix is a suffix appended to resources for Kustomize apps
-
stringstatus.operationState.syncResult.sources.kustomize.namespaceNamespace sets the namespace that Kustomize adds to all resources
-
array of objectsstatus.operationState.syncResult.sources.kustomize.patchesPatches is a list of Kustomize patches
-
objectstatus.operationState.syncResult.sources.kustomize.patches.options
-
stringstatus.operationState.syncResult.sources.kustomize.patches.patch
-
stringstatus.operationState.syncResult.sources.kustomize.patches.path
-
objectstatus.operationState.syncResult.sources.kustomize.patches.target
-
stringstatus.operationState.syncResult.sources.kustomize.patches.target.annotationSelector
-
stringstatus.operationState.syncResult.sources.kustomize.patches.target.group
-
stringstatus.operationState.syncResult.sources.kustomize.patches.target.kind
-
stringstatus.operationState.syncResult.sources.kustomize.patches.target.labelSelector
-
stringstatus.operationState.syncResult.sources.kustomize.patches.target.name
-
stringstatus.operationState.syncResult.sources.kustomize.patches.target.namespace
-
stringstatus.operationState.syncResult.sources.kustomize.patches.target.version
-
-
-
array of objectsstatus.operationState.syncResult.sources.kustomize.replicasReplicas is a list of Kustomize Replicas override specifications
-
integer or stringstatus.operationState.syncResult.sources.kustomize.replicas.countNumber of replicas
-
stringstatus.operationState.syncResult.sources.kustomize.replicas.nameName of Deployment or StatefulSet
-
-
stringstatus.operationState.syncResult.sources.kustomize.versionVersion controls which version of Kustomize to use for rendering manifests
-
-
stringstatus.operationState.syncResult.sources.nameName is used to refer to a source and is displayed in the UI. It is used in multi-source Applications.
-
stringstatus.operationState.syncResult.sources.pathPath is a directory path within the Git repository, and is only valid for applications sourced from Git.
-
objectstatus.operationState.syncResult.sources.pluginPlugin holds config management plugin specific options
-
array of objectsstatus.operationState.syncResult.sources.plugin.envEnv is a list of environment variable entries
-
stringstatus.operationState.syncResult.sources.plugin.env.nameName is the name of the variable, usually expressed in uppercase
-
stringstatus.operationState.syncResult.sources.plugin.env.valueValue is the value of the variable
-
-
stringstatus.operationState.syncResult.sources.plugin.name
-
array of objectsstatus.operationState.syncResult.sources.plugin.parameters
-
array of stringsstatus.operationState.syncResult.sources.plugin.parameters.arrayArray is the value of an array type parameter.
-
objectstatus.operationState.syncResult.sources.plugin.parameters.mapMap is the value of a map type parameter.
-
stringstatus.operationState.syncResult.sources.plugin.parameters.nameName is the name identifying a parameter.
-
stringstatus.operationState.syncResult.sources.plugin.parameters.stringString_ is the value of a string type parameter.
-
-
-
stringstatus.operationState.syncResult.sources.refRef is reference to another source within sources field. This field will not be used if used with a
sourcetag. -
stringstatus.operationState.syncResult.sources.repoURLRepoURL is the URL to the repository (Git or Helm) that contains the application manifests
-
stringstatus.operationState.syncResult.sources.targetRevisionTargetRevision defines the revision of the source to sync the application to. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD. In case of Helm, this is a semver tag for the Chart’s version.
-
-
-
-
stringstatus.reconciledAtReconciledAt indicates when the application state was reconciled using the latest git version
-
stringstatus.resourceHealthSourceResourceHealthSource indicates where the resource health status is stored: inline if not set or appTree
-
array of objectsstatus.resourcesResources is a list of Kubernetes resources managed by this application
-
stringstatus.resources.groupGroup represents the API group of the resource (e.g., “apps” for Deployments).
-
objectstatus.resources.healthHealth indicates the health status of the resource (e.g., Healthy, Degraded, Progressing).
-
stringstatus.resources.health.lastTransitionTime
LastTransitionTime is the time the HealthStatus was set or updated
Deprecated: this field is not used and will be removed in a future release.
-
stringstatus.resources.health.messageMessage is a human-readable informational message describing the health status
-
stringstatus.resources.health.statusStatus holds the status code of the resource
-
-
booleanstatus.resources.hookHook is true if the resource is used as a lifecycle hook in an Argo CD application.
-
stringstatus.resources.kindKind specifies the type of the resource (e.g., “Deployment”, “Service”).
-
stringstatus.resources.nameName is the unique name of the resource within the namespace.
-
stringstatus.resources.namespaceNamespace defines the Kubernetes namespace where the resource is located.
-
booleanstatus.resources.requiresDeletionConfirmationRequiresDeletionConfirmation is true if the resource requires explicit user confirmation before deletion.
-
booleanstatus.resources.requiresPruningRequiresPruning is true if the resource needs to be pruned (deleted) as part of synchronization.
-
stringstatus.resources.statusStatus represents the synchronization state of the resource (e.g., Synced, OutOfSync).
-
integerstatus.resources.syncWaveSyncWave determines the order in which resources are applied during a sync operation. Lower values are applied first.
-
stringstatus.resources.versionVersion indicates the API version of the resource (e.g., “v1”, “v1beta1”).
-
-
objectstatus.sourceHydratorSourceHydrator stores information about the current state of source hydration
-
objectstatus.sourceHydrator.currentOperationCurrentOperation holds the status of the hydrate operation
-
stringstatus.sourceHydrator.currentOperation.drySHADrySHA holds the resolved revision (sha) of the dry source as of the most recent reconciliation
-
stringstatus.sourceHydrator.currentOperation.finishedAtFinishedAt indicates when the hydrate operation finished
-
stringstatus.sourceHydrator.currentOperation.hydratedSHAHydratedSHA holds the resolved revision (sha) of the hydrated source as of the most recent reconciliation
-
stringstatus.sourceHydrator.currentOperation.message
Required value
Message contains a message describing the current status of the hydrate operation -
stringstatus.sourceHydrator.currentOperation.phase
Required value
Phase indicates the status of the hydrate operationAllowed values:
Hydrating,Failed,Hydrated -
objectstatus.sourceHydrator.currentOperation.sourceHydratorSourceHydrator holds the hydrator config used for the hydrate operation
-
objectstatus.sourceHydrator.currentOperation.sourceHydrator.drySource
Required value
DrySource specifies where the dry “don’t repeat yourself” manifest source lives.-
stringstatus.sourceHydrator.currentOperation.sourceHydrator.drySource.path
Required value
Path is a directory path within the Git repository where the manifests are located -
stringstatus.sourceHydrator.currentOperation.sourceHydrator.drySource.repoURL
Required value
RepoURL is the URL to the git repository that contains the application manifests -
stringstatus.sourceHydrator.currentOperation.sourceHydrator.drySource.targetRevision
Required value
TargetRevision defines the revision of the source to hydrate
-
-
objectstatus.sourceHydrator.currentOperation.sourceHydrator.hydrateToHydrateTo specifies an optional “staging” location to push hydrated manifests to. An external system would then have to move manifests to the SyncSource, e.g. by pull request.
-
stringstatus.sourceHydrator.currentOperation.sourceHydrator.hydrateTo.targetBranch
Required value
TargetBranch is the branch to which hydrated manifests should be committed
-
-
objectstatus.sourceHydrator.currentOperation.sourceHydrator.syncSource
Required value
SyncSource specifies where to sync hydrated manifests from.-
stringstatus.sourceHydrator.currentOperation.sourceHydrator.syncSource.path
Required value
Path is a directory path within the git repository where hydrated manifests should be committed to and synced from. If hydrateTo is set, this is just the path from which hydrated manifests will be synced. -
stringstatus.sourceHydrator.currentOperation.sourceHydrator.syncSource.targetBranch
Required value
TargetBranch is the branch to which hydrated manifests should be committed
-
-
-
stringstatus.sourceHydrator.currentOperation.startedAtStartedAt indicates when the hydrate operation started
-
-
objectstatus.sourceHydrator.lastSuccessfulOperationLastSuccessfulOperation holds info about the most recent successful hydration
-
stringstatus.sourceHydrator.lastSuccessfulOperation.drySHADrySHA holds the resolved revision (sha) of the dry source as of the most recent reconciliation
-
stringstatus.sourceHydrator.lastSuccessfulOperation.hydratedSHAHydratedSHA holds the resolved revision (sha) of the hydrated source as of the most recent reconciliation
-
objectstatus.sourceHydrator.lastSuccessfulOperation.sourceHydratorSourceHydrator holds the hydrator config used for the hydrate operation
-
objectstatus.sourceHydrator.lastSuccessfulOperation.sourceHydrator.drySource
Required value
DrySource specifies where the dry “don’t repeat yourself” manifest source lives.-
stringstatus.sourceHydrator.lastSuccessfulOperation.sourceHydrator.drySource.path
Required value
Path is a directory path within the Git repository where the manifests are located -
stringstatus.sourceHydrator.lastSuccessfulOperation.sourceHydrator.drySource.repoURL
Required value
RepoURL is the URL to the git repository that contains the application manifests -
stringstatus.sourceHydrator.lastSuccessfulOperation.sourceHydrator.drySource.targetRevision
Required value
TargetRevision defines the revision of the source to hydrate
-
-
objectstatus.sourceHydrator.lastSuccessfulOperation.sourceHydrator.hydrateToHydrateTo specifies an optional “staging” location to push hydrated manifests to. An external system would then have to move manifests to the SyncSource, e.g. by pull request.
-
stringstatus.sourceHydrator.lastSuccessfulOperation.sourceHydrator.hydrateTo.targetBranch
Required value
TargetBranch is the branch to which hydrated manifests should be committed
-
-
objectstatus.sourceHydrator.lastSuccessfulOperation.sourceHydrator.syncSource
Required value
SyncSource specifies where to sync hydrated manifests from.-
stringstatus.sourceHydrator.lastSuccessfulOperation.sourceHydrator.syncSource.path
Required value
Path is a directory path within the git repository where hydrated manifests should be committed to and synced from. If hydrateTo is set, this is just the path from which hydrated manifests will be synced. -
stringstatus.sourceHydrator.lastSuccessfulOperation.sourceHydrator.syncSource.targetBranch
Required value
TargetBranch is the branch to which hydrated manifests should be committed
-
-
-
-
-
stringstatus.sourceTypeSourceType specifies the type of this application
-
array of stringsstatus.sourceTypesSourceTypes specifies the type of the sources included in the application
-
stringstatus.sourceTypes.Element of the arrayApplicationSourceType specifies the type of the application’s source
-
-
objectstatus.summarySummary contains a list of URLs and container images used by this application
-
array of stringsstatus.summary.externalURLsExternalURLs holds all external URLs of application child resources.
-
array of stringsstatus.summary.imagesImages holds all images of application child resources.
-
-
objectstatus.syncSync contains information about the application’s current sync status
-
objectstatus.sync.comparedToComparedTo contains information about what has been compared
-
objectstatus.sync.comparedTo.destination
Required value
Destination is a reference to the application’s destination used for comparison-
stringstatus.sync.comparedTo.destination.nameName is an alternate way of specifying the target cluster by its symbolic name. This must be set if Server is not set.
-
stringstatus.sync.comparedTo.destination.namespaceNamespace specifies the target namespace for the application’s resources. The namespace will only be set for namespace-scoped resources that have not set a value for .metadata.namespace
-
stringstatus.sync.comparedTo.destination.serverServer specifies the URL of the target cluster’s Kubernetes control plane API. This must be set if Name is not set.
-
-
array of objectsstatus.sync.comparedTo.ignoreDifferencesIgnoreDifferences is a reference to the application’s ignored differences used for comparison
-
stringstatus.sync.comparedTo.ignoreDifferences.group
-
array of stringsstatus.sync.comparedTo.ignoreDifferences.jqPathExpressions
-
array of stringsstatus.sync.comparedTo.ignoreDifferences.jsonPointers
-
stringstatus.sync.comparedTo.ignoreDifferences.kind
-
array of stringsstatus.sync.comparedTo.ignoreDifferences.managedFieldsManagersManagedFieldsManagers is a list of trusted managers. Fields mutated by those managers will take precedence over the desired state defined in the SCM and won’t be displayed in diffs
-
stringstatus.sync.comparedTo.ignoreDifferences.name
-
stringstatus.sync.comparedTo.ignoreDifferences.namespace
-
-
objectstatus.sync.comparedTo.sourceSource is a reference to the application’s source used for comparison
-
stringstatus.sync.comparedTo.source.chartChart is a Helm chart name, and must be specified for applications sourced from a Helm repo.
-
objectstatus.sync.comparedTo.source.directoryDirectory holds path/directory specific options
-
stringstatus.sync.comparedTo.source.directory.excludeExclude contains a glob pattern to match paths against that should be explicitly excluded from being used during manifest generation
-
stringstatus.sync.comparedTo.source.directory.includeInclude contains a glob pattern to match paths against that should be explicitly included during manifest generation
-
objectstatus.sync.comparedTo.source.directory.jsonnetJsonnet holds options specific to Jsonnet
-
array of objectsstatus.sync.comparedTo.source.directory.jsonnet.extVarsExtVars is a list of Jsonnet External Variables
-
booleanstatus.sync.comparedTo.source.directory.jsonnet.extVars.code
-
stringstatus.sync.comparedTo.source.directory.jsonnet.extVars.name
-
stringstatus.sync.comparedTo.source.directory.jsonnet.extVars.value
-
-
array of stringsstatus.sync.comparedTo.source.directory.jsonnet.libsAdditional library search dirs
-
array of objectsstatus.sync.comparedTo.source.directory.jsonnet.tlasTLAS is a list of Jsonnet Top-level Arguments
-
booleanstatus.sync.comparedTo.source.directory.jsonnet.tlas.code
-
stringstatus.sync.comparedTo.source.directory.jsonnet.tlas.name
-
stringstatus.sync.comparedTo.source.directory.jsonnet.tlas.value
-
-
-
booleanstatus.sync.comparedTo.source.directory.recurseRecurse specifies whether to scan a directory recursively for manifests
-
-
objectstatus.sync.comparedTo.source.helmHelm holds helm specific options
-
array of stringsstatus.sync.comparedTo.source.helm.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
array of objectsstatus.sync.comparedTo.source.helm.fileParametersFileParameters are file parameters to the helm template
-
stringstatus.sync.comparedTo.source.helm.fileParameters.nameName is the name of the Helm parameter
-
stringstatus.sync.comparedTo.source.helm.fileParameters.pathPath is the path to the file containing the values for the Helm parameter
-
-
booleanstatus.sync.comparedTo.source.helm.ignoreMissingValueFilesIgnoreMissingValueFiles prevents helm template from failing when valueFiles do not exist locally by not appending them to helm template –values
-
stringstatus.sync.comparedTo.source.helm.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
stringstatus.sync.comparedTo.source.helm.namespaceNamespace is an optional namespace to template with. If left empty, defaults to the app’s destination namespace.
-
array of objectsstatus.sync.comparedTo.source.helm.parametersParameters is a list of Helm parameters which are passed to the helm template command upon manifest generation
-
booleanstatus.sync.comparedTo.source.helm.parameters.forceStringForceString determines whether to tell Helm to interpret booleans and numbers as strings
-
stringstatus.sync.comparedTo.source.helm.parameters.nameName is the name of the Helm parameter
-
stringstatus.sync.comparedTo.source.helm.parameters.valueValue is the value for the Helm parameter
-
-
booleanstatus.sync.comparedTo.source.helm.passCredentialsPassCredentials pass credentials to all domains (Helm’s –pass-credentials)
-
stringstatus.sync.comparedTo.source.helm.releaseNameReleaseName is the Helm release name to use. If omitted it will use the application name
-
booleanstatus.sync.comparedTo.source.helm.skipCrdsSkipCrds skips custom resource definition installation step (Helm’s –skip-crds)
-
booleanstatus.sync.comparedTo.source.helm.skipSchemaValidationSkipSchemaValidation skips JSON schema validation (Helm’s –skip-schema-validation)
-
booleanstatus.sync.comparedTo.source.helm.skipTestsSkipTests skips test manifest installation step (Helm’s –skip-tests).
-
array of stringsstatus.sync.comparedTo.source.helm.valueFilesValuesFiles is a list of Helm value files to use when generating a template
-
stringstatus.sync.comparedTo.source.helm.valuesValues specifies Helm values to be passed to helm template, typically defined as a block. ValuesObject takes precedence over Values, so use one or the other.
-
objectstatus.sync.comparedTo.source.helm.valuesObjectValuesObject specifies Helm values to be passed to helm template, defined as a map. This takes precedence over Values.
-
stringstatus.sync.comparedTo.source.helm.versionVersion is the Helm version to use for templating (“3”)
-
-
objectstatus.sync.comparedTo.source.kustomizeKustomize holds kustomize specific options
-
array of stringsstatus.sync.comparedTo.source.kustomize.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
objectstatus.sync.comparedTo.source.kustomize.commonAnnotationsCommonAnnotations is a list of additional annotations to add to rendered manifests
-
booleanstatus.sync.comparedTo.source.kustomize.commonAnnotationsEnvsubstCommonAnnotationsEnvsubst specifies whether to apply env variables substitution for annotation values
-
objectstatus.sync.comparedTo.source.kustomize.commonLabelsCommonLabels is a list of additional labels to add to rendered manifests
-
array of stringsstatus.sync.comparedTo.source.kustomize.componentsComponents specifies a list of kustomize components to add to the kustomization before building
-
booleanstatus.sync.comparedTo.source.kustomize.forceCommonAnnotationsForceCommonAnnotations specifies whether to force applying common annotations to resources for Kustomize apps
-
booleanstatus.sync.comparedTo.source.kustomize.forceCommonLabelsForceCommonLabels specifies whether to force applying common labels to resources for Kustomize apps
-
booleanstatus.sync.comparedTo.source.kustomize.ignoreMissingComponentsIgnoreMissingComponents prevents kustomize from failing when components do not exist locally by not appending them to kustomization file
-
array of stringsstatus.sync.comparedTo.source.kustomize.imagesImages is a list of Kustomize image override specifications
-
stringstatus.sync.comparedTo.source.kustomize.images.Element of the arrayKustomizeImage represents a Kustomize image definition in the format [old_image_name=]<image_name>:<image_tag>
-
-
stringstatus.sync.comparedTo.source.kustomize.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
booleanstatus.sync.comparedTo.source.kustomize.labelIncludeTemplatesLabelIncludeTemplates specifies whether to apply common labels to resource templates or not
-
booleanstatus.sync.comparedTo.source.kustomize.labelWithoutSelectorLabelWithoutSelector specifies whether to apply common labels to resource selectors or not
-
stringstatus.sync.comparedTo.source.kustomize.namePrefixNamePrefix is a prefix appended to resources for Kustomize apps
-
stringstatus.sync.comparedTo.source.kustomize.nameSuffixNameSuffix is a suffix appended to resources for Kustomize apps
-
stringstatus.sync.comparedTo.source.kustomize.namespaceNamespace sets the namespace that Kustomize adds to all resources
-
array of objectsstatus.sync.comparedTo.source.kustomize.patchesPatches is a list of Kustomize patches
-
objectstatus.sync.comparedTo.source.kustomize.patches.options
-
stringstatus.sync.comparedTo.source.kustomize.patches.patch
-
stringstatus.sync.comparedTo.source.kustomize.patches.path
-
objectstatus.sync.comparedTo.source.kustomize.patches.target
-
stringstatus.sync.comparedTo.source.kustomize.patches.target.annotationSelector
-
stringstatus.sync.comparedTo.source.kustomize.patches.target.group
-
stringstatus.sync.comparedTo.source.kustomize.patches.target.kind
-
stringstatus.sync.comparedTo.source.kustomize.patches.target.labelSelector
-
stringstatus.sync.comparedTo.source.kustomize.patches.target.name
-
stringstatus.sync.comparedTo.source.kustomize.patches.target.namespace
-
stringstatus.sync.comparedTo.source.kustomize.patches.target.version
-
-
-
array of objectsstatus.sync.comparedTo.source.kustomize.replicasReplicas is a list of Kustomize Replicas override specifications
-
integer or stringstatus.sync.comparedTo.source.kustomize.replicas.countNumber of replicas
-
stringstatus.sync.comparedTo.source.kustomize.replicas.nameName of Deployment or StatefulSet
-
-
stringstatus.sync.comparedTo.source.kustomize.versionVersion controls which version of Kustomize to use for rendering manifests
-
-
stringstatus.sync.comparedTo.source.nameName is used to refer to a source and is displayed in the UI. It is used in multi-source Applications.
-
stringstatus.sync.comparedTo.source.pathPath is a directory path within the Git repository, and is only valid for applications sourced from Git.
-
objectstatus.sync.comparedTo.source.pluginPlugin holds config management plugin specific options
-
array of objectsstatus.sync.comparedTo.source.plugin.envEnv is a list of environment variable entries
-
stringstatus.sync.comparedTo.source.plugin.env.nameName is the name of the variable, usually expressed in uppercase
-
stringstatus.sync.comparedTo.source.plugin.env.valueValue is the value of the variable
-
-
stringstatus.sync.comparedTo.source.plugin.name
-
array of objectsstatus.sync.comparedTo.source.plugin.parameters
-
array of stringsstatus.sync.comparedTo.source.plugin.parameters.arrayArray is the value of an array type parameter.
-
objectstatus.sync.comparedTo.source.plugin.parameters.mapMap is the value of a map type parameter.
-
stringstatus.sync.comparedTo.source.plugin.parameters.nameName is the name identifying a parameter.
-
stringstatus.sync.comparedTo.source.plugin.parameters.stringString_ is the value of a string type parameter.
-
-
-
stringstatus.sync.comparedTo.source.refRef is reference to another source within sources field. This field will not be used if used with a
sourcetag. -
stringstatus.sync.comparedTo.source.repoURL
Required value
RepoURL is the URL to the repository (Git or Helm) that contains the application manifests -
stringstatus.sync.comparedTo.source.targetRevisionTargetRevision defines the revision of the source to sync the application to. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD. In case of Helm, this is a semver tag for the Chart’s version.
-
-
array of objectsstatus.sync.comparedTo.sourcesSources is a reference to the application’s multiple sources used for comparison
-
stringstatus.sync.comparedTo.sources.chartChart is a Helm chart name, and must be specified for applications sourced from a Helm repo.
-
objectstatus.sync.comparedTo.sources.directoryDirectory holds path/directory specific options
-
stringstatus.sync.comparedTo.sources.directory.excludeExclude contains a glob pattern to match paths against that should be explicitly excluded from being used during manifest generation
-
stringstatus.sync.comparedTo.sources.directory.includeInclude contains a glob pattern to match paths against that should be explicitly included during manifest generation
-
objectstatus.sync.comparedTo.sources.directory.jsonnetJsonnet holds options specific to Jsonnet
-
array of objectsstatus.sync.comparedTo.sources.directory.jsonnet.extVarsExtVars is a list of Jsonnet External Variables
-
booleanstatus.sync.comparedTo.sources.directory.jsonnet.extVars.code
-
stringstatus.sync.comparedTo.sources.directory.jsonnet.extVars.name
-
stringstatus.sync.comparedTo.sources.directory.jsonnet.extVars.value
-
-
array of stringsstatus.sync.comparedTo.sources.directory.jsonnet.libsAdditional library search dirs
-
array of objectsstatus.sync.comparedTo.sources.directory.jsonnet.tlasTLAS is a list of Jsonnet Top-level Arguments
-
booleanstatus.sync.comparedTo.sources.directory.jsonnet.tlas.code
-
stringstatus.sync.comparedTo.sources.directory.jsonnet.tlas.name
-
stringstatus.sync.comparedTo.sources.directory.jsonnet.tlas.value
-
-
-
booleanstatus.sync.comparedTo.sources.directory.recurseRecurse specifies whether to scan a directory recursively for manifests
-
-
objectstatus.sync.comparedTo.sources.helmHelm holds helm specific options
-
array of stringsstatus.sync.comparedTo.sources.helm.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
array of objectsstatus.sync.comparedTo.sources.helm.fileParametersFileParameters are file parameters to the helm template
-
stringstatus.sync.comparedTo.sources.helm.fileParameters.nameName is the name of the Helm parameter
-
stringstatus.sync.comparedTo.sources.helm.fileParameters.pathPath is the path to the file containing the values for the Helm parameter
-
-
booleanstatus.sync.comparedTo.sources.helm.ignoreMissingValueFilesIgnoreMissingValueFiles prevents helm template from failing when valueFiles do not exist locally by not appending them to helm template –values
-
stringstatus.sync.comparedTo.sources.helm.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
stringstatus.sync.comparedTo.sources.helm.namespaceNamespace is an optional namespace to template with. If left empty, defaults to the app’s destination namespace.
-
array of objectsstatus.sync.comparedTo.sources.helm.parametersParameters is a list of Helm parameters which are passed to the helm template command upon manifest generation
-
booleanstatus.sync.comparedTo.sources.helm.parameters.forceStringForceString determines whether to tell Helm to interpret booleans and numbers as strings
-
stringstatus.sync.comparedTo.sources.helm.parameters.nameName is the name of the Helm parameter
-
stringstatus.sync.comparedTo.sources.helm.parameters.valueValue is the value for the Helm parameter
-
-
booleanstatus.sync.comparedTo.sources.helm.passCredentialsPassCredentials pass credentials to all domains (Helm’s –pass-credentials)
-
stringstatus.sync.comparedTo.sources.helm.releaseNameReleaseName is the Helm release name to use. If omitted it will use the application name
-
booleanstatus.sync.comparedTo.sources.helm.skipCrdsSkipCrds skips custom resource definition installation step (Helm’s –skip-crds)
-
booleanstatus.sync.comparedTo.sources.helm.skipSchemaValidationSkipSchemaValidation skips JSON schema validation (Helm’s –skip-schema-validation)
-
booleanstatus.sync.comparedTo.sources.helm.skipTestsSkipTests skips test manifest installation step (Helm’s –skip-tests).
-
array of stringsstatus.sync.comparedTo.sources.helm.valueFilesValuesFiles is a list of Helm value files to use when generating a template
-
stringstatus.sync.comparedTo.sources.helm.valuesValues specifies Helm values to be passed to helm template, typically defined as a block. ValuesObject takes precedence over Values, so use one or the other.
-
objectstatus.sync.comparedTo.sources.helm.valuesObjectValuesObject specifies Helm values to be passed to helm template, defined as a map. This takes precedence over Values.
-
stringstatus.sync.comparedTo.sources.helm.versionVersion is the Helm version to use for templating (“3”)
-
-
objectstatus.sync.comparedTo.sources.kustomizeKustomize holds kustomize specific options
-
array of stringsstatus.sync.comparedTo.sources.kustomize.apiVersionsAPIVersions specifies the Kubernetes resource API versions to pass to Helm when templating manifests. By default, Argo CD uses the API versions of the target cluster. The format is [group/]version/kind.
-
objectstatus.sync.comparedTo.sources.kustomize.commonAnnotationsCommonAnnotations is a list of additional annotations to add to rendered manifests
-
booleanstatus.sync.comparedTo.sources.kustomize.commonAnnotationsEnvsubstCommonAnnotationsEnvsubst specifies whether to apply env variables substitution for annotation values
-
objectstatus.sync.comparedTo.sources.kustomize.commonLabelsCommonLabels is a list of additional labels to add to rendered manifests
-
array of stringsstatus.sync.comparedTo.sources.kustomize.componentsComponents specifies a list of kustomize components to add to the kustomization before building
-
booleanstatus.sync.comparedTo.sources.kustomize.forceCommonAnnotationsForceCommonAnnotations specifies whether to force applying common annotations to resources for Kustomize apps
-
booleanstatus.sync.comparedTo.sources.kustomize.forceCommonLabelsForceCommonLabels specifies whether to force applying common labels to resources for Kustomize apps
-
booleanstatus.sync.comparedTo.sources.kustomize.ignoreMissingComponentsIgnoreMissingComponents prevents kustomize from failing when components do not exist locally by not appending them to kustomization file
-
array of stringsstatus.sync.comparedTo.sources.kustomize.imagesImages is a list of Kustomize image override specifications
-
stringstatus.sync.comparedTo.sources.kustomize.images.Element of the arrayKustomizeImage represents a Kustomize image definition in the format [old_image_name=]<image_name>:<image_tag>
-
-
stringstatus.sync.comparedTo.sources.kustomize.kubeVersionKubeVersion specifies the Kubernetes API version to pass to Helm when templating manifests. By default, Argo CD uses the Kubernetes version of the target cluster.
-
booleanstatus.sync.comparedTo.sources.kustomize.labelIncludeTemplatesLabelIncludeTemplates specifies whether to apply common labels to resource templates or not
-
booleanstatus.sync.comparedTo.sources.kustomize.labelWithoutSelectorLabelWithoutSelector specifies whether to apply common labels to resource selectors or not
-
stringstatus.sync.comparedTo.sources.kustomize.namePrefixNamePrefix is a prefix appended to resources for Kustomize apps
-
stringstatus.sync.comparedTo.sources.kustomize.nameSuffixNameSuffix is a suffix appended to resources for Kustomize apps
-
stringstatus.sync.comparedTo.sources.kustomize.namespaceNamespace sets the namespace that Kustomize adds to all resources
-
array of objectsstatus.sync.comparedTo.sources.kustomize.patchesPatches is a list of Kustomize patches
-
objectstatus.sync.comparedTo.sources.kustomize.patches.options
-
stringstatus.sync.comparedTo.sources.kustomize.patches.patch
-
stringstatus.sync.comparedTo.sources.kustomize.patches.path
-
objectstatus.sync.comparedTo.sources.kustomize.patches.target
-
stringstatus.sync.comparedTo.sources.kustomize.patches.target.annotationSelector
-
stringstatus.sync.comparedTo.sources.kustomize.patches.target.group
-
stringstatus.sync.comparedTo.sources.kustomize.patches.target.kind
-
stringstatus.sync.comparedTo.sources.kustomize.patches.target.labelSelector
-
stringstatus.sync.comparedTo.sources.kustomize.patches.target.name
-
stringstatus.sync.comparedTo.sources.kustomize.patches.target.namespace
-
stringstatus.sync.comparedTo.sources.kustomize.patches.target.version
-
-
-
array of objectsstatus.sync.comparedTo.sources.kustomize.replicasReplicas is a list of Kustomize Replicas override specifications
-
integer or stringstatus.sync.comparedTo.sources.kustomize.replicas.countNumber of replicas
-
stringstatus.sync.comparedTo.sources.kustomize.replicas.nameName of Deployment or StatefulSet
-
-
stringstatus.sync.comparedTo.sources.kustomize.versionVersion controls which version of Kustomize to use for rendering manifests
-
-
stringstatus.sync.comparedTo.sources.nameName is used to refer to a source and is displayed in the UI. It is used in multi-source Applications.
-
stringstatus.sync.comparedTo.sources.pathPath is a directory path within the Git repository, and is only valid for applications sourced from Git.
-
objectstatus.sync.comparedTo.sources.pluginPlugin holds config management plugin specific options
-
array of objectsstatus.sync.comparedTo.sources.plugin.envEnv is a list of environment variable entries
-
stringstatus.sync.comparedTo.sources.plugin.env.nameName is the name of the variable, usually expressed in uppercase
-
stringstatus.sync.comparedTo.sources.plugin.env.valueValue is the value of the variable
-
-
stringstatus.sync.comparedTo.sources.plugin.name
-
array of objectsstatus.sync.comparedTo.sources.plugin.parameters
-
array of stringsstatus.sync.comparedTo.sources.plugin.parameters.arrayArray is the value of an array type parameter.
-
objectstatus.sync.comparedTo.sources.plugin.parameters.mapMap is the value of a map type parameter.
-
stringstatus.sync.comparedTo.sources.plugin.parameters.nameName is the name identifying a parameter.
-
stringstatus.sync.comparedTo.sources.plugin.parameters.stringString_ is the value of a string type parameter.
-
-
-
stringstatus.sync.comparedTo.sources.refRef is reference to another source within sources field. This field will not be used if used with a
sourcetag. -
stringstatus.sync.comparedTo.sources.repoURLRepoURL is the URL to the repository (Git or Helm) that contains the application manifests
-
stringstatus.sync.comparedTo.sources.targetRevisionTargetRevision defines the revision of the source to sync the application to. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD. In case of Helm, this is a semver tag for the Chart’s version.
-
-
-
stringstatus.sync.revisionRevision contains information about the revision the comparison has been performed to
-
array of stringsstatus.sync.revisionsRevisions contains information about the revisions of multiple sources the comparison has been performed to
-
stringstatus.sync.status
Required value
Status is the sync state of the comparison
-
-
ApplicationSet
Scope: Namespaced
Version: v1alpha1
-
stringapiVersion
-
stringkind
-
objectmetadata
-
objectspec
-
booleanspec.applyNestedSelectors
-
array of objectsspec.generators
Required value
-
objectspec.generators.clusterDecisionResource
-
stringspec.generators.clusterDecisionResource.configMapRef
Required value
-
objectspec.generators.clusterDecisionResource.labelSelector
-
array of objectsspec.generators.clusterDecisionResource.labelSelector.matchExpressions
-
stringspec.generators.clusterDecisionResource.labelSelector.matchExpressions.key
-
stringspec.generators.clusterDecisionResource.labelSelector.matchExpressions.operator
-
array of stringsspec.generators.clusterDecisionResource.labelSelector.matchExpressions.values
-
-
objectspec.generators.clusterDecisionResource.labelSelector.matchLabels
-
-
stringspec.generators.clusterDecisionResource.name
-
integerspec.generators.clusterDecisionResource.requeueAfterSeconds
-
objectspec.generators.clusterDecisionResource.template
-
objectspec.generators.clusterDecisionResource.template.metadata
Required value
-
objectspec.generators.clusterDecisionResource.template.metadata.annotations
-
array of stringsspec.generators.clusterDecisionResource.template.metadata.finalizers
-
objectspec.generators.clusterDecisionResource.template.metadata.labels
-
stringspec.generators.clusterDecisionResource.template.metadata.name
-
stringspec.generators.clusterDecisionResource.template.metadata.namespace
-
-
objectspec.generators.clusterDecisionResource.template.spec
Required value
-
objectspec.generators.clusterDecisionResource.template.spec.destination
Required value
-
stringspec.generators.clusterDecisionResource.template.spec.destination.name
-
stringspec.generators.clusterDecisionResource.template.spec.destination.namespace
-
stringspec.generators.clusterDecisionResource.template.spec.destination.server
-
-
array of objectsspec.generators.clusterDecisionResource.template.spec.ignoreDifferences
-
stringspec.generators.clusterDecisionResource.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.clusterDecisionResource.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.clusterDecisionResource.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.clusterDecisionResource.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.clusterDecisionResource.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.clusterDecisionResource.template.spec.ignoreDifferences.name
-
stringspec.generators.clusterDecisionResource.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.clusterDecisionResource.template.spec.info
-
stringspec.generators.clusterDecisionResource.template.spec.info.name
-
stringspec.generators.clusterDecisionResource.template.spec.info.value
-
-
stringspec.generators.clusterDecisionResource.template.spec.project
Required value
-
integerspec.generators.clusterDecisionResource.template.spec.revisionHistoryLimit
-
objectspec.generators.clusterDecisionResource.template.spec.source
-
stringspec.generators.clusterDecisionResource.template.spec.source.chart
-
objectspec.generators.clusterDecisionResource.template.spec.source.directory
-
stringspec.generators.clusterDecisionResource.template.spec.source.directory.exclude
-
stringspec.generators.clusterDecisionResource.template.spec.source.directory.include
-
objectspec.generators.clusterDecisionResource.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.clusterDecisionResource.template.spec.source.directory.recurse
-
-
objectspec.generators.clusterDecisionResource.template.spec.source.helm
-
array of stringsspec.generators.clusterDecisionResource.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.clusterDecisionResource.template.spec.source.helm.fileParameters
-
stringspec.generators.clusterDecisionResource.template.spec.source.helm.fileParameters.name
-
stringspec.generators.clusterDecisionResource.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.clusterDecisionResource.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.clusterDecisionResource.template.spec.source.helm.kubeVersion
-
stringspec.generators.clusterDecisionResource.template.spec.source.helm.namespace
-
array of objectsspec.generators.clusterDecisionResource.template.spec.source.helm.parameters
-
booleanspec.generators.clusterDecisionResource.template.spec.source.helm.parameters.forceString
-
stringspec.generators.clusterDecisionResource.template.spec.source.helm.parameters.name
-
stringspec.generators.clusterDecisionResource.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.clusterDecisionResource.template.spec.source.helm.passCredentials
-
stringspec.generators.clusterDecisionResource.template.spec.source.helm.releaseName
-
booleanspec.generators.clusterDecisionResource.template.spec.source.helm.skipCrds
-
booleanspec.generators.clusterDecisionResource.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.clusterDecisionResource.template.spec.source.helm.skipTests
-
array of stringsspec.generators.clusterDecisionResource.template.spec.source.helm.valueFiles
-
stringspec.generators.clusterDecisionResource.template.spec.source.helm.values
-
objectspec.generators.clusterDecisionResource.template.spec.source.helm.valuesObject
-
stringspec.generators.clusterDecisionResource.template.spec.source.helm.version
-
-
objectspec.generators.clusterDecisionResource.template.spec.source.kustomize
-
array of stringsspec.generators.clusterDecisionResource.template.spec.source.kustomize.apiVersions
-
objectspec.generators.clusterDecisionResource.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.clusterDecisionResource.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.clusterDecisionResource.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.clusterDecisionResource.template.spec.source.kustomize.components
-
booleanspec.generators.clusterDecisionResource.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.clusterDecisionResource.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.clusterDecisionResource.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.clusterDecisionResource.template.spec.source.kustomize.images
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.clusterDecisionResource.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.clusterDecisionResource.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.namePrefix
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.clusterDecisionResource.template.spec.source.kustomize.patches
-
objectspec.generators.clusterDecisionResource.template.spec.source.kustomize.patches.options
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.patches.patch
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.patches.path
-
objectspec.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.clusterDecisionResource.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.replicas.count
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.clusterDecisionResource.template.spec.source.kustomize.version
-
-
stringspec.generators.clusterDecisionResource.template.spec.source.name
-
stringspec.generators.clusterDecisionResource.template.spec.source.path
-
objectspec.generators.clusterDecisionResource.template.spec.source.plugin
-
array of objectsspec.generators.clusterDecisionResource.template.spec.source.plugin.env
-
stringspec.generators.clusterDecisionResource.template.spec.source.plugin.env.name
-
stringspec.generators.clusterDecisionResource.template.spec.source.plugin.env.value
-
-
stringspec.generators.clusterDecisionResource.template.spec.source.plugin.name
-
array of objectsspec.generators.clusterDecisionResource.template.spec.source.plugin.parameters
-
array of stringsspec.generators.clusterDecisionResource.template.spec.source.plugin.parameters.array
-
objectspec.generators.clusterDecisionResource.template.spec.source.plugin.parameters.map
-
stringspec.generators.clusterDecisionResource.template.spec.source.plugin.parameters.name
-
stringspec.generators.clusterDecisionResource.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.clusterDecisionResource.template.spec.source.ref
-
stringspec.generators.clusterDecisionResource.template.spec.source.repoURL
Required value
-
stringspec.generators.clusterDecisionResource.template.spec.source.targetRevision
-
-
objectspec.generators.clusterDecisionResource.template.spec.sourceHydrator
-
objectspec.generators.clusterDecisionResource.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.clusterDecisionResource.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.clusterDecisionResource.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.clusterDecisionResource.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.clusterDecisionResource.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.clusterDecisionResource.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.clusterDecisionResource.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.clusterDecisionResource.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.clusterDecisionResource.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.clusterDecisionResource.template.spec.sources
-
stringspec.generators.clusterDecisionResource.template.spec.sources.chart
-
objectspec.generators.clusterDecisionResource.template.spec.sources.directory
-
stringspec.generators.clusterDecisionResource.template.spec.sources.directory.exclude
-
stringspec.generators.clusterDecisionResource.template.spec.sources.directory.include
-
objectspec.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.directory.recurse
-
-
objectspec.generators.clusterDecisionResource.template.spec.sources.helm
-
array of stringsspec.generators.clusterDecisionResource.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.clusterDecisionResource.template.spec.sources.helm.fileParameters
-
stringspec.generators.clusterDecisionResource.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.clusterDecisionResource.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.clusterDecisionResource.template.spec.sources.helm.kubeVersion
-
stringspec.generators.clusterDecisionResource.template.spec.sources.helm.namespace
-
array of objectsspec.generators.clusterDecisionResource.template.spec.sources.helm.parameters
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.clusterDecisionResource.template.spec.sources.helm.parameters.name
-
stringspec.generators.clusterDecisionResource.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.helm.passCredentials
-
stringspec.generators.clusterDecisionResource.template.spec.sources.helm.releaseName
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.helm.skipCrds
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.clusterDecisionResource.template.spec.sources.helm.valueFiles
-
stringspec.generators.clusterDecisionResource.template.spec.sources.helm.values
-
objectspec.generators.clusterDecisionResource.template.spec.sources.helm.valuesObject
-
stringspec.generators.clusterDecisionResource.template.spec.sources.helm.version
-
-
objectspec.generators.clusterDecisionResource.template.spec.sources.kustomize
-
array of stringsspec.generators.clusterDecisionResource.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.clusterDecisionResource.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.clusterDecisionResource.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.clusterDecisionResource.template.spec.sources.kustomize.components
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.clusterDecisionResource.template.spec.sources.kustomize.images
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.clusterDecisionResource.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.clusterDecisionResource.template.spec.sources.kustomize.patches
-
objectspec.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.options
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.path
-
objectspec.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.clusterDecisionResource.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.clusterDecisionResource.template.spec.sources.kustomize.version
-
-
stringspec.generators.clusterDecisionResource.template.spec.sources.name
-
stringspec.generators.clusterDecisionResource.template.spec.sources.path
-
objectspec.generators.clusterDecisionResource.template.spec.sources.plugin
-
array of objectsspec.generators.clusterDecisionResource.template.spec.sources.plugin.env
-
stringspec.generators.clusterDecisionResource.template.spec.sources.plugin.env.name
-
stringspec.generators.clusterDecisionResource.template.spec.sources.plugin.env.value
-
-
stringspec.generators.clusterDecisionResource.template.spec.sources.plugin.name
-
array of objectsspec.generators.clusterDecisionResource.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.clusterDecisionResource.template.spec.sources.plugin.parameters.array
-
objectspec.generators.clusterDecisionResource.template.spec.sources.plugin.parameters.map
-
stringspec.generators.clusterDecisionResource.template.spec.sources.plugin.parameters.name
-
stringspec.generators.clusterDecisionResource.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.clusterDecisionResource.template.spec.sources.ref
-
stringspec.generators.clusterDecisionResource.template.spec.sources.repoURL
-
stringspec.generators.clusterDecisionResource.template.spec.sources.targetRevision
-
-
objectspec.generators.clusterDecisionResource.template.spec.syncPolicy
-
objectspec.generators.clusterDecisionResource.template.spec.syncPolicy.automated
-
booleanspec.generators.clusterDecisionResource.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.clusterDecisionResource.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.clusterDecisionResource.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.clusterDecisionResource.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.clusterDecisionResource.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.clusterDecisionResource.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.clusterDecisionResource.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.clusterDecisionResource.template.spec.syncPolicy.retry
-
objectspec.generators.clusterDecisionResource.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.clusterDecisionResource.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.clusterDecisionResource.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.clusterDecisionResource.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.clusterDecisionResource.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.clusterDecisionResource.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.clusterDecisionResource.values
-
-
objectspec.generators.clusters
-
booleanspec.generators.clusters.flatList
-
objectspec.generators.clusters.selector
-
array of objectsspec.generators.clusters.selector.matchExpressions
-
stringspec.generators.clusters.selector.matchExpressions.key
-
stringspec.generators.clusters.selector.matchExpressions.operator
-
array of stringsspec.generators.clusters.selector.matchExpressions.values
-
-
objectspec.generators.clusters.selector.matchLabels
-
-
objectspec.generators.clusters.template
-
objectspec.generators.clusters.template.metadata
Required value
-
objectspec.generators.clusters.template.metadata.annotations
-
array of stringsspec.generators.clusters.template.metadata.finalizers
-
objectspec.generators.clusters.template.metadata.labels
-
stringspec.generators.clusters.template.metadata.name
-
stringspec.generators.clusters.template.metadata.namespace
-
-
objectspec.generators.clusters.template.spec
Required value
-
objectspec.generators.clusters.template.spec.destination
Required value
-
stringspec.generators.clusters.template.spec.destination.name
-
stringspec.generators.clusters.template.spec.destination.namespace
-
stringspec.generators.clusters.template.spec.destination.server
-
-
array of objectsspec.generators.clusters.template.spec.ignoreDifferences
-
stringspec.generators.clusters.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.clusters.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.clusters.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.clusters.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.clusters.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.clusters.template.spec.ignoreDifferences.name
-
stringspec.generators.clusters.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.clusters.template.spec.info
-
stringspec.generators.clusters.template.spec.info.name
-
stringspec.generators.clusters.template.spec.info.value
-
-
stringspec.generators.clusters.template.spec.project
Required value
-
integerspec.generators.clusters.template.spec.revisionHistoryLimit
-
objectspec.generators.clusters.template.spec.source
-
stringspec.generators.clusters.template.spec.source.chart
-
objectspec.generators.clusters.template.spec.source.directory
-
stringspec.generators.clusters.template.spec.source.directory.exclude
-
stringspec.generators.clusters.template.spec.source.directory.include
-
objectspec.generators.clusters.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.clusters.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.clusters.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.clusters.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.clusters.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.clusters.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.clusters.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.clusters.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.clusters.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.clusters.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.clusters.template.spec.source.directory.recurse
-
-
objectspec.generators.clusters.template.spec.source.helm
-
array of stringsspec.generators.clusters.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.clusters.template.spec.source.helm.fileParameters
-
stringspec.generators.clusters.template.spec.source.helm.fileParameters.name
-
stringspec.generators.clusters.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.clusters.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.clusters.template.spec.source.helm.kubeVersion
-
stringspec.generators.clusters.template.spec.source.helm.namespace
-
array of objectsspec.generators.clusters.template.spec.source.helm.parameters
-
booleanspec.generators.clusters.template.spec.source.helm.parameters.forceString
-
stringspec.generators.clusters.template.spec.source.helm.parameters.name
-
stringspec.generators.clusters.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.clusters.template.spec.source.helm.passCredentials
-
stringspec.generators.clusters.template.spec.source.helm.releaseName
-
booleanspec.generators.clusters.template.spec.source.helm.skipCrds
-
booleanspec.generators.clusters.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.clusters.template.spec.source.helm.skipTests
-
array of stringsspec.generators.clusters.template.spec.source.helm.valueFiles
-
stringspec.generators.clusters.template.spec.source.helm.values
-
objectspec.generators.clusters.template.spec.source.helm.valuesObject
-
stringspec.generators.clusters.template.spec.source.helm.version
-
-
objectspec.generators.clusters.template.spec.source.kustomize
-
array of stringsspec.generators.clusters.template.spec.source.kustomize.apiVersions
-
objectspec.generators.clusters.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.clusters.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.clusters.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.clusters.template.spec.source.kustomize.components
-
booleanspec.generators.clusters.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.clusters.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.clusters.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.clusters.template.spec.source.kustomize.images
-
stringspec.generators.clusters.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.clusters.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.clusters.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.clusters.template.spec.source.kustomize.namePrefix
-
stringspec.generators.clusters.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.clusters.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.clusters.template.spec.source.kustomize.patches
-
objectspec.generators.clusters.template.spec.source.kustomize.patches.options
-
stringspec.generators.clusters.template.spec.source.kustomize.patches.patch
-
stringspec.generators.clusters.template.spec.source.kustomize.patches.path
-
objectspec.generators.clusters.template.spec.source.kustomize.patches.target
-
stringspec.generators.clusters.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.clusters.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.clusters.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.clusters.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.clusters.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.clusters.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.clusters.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.clusters.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.clusters.template.spec.source.kustomize.replicas.count
-
stringspec.generators.clusters.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.clusters.template.spec.source.kustomize.version
-
-
stringspec.generators.clusters.template.spec.source.name
-
stringspec.generators.clusters.template.spec.source.path
-
objectspec.generators.clusters.template.spec.source.plugin
-
array of objectsspec.generators.clusters.template.spec.source.plugin.env
-
stringspec.generators.clusters.template.spec.source.plugin.env.name
-
stringspec.generators.clusters.template.spec.source.plugin.env.value
-
-
stringspec.generators.clusters.template.spec.source.plugin.name
-
array of objectsspec.generators.clusters.template.spec.source.plugin.parameters
-
array of stringsspec.generators.clusters.template.spec.source.plugin.parameters.array
-
objectspec.generators.clusters.template.spec.source.plugin.parameters.map
-
stringspec.generators.clusters.template.spec.source.plugin.parameters.name
-
stringspec.generators.clusters.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.clusters.template.spec.source.ref
-
stringspec.generators.clusters.template.spec.source.repoURL
Required value
-
stringspec.generators.clusters.template.spec.source.targetRevision
-
-
objectspec.generators.clusters.template.spec.sourceHydrator
-
objectspec.generators.clusters.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.clusters.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.clusters.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.clusters.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.clusters.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.clusters.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.clusters.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.clusters.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.clusters.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.clusters.template.spec.sources
-
stringspec.generators.clusters.template.spec.sources.chart
-
objectspec.generators.clusters.template.spec.sources.directory
-
stringspec.generators.clusters.template.spec.sources.directory.exclude
-
stringspec.generators.clusters.template.spec.sources.directory.include
-
objectspec.generators.clusters.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.clusters.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.clusters.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.clusters.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.clusters.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.clusters.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.clusters.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.clusters.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.clusters.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.clusters.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.clusters.template.spec.sources.directory.recurse
-
-
objectspec.generators.clusters.template.spec.sources.helm
-
array of stringsspec.generators.clusters.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.clusters.template.spec.sources.helm.fileParameters
-
stringspec.generators.clusters.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.clusters.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.clusters.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.clusters.template.spec.sources.helm.kubeVersion
-
stringspec.generators.clusters.template.spec.sources.helm.namespace
-
array of objectsspec.generators.clusters.template.spec.sources.helm.parameters
-
booleanspec.generators.clusters.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.clusters.template.spec.sources.helm.parameters.name
-
stringspec.generators.clusters.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.clusters.template.spec.sources.helm.passCredentials
-
stringspec.generators.clusters.template.spec.sources.helm.releaseName
-
booleanspec.generators.clusters.template.spec.sources.helm.skipCrds
-
booleanspec.generators.clusters.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.clusters.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.clusters.template.spec.sources.helm.valueFiles
-
stringspec.generators.clusters.template.spec.sources.helm.values
-
objectspec.generators.clusters.template.spec.sources.helm.valuesObject
-
stringspec.generators.clusters.template.spec.sources.helm.version
-
-
objectspec.generators.clusters.template.spec.sources.kustomize
-
array of stringsspec.generators.clusters.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.clusters.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.clusters.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.clusters.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.clusters.template.spec.sources.kustomize.components
-
booleanspec.generators.clusters.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.clusters.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.clusters.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.clusters.template.spec.sources.kustomize.images
-
stringspec.generators.clusters.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.clusters.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.clusters.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.clusters.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.clusters.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.clusters.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.clusters.template.spec.sources.kustomize.patches
-
objectspec.generators.clusters.template.spec.sources.kustomize.patches.options
-
stringspec.generators.clusters.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.clusters.template.spec.sources.kustomize.patches.path
-
objectspec.generators.clusters.template.spec.sources.kustomize.patches.target
-
stringspec.generators.clusters.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.clusters.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.clusters.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.clusters.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.clusters.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.clusters.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.clusters.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.clusters.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.clusters.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.clusters.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.clusters.template.spec.sources.kustomize.version
-
-
stringspec.generators.clusters.template.spec.sources.name
-
stringspec.generators.clusters.template.spec.sources.path
-
objectspec.generators.clusters.template.spec.sources.plugin
-
array of objectsspec.generators.clusters.template.spec.sources.plugin.env
-
stringspec.generators.clusters.template.spec.sources.plugin.env.name
-
stringspec.generators.clusters.template.spec.sources.plugin.env.value
-
-
stringspec.generators.clusters.template.spec.sources.plugin.name
-
array of objectsspec.generators.clusters.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.clusters.template.spec.sources.plugin.parameters.array
-
objectspec.generators.clusters.template.spec.sources.plugin.parameters.map
-
stringspec.generators.clusters.template.spec.sources.plugin.parameters.name
-
stringspec.generators.clusters.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.clusters.template.spec.sources.ref
-
stringspec.generators.clusters.template.spec.sources.repoURL
-
stringspec.generators.clusters.template.spec.sources.targetRevision
-
-
objectspec.generators.clusters.template.spec.syncPolicy
-
objectspec.generators.clusters.template.spec.syncPolicy.automated
-
booleanspec.generators.clusters.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.clusters.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.clusters.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.clusters.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.clusters.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.clusters.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.clusters.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.clusters.template.spec.syncPolicy.retry
-
objectspec.generators.clusters.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.clusters.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.clusters.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.clusters.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.clusters.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.clusters.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.clusters.values
-
-
objectspec.generators.git
-
array of objectsspec.generators.git.directories
-
booleanspec.generators.git.directories.exclude
-
stringspec.generators.git.directories.path
-
-
array of objectsspec.generators.git.files
-
booleanspec.generators.git.files.exclude
-
stringspec.generators.git.files.path
-
-
stringspec.generators.git.pathParamPrefix
-
stringspec.generators.git.repoURL
Required value
-
integerspec.generators.git.requeueAfterSeconds
-
stringspec.generators.git.revision
Required value
-
objectspec.generators.git.template
-
objectspec.generators.git.template.metadata
Required value
-
objectspec.generators.git.template.metadata.annotations
-
array of stringsspec.generators.git.template.metadata.finalizers
-
objectspec.generators.git.template.metadata.labels
-
stringspec.generators.git.template.metadata.name
-
stringspec.generators.git.template.metadata.namespace
-
-
objectspec.generators.git.template.spec
Required value
-
objectspec.generators.git.template.spec.destination
Required value
-
stringspec.generators.git.template.spec.destination.name
-
stringspec.generators.git.template.spec.destination.namespace
-
stringspec.generators.git.template.spec.destination.server
-
-
array of objectsspec.generators.git.template.spec.ignoreDifferences
-
stringspec.generators.git.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.git.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.git.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.git.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.git.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.git.template.spec.ignoreDifferences.name
-
stringspec.generators.git.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.git.template.spec.info
-
stringspec.generators.git.template.spec.info.name
-
stringspec.generators.git.template.spec.info.value
-
-
stringspec.generators.git.template.spec.project
Required value
-
integerspec.generators.git.template.spec.revisionHistoryLimit
-
objectspec.generators.git.template.spec.source
-
stringspec.generators.git.template.spec.source.chart
-
objectspec.generators.git.template.spec.source.directory
-
stringspec.generators.git.template.spec.source.directory.exclude
-
stringspec.generators.git.template.spec.source.directory.include
-
objectspec.generators.git.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.git.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.git.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.git.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.git.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.git.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.git.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.git.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.git.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.git.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.git.template.spec.source.directory.recurse
-
-
objectspec.generators.git.template.spec.source.helm
-
array of stringsspec.generators.git.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.git.template.spec.source.helm.fileParameters
-
stringspec.generators.git.template.spec.source.helm.fileParameters.name
-
stringspec.generators.git.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.git.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.git.template.spec.source.helm.kubeVersion
-
stringspec.generators.git.template.spec.source.helm.namespace
-
array of objectsspec.generators.git.template.spec.source.helm.parameters
-
booleanspec.generators.git.template.spec.source.helm.parameters.forceString
-
stringspec.generators.git.template.spec.source.helm.parameters.name
-
stringspec.generators.git.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.git.template.spec.source.helm.passCredentials
-
stringspec.generators.git.template.spec.source.helm.releaseName
-
booleanspec.generators.git.template.spec.source.helm.skipCrds
-
booleanspec.generators.git.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.git.template.spec.source.helm.skipTests
-
array of stringsspec.generators.git.template.spec.source.helm.valueFiles
-
stringspec.generators.git.template.spec.source.helm.values
-
objectspec.generators.git.template.spec.source.helm.valuesObject
-
stringspec.generators.git.template.spec.source.helm.version
-
-
objectspec.generators.git.template.spec.source.kustomize
-
array of stringsspec.generators.git.template.spec.source.kustomize.apiVersions
-
objectspec.generators.git.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.git.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.git.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.git.template.spec.source.kustomize.components
-
booleanspec.generators.git.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.git.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.git.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.git.template.spec.source.kustomize.images
-
stringspec.generators.git.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.git.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.git.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.git.template.spec.source.kustomize.namePrefix
-
stringspec.generators.git.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.git.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.git.template.spec.source.kustomize.patches
-
objectspec.generators.git.template.spec.source.kustomize.patches.options
-
stringspec.generators.git.template.spec.source.kustomize.patches.patch
-
stringspec.generators.git.template.spec.source.kustomize.patches.path
-
objectspec.generators.git.template.spec.source.kustomize.patches.target
-
stringspec.generators.git.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.git.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.git.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.git.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.git.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.git.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.git.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.git.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.git.template.spec.source.kustomize.replicas.count
-
stringspec.generators.git.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.git.template.spec.source.kustomize.version
-
-
stringspec.generators.git.template.spec.source.name
-
stringspec.generators.git.template.spec.source.path
-
objectspec.generators.git.template.spec.source.plugin
-
array of objectsspec.generators.git.template.spec.source.plugin.env
-
stringspec.generators.git.template.spec.source.plugin.env.name
-
stringspec.generators.git.template.spec.source.plugin.env.value
-
-
stringspec.generators.git.template.spec.source.plugin.name
-
array of objectsspec.generators.git.template.spec.source.plugin.parameters
-
array of stringsspec.generators.git.template.spec.source.plugin.parameters.array
-
objectspec.generators.git.template.spec.source.plugin.parameters.map
-
stringspec.generators.git.template.spec.source.plugin.parameters.name
-
stringspec.generators.git.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.git.template.spec.source.ref
-
stringspec.generators.git.template.spec.source.repoURL
Required value
-
stringspec.generators.git.template.spec.source.targetRevision
-
-
objectspec.generators.git.template.spec.sourceHydrator
-
objectspec.generators.git.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.git.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.git.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.git.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.git.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.git.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.git.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.git.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.git.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.git.template.spec.sources
-
stringspec.generators.git.template.spec.sources.chart
-
objectspec.generators.git.template.spec.sources.directory
-
stringspec.generators.git.template.spec.sources.directory.exclude
-
stringspec.generators.git.template.spec.sources.directory.include
-
objectspec.generators.git.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.git.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.git.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.git.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.git.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.git.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.git.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.git.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.git.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.git.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.git.template.spec.sources.directory.recurse
-
-
objectspec.generators.git.template.spec.sources.helm
-
array of stringsspec.generators.git.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.git.template.spec.sources.helm.fileParameters
-
stringspec.generators.git.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.git.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.git.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.git.template.spec.sources.helm.kubeVersion
-
stringspec.generators.git.template.spec.sources.helm.namespace
-
array of objectsspec.generators.git.template.spec.sources.helm.parameters
-
booleanspec.generators.git.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.git.template.spec.sources.helm.parameters.name
-
stringspec.generators.git.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.git.template.spec.sources.helm.passCredentials
-
stringspec.generators.git.template.spec.sources.helm.releaseName
-
booleanspec.generators.git.template.spec.sources.helm.skipCrds
-
booleanspec.generators.git.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.git.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.git.template.spec.sources.helm.valueFiles
-
stringspec.generators.git.template.spec.sources.helm.values
-
objectspec.generators.git.template.spec.sources.helm.valuesObject
-
stringspec.generators.git.template.spec.sources.helm.version
-
-
objectspec.generators.git.template.spec.sources.kustomize
-
array of stringsspec.generators.git.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.git.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.git.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.git.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.git.template.spec.sources.kustomize.components
-
booleanspec.generators.git.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.git.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.git.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.git.template.spec.sources.kustomize.images
-
stringspec.generators.git.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.git.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.git.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.git.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.git.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.git.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.git.template.spec.sources.kustomize.patches
-
objectspec.generators.git.template.spec.sources.kustomize.patches.options
-
stringspec.generators.git.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.git.template.spec.sources.kustomize.patches.path
-
objectspec.generators.git.template.spec.sources.kustomize.patches.target
-
stringspec.generators.git.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.git.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.git.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.git.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.git.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.git.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.git.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.git.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.git.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.git.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.git.template.spec.sources.kustomize.version
-
-
stringspec.generators.git.template.spec.sources.name
-
stringspec.generators.git.template.spec.sources.path
-
objectspec.generators.git.template.spec.sources.plugin
-
array of objectsspec.generators.git.template.spec.sources.plugin.env
-
stringspec.generators.git.template.spec.sources.plugin.env.name
-
stringspec.generators.git.template.spec.sources.plugin.env.value
-
-
stringspec.generators.git.template.spec.sources.plugin.name
-
array of objectsspec.generators.git.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.git.template.spec.sources.plugin.parameters.array
-
objectspec.generators.git.template.spec.sources.plugin.parameters.map
-
stringspec.generators.git.template.spec.sources.plugin.parameters.name
-
stringspec.generators.git.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.git.template.spec.sources.ref
-
stringspec.generators.git.template.spec.sources.repoURL
-
stringspec.generators.git.template.spec.sources.targetRevision
-
-
objectspec.generators.git.template.spec.syncPolicy
-
objectspec.generators.git.template.spec.syncPolicy.automated
-
booleanspec.generators.git.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.git.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.git.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.git.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.git.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.git.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.git.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.git.template.spec.syncPolicy.retry
-
objectspec.generators.git.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.git.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.git.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.git.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.git.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.git.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.git.values
-
-
objectspec.generators.list
-
arrayspec.generators.list.elements
-
stringspec.generators.list.elementsYaml
-
objectspec.generators.list.template
-
objectspec.generators.list.template.metadata
Required value
-
objectspec.generators.list.template.metadata.annotations
-
array of stringsspec.generators.list.template.metadata.finalizers
-
objectspec.generators.list.template.metadata.labels
-
stringspec.generators.list.template.metadata.name
-
stringspec.generators.list.template.metadata.namespace
-
-
objectspec.generators.list.template.spec
Required value
-
objectspec.generators.list.template.spec.destination
Required value
-
stringspec.generators.list.template.spec.destination.name
-
stringspec.generators.list.template.spec.destination.namespace
-
stringspec.generators.list.template.spec.destination.server
-
-
array of objectsspec.generators.list.template.spec.ignoreDifferences
-
stringspec.generators.list.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.list.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.list.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.list.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.list.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.list.template.spec.ignoreDifferences.name
-
stringspec.generators.list.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.list.template.spec.info
-
stringspec.generators.list.template.spec.info.name
-
stringspec.generators.list.template.spec.info.value
-
-
stringspec.generators.list.template.spec.project
Required value
-
integerspec.generators.list.template.spec.revisionHistoryLimit
-
objectspec.generators.list.template.spec.source
-
stringspec.generators.list.template.spec.source.chart
-
objectspec.generators.list.template.spec.source.directory
-
stringspec.generators.list.template.spec.source.directory.exclude
-
stringspec.generators.list.template.spec.source.directory.include
-
objectspec.generators.list.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.list.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.list.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.list.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.list.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.list.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.list.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.list.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.list.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.list.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.list.template.spec.source.directory.recurse
-
-
objectspec.generators.list.template.spec.source.helm
-
array of stringsspec.generators.list.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.list.template.spec.source.helm.fileParameters
-
stringspec.generators.list.template.spec.source.helm.fileParameters.name
-
stringspec.generators.list.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.list.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.list.template.spec.source.helm.kubeVersion
-
stringspec.generators.list.template.spec.source.helm.namespace
-
array of objectsspec.generators.list.template.spec.source.helm.parameters
-
booleanspec.generators.list.template.spec.source.helm.parameters.forceString
-
stringspec.generators.list.template.spec.source.helm.parameters.name
-
stringspec.generators.list.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.list.template.spec.source.helm.passCredentials
-
stringspec.generators.list.template.spec.source.helm.releaseName
-
booleanspec.generators.list.template.spec.source.helm.skipCrds
-
booleanspec.generators.list.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.list.template.spec.source.helm.skipTests
-
array of stringsspec.generators.list.template.spec.source.helm.valueFiles
-
stringspec.generators.list.template.spec.source.helm.values
-
objectspec.generators.list.template.spec.source.helm.valuesObject
-
stringspec.generators.list.template.spec.source.helm.version
-
-
objectspec.generators.list.template.spec.source.kustomize
-
array of stringsspec.generators.list.template.spec.source.kustomize.apiVersions
-
objectspec.generators.list.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.list.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.list.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.list.template.spec.source.kustomize.components
-
booleanspec.generators.list.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.list.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.list.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.list.template.spec.source.kustomize.images
-
stringspec.generators.list.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.list.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.list.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.list.template.spec.source.kustomize.namePrefix
-
stringspec.generators.list.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.list.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.list.template.spec.source.kustomize.patches
-
objectspec.generators.list.template.spec.source.kustomize.patches.options
-
stringspec.generators.list.template.spec.source.kustomize.patches.patch
-
stringspec.generators.list.template.spec.source.kustomize.patches.path
-
objectspec.generators.list.template.spec.source.kustomize.patches.target
-
stringspec.generators.list.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.list.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.list.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.list.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.list.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.list.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.list.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.list.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.list.template.spec.source.kustomize.replicas.count
-
stringspec.generators.list.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.list.template.spec.source.kustomize.version
-
-
stringspec.generators.list.template.spec.source.name
-
stringspec.generators.list.template.spec.source.path
-
objectspec.generators.list.template.spec.source.plugin
-
array of objectsspec.generators.list.template.spec.source.plugin.env
-
stringspec.generators.list.template.spec.source.plugin.env.name
-
stringspec.generators.list.template.spec.source.plugin.env.value
-
-
stringspec.generators.list.template.spec.source.plugin.name
-
array of objectsspec.generators.list.template.spec.source.plugin.parameters
-
array of stringsspec.generators.list.template.spec.source.plugin.parameters.array
-
objectspec.generators.list.template.spec.source.plugin.parameters.map
-
stringspec.generators.list.template.spec.source.plugin.parameters.name
-
stringspec.generators.list.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.list.template.spec.source.ref
-
stringspec.generators.list.template.spec.source.repoURL
Required value
-
stringspec.generators.list.template.spec.source.targetRevision
-
-
objectspec.generators.list.template.spec.sourceHydrator
-
objectspec.generators.list.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.list.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.list.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.list.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.list.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.list.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.list.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.list.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.list.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.list.template.spec.sources
-
stringspec.generators.list.template.spec.sources.chart
-
objectspec.generators.list.template.spec.sources.directory
-
stringspec.generators.list.template.spec.sources.directory.exclude
-
stringspec.generators.list.template.spec.sources.directory.include
-
objectspec.generators.list.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.list.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.list.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.list.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.list.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.list.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.list.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.list.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.list.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.list.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.list.template.spec.sources.directory.recurse
-
-
objectspec.generators.list.template.spec.sources.helm
-
array of stringsspec.generators.list.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.list.template.spec.sources.helm.fileParameters
-
stringspec.generators.list.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.list.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.list.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.list.template.spec.sources.helm.kubeVersion
-
stringspec.generators.list.template.spec.sources.helm.namespace
-
array of objectsspec.generators.list.template.spec.sources.helm.parameters
-
booleanspec.generators.list.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.list.template.spec.sources.helm.parameters.name
-
stringspec.generators.list.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.list.template.spec.sources.helm.passCredentials
-
stringspec.generators.list.template.spec.sources.helm.releaseName
-
booleanspec.generators.list.template.spec.sources.helm.skipCrds
-
booleanspec.generators.list.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.list.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.list.template.spec.sources.helm.valueFiles
-
stringspec.generators.list.template.spec.sources.helm.values
-
objectspec.generators.list.template.spec.sources.helm.valuesObject
-
stringspec.generators.list.template.spec.sources.helm.version
-
-
objectspec.generators.list.template.spec.sources.kustomize
-
array of stringsspec.generators.list.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.list.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.list.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.list.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.list.template.spec.sources.kustomize.components
-
booleanspec.generators.list.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.list.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.list.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.list.template.spec.sources.kustomize.images
-
stringspec.generators.list.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.list.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.list.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.list.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.list.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.list.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.list.template.spec.sources.kustomize.patches
-
objectspec.generators.list.template.spec.sources.kustomize.patches.options
-
stringspec.generators.list.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.list.template.spec.sources.kustomize.patches.path
-
objectspec.generators.list.template.spec.sources.kustomize.patches.target
-
stringspec.generators.list.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.list.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.list.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.list.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.list.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.list.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.list.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.list.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.list.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.list.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.list.template.spec.sources.kustomize.version
-
-
stringspec.generators.list.template.spec.sources.name
-
stringspec.generators.list.template.spec.sources.path
-
objectspec.generators.list.template.spec.sources.plugin
-
array of objectsspec.generators.list.template.spec.sources.plugin.env
-
stringspec.generators.list.template.spec.sources.plugin.env.name
-
stringspec.generators.list.template.spec.sources.plugin.env.value
-
-
stringspec.generators.list.template.spec.sources.plugin.name
-
array of objectsspec.generators.list.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.list.template.spec.sources.plugin.parameters.array
-
objectspec.generators.list.template.spec.sources.plugin.parameters.map
-
stringspec.generators.list.template.spec.sources.plugin.parameters.name
-
stringspec.generators.list.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.list.template.spec.sources.ref
-
stringspec.generators.list.template.spec.sources.repoURL
-
stringspec.generators.list.template.spec.sources.targetRevision
-
-
objectspec.generators.list.template.spec.syncPolicy
-
objectspec.generators.list.template.spec.syncPolicy.automated
-
booleanspec.generators.list.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.list.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.list.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.list.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.list.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.list.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.list.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.list.template.spec.syncPolicy.retry
-
objectspec.generators.list.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.list.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.list.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.list.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.list.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.list.template.spec.syncPolicy.syncOptions
-
-
-
-
-
objectspec.generators.matrix
-
array of objectsspec.generators.matrix.generators
Required value
-
objectspec.generators.matrix.generators.clusterDecisionResource
-
stringspec.generators.matrix.generators.clusterDecisionResource.configMapRef
Required value
-
objectspec.generators.matrix.generators.clusterDecisionResource.labelSelector
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.labelSelector.matchExpressions
-
stringspec.generators.matrix.generators.clusterDecisionResource.labelSelector.matchExpressions.key
-
stringspec.generators.matrix.generators.clusterDecisionResource.labelSelector.matchExpressions.operator
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.labelSelector.matchExpressions.values
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.labelSelector.matchLabels
-
-
stringspec.generators.matrix.generators.clusterDecisionResource.name
-
integerspec.generators.matrix.generators.clusterDecisionResource.requeueAfterSeconds
-
objectspec.generators.matrix.generators.clusterDecisionResource.template
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.metadata
Required value
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.metadata.annotations
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.metadata.finalizers
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.metadata.labels
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.metadata.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.metadata.namespace
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec
Required value
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.destination
Required value
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.destination.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.destination.namespace
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.destination.server
-
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.ignoreDifferences
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.ignoreDifferences.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.info
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.info.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.info.value
-
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.project
Required value
-
integerspec.generators.matrix.generators.clusterDecisionResource.template.spec.revisionHistoryLimit
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.source
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.chart
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.exclude
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.include
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.directory.recurse
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.fileParameters
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.fileParameters.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.kubeVersion
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.namespace
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.parameters
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.parameters.forceString
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.parameters.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.passCredentials
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.releaseName
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.skipCrds
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.skipTests
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.valueFiles
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.values
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.valuesObject
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.helm.version
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.apiVersions
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.components
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.images
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.namePrefix
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.patches
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.patches.options
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.patches.patch
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.patches.path
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.replicas.count
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.kustomize.version
-
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.path
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.plugin
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.plugin.env
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.plugin.env.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.plugin.env.value
-
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.plugin.name
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.plugin.parameters
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.plugin.parameters.array
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.plugin.parameters.map
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.plugin.parameters.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.ref
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.repoURL
Required value
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.source.targetRevision
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sourceHydrator
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.chart
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.exclude
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.include
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.directory.recurse
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.fileParameters
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.kubeVersion
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.namespace
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.parameters
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.parameters.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.passCredentials
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.releaseName
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.skipCrds
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.valueFiles
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.values
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.valuesObject
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.helm.version
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.components
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.images
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.patches
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.options
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.path
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.kustomize.version
-
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.path
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.plugin
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.plugin.env
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.plugin.env.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.plugin.env.value
-
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.plugin.name
-
array of objectsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.plugin.parameters.array
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.plugin.parameters.map
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.plugin.parameters.name
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.ref
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.repoURL
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.sources.targetRevision
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.automated
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.retry
-
objectspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.matrix.generators.clusterDecisionResource.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.matrix.generators.clusterDecisionResource.values
-
-
objectspec.generators.matrix.generators.clusters
-
booleanspec.generators.matrix.generators.clusters.flatList
-
objectspec.generators.matrix.generators.clusters.selector
-
array of objectsspec.generators.matrix.generators.clusters.selector.matchExpressions
-
stringspec.generators.matrix.generators.clusters.selector.matchExpressions.key
-
stringspec.generators.matrix.generators.clusters.selector.matchExpressions.operator
-
array of stringsspec.generators.matrix.generators.clusters.selector.matchExpressions.values
-
-
objectspec.generators.matrix.generators.clusters.selector.matchLabels
-
-
objectspec.generators.matrix.generators.clusters.template
-
objectspec.generators.matrix.generators.clusters.template.metadata
Required value
-
objectspec.generators.matrix.generators.clusters.template.metadata.annotations
-
array of stringsspec.generators.matrix.generators.clusters.template.metadata.finalizers
-
objectspec.generators.matrix.generators.clusters.template.metadata.labels
-
stringspec.generators.matrix.generators.clusters.template.metadata.name
-
stringspec.generators.matrix.generators.clusters.template.metadata.namespace
-
-
objectspec.generators.matrix.generators.clusters.template.spec
Required value
-
objectspec.generators.matrix.generators.clusters.template.spec.destination
Required value
-
stringspec.generators.matrix.generators.clusters.template.spec.destination.name
-
stringspec.generators.matrix.generators.clusters.template.spec.destination.namespace
-
stringspec.generators.matrix.generators.clusters.template.spec.destination.server
-
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.ignoreDifferences
-
stringspec.generators.matrix.generators.clusters.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.matrix.generators.clusters.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.matrix.generators.clusters.template.spec.ignoreDifferences.name
-
stringspec.generators.matrix.generators.clusters.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.info
-
stringspec.generators.matrix.generators.clusters.template.spec.info.name
-
stringspec.generators.matrix.generators.clusters.template.spec.info.value
-
-
stringspec.generators.matrix.generators.clusters.template.spec.project
Required value
-
integerspec.generators.matrix.generators.clusters.template.spec.revisionHistoryLimit
-
objectspec.generators.matrix.generators.clusters.template.spec.source
-
stringspec.generators.matrix.generators.clusters.template.spec.source.chart
-
objectspec.generators.matrix.generators.clusters.template.spec.source.directory
-
stringspec.generators.matrix.generators.clusters.template.spec.source.directory.exclude
-
stringspec.generators.matrix.generators.clusters.template.spec.source.directory.include
-
objectspec.generators.matrix.generators.clusters.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.clusters.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.clusters.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.clusters.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.clusters.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.directory.recurse
-
-
objectspec.generators.matrix.generators.clusters.template.spec.source.helm
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.source.helm.fileParameters
-
stringspec.generators.matrix.generators.clusters.template.spec.source.helm.fileParameters.name
-
stringspec.generators.matrix.generators.clusters.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.clusters.template.spec.source.helm.kubeVersion
-
stringspec.generators.matrix.generators.clusters.template.spec.source.helm.namespace
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.source.helm.parameters
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.helm.parameters.forceString
-
stringspec.generators.matrix.generators.clusters.template.spec.source.helm.parameters.name
-
stringspec.generators.matrix.generators.clusters.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.helm.passCredentials
-
stringspec.generators.matrix.generators.clusters.template.spec.source.helm.releaseName
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.helm.skipCrds
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.helm.skipTests
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.source.helm.valueFiles
-
stringspec.generators.matrix.generators.clusters.template.spec.source.helm.values
-
objectspec.generators.matrix.generators.clusters.template.spec.source.helm.valuesObject
-
stringspec.generators.matrix.generators.clusters.template.spec.source.helm.version
-
-
objectspec.generators.matrix.generators.clusters.template.spec.source.kustomize
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.source.kustomize.apiVersions
-
objectspec.generators.matrix.generators.clusters.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.clusters.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.source.kustomize.components
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.source.kustomize.images
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.clusters.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.namePrefix
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.source.kustomize.patches
-
objectspec.generators.matrix.generators.clusters.template.spec.source.kustomize.patches.options
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.patches.patch
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.patches.path
-
objectspec.generators.matrix.generators.clusters.template.spec.source.kustomize.patches.target
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.replicas.count
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.clusters.template.spec.source.kustomize.version
-
-
stringspec.generators.matrix.generators.clusters.template.spec.source.name
-
stringspec.generators.matrix.generators.clusters.template.spec.source.path
-
objectspec.generators.matrix.generators.clusters.template.spec.source.plugin
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.source.plugin.env
-
stringspec.generators.matrix.generators.clusters.template.spec.source.plugin.env.name
-
stringspec.generators.matrix.generators.clusters.template.spec.source.plugin.env.value
-
-
stringspec.generators.matrix.generators.clusters.template.spec.source.plugin.name
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.source.plugin.parameters
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.source.plugin.parameters.array
-
objectspec.generators.matrix.generators.clusters.template.spec.source.plugin.parameters.map
-
stringspec.generators.matrix.generators.clusters.template.spec.source.plugin.parameters.name
-
stringspec.generators.matrix.generators.clusters.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.clusters.template.spec.source.ref
-
stringspec.generators.matrix.generators.clusters.template.spec.source.repoURL
Required value
-
stringspec.generators.matrix.generators.clusters.template.spec.source.targetRevision
-
-
objectspec.generators.matrix.generators.clusters.template.spec.sourceHydrator
-
objectspec.generators.matrix.generators.clusters.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.matrix.generators.clusters.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.matrix.generators.clusters.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.matrix.generators.clusters.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.matrix.generators.clusters.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.matrix.generators.clusters.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.matrix.generators.clusters.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.matrix.generators.clusters.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.matrix.generators.clusters.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.sources
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.chart
-
objectspec.generators.matrix.generators.clusters.template.spec.sources.directory
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.directory.exclude
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.directory.include
-
objectspec.generators.matrix.generators.clusters.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.directory.recurse
-
-
objectspec.generators.matrix.generators.clusters.template.spec.sources.helm
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.sources.helm.fileParameters
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.helm.kubeVersion
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.helm.namespace
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.sources.helm.parameters
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.helm.parameters.name
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.helm.passCredentials
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.helm.releaseName
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.helm.skipCrds
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.sources.helm.valueFiles
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.helm.values
-
objectspec.generators.matrix.generators.clusters.template.spec.sources.helm.valuesObject
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.helm.version
-
-
objectspec.generators.matrix.generators.clusters.template.spec.sources.kustomize
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.components
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.images
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.patches
-
objectspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.patches.options
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.patches.path
-
objectspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.patches.target
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.kustomize.version
-
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.name
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.path
-
objectspec.generators.matrix.generators.clusters.template.spec.sources.plugin
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.sources.plugin.env
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.plugin.env.name
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.plugin.env.value
-
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.plugin.name
-
array of objectsspec.generators.matrix.generators.clusters.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.sources.plugin.parameters.array
-
objectspec.generators.matrix.generators.clusters.template.spec.sources.plugin.parameters.map
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.plugin.parameters.name
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.ref
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.repoURL
-
stringspec.generators.matrix.generators.clusters.template.spec.sources.targetRevision
-
-
objectspec.generators.matrix.generators.clusters.template.spec.syncPolicy
-
objectspec.generators.matrix.generators.clusters.template.spec.syncPolicy.automated
-
booleanspec.generators.matrix.generators.clusters.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.matrix.generators.clusters.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.matrix.generators.clusters.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.matrix.generators.clusters.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.matrix.generators.clusters.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.matrix.generators.clusters.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.matrix.generators.clusters.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.matrix.generators.clusters.template.spec.syncPolicy.retry
-
objectspec.generators.matrix.generators.clusters.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.matrix.generators.clusters.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.matrix.generators.clusters.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.matrix.generators.clusters.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.matrix.generators.clusters.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.matrix.generators.clusters.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.matrix.generators.clusters.values
-
-
objectspec.generators.matrix.generators.git
-
array of objectsspec.generators.matrix.generators.git.directories
-
booleanspec.generators.matrix.generators.git.directories.exclude
-
stringspec.generators.matrix.generators.git.directories.path
-
-
array of objectsspec.generators.matrix.generators.git.files
-
booleanspec.generators.matrix.generators.git.files.exclude
-
stringspec.generators.matrix.generators.git.files.path
-
-
stringspec.generators.matrix.generators.git.pathParamPrefix
-
stringspec.generators.matrix.generators.git.repoURL
Required value
-
integerspec.generators.matrix.generators.git.requeueAfterSeconds
-
stringspec.generators.matrix.generators.git.revision
Required value
-
objectspec.generators.matrix.generators.git.template
-
objectspec.generators.matrix.generators.git.template.metadata
Required value
-
objectspec.generators.matrix.generators.git.template.metadata.annotations
-
array of stringsspec.generators.matrix.generators.git.template.metadata.finalizers
-
objectspec.generators.matrix.generators.git.template.metadata.labels
-
stringspec.generators.matrix.generators.git.template.metadata.name
-
stringspec.generators.matrix.generators.git.template.metadata.namespace
-
-
objectspec.generators.matrix.generators.git.template.spec
Required value
-
objectspec.generators.matrix.generators.git.template.spec.destination
Required value
-
stringspec.generators.matrix.generators.git.template.spec.destination.name
-
stringspec.generators.matrix.generators.git.template.spec.destination.namespace
-
stringspec.generators.matrix.generators.git.template.spec.destination.server
-
-
array of objectsspec.generators.matrix.generators.git.template.spec.ignoreDifferences
-
stringspec.generators.matrix.generators.git.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.matrix.generators.git.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.matrix.generators.git.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.matrix.generators.git.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.matrix.generators.git.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.matrix.generators.git.template.spec.ignoreDifferences.name
-
stringspec.generators.matrix.generators.git.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.matrix.generators.git.template.spec.info
-
stringspec.generators.matrix.generators.git.template.spec.info.name
-
stringspec.generators.matrix.generators.git.template.spec.info.value
-
-
stringspec.generators.matrix.generators.git.template.spec.project
Required value
-
integerspec.generators.matrix.generators.git.template.spec.revisionHistoryLimit
-
objectspec.generators.matrix.generators.git.template.spec.source
-
stringspec.generators.matrix.generators.git.template.spec.source.chart
-
objectspec.generators.matrix.generators.git.template.spec.source.directory
-
stringspec.generators.matrix.generators.git.template.spec.source.directory.exclude
-
stringspec.generators.matrix.generators.git.template.spec.source.directory.include
-
objectspec.generators.matrix.generators.git.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.git.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.git.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.git.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.git.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.git.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.git.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.git.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.git.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.git.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.git.template.spec.source.directory.recurse
-
-
objectspec.generators.matrix.generators.git.template.spec.source.helm
-
array of stringsspec.generators.matrix.generators.git.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.git.template.spec.source.helm.fileParameters
-
stringspec.generators.matrix.generators.git.template.spec.source.helm.fileParameters.name
-
stringspec.generators.matrix.generators.git.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.git.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.git.template.spec.source.helm.kubeVersion
-
stringspec.generators.matrix.generators.git.template.spec.source.helm.namespace
-
array of objectsspec.generators.matrix.generators.git.template.spec.source.helm.parameters
-
booleanspec.generators.matrix.generators.git.template.spec.source.helm.parameters.forceString
-
stringspec.generators.matrix.generators.git.template.spec.source.helm.parameters.name
-
stringspec.generators.matrix.generators.git.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.git.template.spec.source.helm.passCredentials
-
stringspec.generators.matrix.generators.git.template.spec.source.helm.releaseName
-
booleanspec.generators.matrix.generators.git.template.spec.source.helm.skipCrds
-
booleanspec.generators.matrix.generators.git.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.git.template.spec.source.helm.skipTests
-
array of stringsspec.generators.matrix.generators.git.template.spec.source.helm.valueFiles
-
stringspec.generators.matrix.generators.git.template.spec.source.helm.values
-
objectspec.generators.matrix.generators.git.template.spec.source.helm.valuesObject
-
stringspec.generators.matrix.generators.git.template.spec.source.helm.version
-
-
objectspec.generators.matrix.generators.git.template.spec.source.kustomize
-
array of stringsspec.generators.matrix.generators.git.template.spec.source.kustomize.apiVersions
-
objectspec.generators.matrix.generators.git.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.git.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.git.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.git.template.spec.source.kustomize.components
-
booleanspec.generators.matrix.generators.git.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.git.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.git.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.git.template.spec.source.kustomize.images
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.git.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.git.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.namePrefix
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.git.template.spec.source.kustomize.patches
-
objectspec.generators.matrix.generators.git.template.spec.source.kustomize.patches.options
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.patches.patch
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.patches.path
-
objectspec.generators.matrix.generators.git.template.spec.source.kustomize.patches.target
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.git.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.git.template.spec.source.kustomize.replicas.count
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.git.template.spec.source.kustomize.version
-
-
stringspec.generators.matrix.generators.git.template.spec.source.name
-
stringspec.generators.matrix.generators.git.template.spec.source.path
-
objectspec.generators.matrix.generators.git.template.spec.source.plugin
-
array of objectsspec.generators.matrix.generators.git.template.spec.source.plugin.env
-
stringspec.generators.matrix.generators.git.template.spec.source.plugin.env.name
-
stringspec.generators.matrix.generators.git.template.spec.source.plugin.env.value
-
-
stringspec.generators.matrix.generators.git.template.spec.source.plugin.name
-
array of objectsspec.generators.matrix.generators.git.template.spec.source.plugin.parameters
-
array of stringsspec.generators.matrix.generators.git.template.spec.source.plugin.parameters.array
-
objectspec.generators.matrix.generators.git.template.spec.source.plugin.parameters.map
-
stringspec.generators.matrix.generators.git.template.spec.source.plugin.parameters.name
-
stringspec.generators.matrix.generators.git.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.git.template.spec.source.ref
-
stringspec.generators.matrix.generators.git.template.spec.source.repoURL
Required value
-
stringspec.generators.matrix.generators.git.template.spec.source.targetRevision
-
-
objectspec.generators.matrix.generators.git.template.spec.sourceHydrator
-
objectspec.generators.matrix.generators.git.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.matrix.generators.git.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.matrix.generators.git.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.matrix.generators.git.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.matrix.generators.git.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.matrix.generators.git.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.matrix.generators.git.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.matrix.generators.git.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.matrix.generators.git.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.matrix.generators.git.template.spec.sources
-
stringspec.generators.matrix.generators.git.template.spec.sources.chart
-
objectspec.generators.matrix.generators.git.template.spec.sources.directory
-
stringspec.generators.matrix.generators.git.template.spec.sources.directory.exclude
-
stringspec.generators.matrix.generators.git.template.spec.sources.directory.include
-
objectspec.generators.matrix.generators.git.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.git.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.git.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.git.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.git.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.git.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.git.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.git.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.git.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.git.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.git.template.spec.sources.directory.recurse
-
-
objectspec.generators.matrix.generators.git.template.spec.sources.helm
-
array of stringsspec.generators.matrix.generators.git.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.git.template.spec.sources.helm.fileParameters
-
stringspec.generators.matrix.generators.git.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.matrix.generators.git.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.git.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.git.template.spec.sources.helm.kubeVersion
-
stringspec.generators.matrix.generators.git.template.spec.sources.helm.namespace
-
array of objectsspec.generators.matrix.generators.git.template.spec.sources.helm.parameters
-
booleanspec.generators.matrix.generators.git.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.matrix.generators.git.template.spec.sources.helm.parameters.name
-
stringspec.generators.matrix.generators.git.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.git.template.spec.sources.helm.passCredentials
-
stringspec.generators.matrix.generators.git.template.spec.sources.helm.releaseName
-
booleanspec.generators.matrix.generators.git.template.spec.sources.helm.skipCrds
-
booleanspec.generators.matrix.generators.git.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.git.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.matrix.generators.git.template.spec.sources.helm.valueFiles
-
stringspec.generators.matrix.generators.git.template.spec.sources.helm.values
-
objectspec.generators.matrix.generators.git.template.spec.sources.helm.valuesObject
-
stringspec.generators.matrix.generators.git.template.spec.sources.helm.version
-
-
objectspec.generators.matrix.generators.git.template.spec.sources.kustomize
-
array of stringsspec.generators.matrix.generators.git.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.matrix.generators.git.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.git.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.git.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.git.template.spec.sources.kustomize.components
-
booleanspec.generators.matrix.generators.git.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.git.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.git.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.git.template.spec.sources.kustomize.images
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.git.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.git.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.git.template.spec.sources.kustomize.patches
-
objectspec.generators.matrix.generators.git.template.spec.sources.kustomize.patches.options
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.patches.path
-
objectspec.generators.matrix.generators.git.template.spec.sources.kustomize.patches.target
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.git.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.git.template.spec.sources.kustomize.version
-
-
stringspec.generators.matrix.generators.git.template.spec.sources.name
-
stringspec.generators.matrix.generators.git.template.spec.sources.path
-
objectspec.generators.matrix.generators.git.template.spec.sources.plugin
-
array of objectsspec.generators.matrix.generators.git.template.spec.sources.plugin.env
-
stringspec.generators.matrix.generators.git.template.spec.sources.plugin.env.name
-
stringspec.generators.matrix.generators.git.template.spec.sources.plugin.env.value
-
-
stringspec.generators.matrix.generators.git.template.spec.sources.plugin.name
-
array of objectsspec.generators.matrix.generators.git.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.matrix.generators.git.template.spec.sources.plugin.parameters.array
-
objectspec.generators.matrix.generators.git.template.spec.sources.plugin.parameters.map
-
stringspec.generators.matrix.generators.git.template.spec.sources.plugin.parameters.name
-
stringspec.generators.matrix.generators.git.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.git.template.spec.sources.ref
-
stringspec.generators.matrix.generators.git.template.spec.sources.repoURL
-
stringspec.generators.matrix.generators.git.template.spec.sources.targetRevision
-
-
objectspec.generators.matrix.generators.git.template.spec.syncPolicy
-
objectspec.generators.matrix.generators.git.template.spec.syncPolicy.automated
-
booleanspec.generators.matrix.generators.git.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.matrix.generators.git.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.matrix.generators.git.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.matrix.generators.git.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.matrix.generators.git.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.matrix.generators.git.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.matrix.generators.git.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.matrix.generators.git.template.spec.syncPolicy.retry
-
objectspec.generators.matrix.generators.git.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.matrix.generators.git.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.matrix.generators.git.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.matrix.generators.git.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.matrix.generators.git.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.matrix.generators.git.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.matrix.generators.git.values
-
-
objectspec.generators.matrix.generators.list
-
arrayspec.generators.matrix.generators.list.elements
-
stringspec.generators.matrix.generators.list.elementsYaml
-
objectspec.generators.matrix.generators.list.template
-
objectspec.generators.matrix.generators.list.template.metadata
Required value
-
objectspec.generators.matrix.generators.list.template.metadata.annotations
-
array of stringsspec.generators.matrix.generators.list.template.metadata.finalizers
-
objectspec.generators.matrix.generators.list.template.metadata.labels
-
stringspec.generators.matrix.generators.list.template.metadata.name
-
stringspec.generators.matrix.generators.list.template.metadata.namespace
-
-
objectspec.generators.matrix.generators.list.template.spec
Required value
-
objectspec.generators.matrix.generators.list.template.spec.destination
Required value
-
stringspec.generators.matrix.generators.list.template.spec.destination.name
-
stringspec.generators.matrix.generators.list.template.spec.destination.namespace
-
stringspec.generators.matrix.generators.list.template.spec.destination.server
-
-
array of objectsspec.generators.matrix.generators.list.template.spec.ignoreDifferences
-
stringspec.generators.matrix.generators.list.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.matrix.generators.list.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.matrix.generators.list.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.matrix.generators.list.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.matrix.generators.list.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.matrix.generators.list.template.spec.ignoreDifferences.name
-
stringspec.generators.matrix.generators.list.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.matrix.generators.list.template.spec.info
-
stringspec.generators.matrix.generators.list.template.spec.info.name
-
stringspec.generators.matrix.generators.list.template.spec.info.value
-
-
stringspec.generators.matrix.generators.list.template.spec.project
Required value
-
integerspec.generators.matrix.generators.list.template.spec.revisionHistoryLimit
-
objectspec.generators.matrix.generators.list.template.spec.source
-
stringspec.generators.matrix.generators.list.template.spec.source.chart
-
objectspec.generators.matrix.generators.list.template.spec.source.directory
-
stringspec.generators.matrix.generators.list.template.spec.source.directory.exclude
-
stringspec.generators.matrix.generators.list.template.spec.source.directory.include
-
objectspec.generators.matrix.generators.list.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.list.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.list.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.list.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.list.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.list.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.list.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.list.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.list.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.list.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.list.template.spec.source.directory.recurse
-
-
objectspec.generators.matrix.generators.list.template.spec.source.helm
-
array of stringsspec.generators.matrix.generators.list.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.list.template.spec.source.helm.fileParameters
-
stringspec.generators.matrix.generators.list.template.spec.source.helm.fileParameters.name
-
stringspec.generators.matrix.generators.list.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.list.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.list.template.spec.source.helm.kubeVersion
-
stringspec.generators.matrix.generators.list.template.spec.source.helm.namespace
-
array of objectsspec.generators.matrix.generators.list.template.spec.source.helm.parameters
-
booleanspec.generators.matrix.generators.list.template.spec.source.helm.parameters.forceString
-
stringspec.generators.matrix.generators.list.template.spec.source.helm.parameters.name
-
stringspec.generators.matrix.generators.list.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.list.template.spec.source.helm.passCredentials
-
stringspec.generators.matrix.generators.list.template.spec.source.helm.releaseName
-
booleanspec.generators.matrix.generators.list.template.spec.source.helm.skipCrds
-
booleanspec.generators.matrix.generators.list.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.list.template.spec.source.helm.skipTests
-
array of stringsspec.generators.matrix.generators.list.template.spec.source.helm.valueFiles
-
stringspec.generators.matrix.generators.list.template.spec.source.helm.values
-
objectspec.generators.matrix.generators.list.template.spec.source.helm.valuesObject
-
stringspec.generators.matrix.generators.list.template.spec.source.helm.version
-
-
objectspec.generators.matrix.generators.list.template.spec.source.kustomize
-
array of stringsspec.generators.matrix.generators.list.template.spec.source.kustomize.apiVersions
-
objectspec.generators.matrix.generators.list.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.list.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.list.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.list.template.spec.source.kustomize.components
-
booleanspec.generators.matrix.generators.list.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.list.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.list.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.list.template.spec.source.kustomize.images
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.list.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.list.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.namePrefix
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.list.template.spec.source.kustomize.patches
-
objectspec.generators.matrix.generators.list.template.spec.source.kustomize.patches.options
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.patches.patch
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.patches.path
-
objectspec.generators.matrix.generators.list.template.spec.source.kustomize.patches.target
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.list.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.list.template.spec.source.kustomize.replicas.count
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.list.template.spec.source.kustomize.version
-
-
stringspec.generators.matrix.generators.list.template.spec.source.name
-
stringspec.generators.matrix.generators.list.template.spec.source.path
-
objectspec.generators.matrix.generators.list.template.spec.source.plugin
-
array of objectsspec.generators.matrix.generators.list.template.spec.source.plugin.env
-
stringspec.generators.matrix.generators.list.template.spec.source.plugin.env.name
-
stringspec.generators.matrix.generators.list.template.spec.source.plugin.env.value
-
-
stringspec.generators.matrix.generators.list.template.spec.source.plugin.name
-
array of objectsspec.generators.matrix.generators.list.template.spec.source.plugin.parameters
-
array of stringsspec.generators.matrix.generators.list.template.spec.source.plugin.parameters.array
-
objectspec.generators.matrix.generators.list.template.spec.source.plugin.parameters.map
-
stringspec.generators.matrix.generators.list.template.spec.source.plugin.parameters.name
-
stringspec.generators.matrix.generators.list.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.list.template.spec.source.ref
-
stringspec.generators.matrix.generators.list.template.spec.source.repoURL
Required value
-
stringspec.generators.matrix.generators.list.template.spec.source.targetRevision
-
-
objectspec.generators.matrix.generators.list.template.spec.sourceHydrator
-
objectspec.generators.matrix.generators.list.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.matrix.generators.list.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.matrix.generators.list.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.matrix.generators.list.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.matrix.generators.list.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.matrix.generators.list.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.matrix.generators.list.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.matrix.generators.list.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.matrix.generators.list.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.matrix.generators.list.template.spec.sources
-
stringspec.generators.matrix.generators.list.template.spec.sources.chart
-
objectspec.generators.matrix.generators.list.template.spec.sources.directory
-
stringspec.generators.matrix.generators.list.template.spec.sources.directory.exclude
-
stringspec.generators.matrix.generators.list.template.spec.sources.directory.include
-
objectspec.generators.matrix.generators.list.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.list.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.list.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.list.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.list.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.list.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.list.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.list.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.list.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.list.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.list.template.spec.sources.directory.recurse
-
-
objectspec.generators.matrix.generators.list.template.spec.sources.helm
-
array of stringsspec.generators.matrix.generators.list.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.list.template.spec.sources.helm.fileParameters
-
stringspec.generators.matrix.generators.list.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.matrix.generators.list.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.list.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.list.template.spec.sources.helm.kubeVersion
-
stringspec.generators.matrix.generators.list.template.spec.sources.helm.namespace
-
array of objectsspec.generators.matrix.generators.list.template.spec.sources.helm.parameters
-
booleanspec.generators.matrix.generators.list.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.matrix.generators.list.template.spec.sources.helm.parameters.name
-
stringspec.generators.matrix.generators.list.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.list.template.spec.sources.helm.passCredentials
-
stringspec.generators.matrix.generators.list.template.spec.sources.helm.releaseName
-
booleanspec.generators.matrix.generators.list.template.spec.sources.helm.skipCrds
-
booleanspec.generators.matrix.generators.list.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.list.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.matrix.generators.list.template.spec.sources.helm.valueFiles
-
stringspec.generators.matrix.generators.list.template.spec.sources.helm.values
-
objectspec.generators.matrix.generators.list.template.spec.sources.helm.valuesObject
-
stringspec.generators.matrix.generators.list.template.spec.sources.helm.version
-
-
objectspec.generators.matrix.generators.list.template.spec.sources.kustomize
-
array of stringsspec.generators.matrix.generators.list.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.matrix.generators.list.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.list.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.list.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.list.template.spec.sources.kustomize.components
-
booleanspec.generators.matrix.generators.list.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.list.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.list.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.list.template.spec.sources.kustomize.images
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.list.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.list.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.list.template.spec.sources.kustomize.patches
-
objectspec.generators.matrix.generators.list.template.spec.sources.kustomize.patches.options
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.patches.path
-
objectspec.generators.matrix.generators.list.template.spec.sources.kustomize.patches.target
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.list.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.list.template.spec.sources.kustomize.version
-
-
stringspec.generators.matrix.generators.list.template.spec.sources.name
-
stringspec.generators.matrix.generators.list.template.spec.sources.path
-
objectspec.generators.matrix.generators.list.template.spec.sources.plugin
-
array of objectsspec.generators.matrix.generators.list.template.spec.sources.plugin.env
-
stringspec.generators.matrix.generators.list.template.spec.sources.plugin.env.name
-
stringspec.generators.matrix.generators.list.template.spec.sources.plugin.env.value
-
-
stringspec.generators.matrix.generators.list.template.spec.sources.plugin.name
-
array of objectsspec.generators.matrix.generators.list.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.matrix.generators.list.template.spec.sources.plugin.parameters.array
-
objectspec.generators.matrix.generators.list.template.spec.sources.plugin.parameters.map
-
stringspec.generators.matrix.generators.list.template.spec.sources.plugin.parameters.name
-
stringspec.generators.matrix.generators.list.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.list.template.spec.sources.ref
-
stringspec.generators.matrix.generators.list.template.spec.sources.repoURL
-
stringspec.generators.matrix.generators.list.template.spec.sources.targetRevision
-
-
objectspec.generators.matrix.generators.list.template.spec.syncPolicy
-
objectspec.generators.matrix.generators.list.template.spec.syncPolicy.automated
-
booleanspec.generators.matrix.generators.list.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.matrix.generators.list.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.matrix.generators.list.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.matrix.generators.list.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.matrix.generators.list.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.matrix.generators.list.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.matrix.generators.list.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.matrix.generators.list.template.spec.syncPolicy.retry
-
objectspec.generators.matrix.generators.list.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.matrix.generators.list.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.matrix.generators.list.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.matrix.generators.list.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.matrix.generators.list.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.matrix.generators.list.template.spec.syncPolicy.syncOptions
-
-
-
-
-
spec.generators.matrix.generators.matrix
-
spec.generators.matrix.generators.merge
-
objectspec.generators.matrix.generators.plugin
-
objectspec.generators.matrix.generators.plugin.configMapRef
Required value
-
stringspec.generators.matrix.generators.plugin.configMapRef.name
Required value
-
-
objectspec.generators.matrix.generators.plugin.input
-
objectspec.generators.matrix.generators.plugin.input.parameters
-
-
integerspec.generators.matrix.generators.plugin.requeueAfterSeconds
-
objectspec.generators.matrix.generators.plugin.template
-
objectspec.generators.matrix.generators.plugin.template.metadata
Required value
-
objectspec.generators.matrix.generators.plugin.template.metadata.annotations
-
array of stringsspec.generators.matrix.generators.plugin.template.metadata.finalizers
-
objectspec.generators.matrix.generators.plugin.template.metadata.labels
-
stringspec.generators.matrix.generators.plugin.template.metadata.name
-
stringspec.generators.matrix.generators.plugin.template.metadata.namespace
-
-
objectspec.generators.matrix.generators.plugin.template.spec
Required value
-
objectspec.generators.matrix.generators.plugin.template.spec.destination
Required value
-
stringspec.generators.matrix.generators.plugin.template.spec.destination.name
-
stringspec.generators.matrix.generators.plugin.template.spec.destination.namespace
-
stringspec.generators.matrix.generators.plugin.template.spec.destination.server
-
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.ignoreDifferences
-
stringspec.generators.matrix.generators.plugin.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.matrix.generators.plugin.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.matrix.generators.plugin.template.spec.ignoreDifferences.name
-
stringspec.generators.matrix.generators.plugin.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.info
-
stringspec.generators.matrix.generators.plugin.template.spec.info.name
-
stringspec.generators.matrix.generators.plugin.template.spec.info.value
-
-
stringspec.generators.matrix.generators.plugin.template.spec.project
Required value
-
integerspec.generators.matrix.generators.plugin.template.spec.revisionHistoryLimit
-
objectspec.generators.matrix.generators.plugin.template.spec.source
-
stringspec.generators.matrix.generators.plugin.template.spec.source.chart
-
objectspec.generators.matrix.generators.plugin.template.spec.source.directory
-
stringspec.generators.matrix.generators.plugin.template.spec.source.directory.exclude
-
stringspec.generators.matrix.generators.plugin.template.spec.source.directory.include
-
objectspec.generators.matrix.generators.plugin.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.plugin.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.plugin.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.plugin.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.plugin.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.directory.recurse
-
-
objectspec.generators.matrix.generators.plugin.template.spec.source.helm
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.source.helm.fileParameters
-
stringspec.generators.matrix.generators.plugin.template.spec.source.helm.fileParameters.name
-
stringspec.generators.matrix.generators.plugin.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.plugin.template.spec.source.helm.kubeVersion
-
stringspec.generators.matrix.generators.plugin.template.spec.source.helm.namespace
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.source.helm.parameters
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.helm.parameters.forceString
-
stringspec.generators.matrix.generators.plugin.template.spec.source.helm.parameters.name
-
stringspec.generators.matrix.generators.plugin.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.helm.passCredentials
-
stringspec.generators.matrix.generators.plugin.template.spec.source.helm.releaseName
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.helm.skipCrds
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.helm.skipTests
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.source.helm.valueFiles
-
stringspec.generators.matrix.generators.plugin.template.spec.source.helm.values
-
objectspec.generators.matrix.generators.plugin.template.spec.source.helm.valuesObject
-
stringspec.generators.matrix.generators.plugin.template.spec.source.helm.version
-
-
objectspec.generators.matrix.generators.plugin.template.spec.source.kustomize
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.source.kustomize.apiVersions
-
objectspec.generators.matrix.generators.plugin.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.plugin.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.source.kustomize.components
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.source.kustomize.images
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.plugin.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.namePrefix
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.source.kustomize.patches
-
objectspec.generators.matrix.generators.plugin.template.spec.source.kustomize.patches.options
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.patches.patch
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.patches.path
-
objectspec.generators.matrix.generators.plugin.template.spec.source.kustomize.patches.target
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.replicas.count
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.plugin.template.spec.source.kustomize.version
-
-
stringspec.generators.matrix.generators.plugin.template.spec.source.name
-
stringspec.generators.matrix.generators.plugin.template.spec.source.path
-
objectspec.generators.matrix.generators.plugin.template.spec.source.plugin
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.source.plugin.env
-
stringspec.generators.matrix.generators.plugin.template.spec.source.plugin.env.name
-
stringspec.generators.matrix.generators.plugin.template.spec.source.plugin.env.value
-
-
stringspec.generators.matrix.generators.plugin.template.spec.source.plugin.name
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.source.plugin.parameters
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.source.plugin.parameters.array
-
objectspec.generators.matrix.generators.plugin.template.spec.source.plugin.parameters.map
-
stringspec.generators.matrix.generators.plugin.template.spec.source.plugin.parameters.name
-
stringspec.generators.matrix.generators.plugin.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.plugin.template.spec.source.ref
-
stringspec.generators.matrix.generators.plugin.template.spec.source.repoURL
Required value
-
stringspec.generators.matrix.generators.plugin.template.spec.source.targetRevision
-
-
objectspec.generators.matrix.generators.plugin.template.spec.sourceHydrator
-
objectspec.generators.matrix.generators.plugin.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.matrix.generators.plugin.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.matrix.generators.plugin.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.matrix.generators.plugin.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.matrix.generators.plugin.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.matrix.generators.plugin.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.matrix.generators.plugin.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.matrix.generators.plugin.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.matrix.generators.plugin.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.sources
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.chart
-
objectspec.generators.matrix.generators.plugin.template.spec.sources.directory
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.directory.exclude
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.directory.include
-
objectspec.generators.matrix.generators.plugin.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.directory.recurse
-
-
objectspec.generators.matrix.generators.plugin.template.spec.sources.helm
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.sources.helm.fileParameters
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.helm.kubeVersion
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.helm.namespace
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.sources.helm.parameters
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.helm.parameters.name
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.helm.passCredentials
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.helm.releaseName
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.helm.skipCrds
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.sources.helm.valueFiles
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.helm.values
-
objectspec.generators.matrix.generators.plugin.template.spec.sources.helm.valuesObject
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.helm.version
-
-
objectspec.generators.matrix.generators.plugin.template.spec.sources.kustomize
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.components
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.images
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.patches
-
objectspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.patches.options
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.patches.path
-
objectspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.patches.target
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.kustomize.version
-
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.name
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.path
-
objectspec.generators.matrix.generators.plugin.template.spec.sources.plugin
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.sources.plugin.env
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.plugin.env.name
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.plugin.env.value
-
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.plugin.name
-
array of objectsspec.generators.matrix.generators.plugin.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.sources.plugin.parameters.array
-
objectspec.generators.matrix.generators.plugin.template.spec.sources.plugin.parameters.map
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.plugin.parameters.name
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.ref
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.repoURL
-
stringspec.generators.matrix.generators.plugin.template.spec.sources.targetRevision
-
-
objectspec.generators.matrix.generators.plugin.template.spec.syncPolicy
-
objectspec.generators.matrix.generators.plugin.template.spec.syncPolicy.automated
-
booleanspec.generators.matrix.generators.plugin.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.matrix.generators.plugin.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.matrix.generators.plugin.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.matrix.generators.plugin.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.matrix.generators.plugin.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.matrix.generators.plugin.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.matrix.generators.plugin.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.matrix.generators.plugin.template.spec.syncPolicy.retry
-
objectspec.generators.matrix.generators.plugin.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.matrix.generators.plugin.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.matrix.generators.plugin.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.matrix.generators.plugin.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.matrix.generators.plugin.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.matrix.generators.plugin.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.matrix.generators.plugin.values
-
-
objectspec.generators.matrix.generators.pullRequest
-
objectspec.generators.matrix.generators.pullRequest.azuredevops
-
stringspec.generators.matrix.generators.pullRequest.azuredevops.api
-
array of stringsspec.generators.matrix.generators.pullRequest.azuredevops.labels
-
stringspec.generators.matrix.generators.pullRequest.azuredevops.organization
Required value
-
stringspec.generators.matrix.generators.pullRequest.azuredevops.project
Required value
-
stringspec.generators.matrix.generators.pullRequest.azuredevops.repo
Required value
-
objectspec.generators.matrix.generators.pullRequest.azuredevops.tokenRef
-
stringspec.generators.matrix.generators.pullRequest.azuredevops.tokenRef.key
Required value
-
stringspec.generators.matrix.generators.pullRequest.azuredevops.tokenRef.secretName
Required value
-
-
-
objectspec.generators.matrix.generators.pullRequest.bitbucket
-
stringspec.generators.matrix.generators.pullRequest.bitbucket.api
-
objectspec.generators.matrix.generators.pullRequest.bitbucket.basicAuth
-
objectspec.generators.matrix.generators.pullRequest.bitbucket.basicAuth.passwordRef
Required value
-
stringspec.generators.matrix.generators.pullRequest.bitbucket.basicAuth.passwordRef.key
Required value
-
stringspec.generators.matrix.generators.pullRequest.bitbucket.basicAuth.passwordRef.secretName
Required value
-
-
stringspec.generators.matrix.generators.pullRequest.bitbucket.basicAuth.username
Required value
-
-
objectspec.generators.matrix.generators.pullRequest.bitbucket.bearerToken
-
objectspec.generators.matrix.generators.pullRequest.bitbucket.bearerToken.tokenRef
Required value
-
stringspec.generators.matrix.generators.pullRequest.bitbucket.bearerToken.tokenRef.key
Required value
-
stringspec.generators.matrix.generators.pullRequest.bitbucket.bearerToken.tokenRef.secretName
Required value
-
-
-
stringspec.generators.matrix.generators.pullRequest.bitbucket.owner
Required value
-
stringspec.generators.matrix.generators.pullRequest.bitbucket.repo
Required value
-
-
objectspec.generators.matrix.generators.pullRequest.bitbucketServer
-
stringspec.generators.matrix.generators.pullRequest.bitbucketServer.api
Required value
-
objectspec.generators.matrix.generators.pullRequest.bitbucketServer.basicAuth
-
objectspec.generators.matrix.generators.pullRequest.bitbucketServer.basicAuth.passwordRef
Required value
-
stringspec.generators.matrix.generators.pullRequest.bitbucketServer.basicAuth.passwordRef.key
Required value
-
stringspec.generators.matrix.generators.pullRequest.bitbucketServer.basicAuth.passwordRef.secretName
Required value
-
-
stringspec.generators.matrix.generators.pullRequest.bitbucketServer.basicAuth.username
Required value
-
-
objectspec.generators.matrix.generators.pullRequest.bitbucketServer.bearerToken
-
objectspec.generators.matrix.generators.pullRequest.bitbucketServer.bearerToken.tokenRef
Required value
-
stringspec.generators.matrix.generators.pullRequest.bitbucketServer.bearerToken.tokenRef.key
Required value
-
stringspec.generators.matrix.generators.pullRequest.bitbucketServer.bearerToken.tokenRef.secretName
Required value
-
-
-
objectspec.generators.matrix.generators.pullRequest.bitbucketServer.caRef
-
stringspec.generators.matrix.generators.pullRequest.bitbucketServer.caRef.configMapName
Required value
-
stringspec.generators.matrix.generators.pullRequest.bitbucketServer.caRef.key
Required value
-
-
booleanspec.generators.matrix.generators.pullRequest.bitbucketServer.insecure
-
stringspec.generators.matrix.generators.pullRequest.bitbucketServer.project
Required value
-
stringspec.generators.matrix.generators.pullRequest.bitbucketServer.repo
Required value
-
-
array of objectsspec.generators.matrix.generators.pullRequest.filters
-
stringspec.generators.matrix.generators.pullRequest.filters.branchMatch
-
stringspec.generators.matrix.generators.pullRequest.filters.targetBranchMatch
-
-
objectspec.generators.matrix.generators.pullRequest.gitea
-
stringspec.generators.matrix.generators.pullRequest.gitea.api
Required value
-
booleanspec.generators.matrix.generators.pullRequest.gitea.insecure
-
array of stringsspec.generators.matrix.generators.pullRequest.gitea.labels
-
stringspec.generators.matrix.generators.pullRequest.gitea.owner
Required value
-
stringspec.generators.matrix.generators.pullRequest.gitea.repo
Required value
-
objectspec.generators.matrix.generators.pullRequest.gitea.tokenRef
-
stringspec.generators.matrix.generators.pullRequest.gitea.tokenRef.key
Required value
-
stringspec.generators.matrix.generators.pullRequest.gitea.tokenRef.secretName
Required value
-
-
-
objectspec.generators.matrix.generators.pullRequest.github
-
stringspec.generators.matrix.generators.pullRequest.github.api
-
stringspec.generators.matrix.generators.pullRequest.github.appSecretName
-
array of stringsspec.generators.matrix.generators.pullRequest.github.labels
-
stringspec.generators.matrix.generators.pullRequest.github.owner
Required value
-
stringspec.generators.matrix.generators.pullRequest.github.repo
Required value
-
objectspec.generators.matrix.generators.pullRequest.github.tokenRef
-
stringspec.generators.matrix.generators.pullRequest.github.tokenRef.key
Required value
-
stringspec.generators.matrix.generators.pullRequest.github.tokenRef.secretName
Required value
-
-
-
objectspec.generators.matrix.generators.pullRequest.gitlab
-
stringspec.generators.matrix.generators.pullRequest.gitlab.api
-
objectspec.generators.matrix.generators.pullRequest.gitlab.caRef
-
stringspec.generators.matrix.generators.pullRequest.gitlab.caRef.configMapName
Required value
-
stringspec.generators.matrix.generators.pullRequest.gitlab.caRef.key
Required value
-
-
booleanspec.generators.matrix.generators.pullRequest.gitlab.insecure
-
array of stringsspec.generators.matrix.generators.pullRequest.gitlab.labels
-
stringspec.generators.matrix.generators.pullRequest.gitlab.project
Required value
-
stringspec.generators.matrix.generators.pullRequest.gitlab.pullRequestState
-
objectspec.generators.matrix.generators.pullRequest.gitlab.tokenRef
-
stringspec.generators.matrix.generators.pullRequest.gitlab.tokenRef.key
Required value
-
stringspec.generators.matrix.generators.pullRequest.gitlab.tokenRef.secretName
Required value
-
-
-
integerspec.generators.matrix.generators.pullRequest.requeueAfterSeconds
-
objectspec.generators.matrix.generators.pullRequest.template
-
objectspec.generators.matrix.generators.pullRequest.template.metadata
Required value
-
objectspec.generators.matrix.generators.pullRequest.template.metadata.annotations
-
array of stringsspec.generators.matrix.generators.pullRequest.template.metadata.finalizers
-
objectspec.generators.matrix.generators.pullRequest.template.metadata.labels
-
stringspec.generators.matrix.generators.pullRequest.template.metadata.name
-
stringspec.generators.matrix.generators.pullRequest.template.metadata.namespace
-
-
objectspec.generators.matrix.generators.pullRequest.template.spec
Required value
-
objectspec.generators.matrix.generators.pullRequest.template.spec.destination
Required value
-
stringspec.generators.matrix.generators.pullRequest.template.spec.destination.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.destination.namespace
-
stringspec.generators.matrix.generators.pullRequest.template.spec.destination.server
-
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.ignoreDifferences
-
stringspec.generators.matrix.generators.pullRequest.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.matrix.generators.pullRequest.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.matrix.generators.pullRequest.template.spec.ignoreDifferences.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.info
-
stringspec.generators.matrix.generators.pullRequest.template.spec.info.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.info.value
-
-
stringspec.generators.matrix.generators.pullRequest.template.spec.project
Required value
-
integerspec.generators.matrix.generators.pullRequest.template.spec.revisionHistoryLimit
-
objectspec.generators.matrix.generators.pullRequest.template.spec.source
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.chart
-
objectspec.generators.matrix.generators.pullRequest.template.spec.source.directory
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.directory.exclude
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.directory.include
-
objectspec.generators.matrix.generators.pullRequest.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.directory.recurse
-
-
objectspec.generators.matrix.generators.pullRequest.template.spec.source.helm
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.source.helm.fileParameters
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.helm.fileParameters.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.helm.kubeVersion
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.helm.namespace
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.source.helm.parameters
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.helm.parameters.forceString
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.helm.parameters.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.helm.passCredentials
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.helm.releaseName
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.helm.skipCrds
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.helm.skipTests
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.source.helm.valueFiles
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.helm.values
-
objectspec.generators.matrix.generators.pullRequest.template.spec.source.helm.valuesObject
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.helm.version
-
-
objectspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.apiVersions
-
objectspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.components
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.images
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.namePrefix
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.patches
-
objectspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.patches.options
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.patches.patch
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.patches.path
-
objectspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.patches.target
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.replicas.count
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.kustomize.version
-
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.path
-
objectspec.generators.matrix.generators.pullRequest.template.spec.source.plugin
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.source.plugin.env
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.plugin.env.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.plugin.env.value
-
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.plugin.name
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.source.plugin.parameters
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.source.plugin.parameters.array
-
objectspec.generators.matrix.generators.pullRequest.template.spec.source.plugin.parameters.map
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.plugin.parameters.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.ref
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.repoURL
Required value
-
stringspec.generators.matrix.generators.pullRequest.template.spec.source.targetRevision
-
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sourceHydrator
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.sources
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.chart
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sources.directory
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.exclude
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.include
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.directory.recurse
-
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sources.helm
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.fileParameters
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.kubeVersion
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.namespace
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.parameters
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.parameters.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.passCredentials
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.releaseName
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.skipCrds
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.valueFiles
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.values
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.valuesObject
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.helm.version
-
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.components
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.images
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.patches
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.patches.options
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.patches.path
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.patches.target
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.kustomize.version
-
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.path
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sources.plugin
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.sources.plugin.env
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.plugin.env.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.plugin.env.value
-
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.plugin.name
-
array of objectsspec.generators.matrix.generators.pullRequest.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.sources.plugin.parameters.array
-
objectspec.generators.matrix.generators.pullRequest.template.spec.sources.plugin.parameters.map
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.plugin.parameters.name
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.ref
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.repoURL
-
stringspec.generators.matrix.generators.pullRequest.template.spec.sources.targetRevision
-
-
objectspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy
-
objectspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.automated
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.retry
-
objectspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.matrix.generators.pullRequest.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.matrix.generators.pullRequest.values
-
-
objectspec.generators.matrix.generators.scmProvider
-
objectspec.generators.matrix.generators.scmProvider.awsCodeCommit
-
booleanspec.generators.matrix.generators.scmProvider.awsCodeCommit.allBranches
-
stringspec.generators.matrix.generators.scmProvider.awsCodeCommit.region
-
stringspec.generators.matrix.generators.scmProvider.awsCodeCommit.role
-
array of objectsspec.generators.matrix.generators.scmProvider.awsCodeCommit.tagFilters
-
stringspec.generators.matrix.generators.scmProvider.awsCodeCommit.tagFilters.key
-
stringspec.generators.matrix.generators.scmProvider.awsCodeCommit.tagFilters.value
-
-
-
objectspec.generators.matrix.generators.scmProvider.azureDevOps
-
objectspec.generators.matrix.generators.scmProvider.azureDevOps.accessTokenRef
Required value
-
stringspec.generators.matrix.generators.scmProvider.azureDevOps.accessTokenRef.key
Required value
-
stringspec.generators.matrix.generators.scmProvider.azureDevOps.accessTokenRef.secretName
Required value
-
-
booleanspec.generators.matrix.generators.scmProvider.azureDevOps.allBranches
-
stringspec.generators.matrix.generators.scmProvider.azureDevOps.api
-
stringspec.generators.matrix.generators.scmProvider.azureDevOps.organization
Required value
-
stringspec.generators.matrix.generators.scmProvider.azureDevOps.teamProject
Required value
-
-
objectspec.generators.matrix.generators.scmProvider.bitbucket
-
booleanspec.generators.matrix.generators.scmProvider.bitbucket.allBranches
-
objectspec.generators.matrix.generators.scmProvider.bitbucket.appPasswordRef
Required value
-
stringspec.generators.matrix.generators.scmProvider.bitbucket.appPasswordRef.key
Required value
-
stringspec.generators.matrix.generators.scmProvider.bitbucket.appPasswordRef.secretName
Required value
-
-
stringspec.generators.matrix.generators.scmProvider.bitbucket.owner
Required value
-
stringspec.generators.matrix.generators.scmProvider.bitbucket.user
Required value
-
-
objectspec.generators.matrix.generators.scmProvider.bitbucketServer
-
booleanspec.generators.matrix.generators.scmProvider.bitbucketServer.allBranches
-
stringspec.generators.matrix.generators.scmProvider.bitbucketServer.api
Required value
-
objectspec.generators.matrix.generators.scmProvider.bitbucketServer.basicAuth
-
objectspec.generators.matrix.generators.scmProvider.bitbucketServer.basicAuth.passwordRef
Required value
-
stringspec.generators.matrix.generators.scmProvider.bitbucketServer.basicAuth.passwordRef.key
Required value
-
stringspec.generators.matrix.generators.scmProvider.bitbucketServer.basicAuth.passwordRef.secretName
Required value
-
-
stringspec.generators.matrix.generators.scmProvider.bitbucketServer.basicAuth.username
Required value
-
-
objectspec.generators.matrix.generators.scmProvider.bitbucketServer.bearerToken
-
objectspec.generators.matrix.generators.scmProvider.bitbucketServer.bearerToken.tokenRef
Required value
-
stringspec.generators.matrix.generators.scmProvider.bitbucketServer.bearerToken.tokenRef.key
Required value
-
stringspec.generators.matrix.generators.scmProvider.bitbucketServer.bearerToken.tokenRef.secretName
Required value
-
-
-
objectspec.generators.matrix.generators.scmProvider.bitbucketServer.caRef
-
stringspec.generators.matrix.generators.scmProvider.bitbucketServer.caRef.configMapName
Required value
-
stringspec.generators.matrix.generators.scmProvider.bitbucketServer.caRef.key
Required value
-
-
booleanspec.generators.matrix.generators.scmProvider.bitbucketServer.insecure
-
stringspec.generators.matrix.generators.scmProvider.bitbucketServer.project
Required value
-
-
stringspec.generators.matrix.generators.scmProvider.cloneProtocol
-
array of objectsspec.generators.matrix.generators.scmProvider.filters
-
stringspec.generators.matrix.generators.scmProvider.filters.branchMatch
-
stringspec.generators.matrix.generators.scmProvider.filters.labelMatch
-
array of stringsspec.generators.matrix.generators.scmProvider.filters.pathsDoNotExist
-
array of stringsspec.generators.matrix.generators.scmProvider.filters.pathsExist
-
stringspec.generators.matrix.generators.scmProvider.filters.repositoryMatch
-
-
objectspec.generators.matrix.generators.scmProvider.gitea
-
booleanspec.generators.matrix.generators.scmProvider.gitea.allBranches
-
stringspec.generators.matrix.generators.scmProvider.gitea.api
Required value
-
booleanspec.generators.matrix.generators.scmProvider.gitea.insecure
-
stringspec.generators.matrix.generators.scmProvider.gitea.owner
Required value
-
objectspec.generators.matrix.generators.scmProvider.gitea.tokenRef
-
stringspec.generators.matrix.generators.scmProvider.gitea.tokenRef.key
Required value
-
stringspec.generators.matrix.generators.scmProvider.gitea.tokenRef.secretName
Required value
-
-
-
objectspec.generators.matrix.generators.scmProvider.github
-
booleanspec.generators.matrix.generators.scmProvider.github.allBranches
-
stringspec.generators.matrix.generators.scmProvider.github.api
-
stringspec.generators.matrix.generators.scmProvider.github.appSecretName
-
stringspec.generators.matrix.generators.scmProvider.github.organization
Required value
-
objectspec.generators.matrix.generators.scmProvider.github.tokenRef
-
stringspec.generators.matrix.generators.scmProvider.github.tokenRef.key
Required value
-
stringspec.generators.matrix.generators.scmProvider.github.tokenRef.secretName
Required value
-
-
-
objectspec.generators.matrix.generators.scmProvider.gitlab
-
booleanspec.generators.matrix.generators.scmProvider.gitlab.allBranches
-
stringspec.generators.matrix.generators.scmProvider.gitlab.api
-
objectspec.generators.matrix.generators.scmProvider.gitlab.caRef
-
stringspec.generators.matrix.generators.scmProvider.gitlab.caRef.configMapName
Required value
-
stringspec.generators.matrix.generators.scmProvider.gitlab.caRef.key
Required value
-
-
stringspec.generators.matrix.generators.scmProvider.gitlab.group
Required value
-
boolean
-
booleanspec.generators.matrix.generators.scmProvider.gitlab.includeSubgroups
-
booleanspec.generators.matrix.generators.scmProvider.gitlab.insecure
-
objectspec.generators.matrix.generators.scmProvider.gitlab.tokenRef
-
stringspec.generators.matrix.generators.scmProvider.gitlab.tokenRef.key
Required value
-
stringspec.generators.matrix.generators.scmProvider.gitlab.tokenRef.secretName
Required value
-
-
stringspec.generators.matrix.generators.scmProvider.gitlab.topic
-
-
integerspec.generators.matrix.generators.scmProvider.requeueAfterSeconds
-
objectspec.generators.matrix.generators.scmProvider.template
-
objectspec.generators.matrix.generators.scmProvider.template.metadata
Required value
-
objectspec.generators.matrix.generators.scmProvider.template.metadata.annotations
-
array of stringsspec.generators.matrix.generators.scmProvider.template.metadata.finalizers
-
objectspec.generators.matrix.generators.scmProvider.template.metadata.labels
-
stringspec.generators.matrix.generators.scmProvider.template.metadata.name
-
stringspec.generators.matrix.generators.scmProvider.template.metadata.namespace
-
-
objectspec.generators.matrix.generators.scmProvider.template.spec
Required value
-
objectspec.generators.matrix.generators.scmProvider.template.spec.destination
Required value
-
stringspec.generators.matrix.generators.scmProvider.template.spec.destination.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.destination.namespace
-
stringspec.generators.matrix.generators.scmProvider.template.spec.destination.server
-
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.ignoreDifferences
-
stringspec.generators.matrix.generators.scmProvider.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.matrix.generators.scmProvider.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.matrix.generators.scmProvider.template.spec.ignoreDifferences.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.info
-
stringspec.generators.matrix.generators.scmProvider.template.spec.info.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.info.value
-
-
stringspec.generators.matrix.generators.scmProvider.template.spec.project
Required value
-
integerspec.generators.matrix.generators.scmProvider.template.spec.revisionHistoryLimit
-
objectspec.generators.matrix.generators.scmProvider.template.spec.source
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.chart
-
objectspec.generators.matrix.generators.scmProvider.template.spec.source.directory
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.directory.exclude
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.directory.include
-
objectspec.generators.matrix.generators.scmProvider.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.directory.recurse
-
-
objectspec.generators.matrix.generators.scmProvider.template.spec.source.helm
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.source.helm.fileParameters
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.helm.fileParameters.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.helm.kubeVersion
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.helm.namespace
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.source.helm.parameters
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.helm.parameters.forceString
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.helm.parameters.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.helm.passCredentials
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.helm.releaseName
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.helm.skipCrds
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.helm.skipTests
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.source.helm.valueFiles
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.helm.values
-
objectspec.generators.matrix.generators.scmProvider.template.spec.source.helm.valuesObject
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.helm.version
-
-
objectspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.apiVersions
-
objectspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.components
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.images
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.namePrefix
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.patches
-
objectspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.patches.options
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.patches.patch
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.patches.path
-
objectspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.patches.target
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.replicas.count
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.kustomize.version
-
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.path
-
objectspec.generators.matrix.generators.scmProvider.template.spec.source.plugin
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.source.plugin.env
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.plugin.env.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.plugin.env.value
-
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.plugin.name
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.source.plugin.parameters
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.source.plugin.parameters.array
-
objectspec.generators.matrix.generators.scmProvider.template.spec.source.plugin.parameters.map
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.plugin.parameters.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.ref
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.repoURL
Required value
-
stringspec.generators.matrix.generators.scmProvider.template.spec.source.targetRevision
-
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sourceHydrator
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.sources
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.chart
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sources.directory
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.exclude
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.include
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.directory.recurse
-
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sources.helm
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.fileParameters
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.kubeVersion
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.namespace
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.parameters
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.parameters.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.passCredentials
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.releaseName
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.skipCrds
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.valueFiles
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.values
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.valuesObject
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.helm.version
-
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.components
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.images
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.patches
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.patches.options
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.patches.path
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.patches.target
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.kustomize.version
-
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.path
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sources.plugin
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.sources.plugin.env
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.plugin.env.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.plugin.env.value
-
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.plugin.name
-
array of objectsspec.generators.matrix.generators.scmProvider.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.sources.plugin.parameters.array
-
objectspec.generators.matrix.generators.scmProvider.template.spec.sources.plugin.parameters.map
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.plugin.parameters.name
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.ref
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.repoURL
-
stringspec.generators.matrix.generators.scmProvider.template.spec.sources.targetRevision
-
-
objectspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy
-
objectspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.automated
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.retry
-
objectspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.matrix.generators.scmProvider.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.matrix.generators.scmProvider.values
-
-
objectspec.generators.matrix.generators.selector
-
array of objectsspec.generators.matrix.generators.selector.matchExpressions
-
stringspec.generators.matrix.generators.selector.matchExpressions.key
-
stringspec.generators.matrix.generators.selector.matchExpressions.operator
-
array of stringsspec.generators.matrix.generators.selector.matchExpressions.values
-
-
objectspec.generators.matrix.generators.selector.matchLabels
-
-
-
objectspec.generators.matrix.template
-
objectspec.generators.matrix.template.metadata
Required value
-
objectspec.generators.matrix.template.metadata.annotations
-
array of stringsspec.generators.matrix.template.metadata.finalizers
-
objectspec.generators.matrix.template.metadata.labels
-
stringspec.generators.matrix.template.metadata.name
-
stringspec.generators.matrix.template.metadata.namespace
-
-
objectspec.generators.matrix.template.spec
Required value
-
objectspec.generators.matrix.template.spec.destination
Required value
-
stringspec.generators.matrix.template.spec.destination.name
-
stringspec.generators.matrix.template.spec.destination.namespace
-
stringspec.generators.matrix.template.spec.destination.server
-
-
array of objectsspec.generators.matrix.template.spec.ignoreDifferences
-
stringspec.generators.matrix.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.matrix.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.matrix.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.matrix.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.matrix.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.matrix.template.spec.ignoreDifferences.name
-
stringspec.generators.matrix.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.matrix.template.spec.info
-
stringspec.generators.matrix.template.spec.info.name
-
stringspec.generators.matrix.template.spec.info.value
-
-
stringspec.generators.matrix.template.spec.project
Required value
-
integerspec.generators.matrix.template.spec.revisionHistoryLimit
-
objectspec.generators.matrix.template.spec.source
-
stringspec.generators.matrix.template.spec.source.chart
-
objectspec.generators.matrix.template.spec.source.directory
-
stringspec.generators.matrix.template.spec.source.directory.exclude
-
stringspec.generators.matrix.template.spec.source.directory.include
-
objectspec.generators.matrix.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.matrix.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.matrix.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.matrix.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.template.spec.source.directory.recurse
-
-
objectspec.generators.matrix.template.spec.source.helm
-
array of stringsspec.generators.matrix.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.matrix.template.spec.source.helm.fileParameters
-
stringspec.generators.matrix.template.spec.source.helm.fileParameters.name
-
stringspec.generators.matrix.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.matrix.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.template.spec.source.helm.kubeVersion
-
stringspec.generators.matrix.template.spec.source.helm.namespace
-
array of objectsspec.generators.matrix.template.spec.source.helm.parameters
-
booleanspec.generators.matrix.template.spec.source.helm.parameters.forceString
-
stringspec.generators.matrix.template.spec.source.helm.parameters.name
-
stringspec.generators.matrix.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.matrix.template.spec.source.helm.passCredentials
-
stringspec.generators.matrix.template.spec.source.helm.releaseName
-
booleanspec.generators.matrix.template.spec.source.helm.skipCrds
-
booleanspec.generators.matrix.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.matrix.template.spec.source.helm.skipTests
-
array of stringsspec.generators.matrix.template.spec.source.helm.valueFiles
-
stringspec.generators.matrix.template.spec.source.helm.values
-
objectspec.generators.matrix.template.spec.source.helm.valuesObject
-
stringspec.generators.matrix.template.spec.source.helm.version
-
-
objectspec.generators.matrix.template.spec.source.kustomize
-
array of stringsspec.generators.matrix.template.spec.source.kustomize.apiVersions
-
objectspec.generators.matrix.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.matrix.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.matrix.template.spec.source.kustomize.components
-
booleanspec.generators.matrix.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.template.spec.source.kustomize.images
-
stringspec.generators.matrix.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.matrix.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.template.spec.source.kustomize.namePrefix
-
stringspec.generators.matrix.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.matrix.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.matrix.template.spec.source.kustomize.patches
-
objectspec.generators.matrix.template.spec.source.kustomize.patches.options
-
stringspec.generators.matrix.template.spec.source.kustomize.patches.patch
-
stringspec.generators.matrix.template.spec.source.kustomize.patches.path
-
objectspec.generators.matrix.template.spec.source.kustomize.patches.target
-
stringspec.generators.matrix.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.matrix.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.matrix.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.matrix.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.matrix.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.matrix.template.spec.source.kustomize.replicas.count
-
stringspec.generators.matrix.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.matrix.template.spec.source.kustomize.version
-
-
stringspec.generators.matrix.template.spec.source.name
-
stringspec.generators.matrix.template.spec.source.path
-
objectspec.generators.matrix.template.spec.source.plugin
-
array of objectsspec.generators.matrix.template.spec.source.plugin.env
-
stringspec.generators.matrix.template.spec.source.plugin.env.name
-
stringspec.generators.matrix.template.spec.source.plugin.env.value
-
-
stringspec.generators.matrix.template.spec.source.plugin.name
-
array of objectsspec.generators.matrix.template.spec.source.plugin.parameters
-
array of stringsspec.generators.matrix.template.spec.source.plugin.parameters.array
-
objectspec.generators.matrix.template.spec.source.plugin.parameters.map
-
stringspec.generators.matrix.template.spec.source.plugin.parameters.name
-
stringspec.generators.matrix.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.matrix.template.spec.source.ref
-
stringspec.generators.matrix.template.spec.source.repoURL
Required value
-
stringspec.generators.matrix.template.spec.source.targetRevision
-
-
objectspec.generators.matrix.template.spec.sourceHydrator
-
objectspec.generators.matrix.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.matrix.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.matrix.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.matrix.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.matrix.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.matrix.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.matrix.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.matrix.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.matrix.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.matrix.template.spec.sources
-
stringspec.generators.matrix.template.spec.sources.chart
-
objectspec.generators.matrix.template.spec.sources.directory
-
stringspec.generators.matrix.template.spec.sources.directory.exclude
-
stringspec.generators.matrix.template.spec.sources.directory.include
-
objectspec.generators.matrix.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.matrix.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.matrix.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.matrix.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.matrix.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.matrix.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.matrix.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.matrix.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.matrix.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.matrix.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.matrix.template.spec.sources.directory.recurse
-
-
objectspec.generators.matrix.template.spec.sources.helm
-
array of stringsspec.generators.matrix.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.matrix.template.spec.sources.helm.fileParameters
-
stringspec.generators.matrix.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.matrix.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.matrix.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.matrix.template.spec.sources.helm.kubeVersion
-
stringspec.generators.matrix.template.spec.sources.helm.namespace
-
array of objectsspec.generators.matrix.template.spec.sources.helm.parameters
-
booleanspec.generators.matrix.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.matrix.template.spec.sources.helm.parameters.name
-
stringspec.generators.matrix.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.matrix.template.spec.sources.helm.passCredentials
-
stringspec.generators.matrix.template.spec.sources.helm.releaseName
-
booleanspec.generators.matrix.template.spec.sources.helm.skipCrds
-
booleanspec.generators.matrix.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.matrix.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.matrix.template.spec.sources.helm.valueFiles
-
stringspec.generators.matrix.template.spec.sources.helm.values
-
objectspec.generators.matrix.template.spec.sources.helm.valuesObject
-
stringspec.generators.matrix.template.spec.sources.helm.version
-
-
objectspec.generators.matrix.template.spec.sources.kustomize
-
array of stringsspec.generators.matrix.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.matrix.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.matrix.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.matrix.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.matrix.template.spec.sources.kustomize.components
-
booleanspec.generators.matrix.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.matrix.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.matrix.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.matrix.template.spec.sources.kustomize.images
-
stringspec.generators.matrix.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.matrix.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.matrix.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.matrix.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.matrix.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.matrix.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.matrix.template.spec.sources.kustomize.patches
-
objectspec.generators.matrix.template.spec.sources.kustomize.patches.options
-
stringspec.generators.matrix.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.matrix.template.spec.sources.kustomize.patches.path
-
objectspec.generators.matrix.template.spec.sources.kustomize.patches.target
-
stringspec.generators.matrix.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.matrix.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.matrix.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.matrix.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.matrix.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.matrix.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.matrix.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.matrix.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.matrix.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.matrix.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.matrix.template.spec.sources.kustomize.version
-
-
stringspec.generators.matrix.template.spec.sources.name
-
stringspec.generators.matrix.template.spec.sources.path
-
objectspec.generators.matrix.template.spec.sources.plugin
-
array of objectsspec.generators.matrix.template.spec.sources.plugin.env
-
stringspec.generators.matrix.template.spec.sources.plugin.env.name
-
stringspec.generators.matrix.template.spec.sources.plugin.env.value
-
-
stringspec.generators.matrix.template.spec.sources.plugin.name
-
array of objectsspec.generators.matrix.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.matrix.template.spec.sources.plugin.parameters.array
-
objectspec.generators.matrix.template.spec.sources.plugin.parameters.map
-
stringspec.generators.matrix.template.spec.sources.plugin.parameters.name
-
stringspec.generators.matrix.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.matrix.template.spec.sources.ref
-
stringspec.generators.matrix.template.spec.sources.repoURL
-
stringspec.generators.matrix.template.spec.sources.targetRevision
-
-
objectspec.generators.matrix.template.spec.syncPolicy
-
objectspec.generators.matrix.template.spec.syncPolicy.automated
-
booleanspec.generators.matrix.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.matrix.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.matrix.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.matrix.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.matrix.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.matrix.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.matrix.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.matrix.template.spec.syncPolicy.retry
-
objectspec.generators.matrix.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.matrix.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.matrix.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.matrix.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.matrix.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.matrix.template.spec.syncPolicy.syncOptions
-
-
-
-
-
objectspec.generators.merge
-
array of objectsspec.generators.merge.generators
Required value
-
objectspec.generators.merge.generators.clusterDecisionResource
-
stringspec.generators.merge.generators.clusterDecisionResource.configMapRef
Required value
-
objectspec.generators.merge.generators.clusterDecisionResource.labelSelector
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.labelSelector.matchExpressions
-
stringspec.generators.merge.generators.clusterDecisionResource.labelSelector.matchExpressions.key
-
stringspec.generators.merge.generators.clusterDecisionResource.labelSelector.matchExpressions.operator
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.labelSelector.matchExpressions.values
-
-
objectspec.generators.merge.generators.clusterDecisionResource.labelSelector.matchLabels
-
-
stringspec.generators.merge.generators.clusterDecisionResource.name
-
integerspec.generators.merge.generators.clusterDecisionResource.requeueAfterSeconds
-
objectspec.generators.merge.generators.clusterDecisionResource.template
-
objectspec.generators.merge.generators.clusterDecisionResource.template.metadata
Required value
-
objectspec.generators.merge.generators.clusterDecisionResource.template.metadata.annotations
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.metadata.finalizers
-
objectspec.generators.merge.generators.clusterDecisionResource.template.metadata.labels
-
stringspec.generators.merge.generators.clusterDecisionResource.template.metadata.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.metadata.namespace
-
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec
Required value
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.destination
Required value
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.destination.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.destination.namespace
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.destination.server
-
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.ignoreDifferences
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.ignoreDifferences.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.info
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.info.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.info.value
-
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.project
Required value
-
integerspec.generators.merge.generators.clusterDecisionResource.template.spec.revisionHistoryLimit
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.source
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.chart
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.exclude
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.include
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.directory.recurse
-
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.fileParameters
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.fileParameters.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.kubeVersion
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.namespace
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.parameters
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.parameters.forceString
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.parameters.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.passCredentials
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.releaseName
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.skipCrds
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.skipTests
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.valueFiles
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.values
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.valuesObject
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.helm.version
-
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.apiVersions
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.components
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.images
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.namePrefix
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.patches
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.patches.options
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.patches.patch
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.patches.path
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.replicas.count
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.kustomize.version
-
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.path
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.source.plugin
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.plugin.env
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.plugin.env.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.plugin.env.value
-
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.plugin.name
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.plugin.parameters
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.source.plugin.parameters.array
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.source.plugin.parameters.map
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.plugin.parameters.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.ref
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.repoURL
Required value
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.source.targetRevision
-
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sourceHydrator
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.chart
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.exclude
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.include
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.directory.recurse
-
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.fileParameters
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.kubeVersion
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.namespace
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.parameters
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.parameters.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.passCredentials
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.releaseName
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.skipCrds
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.valueFiles
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.values
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.valuesObject
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.helm.version
-
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.components
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.images
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.patches
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.options
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.path
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.kustomize.version
-
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.path
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.plugin
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.plugin.env
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.plugin.env.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.plugin.env.value
-
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.plugin.name
-
array of objectsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.plugin.parameters.array
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.plugin.parameters.map
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.plugin.parameters.name
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.ref
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.repoURL
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.sources.targetRevision
-
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.automated
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.retry
-
objectspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.merge.generators.clusterDecisionResource.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.merge.generators.clusterDecisionResource.values
-
-
objectspec.generators.merge.generators.clusters
-
booleanspec.generators.merge.generators.clusters.flatList
-
objectspec.generators.merge.generators.clusters.selector
-
array of objectsspec.generators.merge.generators.clusters.selector.matchExpressions
-
stringspec.generators.merge.generators.clusters.selector.matchExpressions.key
-
stringspec.generators.merge.generators.clusters.selector.matchExpressions.operator
-
array of stringsspec.generators.merge.generators.clusters.selector.matchExpressions.values
-
-
objectspec.generators.merge.generators.clusters.selector.matchLabels
-
-
objectspec.generators.merge.generators.clusters.template
-
objectspec.generators.merge.generators.clusters.template.metadata
Required value
-
objectspec.generators.merge.generators.clusters.template.metadata.annotations
-
array of stringsspec.generators.merge.generators.clusters.template.metadata.finalizers
-
objectspec.generators.merge.generators.clusters.template.metadata.labels
-
stringspec.generators.merge.generators.clusters.template.metadata.name
-
stringspec.generators.merge.generators.clusters.template.metadata.namespace
-
-
objectspec.generators.merge.generators.clusters.template.spec
Required value
-
objectspec.generators.merge.generators.clusters.template.spec.destination
Required value
-
stringspec.generators.merge.generators.clusters.template.spec.destination.name
-
stringspec.generators.merge.generators.clusters.template.spec.destination.namespace
-
stringspec.generators.merge.generators.clusters.template.spec.destination.server
-
-
array of objectsspec.generators.merge.generators.clusters.template.spec.ignoreDifferences
-
stringspec.generators.merge.generators.clusters.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.merge.generators.clusters.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.merge.generators.clusters.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.merge.generators.clusters.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.merge.generators.clusters.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.merge.generators.clusters.template.spec.ignoreDifferences.name
-
stringspec.generators.merge.generators.clusters.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.merge.generators.clusters.template.spec.info
-
stringspec.generators.merge.generators.clusters.template.spec.info.name
-
stringspec.generators.merge.generators.clusters.template.spec.info.value
-
-
stringspec.generators.merge.generators.clusters.template.spec.project
Required value
-
integerspec.generators.merge.generators.clusters.template.spec.revisionHistoryLimit
-
objectspec.generators.merge.generators.clusters.template.spec.source
-
stringspec.generators.merge.generators.clusters.template.spec.source.chart
-
objectspec.generators.merge.generators.clusters.template.spec.source.directory
-
stringspec.generators.merge.generators.clusters.template.spec.source.directory.exclude
-
stringspec.generators.merge.generators.clusters.template.spec.source.directory.include
-
objectspec.generators.merge.generators.clusters.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.merge.generators.clusters.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.clusters.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.clusters.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.clusters.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.clusters.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.clusters.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.clusters.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.clusters.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.clusters.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.clusters.template.spec.source.directory.recurse
-
-
objectspec.generators.merge.generators.clusters.template.spec.source.helm
-
array of stringsspec.generators.merge.generators.clusters.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.merge.generators.clusters.template.spec.source.helm.fileParameters
-
stringspec.generators.merge.generators.clusters.template.spec.source.helm.fileParameters.name
-
stringspec.generators.merge.generators.clusters.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.clusters.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.clusters.template.spec.source.helm.kubeVersion
-
stringspec.generators.merge.generators.clusters.template.spec.source.helm.namespace
-
array of objectsspec.generators.merge.generators.clusters.template.spec.source.helm.parameters
-
booleanspec.generators.merge.generators.clusters.template.spec.source.helm.parameters.forceString
-
stringspec.generators.merge.generators.clusters.template.spec.source.helm.parameters.name
-
stringspec.generators.merge.generators.clusters.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.merge.generators.clusters.template.spec.source.helm.passCredentials
-
stringspec.generators.merge.generators.clusters.template.spec.source.helm.releaseName
-
booleanspec.generators.merge.generators.clusters.template.spec.source.helm.skipCrds
-
booleanspec.generators.merge.generators.clusters.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.clusters.template.spec.source.helm.skipTests
-
array of stringsspec.generators.merge.generators.clusters.template.spec.source.helm.valueFiles
-
stringspec.generators.merge.generators.clusters.template.spec.source.helm.values
-
objectspec.generators.merge.generators.clusters.template.spec.source.helm.valuesObject
-
stringspec.generators.merge.generators.clusters.template.spec.source.helm.version
-
-
objectspec.generators.merge.generators.clusters.template.spec.source.kustomize
-
array of stringsspec.generators.merge.generators.clusters.template.spec.source.kustomize.apiVersions
-
objectspec.generators.merge.generators.clusters.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.clusters.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.clusters.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.clusters.template.spec.source.kustomize.components
-
booleanspec.generators.merge.generators.clusters.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.clusters.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.clusters.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.clusters.template.spec.source.kustomize.images
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.clusters.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.clusters.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.namePrefix
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.merge.generators.clusters.template.spec.source.kustomize.patches
-
objectspec.generators.merge.generators.clusters.template.spec.source.kustomize.patches.options
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.patches.patch
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.patches.path
-
objectspec.generators.merge.generators.clusters.template.spec.source.kustomize.patches.target
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.clusters.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.replicas.count
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.clusters.template.spec.source.kustomize.version
-
-
stringspec.generators.merge.generators.clusters.template.spec.source.name
-
stringspec.generators.merge.generators.clusters.template.spec.source.path
-
objectspec.generators.merge.generators.clusters.template.spec.source.plugin
-
array of objectsspec.generators.merge.generators.clusters.template.spec.source.plugin.env
-
stringspec.generators.merge.generators.clusters.template.spec.source.plugin.env.name
-
stringspec.generators.merge.generators.clusters.template.spec.source.plugin.env.value
-
-
stringspec.generators.merge.generators.clusters.template.spec.source.plugin.name
-
array of objectsspec.generators.merge.generators.clusters.template.spec.source.plugin.parameters
-
array of stringsspec.generators.merge.generators.clusters.template.spec.source.plugin.parameters.array
-
objectspec.generators.merge.generators.clusters.template.spec.source.plugin.parameters.map
-
stringspec.generators.merge.generators.clusters.template.spec.source.plugin.parameters.name
-
stringspec.generators.merge.generators.clusters.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.clusters.template.spec.source.ref
-
stringspec.generators.merge.generators.clusters.template.spec.source.repoURL
Required value
-
stringspec.generators.merge.generators.clusters.template.spec.source.targetRevision
-
-
objectspec.generators.merge.generators.clusters.template.spec.sourceHydrator
-
objectspec.generators.merge.generators.clusters.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.merge.generators.clusters.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.merge.generators.clusters.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.merge.generators.clusters.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.merge.generators.clusters.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.merge.generators.clusters.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.merge.generators.clusters.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.merge.generators.clusters.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.merge.generators.clusters.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.merge.generators.clusters.template.spec.sources
-
stringspec.generators.merge.generators.clusters.template.spec.sources.chart
-
objectspec.generators.merge.generators.clusters.template.spec.sources.directory
-
stringspec.generators.merge.generators.clusters.template.spec.sources.directory.exclude
-
stringspec.generators.merge.generators.clusters.template.spec.sources.directory.include
-
objectspec.generators.merge.generators.clusters.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.merge.generators.clusters.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.clusters.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.clusters.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.clusters.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.clusters.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.clusters.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.clusters.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.directory.recurse
-
-
objectspec.generators.merge.generators.clusters.template.spec.sources.helm
-
array of stringsspec.generators.merge.generators.clusters.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.merge.generators.clusters.template.spec.sources.helm.fileParameters
-
stringspec.generators.merge.generators.clusters.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.merge.generators.clusters.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.clusters.template.spec.sources.helm.kubeVersion
-
stringspec.generators.merge.generators.clusters.template.spec.sources.helm.namespace
-
array of objectsspec.generators.merge.generators.clusters.template.spec.sources.helm.parameters
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.merge.generators.clusters.template.spec.sources.helm.parameters.name
-
stringspec.generators.merge.generators.clusters.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.helm.passCredentials
-
stringspec.generators.merge.generators.clusters.template.spec.sources.helm.releaseName
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.helm.skipCrds
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.merge.generators.clusters.template.spec.sources.helm.valueFiles
-
stringspec.generators.merge.generators.clusters.template.spec.sources.helm.values
-
objectspec.generators.merge.generators.clusters.template.spec.sources.helm.valuesObject
-
stringspec.generators.merge.generators.clusters.template.spec.sources.helm.version
-
-
objectspec.generators.merge.generators.clusters.template.spec.sources.kustomize
-
array of stringsspec.generators.merge.generators.clusters.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.merge.generators.clusters.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.clusters.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.clusters.template.spec.sources.kustomize.components
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.clusters.template.spec.sources.kustomize.images
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.clusters.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.merge.generators.clusters.template.spec.sources.kustomize.patches
-
objectspec.generators.merge.generators.clusters.template.spec.sources.kustomize.patches.options
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.patches.path
-
objectspec.generators.merge.generators.clusters.template.spec.sources.kustomize.patches.target
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.clusters.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.clusters.template.spec.sources.kustomize.version
-
-
stringspec.generators.merge.generators.clusters.template.spec.sources.name
-
stringspec.generators.merge.generators.clusters.template.spec.sources.path
-
objectspec.generators.merge.generators.clusters.template.spec.sources.plugin
-
array of objectsspec.generators.merge.generators.clusters.template.spec.sources.plugin.env
-
stringspec.generators.merge.generators.clusters.template.spec.sources.plugin.env.name
-
stringspec.generators.merge.generators.clusters.template.spec.sources.plugin.env.value
-
-
stringspec.generators.merge.generators.clusters.template.spec.sources.plugin.name
-
array of objectsspec.generators.merge.generators.clusters.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.merge.generators.clusters.template.spec.sources.plugin.parameters.array
-
objectspec.generators.merge.generators.clusters.template.spec.sources.plugin.parameters.map
-
stringspec.generators.merge.generators.clusters.template.spec.sources.plugin.parameters.name
-
stringspec.generators.merge.generators.clusters.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.clusters.template.spec.sources.ref
-
stringspec.generators.merge.generators.clusters.template.spec.sources.repoURL
-
stringspec.generators.merge.generators.clusters.template.spec.sources.targetRevision
-
-
objectspec.generators.merge.generators.clusters.template.spec.syncPolicy
-
objectspec.generators.merge.generators.clusters.template.spec.syncPolicy.automated
-
booleanspec.generators.merge.generators.clusters.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.merge.generators.clusters.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.merge.generators.clusters.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.merge.generators.clusters.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.merge.generators.clusters.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.merge.generators.clusters.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.merge.generators.clusters.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.merge.generators.clusters.template.spec.syncPolicy.retry
-
objectspec.generators.merge.generators.clusters.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.merge.generators.clusters.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.merge.generators.clusters.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.merge.generators.clusters.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.merge.generators.clusters.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.merge.generators.clusters.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.merge.generators.clusters.values
-
-
objectspec.generators.merge.generators.git
-
array of objectsspec.generators.merge.generators.git.directories
-
booleanspec.generators.merge.generators.git.directories.exclude
-
stringspec.generators.merge.generators.git.directories.path
-
-
array of objectsspec.generators.merge.generators.git.files
-
booleanspec.generators.merge.generators.git.files.exclude
-
stringspec.generators.merge.generators.git.files.path
-
-
stringspec.generators.merge.generators.git.pathParamPrefix
-
stringspec.generators.merge.generators.git.repoURL
Required value
-
integerspec.generators.merge.generators.git.requeueAfterSeconds
-
stringspec.generators.merge.generators.git.revision
Required value
-
objectspec.generators.merge.generators.git.template
-
objectspec.generators.merge.generators.git.template.metadata
Required value
-
objectspec.generators.merge.generators.git.template.metadata.annotations
-
array of stringsspec.generators.merge.generators.git.template.metadata.finalizers
-
objectspec.generators.merge.generators.git.template.metadata.labels
-
stringspec.generators.merge.generators.git.template.metadata.name
-
stringspec.generators.merge.generators.git.template.metadata.namespace
-
-
objectspec.generators.merge.generators.git.template.spec
Required value
-
objectspec.generators.merge.generators.git.template.spec.destination
Required value
-
stringspec.generators.merge.generators.git.template.spec.destination.name
-
stringspec.generators.merge.generators.git.template.spec.destination.namespace
-
stringspec.generators.merge.generators.git.template.spec.destination.server
-
-
array of objectsspec.generators.merge.generators.git.template.spec.ignoreDifferences
-
stringspec.generators.merge.generators.git.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.merge.generators.git.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.merge.generators.git.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.merge.generators.git.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.merge.generators.git.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.merge.generators.git.template.spec.ignoreDifferences.name
-
stringspec.generators.merge.generators.git.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.merge.generators.git.template.spec.info
-
stringspec.generators.merge.generators.git.template.spec.info.name
-
stringspec.generators.merge.generators.git.template.spec.info.value
-
-
stringspec.generators.merge.generators.git.template.spec.project
Required value
-
integerspec.generators.merge.generators.git.template.spec.revisionHistoryLimit
-
objectspec.generators.merge.generators.git.template.spec.source
-
stringspec.generators.merge.generators.git.template.spec.source.chart
-
objectspec.generators.merge.generators.git.template.spec.source.directory
-
stringspec.generators.merge.generators.git.template.spec.source.directory.exclude
-
stringspec.generators.merge.generators.git.template.spec.source.directory.include
-
objectspec.generators.merge.generators.git.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.merge.generators.git.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.git.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.git.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.git.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.git.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.git.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.git.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.git.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.git.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.git.template.spec.source.directory.recurse
-
-
objectspec.generators.merge.generators.git.template.spec.source.helm
-
array of stringsspec.generators.merge.generators.git.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.merge.generators.git.template.spec.source.helm.fileParameters
-
stringspec.generators.merge.generators.git.template.spec.source.helm.fileParameters.name
-
stringspec.generators.merge.generators.git.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.git.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.git.template.spec.source.helm.kubeVersion
-
stringspec.generators.merge.generators.git.template.spec.source.helm.namespace
-
array of objectsspec.generators.merge.generators.git.template.spec.source.helm.parameters
-
booleanspec.generators.merge.generators.git.template.spec.source.helm.parameters.forceString
-
stringspec.generators.merge.generators.git.template.spec.source.helm.parameters.name
-
stringspec.generators.merge.generators.git.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.merge.generators.git.template.spec.source.helm.passCredentials
-
stringspec.generators.merge.generators.git.template.spec.source.helm.releaseName
-
booleanspec.generators.merge.generators.git.template.spec.source.helm.skipCrds
-
booleanspec.generators.merge.generators.git.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.git.template.spec.source.helm.skipTests
-
array of stringsspec.generators.merge.generators.git.template.spec.source.helm.valueFiles
-
stringspec.generators.merge.generators.git.template.spec.source.helm.values
-
objectspec.generators.merge.generators.git.template.spec.source.helm.valuesObject
-
stringspec.generators.merge.generators.git.template.spec.source.helm.version
-
-
objectspec.generators.merge.generators.git.template.spec.source.kustomize
-
array of stringsspec.generators.merge.generators.git.template.spec.source.kustomize.apiVersions
-
objectspec.generators.merge.generators.git.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.git.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.git.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.git.template.spec.source.kustomize.components
-
booleanspec.generators.merge.generators.git.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.git.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.git.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.git.template.spec.source.kustomize.images
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.git.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.git.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.namePrefix
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.merge.generators.git.template.spec.source.kustomize.patches
-
objectspec.generators.merge.generators.git.template.spec.source.kustomize.patches.options
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.patches.patch
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.patches.path
-
objectspec.generators.merge.generators.git.template.spec.source.kustomize.patches.target
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.git.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.merge.generators.git.template.spec.source.kustomize.replicas.count
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.git.template.spec.source.kustomize.version
-
-
stringspec.generators.merge.generators.git.template.spec.source.name
-
stringspec.generators.merge.generators.git.template.spec.source.path
-
objectspec.generators.merge.generators.git.template.spec.source.plugin
-
array of objectsspec.generators.merge.generators.git.template.spec.source.plugin.env
-
stringspec.generators.merge.generators.git.template.spec.source.plugin.env.name
-
stringspec.generators.merge.generators.git.template.spec.source.plugin.env.value
-
-
stringspec.generators.merge.generators.git.template.spec.source.plugin.name
-
array of objectsspec.generators.merge.generators.git.template.spec.source.plugin.parameters
-
array of stringsspec.generators.merge.generators.git.template.spec.source.plugin.parameters.array
-
objectspec.generators.merge.generators.git.template.spec.source.plugin.parameters.map
-
stringspec.generators.merge.generators.git.template.spec.source.plugin.parameters.name
-
stringspec.generators.merge.generators.git.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.git.template.spec.source.ref
-
stringspec.generators.merge.generators.git.template.spec.source.repoURL
Required value
-
stringspec.generators.merge.generators.git.template.spec.source.targetRevision
-
-
objectspec.generators.merge.generators.git.template.spec.sourceHydrator
-
objectspec.generators.merge.generators.git.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.merge.generators.git.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.merge.generators.git.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.merge.generators.git.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.merge.generators.git.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.merge.generators.git.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.merge.generators.git.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.merge.generators.git.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.merge.generators.git.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.merge.generators.git.template.spec.sources
-
stringspec.generators.merge.generators.git.template.spec.sources.chart
-
objectspec.generators.merge.generators.git.template.spec.sources.directory
-
stringspec.generators.merge.generators.git.template.spec.sources.directory.exclude
-
stringspec.generators.merge.generators.git.template.spec.sources.directory.include
-
objectspec.generators.merge.generators.git.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.merge.generators.git.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.git.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.git.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.git.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.git.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.git.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.git.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.git.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.git.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.git.template.spec.sources.directory.recurse
-
-
objectspec.generators.merge.generators.git.template.spec.sources.helm
-
array of stringsspec.generators.merge.generators.git.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.merge.generators.git.template.spec.sources.helm.fileParameters
-
stringspec.generators.merge.generators.git.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.merge.generators.git.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.git.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.git.template.spec.sources.helm.kubeVersion
-
stringspec.generators.merge.generators.git.template.spec.sources.helm.namespace
-
array of objectsspec.generators.merge.generators.git.template.spec.sources.helm.parameters
-
booleanspec.generators.merge.generators.git.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.merge.generators.git.template.spec.sources.helm.parameters.name
-
stringspec.generators.merge.generators.git.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.merge.generators.git.template.spec.sources.helm.passCredentials
-
stringspec.generators.merge.generators.git.template.spec.sources.helm.releaseName
-
booleanspec.generators.merge.generators.git.template.spec.sources.helm.skipCrds
-
booleanspec.generators.merge.generators.git.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.git.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.merge.generators.git.template.spec.sources.helm.valueFiles
-
stringspec.generators.merge.generators.git.template.spec.sources.helm.values
-
objectspec.generators.merge.generators.git.template.spec.sources.helm.valuesObject
-
stringspec.generators.merge.generators.git.template.spec.sources.helm.version
-
-
objectspec.generators.merge.generators.git.template.spec.sources.kustomize
-
array of stringsspec.generators.merge.generators.git.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.merge.generators.git.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.git.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.git.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.git.template.spec.sources.kustomize.components
-
booleanspec.generators.merge.generators.git.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.git.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.git.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.git.template.spec.sources.kustomize.images
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.git.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.git.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.merge.generators.git.template.spec.sources.kustomize.patches
-
objectspec.generators.merge.generators.git.template.spec.sources.kustomize.patches.options
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.patches.path
-
objectspec.generators.merge.generators.git.template.spec.sources.kustomize.patches.target
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.git.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.merge.generators.git.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.git.template.spec.sources.kustomize.version
-
-
stringspec.generators.merge.generators.git.template.spec.sources.name
-
stringspec.generators.merge.generators.git.template.spec.sources.path
-
objectspec.generators.merge.generators.git.template.spec.sources.plugin
-
array of objectsspec.generators.merge.generators.git.template.spec.sources.plugin.env
-
stringspec.generators.merge.generators.git.template.spec.sources.plugin.env.name
-
stringspec.generators.merge.generators.git.template.spec.sources.plugin.env.value
-
-
stringspec.generators.merge.generators.git.template.spec.sources.plugin.name
-
array of objectsspec.generators.merge.generators.git.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.merge.generators.git.template.spec.sources.plugin.parameters.array
-
objectspec.generators.merge.generators.git.template.spec.sources.plugin.parameters.map
-
stringspec.generators.merge.generators.git.template.spec.sources.plugin.parameters.name
-
stringspec.generators.merge.generators.git.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.git.template.spec.sources.ref
-
stringspec.generators.merge.generators.git.template.spec.sources.repoURL
-
stringspec.generators.merge.generators.git.template.spec.sources.targetRevision
-
-
objectspec.generators.merge.generators.git.template.spec.syncPolicy
-
objectspec.generators.merge.generators.git.template.spec.syncPolicy.automated
-
booleanspec.generators.merge.generators.git.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.merge.generators.git.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.merge.generators.git.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.merge.generators.git.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.merge.generators.git.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.merge.generators.git.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.merge.generators.git.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.merge.generators.git.template.spec.syncPolicy.retry
-
objectspec.generators.merge.generators.git.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.merge.generators.git.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.merge.generators.git.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.merge.generators.git.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.merge.generators.git.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.merge.generators.git.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.merge.generators.git.values
-
-
objectspec.generators.merge.generators.list
-
arrayspec.generators.merge.generators.list.elements
-
stringspec.generators.merge.generators.list.elementsYaml
-
objectspec.generators.merge.generators.list.template
-
objectspec.generators.merge.generators.list.template.metadata
Required value
-
objectspec.generators.merge.generators.list.template.metadata.annotations
-
array of stringsspec.generators.merge.generators.list.template.metadata.finalizers
-
objectspec.generators.merge.generators.list.template.metadata.labels
-
stringspec.generators.merge.generators.list.template.metadata.name
-
stringspec.generators.merge.generators.list.template.metadata.namespace
-
-
objectspec.generators.merge.generators.list.template.spec
Required value
-
objectspec.generators.merge.generators.list.template.spec.destination
Required value
-
stringspec.generators.merge.generators.list.template.spec.destination.name
-
stringspec.generators.merge.generators.list.template.spec.destination.namespace
-
stringspec.generators.merge.generators.list.template.spec.destination.server
-
-
array of objectsspec.generators.merge.generators.list.template.spec.ignoreDifferences
-
stringspec.generators.merge.generators.list.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.merge.generators.list.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.merge.generators.list.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.merge.generators.list.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.merge.generators.list.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.merge.generators.list.template.spec.ignoreDifferences.name
-
stringspec.generators.merge.generators.list.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.merge.generators.list.template.spec.info
-
stringspec.generators.merge.generators.list.template.spec.info.name
-
stringspec.generators.merge.generators.list.template.spec.info.value
-
-
stringspec.generators.merge.generators.list.template.spec.project
Required value
-
integerspec.generators.merge.generators.list.template.spec.revisionHistoryLimit
-
objectspec.generators.merge.generators.list.template.spec.source
-
stringspec.generators.merge.generators.list.template.spec.source.chart
-
objectspec.generators.merge.generators.list.template.spec.source.directory
-
stringspec.generators.merge.generators.list.template.spec.source.directory.exclude
-
stringspec.generators.merge.generators.list.template.spec.source.directory.include
-
objectspec.generators.merge.generators.list.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.merge.generators.list.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.list.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.list.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.list.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.list.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.list.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.list.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.list.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.list.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.list.template.spec.source.directory.recurse
-
-
objectspec.generators.merge.generators.list.template.spec.source.helm
-
array of stringsspec.generators.merge.generators.list.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.merge.generators.list.template.spec.source.helm.fileParameters
-
stringspec.generators.merge.generators.list.template.spec.source.helm.fileParameters.name
-
stringspec.generators.merge.generators.list.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.list.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.list.template.spec.source.helm.kubeVersion
-
stringspec.generators.merge.generators.list.template.spec.source.helm.namespace
-
array of objectsspec.generators.merge.generators.list.template.spec.source.helm.parameters
-
booleanspec.generators.merge.generators.list.template.spec.source.helm.parameters.forceString
-
stringspec.generators.merge.generators.list.template.spec.source.helm.parameters.name
-
stringspec.generators.merge.generators.list.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.merge.generators.list.template.spec.source.helm.passCredentials
-
stringspec.generators.merge.generators.list.template.spec.source.helm.releaseName
-
booleanspec.generators.merge.generators.list.template.spec.source.helm.skipCrds
-
booleanspec.generators.merge.generators.list.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.list.template.spec.source.helm.skipTests
-
array of stringsspec.generators.merge.generators.list.template.spec.source.helm.valueFiles
-
stringspec.generators.merge.generators.list.template.spec.source.helm.values
-
objectspec.generators.merge.generators.list.template.spec.source.helm.valuesObject
-
stringspec.generators.merge.generators.list.template.spec.source.helm.version
-
-
objectspec.generators.merge.generators.list.template.spec.source.kustomize
-
array of stringsspec.generators.merge.generators.list.template.spec.source.kustomize.apiVersions
-
objectspec.generators.merge.generators.list.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.list.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.list.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.list.template.spec.source.kustomize.components
-
booleanspec.generators.merge.generators.list.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.list.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.list.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.list.template.spec.source.kustomize.images
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.list.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.list.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.namePrefix
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.merge.generators.list.template.spec.source.kustomize.patches
-
objectspec.generators.merge.generators.list.template.spec.source.kustomize.patches.options
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.patches.patch
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.patches.path
-
objectspec.generators.merge.generators.list.template.spec.source.kustomize.patches.target
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.list.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.merge.generators.list.template.spec.source.kustomize.replicas.count
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.list.template.spec.source.kustomize.version
-
-
stringspec.generators.merge.generators.list.template.spec.source.name
-
stringspec.generators.merge.generators.list.template.spec.source.path
-
objectspec.generators.merge.generators.list.template.spec.source.plugin
-
array of objectsspec.generators.merge.generators.list.template.spec.source.plugin.env
-
stringspec.generators.merge.generators.list.template.spec.source.plugin.env.name
-
stringspec.generators.merge.generators.list.template.spec.source.plugin.env.value
-
-
stringspec.generators.merge.generators.list.template.spec.source.plugin.name
-
array of objectsspec.generators.merge.generators.list.template.spec.source.plugin.parameters
-
array of stringsspec.generators.merge.generators.list.template.spec.source.plugin.parameters.array
-
objectspec.generators.merge.generators.list.template.spec.source.plugin.parameters.map
-
stringspec.generators.merge.generators.list.template.spec.source.plugin.parameters.name
-
stringspec.generators.merge.generators.list.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.list.template.spec.source.ref
-
stringspec.generators.merge.generators.list.template.spec.source.repoURL
Required value
-
stringspec.generators.merge.generators.list.template.spec.source.targetRevision
-
-
objectspec.generators.merge.generators.list.template.spec.sourceHydrator
-
objectspec.generators.merge.generators.list.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.merge.generators.list.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.merge.generators.list.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.merge.generators.list.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.merge.generators.list.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.merge.generators.list.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.merge.generators.list.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.merge.generators.list.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.merge.generators.list.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.merge.generators.list.template.spec.sources
-
stringspec.generators.merge.generators.list.template.spec.sources.chart
-
objectspec.generators.merge.generators.list.template.spec.sources.directory
-
stringspec.generators.merge.generators.list.template.spec.sources.directory.exclude
-
stringspec.generators.merge.generators.list.template.spec.sources.directory.include
-
objectspec.generators.merge.generators.list.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.merge.generators.list.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.list.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.list.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.list.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.list.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.list.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.list.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.list.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.list.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.list.template.spec.sources.directory.recurse
-
-
objectspec.generators.merge.generators.list.template.spec.sources.helm
-
array of stringsspec.generators.merge.generators.list.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.merge.generators.list.template.spec.sources.helm.fileParameters
-
stringspec.generators.merge.generators.list.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.merge.generators.list.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.list.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.list.template.spec.sources.helm.kubeVersion
-
stringspec.generators.merge.generators.list.template.spec.sources.helm.namespace
-
array of objectsspec.generators.merge.generators.list.template.spec.sources.helm.parameters
-
booleanspec.generators.merge.generators.list.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.merge.generators.list.template.spec.sources.helm.parameters.name
-
stringspec.generators.merge.generators.list.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.merge.generators.list.template.spec.sources.helm.passCredentials
-
stringspec.generators.merge.generators.list.template.spec.sources.helm.releaseName
-
booleanspec.generators.merge.generators.list.template.spec.sources.helm.skipCrds
-
booleanspec.generators.merge.generators.list.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.list.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.merge.generators.list.template.spec.sources.helm.valueFiles
-
stringspec.generators.merge.generators.list.template.spec.sources.helm.values
-
objectspec.generators.merge.generators.list.template.spec.sources.helm.valuesObject
-
stringspec.generators.merge.generators.list.template.spec.sources.helm.version
-
-
objectspec.generators.merge.generators.list.template.spec.sources.kustomize
-
array of stringsspec.generators.merge.generators.list.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.merge.generators.list.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.list.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.list.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.list.template.spec.sources.kustomize.components
-
booleanspec.generators.merge.generators.list.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.list.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.list.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.list.template.spec.sources.kustomize.images
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.list.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.list.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.merge.generators.list.template.spec.sources.kustomize.patches
-
objectspec.generators.merge.generators.list.template.spec.sources.kustomize.patches.options
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.patches.path
-
objectspec.generators.merge.generators.list.template.spec.sources.kustomize.patches.target
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.list.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.merge.generators.list.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.list.template.spec.sources.kustomize.version
-
-
stringspec.generators.merge.generators.list.template.spec.sources.name
-
stringspec.generators.merge.generators.list.template.spec.sources.path
-
objectspec.generators.merge.generators.list.template.spec.sources.plugin
-
array of objectsspec.generators.merge.generators.list.template.spec.sources.plugin.env
-
stringspec.generators.merge.generators.list.template.spec.sources.plugin.env.name
-
stringspec.generators.merge.generators.list.template.spec.sources.plugin.env.value
-
-
stringspec.generators.merge.generators.list.template.spec.sources.plugin.name
-
array of objectsspec.generators.merge.generators.list.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.merge.generators.list.template.spec.sources.plugin.parameters.array
-
objectspec.generators.merge.generators.list.template.spec.sources.plugin.parameters.map
-
stringspec.generators.merge.generators.list.template.spec.sources.plugin.parameters.name
-
stringspec.generators.merge.generators.list.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.list.template.spec.sources.ref
-
stringspec.generators.merge.generators.list.template.spec.sources.repoURL
-
stringspec.generators.merge.generators.list.template.spec.sources.targetRevision
-
-
objectspec.generators.merge.generators.list.template.spec.syncPolicy
-
objectspec.generators.merge.generators.list.template.spec.syncPolicy.automated
-
booleanspec.generators.merge.generators.list.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.merge.generators.list.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.merge.generators.list.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.merge.generators.list.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.merge.generators.list.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.merge.generators.list.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.merge.generators.list.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.merge.generators.list.template.spec.syncPolicy.retry
-
objectspec.generators.merge.generators.list.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.merge.generators.list.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.merge.generators.list.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.merge.generators.list.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.merge.generators.list.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.merge.generators.list.template.spec.syncPolicy.syncOptions
-
-
-
-
-
spec.generators.merge.generators.matrix
-
spec.generators.merge.generators.merge
-
objectspec.generators.merge.generators.plugin
-
objectspec.generators.merge.generators.plugin.configMapRef
Required value
-
stringspec.generators.merge.generators.plugin.configMapRef.name
Required value
-
-
objectspec.generators.merge.generators.plugin.input
-
objectspec.generators.merge.generators.plugin.input.parameters
-
-
integerspec.generators.merge.generators.plugin.requeueAfterSeconds
-
objectspec.generators.merge.generators.plugin.template
-
objectspec.generators.merge.generators.plugin.template.metadata
Required value
-
objectspec.generators.merge.generators.plugin.template.metadata.annotations
-
array of stringsspec.generators.merge.generators.plugin.template.metadata.finalizers
-
objectspec.generators.merge.generators.plugin.template.metadata.labels
-
stringspec.generators.merge.generators.plugin.template.metadata.name
-
stringspec.generators.merge.generators.plugin.template.metadata.namespace
-
-
objectspec.generators.merge.generators.plugin.template.spec
Required value
-
objectspec.generators.merge.generators.plugin.template.spec.destination
Required value
-
stringspec.generators.merge.generators.plugin.template.spec.destination.name
-
stringspec.generators.merge.generators.plugin.template.spec.destination.namespace
-
stringspec.generators.merge.generators.plugin.template.spec.destination.server
-
-
array of objectsspec.generators.merge.generators.plugin.template.spec.ignoreDifferences
-
stringspec.generators.merge.generators.plugin.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.merge.generators.plugin.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.merge.generators.plugin.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.merge.generators.plugin.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.merge.generators.plugin.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.merge.generators.plugin.template.spec.ignoreDifferences.name
-
stringspec.generators.merge.generators.plugin.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.merge.generators.plugin.template.spec.info
-
stringspec.generators.merge.generators.plugin.template.spec.info.name
-
stringspec.generators.merge.generators.plugin.template.spec.info.value
-
-
stringspec.generators.merge.generators.plugin.template.spec.project
Required value
-
integerspec.generators.merge.generators.plugin.template.spec.revisionHistoryLimit
-
objectspec.generators.merge.generators.plugin.template.spec.source
-
stringspec.generators.merge.generators.plugin.template.spec.source.chart
-
objectspec.generators.merge.generators.plugin.template.spec.source.directory
-
stringspec.generators.merge.generators.plugin.template.spec.source.directory.exclude
-
stringspec.generators.merge.generators.plugin.template.spec.source.directory.include
-
objectspec.generators.merge.generators.plugin.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.merge.generators.plugin.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.plugin.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.plugin.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.plugin.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.plugin.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.plugin.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.plugin.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.plugin.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.plugin.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.plugin.template.spec.source.directory.recurse
-
-
objectspec.generators.merge.generators.plugin.template.spec.source.helm
-
array of stringsspec.generators.merge.generators.plugin.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.merge.generators.plugin.template.spec.source.helm.fileParameters
-
stringspec.generators.merge.generators.plugin.template.spec.source.helm.fileParameters.name
-
stringspec.generators.merge.generators.plugin.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.plugin.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.plugin.template.spec.source.helm.kubeVersion
-
stringspec.generators.merge.generators.plugin.template.spec.source.helm.namespace
-
array of objectsspec.generators.merge.generators.plugin.template.spec.source.helm.parameters
-
booleanspec.generators.merge.generators.plugin.template.spec.source.helm.parameters.forceString
-
stringspec.generators.merge.generators.plugin.template.spec.source.helm.parameters.name
-
stringspec.generators.merge.generators.plugin.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.merge.generators.plugin.template.spec.source.helm.passCredentials
-
stringspec.generators.merge.generators.plugin.template.spec.source.helm.releaseName
-
booleanspec.generators.merge.generators.plugin.template.spec.source.helm.skipCrds
-
booleanspec.generators.merge.generators.plugin.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.plugin.template.spec.source.helm.skipTests
-
array of stringsspec.generators.merge.generators.plugin.template.spec.source.helm.valueFiles
-
stringspec.generators.merge.generators.plugin.template.spec.source.helm.values
-
objectspec.generators.merge.generators.plugin.template.spec.source.helm.valuesObject
-
stringspec.generators.merge.generators.plugin.template.spec.source.helm.version
-
-
objectspec.generators.merge.generators.plugin.template.spec.source.kustomize
-
array of stringsspec.generators.merge.generators.plugin.template.spec.source.kustomize.apiVersions
-
objectspec.generators.merge.generators.plugin.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.plugin.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.plugin.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.plugin.template.spec.source.kustomize.components
-
booleanspec.generators.merge.generators.plugin.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.plugin.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.plugin.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.plugin.template.spec.source.kustomize.images
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.plugin.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.plugin.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.namePrefix
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.merge.generators.plugin.template.spec.source.kustomize.patches
-
objectspec.generators.merge.generators.plugin.template.spec.source.kustomize.patches.options
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.patches.patch
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.patches.path
-
objectspec.generators.merge.generators.plugin.template.spec.source.kustomize.patches.target
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.plugin.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.replicas.count
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.plugin.template.spec.source.kustomize.version
-
-
stringspec.generators.merge.generators.plugin.template.spec.source.name
-
stringspec.generators.merge.generators.plugin.template.spec.source.path
-
objectspec.generators.merge.generators.plugin.template.spec.source.plugin
-
array of objectsspec.generators.merge.generators.plugin.template.spec.source.plugin.env
-
stringspec.generators.merge.generators.plugin.template.spec.source.plugin.env.name
-
stringspec.generators.merge.generators.plugin.template.spec.source.plugin.env.value
-
-
stringspec.generators.merge.generators.plugin.template.spec.source.plugin.name
-
array of objectsspec.generators.merge.generators.plugin.template.spec.source.plugin.parameters
-
array of stringsspec.generators.merge.generators.plugin.template.spec.source.plugin.parameters.array
-
objectspec.generators.merge.generators.plugin.template.spec.source.plugin.parameters.map
-
stringspec.generators.merge.generators.plugin.template.spec.source.plugin.parameters.name
-
stringspec.generators.merge.generators.plugin.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.plugin.template.spec.source.ref
-
stringspec.generators.merge.generators.plugin.template.spec.source.repoURL
Required value
-
stringspec.generators.merge.generators.plugin.template.spec.source.targetRevision
-
-
objectspec.generators.merge.generators.plugin.template.spec.sourceHydrator
-
objectspec.generators.merge.generators.plugin.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.merge.generators.plugin.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.merge.generators.plugin.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.merge.generators.plugin.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.merge.generators.plugin.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.merge.generators.plugin.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.merge.generators.plugin.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.merge.generators.plugin.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.merge.generators.plugin.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.merge.generators.plugin.template.spec.sources
-
stringspec.generators.merge.generators.plugin.template.spec.sources.chart
-
objectspec.generators.merge.generators.plugin.template.spec.sources.directory
-
stringspec.generators.merge.generators.plugin.template.spec.sources.directory.exclude
-
stringspec.generators.merge.generators.plugin.template.spec.sources.directory.include
-
objectspec.generators.merge.generators.plugin.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.merge.generators.plugin.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.plugin.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.plugin.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.plugin.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.plugin.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.plugin.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.plugin.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.directory.recurse
-
-
objectspec.generators.merge.generators.plugin.template.spec.sources.helm
-
array of stringsspec.generators.merge.generators.plugin.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.merge.generators.plugin.template.spec.sources.helm.fileParameters
-
stringspec.generators.merge.generators.plugin.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.merge.generators.plugin.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.plugin.template.spec.sources.helm.kubeVersion
-
stringspec.generators.merge.generators.plugin.template.spec.sources.helm.namespace
-
array of objectsspec.generators.merge.generators.plugin.template.spec.sources.helm.parameters
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.merge.generators.plugin.template.spec.sources.helm.parameters.name
-
stringspec.generators.merge.generators.plugin.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.helm.passCredentials
-
stringspec.generators.merge.generators.plugin.template.spec.sources.helm.releaseName
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.helm.skipCrds
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.merge.generators.plugin.template.spec.sources.helm.valueFiles
-
stringspec.generators.merge.generators.plugin.template.spec.sources.helm.values
-
objectspec.generators.merge.generators.plugin.template.spec.sources.helm.valuesObject
-
stringspec.generators.merge.generators.plugin.template.spec.sources.helm.version
-
-
objectspec.generators.merge.generators.plugin.template.spec.sources.kustomize
-
array of stringsspec.generators.merge.generators.plugin.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.merge.generators.plugin.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.plugin.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.plugin.template.spec.sources.kustomize.components
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.plugin.template.spec.sources.kustomize.images
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.plugin.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.merge.generators.plugin.template.spec.sources.kustomize.patches
-
objectspec.generators.merge.generators.plugin.template.spec.sources.kustomize.patches.options
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.patches.path
-
objectspec.generators.merge.generators.plugin.template.spec.sources.kustomize.patches.target
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.plugin.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.plugin.template.spec.sources.kustomize.version
-
-
stringspec.generators.merge.generators.plugin.template.spec.sources.name
-
stringspec.generators.merge.generators.plugin.template.spec.sources.path
-
objectspec.generators.merge.generators.plugin.template.spec.sources.plugin
-
array of objectsspec.generators.merge.generators.plugin.template.spec.sources.plugin.env
-
stringspec.generators.merge.generators.plugin.template.spec.sources.plugin.env.name
-
stringspec.generators.merge.generators.plugin.template.spec.sources.plugin.env.value
-
-
stringspec.generators.merge.generators.plugin.template.spec.sources.plugin.name
-
array of objectsspec.generators.merge.generators.plugin.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.merge.generators.plugin.template.spec.sources.plugin.parameters.array
-
objectspec.generators.merge.generators.plugin.template.spec.sources.plugin.parameters.map
-
stringspec.generators.merge.generators.plugin.template.spec.sources.plugin.parameters.name
-
stringspec.generators.merge.generators.plugin.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.plugin.template.spec.sources.ref
-
stringspec.generators.merge.generators.plugin.template.spec.sources.repoURL
-
stringspec.generators.merge.generators.plugin.template.spec.sources.targetRevision
-
-
objectspec.generators.merge.generators.plugin.template.spec.syncPolicy
-
objectspec.generators.merge.generators.plugin.template.spec.syncPolicy.automated
-
booleanspec.generators.merge.generators.plugin.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.merge.generators.plugin.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.merge.generators.plugin.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.merge.generators.plugin.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.merge.generators.plugin.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.merge.generators.plugin.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.merge.generators.plugin.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.merge.generators.plugin.template.spec.syncPolicy.retry
-
objectspec.generators.merge.generators.plugin.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.merge.generators.plugin.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.merge.generators.plugin.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.merge.generators.plugin.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.merge.generators.plugin.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.merge.generators.plugin.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.merge.generators.plugin.values
-
-
objectspec.generators.merge.generators.pullRequest
-
objectspec.generators.merge.generators.pullRequest.azuredevops
-
stringspec.generators.merge.generators.pullRequest.azuredevops.api
-
array of stringsspec.generators.merge.generators.pullRequest.azuredevops.labels
-
stringspec.generators.merge.generators.pullRequest.azuredevops.organization
Required value
-
stringspec.generators.merge.generators.pullRequest.azuredevops.project
Required value
-
stringspec.generators.merge.generators.pullRequest.azuredevops.repo
Required value
-
objectspec.generators.merge.generators.pullRequest.azuredevops.tokenRef
-
stringspec.generators.merge.generators.pullRequest.azuredevops.tokenRef.key
Required value
-
stringspec.generators.merge.generators.pullRequest.azuredevops.tokenRef.secretName
Required value
-
-
-
objectspec.generators.merge.generators.pullRequest.bitbucket
-
stringspec.generators.merge.generators.pullRequest.bitbucket.api
-
objectspec.generators.merge.generators.pullRequest.bitbucket.basicAuth
-
objectspec.generators.merge.generators.pullRequest.bitbucket.basicAuth.passwordRef
Required value
-
stringspec.generators.merge.generators.pullRequest.bitbucket.basicAuth.passwordRef.key
Required value
-
stringspec.generators.merge.generators.pullRequest.bitbucket.basicAuth.passwordRef.secretName
Required value
-
-
stringspec.generators.merge.generators.pullRequest.bitbucket.basicAuth.username
Required value
-
-
objectspec.generators.merge.generators.pullRequest.bitbucket.bearerToken
-
objectspec.generators.merge.generators.pullRequest.bitbucket.bearerToken.tokenRef
Required value
-
stringspec.generators.merge.generators.pullRequest.bitbucket.bearerToken.tokenRef.key
Required value
-
stringspec.generators.merge.generators.pullRequest.bitbucket.bearerToken.tokenRef.secretName
Required value
-
-
-
stringspec.generators.merge.generators.pullRequest.bitbucket.owner
Required value
-
stringspec.generators.merge.generators.pullRequest.bitbucket.repo
Required value
-
-
objectspec.generators.merge.generators.pullRequest.bitbucketServer
-
stringspec.generators.merge.generators.pullRequest.bitbucketServer.api
Required value
-
objectspec.generators.merge.generators.pullRequest.bitbucketServer.basicAuth
-
objectspec.generators.merge.generators.pullRequest.bitbucketServer.basicAuth.passwordRef
Required value
-
stringspec.generators.merge.generators.pullRequest.bitbucketServer.basicAuth.passwordRef.key
Required value
-
stringspec.generators.merge.generators.pullRequest.bitbucketServer.basicAuth.passwordRef.secretName
Required value
-
-
stringspec.generators.merge.generators.pullRequest.bitbucketServer.basicAuth.username
Required value
-
-
objectspec.generators.merge.generators.pullRequest.bitbucketServer.bearerToken
-
objectspec.generators.merge.generators.pullRequest.bitbucketServer.bearerToken.tokenRef
Required value
-
stringspec.generators.merge.generators.pullRequest.bitbucketServer.bearerToken.tokenRef.key
Required value
-
stringspec.generators.merge.generators.pullRequest.bitbucketServer.bearerToken.tokenRef.secretName
Required value
-
-
-
objectspec.generators.merge.generators.pullRequest.bitbucketServer.caRef
-
stringspec.generators.merge.generators.pullRequest.bitbucketServer.caRef.configMapName
Required value
-
stringspec.generators.merge.generators.pullRequest.bitbucketServer.caRef.key
Required value
-
-
booleanspec.generators.merge.generators.pullRequest.bitbucketServer.insecure
-
stringspec.generators.merge.generators.pullRequest.bitbucketServer.project
Required value
-
stringspec.generators.merge.generators.pullRequest.bitbucketServer.repo
Required value
-
-
array of objectsspec.generators.merge.generators.pullRequest.filters
-
stringspec.generators.merge.generators.pullRequest.filters.branchMatch
-
stringspec.generators.merge.generators.pullRequest.filters.targetBranchMatch
-
-
objectspec.generators.merge.generators.pullRequest.gitea
-
stringspec.generators.merge.generators.pullRequest.gitea.api
Required value
-
booleanspec.generators.merge.generators.pullRequest.gitea.insecure
-
array of stringsspec.generators.merge.generators.pullRequest.gitea.labels
-
stringspec.generators.merge.generators.pullRequest.gitea.owner
Required value
-
stringspec.generators.merge.generators.pullRequest.gitea.repo
Required value
-
objectspec.generators.merge.generators.pullRequest.gitea.tokenRef
-
stringspec.generators.merge.generators.pullRequest.gitea.tokenRef.key
Required value
-
stringspec.generators.merge.generators.pullRequest.gitea.tokenRef.secretName
Required value
-
-
-
objectspec.generators.merge.generators.pullRequest.github
-
stringspec.generators.merge.generators.pullRequest.github.api
-
stringspec.generators.merge.generators.pullRequest.github.appSecretName
-
array of stringsspec.generators.merge.generators.pullRequest.github.labels
-
stringspec.generators.merge.generators.pullRequest.github.owner
Required value
-
stringspec.generators.merge.generators.pullRequest.github.repo
Required value
-
objectspec.generators.merge.generators.pullRequest.github.tokenRef
-
stringspec.generators.merge.generators.pullRequest.github.tokenRef.key
Required value
-
stringspec.generators.merge.generators.pullRequest.github.tokenRef.secretName
Required value
-
-
-
objectspec.generators.merge.generators.pullRequest.gitlab
-
stringspec.generators.merge.generators.pullRequest.gitlab.api
-
objectspec.generators.merge.generators.pullRequest.gitlab.caRef
-
stringspec.generators.merge.generators.pullRequest.gitlab.caRef.configMapName
Required value
-
stringspec.generators.merge.generators.pullRequest.gitlab.caRef.key
Required value
-
-
booleanspec.generators.merge.generators.pullRequest.gitlab.insecure
-
array of stringsspec.generators.merge.generators.pullRequest.gitlab.labels
-
stringspec.generators.merge.generators.pullRequest.gitlab.project
Required value
-
stringspec.generators.merge.generators.pullRequest.gitlab.pullRequestState
-
objectspec.generators.merge.generators.pullRequest.gitlab.tokenRef
-
stringspec.generators.merge.generators.pullRequest.gitlab.tokenRef.key
Required value
-
stringspec.generators.merge.generators.pullRequest.gitlab.tokenRef.secretName
Required value
-
-
-
integerspec.generators.merge.generators.pullRequest.requeueAfterSeconds
-
objectspec.generators.merge.generators.pullRequest.template
-
objectspec.generators.merge.generators.pullRequest.template.metadata
Required value
-
objectspec.generators.merge.generators.pullRequest.template.metadata.annotations
-
array of stringsspec.generators.merge.generators.pullRequest.template.metadata.finalizers
-
objectspec.generators.merge.generators.pullRequest.template.metadata.labels
-
stringspec.generators.merge.generators.pullRequest.template.metadata.name
-
stringspec.generators.merge.generators.pullRequest.template.metadata.namespace
-
-
objectspec.generators.merge.generators.pullRequest.template.spec
Required value
-
objectspec.generators.merge.generators.pullRequest.template.spec.destination
Required value
-
stringspec.generators.merge.generators.pullRequest.template.spec.destination.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.destination.namespace
-
stringspec.generators.merge.generators.pullRequest.template.spec.destination.server
-
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.ignoreDifferences
-
stringspec.generators.merge.generators.pullRequest.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.merge.generators.pullRequest.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.merge.generators.pullRequest.template.spec.ignoreDifferences.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.info
-
stringspec.generators.merge.generators.pullRequest.template.spec.info.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.info.value
-
-
stringspec.generators.merge.generators.pullRequest.template.spec.project
Required value
-
integerspec.generators.merge.generators.pullRequest.template.spec.revisionHistoryLimit
-
objectspec.generators.merge.generators.pullRequest.template.spec.source
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.chart
-
objectspec.generators.merge.generators.pullRequest.template.spec.source.directory
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.directory.exclude
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.directory.include
-
objectspec.generators.merge.generators.pullRequest.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.directory.recurse
-
-
objectspec.generators.merge.generators.pullRequest.template.spec.source.helm
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.source.helm.fileParameters
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.helm.fileParameters.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.helm.kubeVersion
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.helm.namespace
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.source.helm.parameters
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.helm.parameters.forceString
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.helm.parameters.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.helm.passCredentials
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.helm.releaseName
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.helm.skipCrds
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.helm.skipTests
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.source.helm.valueFiles
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.helm.values
-
objectspec.generators.merge.generators.pullRequest.template.spec.source.helm.valuesObject
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.helm.version
-
-
objectspec.generators.merge.generators.pullRequest.template.spec.source.kustomize
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.apiVersions
-
objectspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.components
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.images
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.namePrefix
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.patches
-
objectspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.patches.options
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.patches.patch
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.patches.path
-
objectspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.patches.target
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.replicas.count
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.kustomize.version
-
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.path
-
objectspec.generators.merge.generators.pullRequest.template.spec.source.plugin
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.source.plugin.env
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.plugin.env.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.plugin.env.value
-
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.plugin.name
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.source.plugin.parameters
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.source.plugin.parameters.array
-
objectspec.generators.merge.generators.pullRequest.template.spec.source.plugin.parameters.map
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.plugin.parameters.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.ref
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.repoURL
Required value
-
stringspec.generators.merge.generators.pullRequest.template.spec.source.targetRevision
-
-
objectspec.generators.merge.generators.pullRequest.template.spec.sourceHydrator
-
objectspec.generators.merge.generators.pullRequest.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.merge.generators.pullRequest.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.merge.generators.pullRequest.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.merge.generators.pullRequest.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.merge.generators.pullRequest.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.merge.generators.pullRequest.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.merge.generators.pullRequest.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.merge.generators.pullRequest.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.merge.generators.pullRequest.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.sources
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.chart
-
objectspec.generators.merge.generators.pullRequest.template.spec.sources.directory
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.directory.exclude
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.directory.include
-
objectspec.generators.merge.generators.pullRequest.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.directory.recurse
-
-
objectspec.generators.merge.generators.pullRequest.template.spec.sources.helm
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.sources.helm.fileParameters
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.helm.kubeVersion
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.helm.namespace
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.sources.helm.parameters
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.helm.parameters.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.helm.passCredentials
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.helm.releaseName
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.helm.skipCrds
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.sources.helm.valueFiles
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.helm.values
-
objectspec.generators.merge.generators.pullRequest.template.spec.sources.helm.valuesObject
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.helm.version
-
-
objectspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.components
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.images
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.patches
-
objectspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.patches.options
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.patches.path
-
objectspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.patches.target
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.kustomize.version
-
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.path
-
objectspec.generators.merge.generators.pullRequest.template.spec.sources.plugin
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.sources.plugin.env
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.plugin.env.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.plugin.env.value
-
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.plugin.name
-
array of objectsspec.generators.merge.generators.pullRequest.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.sources.plugin.parameters.array
-
objectspec.generators.merge.generators.pullRequest.template.spec.sources.plugin.parameters.map
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.plugin.parameters.name
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.ref
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.repoURL
-
stringspec.generators.merge.generators.pullRequest.template.spec.sources.targetRevision
-
-
objectspec.generators.merge.generators.pullRequest.template.spec.syncPolicy
-
objectspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.automated
-
booleanspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.retry
-
objectspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.merge.generators.pullRequest.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.merge.generators.pullRequest.values
-
-
objectspec.generators.merge.generators.scmProvider
-
objectspec.generators.merge.generators.scmProvider.awsCodeCommit
-
booleanspec.generators.merge.generators.scmProvider.awsCodeCommit.allBranches
-
stringspec.generators.merge.generators.scmProvider.awsCodeCommit.region
-
stringspec.generators.merge.generators.scmProvider.awsCodeCommit.role
-
array of objectsspec.generators.merge.generators.scmProvider.awsCodeCommit.tagFilters
-
stringspec.generators.merge.generators.scmProvider.awsCodeCommit.tagFilters.key
-
stringspec.generators.merge.generators.scmProvider.awsCodeCommit.tagFilters.value
-
-
-
objectspec.generators.merge.generators.scmProvider.azureDevOps
-
objectspec.generators.merge.generators.scmProvider.azureDevOps.accessTokenRef
Required value
-
stringspec.generators.merge.generators.scmProvider.azureDevOps.accessTokenRef.key
Required value
-
stringspec.generators.merge.generators.scmProvider.azureDevOps.accessTokenRef.secretName
Required value
-
-
booleanspec.generators.merge.generators.scmProvider.azureDevOps.allBranches
-
stringspec.generators.merge.generators.scmProvider.azureDevOps.api
-
stringspec.generators.merge.generators.scmProvider.azureDevOps.organization
Required value
-
stringspec.generators.merge.generators.scmProvider.azureDevOps.teamProject
Required value
-
-
objectspec.generators.merge.generators.scmProvider.bitbucket
-
booleanspec.generators.merge.generators.scmProvider.bitbucket.allBranches
-
objectspec.generators.merge.generators.scmProvider.bitbucket.appPasswordRef
Required value
-
stringspec.generators.merge.generators.scmProvider.bitbucket.appPasswordRef.key
Required value
-
stringspec.generators.merge.generators.scmProvider.bitbucket.appPasswordRef.secretName
Required value
-
-
stringspec.generators.merge.generators.scmProvider.bitbucket.owner
Required value
-
stringspec.generators.merge.generators.scmProvider.bitbucket.user
Required value
-
-
objectspec.generators.merge.generators.scmProvider.bitbucketServer
-
booleanspec.generators.merge.generators.scmProvider.bitbucketServer.allBranches
-
stringspec.generators.merge.generators.scmProvider.bitbucketServer.api
Required value
-
objectspec.generators.merge.generators.scmProvider.bitbucketServer.basicAuth
-
objectspec.generators.merge.generators.scmProvider.bitbucketServer.basicAuth.passwordRef
Required value
-
stringspec.generators.merge.generators.scmProvider.bitbucketServer.basicAuth.passwordRef.key
Required value
-
stringspec.generators.merge.generators.scmProvider.bitbucketServer.basicAuth.passwordRef.secretName
Required value
-
-
stringspec.generators.merge.generators.scmProvider.bitbucketServer.basicAuth.username
Required value
-
-
objectspec.generators.merge.generators.scmProvider.bitbucketServer.bearerToken
-
objectspec.generators.merge.generators.scmProvider.bitbucketServer.bearerToken.tokenRef
Required value
-
stringspec.generators.merge.generators.scmProvider.bitbucketServer.bearerToken.tokenRef.key
Required value
-
stringspec.generators.merge.generators.scmProvider.bitbucketServer.bearerToken.tokenRef.secretName
Required value
-
-
-
objectspec.generators.merge.generators.scmProvider.bitbucketServer.caRef
-
stringspec.generators.merge.generators.scmProvider.bitbucketServer.caRef.configMapName
Required value
-
stringspec.generators.merge.generators.scmProvider.bitbucketServer.caRef.key
Required value
-
-
booleanspec.generators.merge.generators.scmProvider.bitbucketServer.insecure
-
stringspec.generators.merge.generators.scmProvider.bitbucketServer.project
Required value
-
-
stringspec.generators.merge.generators.scmProvider.cloneProtocol
-
array of objectsspec.generators.merge.generators.scmProvider.filters
-
stringspec.generators.merge.generators.scmProvider.filters.branchMatch
-
stringspec.generators.merge.generators.scmProvider.filters.labelMatch
-
array of stringsspec.generators.merge.generators.scmProvider.filters.pathsDoNotExist
-
array of stringsspec.generators.merge.generators.scmProvider.filters.pathsExist
-
stringspec.generators.merge.generators.scmProvider.filters.repositoryMatch
-
-
objectspec.generators.merge.generators.scmProvider.gitea
-
booleanspec.generators.merge.generators.scmProvider.gitea.allBranches
-
stringspec.generators.merge.generators.scmProvider.gitea.api
Required value
-
booleanspec.generators.merge.generators.scmProvider.gitea.insecure
-
stringspec.generators.merge.generators.scmProvider.gitea.owner
Required value
-
objectspec.generators.merge.generators.scmProvider.gitea.tokenRef
-
stringspec.generators.merge.generators.scmProvider.gitea.tokenRef.key
Required value
-
stringspec.generators.merge.generators.scmProvider.gitea.tokenRef.secretName
Required value
-
-
-
objectspec.generators.merge.generators.scmProvider.github
-
booleanspec.generators.merge.generators.scmProvider.github.allBranches
-
stringspec.generators.merge.generators.scmProvider.github.api
-
stringspec.generators.merge.generators.scmProvider.github.appSecretName
-
stringspec.generators.merge.generators.scmProvider.github.organization
Required value
-
objectspec.generators.merge.generators.scmProvider.github.tokenRef
-
stringspec.generators.merge.generators.scmProvider.github.tokenRef.key
Required value
-
stringspec.generators.merge.generators.scmProvider.github.tokenRef.secretName
Required value
-
-
-
objectspec.generators.merge.generators.scmProvider.gitlab
-
booleanspec.generators.merge.generators.scmProvider.gitlab.allBranches
-
stringspec.generators.merge.generators.scmProvider.gitlab.api
-
objectspec.generators.merge.generators.scmProvider.gitlab.caRef
-
stringspec.generators.merge.generators.scmProvider.gitlab.caRef.configMapName
Required value
-
stringspec.generators.merge.generators.scmProvider.gitlab.caRef.key
Required value
-
-
stringspec.generators.merge.generators.scmProvider.gitlab.group
Required value
-
boolean
-
booleanspec.generators.merge.generators.scmProvider.gitlab.includeSubgroups
-
booleanspec.generators.merge.generators.scmProvider.gitlab.insecure
-
objectspec.generators.merge.generators.scmProvider.gitlab.tokenRef
-
stringspec.generators.merge.generators.scmProvider.gitlab.tokenRef.key
Required value
-
stringspec.generators.merge.generators.scmProvider.gitlab.tokenRef.secretName
Required value
-
-
stringspec.generators.merge.generators.scmProvider.gitlab.topic
-
-
integerspec.generators.merge.generators.scmProvider.requeueAfterSeconds
-
objectspec.generators.merge.generators.scmProvider.template
-
objectspec.generators.merge.generators.scmProvider.template.metadata
Required value
-
objectspec.generators.merge.generators.scmProvider.template.metadata.annotations
-
array of stringsspec.generators.merge.generators.scmProvider.template.metadata.finalizers
-
objectspec.generators.merge.generators.scmProvider.template.metadata.labels
-
stringspec.generators.merge.generators.scmProvider.template.metadata.name
-
stringspec.generators.merge.generators.scmProvider.template.metadata.namespace
-
-
objectspec.generators.merge.generators.scmProvider.template.spec
Required value
-
objectspec.generators.merge.generators.scmProvider.template.spec.destination
Required value
-
stringspec.generators.merge.generators.scmProvider.template.spec.destination.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.destination.namespace
-
stringspec.generators.merge.generators.scmProvider.template.spec.destination.server
-
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.ignoreDifferences
-
stringspec.generators.merge.generators.scmProvider.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.merge.generators.scmProvider.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.merge.generators.scmProvider.template.spec.ignoreDifferences.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.info
-
stringspec.generators.merge.generators.scmProvider.template.spec.info.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.info.value
-
-
stringspec.generators.merge.generators.scmProvider.template.spec.project
Required value
-
integerspec.generators.merge.generators.scmProvider.template.spec.revisionHistoryLimit
-
objectspec.generators.merge.generators.scmProvider.template.spec.source
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.chart
-
objectspec.generators.merge.generators.scmProvider.template.spec.source.directory
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.directory.exclude
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.directory.include
-
objectspec.generators.merge.generators.scmProvider.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.directory.recurse
-
-
objectspec.generators.merge.generators.scmProvider.template.spec.source.helm
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.source.helm.fileParameters
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.helm.fileParameters.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.helm.kubeVersion
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.helm.namespace
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.source.helm.parameters
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.helm.parameters.forceString
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.helm.parameters.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.helm.passCredentials
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.helm.releaseName
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.helm.skipCrds
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.helm.skipTests
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.source.helm.valueFiles
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.helm.values
-
objectspec.generators.merge.generators.scmProvider.template.spec.source.helm.valuesObject
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.helm.version
-
-
objectspec.generators.merge.generators.scmProvider.template.spec.source.kustomize
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.apiVersions
-
objectspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.components
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.images
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.namePrefix
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.patches
-
objectspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.patches.options
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.patches.patch
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.patches.path
-
objectspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.patches.target
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.replicas.count
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.kustomize.version
-
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.path
-
objectspec.generators.merge.generators.scmProvider.template.spec.source.plugin
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.source.plugin.env
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.plugin.env.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.plugin.env.value
-
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.plugin.name
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.source.plugin.parameters
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.source.plugin.parameters.array
-
objectspec.generators.merge.generators.scmProvider.template.spec.source.plugin.parameters.map
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.plugin.parameters.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.ref
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.repoURL
Required value
-
stringspec.generators.merge.generators.scmProvider.template.spec.source.targetRevision
-
-
objectspec.generators.merge.generators.scmProvider.template.spec.sourceHydrator
-
objectspec.generators.merge.generators.scmProvider.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.merge.generators.scmProvider.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.merge.generators.scmProvider.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.merge.generators.scmProvider.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.merge.generators.scmProvider.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.merge.generators.scmProvider.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.merge.generators.scmProvider.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.merge.generators.scmProvider.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.merge.generators.scmProvider.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.sources
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.chart
-
objectspec.generators.merge.generators.scmProvider.template.spec.sources.directory
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.directory.exclude
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.directory.include
-
objectspec.generators.merge.generators.scmProvider.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.directory.recurse
-
-
objectspec.generators.merge.generators.scmProvider.template.spec.sources.helm
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.sources.helm.fileParameters
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.helm.kubeVersion
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.helm.namespace
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.sources.helm.parameters
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.helm.parameters.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.helm.passCredentials
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.helm.releaseName
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.helm.skipCrds
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.sources.helm.valueFiles
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.helm.values
-
objectspec.generators.merge.generators.scmProvider.template.spec.sources.helm.valuesObject
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.helm.version
-
-
objectspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.components
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.images
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.patches
-
objectspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.patches.options
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.patches.path
-
objectspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.patches.target
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.kustomize.version
-
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.path
-
objectspec.generators.merge.generators.scmProvider.template.spec.sources.plugin
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.sources.plugin.env
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.plugin.env.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.plugin.env.value
-
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.plugin.name
-
array of objectsspec.generators.merge.generators.scmProvider.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.sources.plugin.parameters.array
-
objectspec.generators.merge.generators.scmProvider.template.spec.sources.plugin.parameters.map
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.plugin.parameters.name
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.ref
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.repoURL
-
stringspec.generators.merge.generators.scmProvider.template.spec.sources.targetRevision
-
-
objectspec.generators.merge.generators.scmProvider.template.spec.syncPolicy
-
objectspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.automated
-
booleanspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.retry
-
objectspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.merge.generators.scmProvider.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.merge.generators.scmProvider.values
-
-
objectspec.generators.merge.generators.selector
-
array of objectsspec.generators.merge.generators.selector.matchExpressions
-
stringspec.generators.merge.generators.selector.matchExpressions.key
-
stringspec.generators.merge.generators.selector.matchExpressions.operator
-
array of stringsspec.generators.merge.generators.selector.matchExpressions.values
-
-
objectspec.generators.merge.generators.selector.matchLabels
-
-
-
array of stringsspec.generators.merge.mergeKeys
Required value
-
objectspec.generators.merge.template
-
objectspec.generators.merge.template.metadata
Required value
-
objectspec.generators.merge.template.metadata.annotations
-
array of stringsspec.generators.merge.template.metadata.finalizers
-
objectspec.generators.merge.template.metadata.labels
-
stringspec.generators.merge.template.metadata.name
-
stringspec.generators.merge.template.metadata.namespace
-
-
objectspec.generators.merge.template.spec
Required value
-
objectspec.generators.merge.template.spec.destination
Required value
-
stringspec.generators.merge.template.spec.destination.name
-
stringspec.generators.merge.template.spec.destination.namespace
-
stringspec.generators.merge.template.spec.destination.server
-
-
array of objectsspec.generators.merge.template.spec.ignoreDifferences
-
stringspec.generators.merge.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.merge.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.merge.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.merge.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.merge.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.merge.template.spec.ignoreDifferences.name
-
stringspec.generators.merge.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.merge.template.spec.info
-
stringspec.generators.merge.template.spec.info.name
-
stringspec.generators.merge.template.spec.info.value
-
-
stringspec.generators.merge.template.spec.project
Required value
-
integerspec.generators.merge.template.spec.revisionHistoryLimit
-
objectspec.generators.merge.template.spec.source
-
stringspec.generators.merge.template.spec.source.chart
-
objectspec.generators.merge.template.spec.source.directory
-
stringspec.generators.merge.template.spec.source.directory.exclude
-
stringspec.generators.merge.template.spec.source.directory.include
-
objectspec.generators.merge.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.merge.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.merge.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.merge.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.merge.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.merge.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.merge.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.merge.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.merge.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.template.spec.source.directory.recurse
-
-
objectspec.generators.merge.template.spec.source.helm
-
array of stringsspec.generators.merge.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.merge.template.spec.source.helm.fileParameters
-
stringspec.generators.merge.template.spec.source.helm.fileParameters.name
-
stringspec.generators.merge.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.merge.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.template.spec.source.helm.kubeVersion
-
stringspec.generators.merge.template.spec.source.helm.namespace
-
array of objectsspec.generators.merge.template.spec.source.helm.parameters
-
booleanspec.generators.merge.template.spec.source.helm.parameters.forceString
-
stringspec.generators.merge.template.spec.source.helm.parameters.name
-
stringspec.generators.merge.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.merge.template.spec.source.helm.passCredentials
-
stringspec.generators.merge.template.spec.source.helm.releaseName
-
booleanspec.generators.merge.template.spec.source.helm.skipCrds
-
booleanspec.generators.merge.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.merge.template.spec.source.helm.skipTests
-
array of stringsspec.generators.merge.template.spec.source.helm.valueFiles
-
stringspec.generators.merge.template.spec.source.helm.values
-
objectspec.generators.merge.template.spec.source.helm.valuesObject
-
stringspec.generators.merge.template.spec.source.helm.version
-
-
objectspec.generators.merge.template.spec.source.kustomize
-
array of stringsspec.generators.merge.template.spec.source.kustomize.apiVersions
-
objectspec.generators.merge.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.merge.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.merge.template.spec.source.kustomize.components
-
booleanspec.generators.merge.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.merge.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.template.spec.source.kustomize.images
-
stringspec.generators.merge.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.merge.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.merge.template.spec.source.kustomize.namePrefix
-
stringspec.generators.merge.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.merge.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.merge.template.spec.source.kustomize.patches
-
objectspec.generators.merge.template.spec.source.kustomize.patches.options
-
stringspec.generators.merge.template.spec.source.kustomize.patches.patch
-
stringspec.generators.merge.template.spec.source.kustomize.patches.path
-
objectspec.generators.merge.template.spec.source.kustomize.patches.target
-
stringspec.generators.merge.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.merge.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.merge.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.merge.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.merge.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.merge.template.spec.source.kustomize.replicas.count
-
stringspec.generators.merge.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.merge.template.spec.source.kustomize.version
-
-
stringspec.generators.merge.template.spec.source.name
-
stringspec.generators.merge.template.spec.source.path
-
objectspec.generators.merge.template.spec.source.plugin
-
array of objectsspec.generators.merge.template.spec.source.plugin.env
-
stringspec.generators.merge.template.spec.source.plugin.env.name
-
stringspec.generators.merge.template.spec.source.plugin.env.value
-
-
stringspec.generators.merge.template.spec.source.plugin.name
-
array of objectsspec.generators.merge.template.spec.source.plugin.parameters
-
array of stringsspec.generators.merge.template.spec.source.plugin.parameters.array
-
objectspec.generators.merge.template.spec.source.plugin.parameters.map
-
stringspec.generators.merge.template.spec.source.plugin.parameters.name
-
stringspec.generators.merge.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.merge.template.spec.source.ref
-
stringspec.generators.merge.template.spec.source.repoURL
Required value
-
stringspec.generators.merge.template.spec.source.targetRevision
-
-
objectspec.generators.merge.template.spec.sourceHydrator
-
objectspec.generators.merge.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.merge.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.merge.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.merge.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.merge.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.merge.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.merge.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.merge.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.merge.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.merge.template.spec.sources
-
stringspec.generators.merge.template.spec.sources.chart
-
objectspec.generators.merge.template.spec.sources.directory
-
stringspec.generators.merge.template.spec.sources.directory.exclude
-
stringspec.generators.merge.template.spec.sources.directory.include
-
objectspec.generators.merge.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.merge.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.merge.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.merge.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.merge.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.merge.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.merge.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.merge.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.merge.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.merge.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.merge.template.spec.sources.directory.recurse
-
-
objectspec.generators.merge.template.spec.sources.helm
-
array of stringsspec.generators.merge.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.merge.template.spec.sources.helm.fileParameters
-
stringspec.generators.merge.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.merge.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.merge.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.merge.template.spec.sources.helm.kubeVersion
-
stringspec.generators.merge.template.spec.sources.helm.namespace
-
array of objectsspec.generators.merge.template.spec.sources.helm.parameters
-
booleanspec.generators.merge.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.merge.template.spec.sources.helm.parameters.name
-
stringspec.generators.merge.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.merge.template.spec.sources.helm.passCredentials
-
stringspec.generators.merge.template.spec.sources.helm.releaseName
-
booleanspec.generators.merge.template.spec.sources.helm.skipCrds
-
booleanspec.generators.merge.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.merge.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.merge.template.spec.sources.helm.valueFiles
-
stringspec.generators.merge.template.spec.sources.helm.values
-
objectspec.generators.merge.template.spec.sources.helm.valuesObject
-
stringspec.generators.merge.template.spec.sources.helm.version
-
-
objectspec.generators.merge.template.spec.sources.kustomize
-
array of stringsspec.generators.merge.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.merge.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.merge.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.merge.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.merge.template.spec.sources.kustomize.components
-
booleanspec.generators.merge.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.merge.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.merge.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.merge.template.spec.sources.kustomize.images
-
stringspec.generators.merge.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.merge.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.merge.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.merge.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.merge.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.merge.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.merge.template.spec.sources.kustomize.patches
-
objectspec.generators.merge.template.spec.sources.kustomize.patches.options
-
stringspec.generators.merge.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.merge.template.spec.sources.kustomize.patches.path
-
objectspec.generators.merge.template.spec.sources.kustomize.patches.target
-
stringspec.generators.merge.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.merge.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.merge.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.merge.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.merge.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.merge.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.merge.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.merge.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.merge.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.merge.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.merge.template.spec.sources.kustomize.version
-
-
stringspec.generators.merge.template.spec.sources.name
-
stringspec.generators.merge.template.spec.sources.path
-
objectspec.generators.merge.template.spec.sources.plugin
-
array of objectsspec.generators.merge.template.spec.sources.plugin.env
-
stringspec.generators.merge.template.spec.sources.plugin.env.name
-
stringspec.generators.merge.template.spec.sources.plugin.env.value
-
-
stringspec.generators.merge.template.spec.sources.plugin.name
-
array of objectsspec.generators.merge.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.merge.template.spec.sources.plugin.parameters.array
-
objectspec.generators.merge.template.spec.sources.plugin.parameters.map
-
stringspec.generators.merge.template.spec.sources.plugin.parameters.name
-
stringspec.generators.merge.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.merge.template.spec.sources.ref
-
stringspec.generators.merge.template.spec.sources.repoURL
-
stringspec.generators.merge.template.spec.sources.targetRevision
-
-
objectspec.generators.merge.template.spec.syncPolicy
-
objectspec.generators.merge.template.spec.syncPolicy.automated
-
booleanspec.generators.merge.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.merge.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.merge.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.merge.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.merge.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.merge.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.merge.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.merge.template.spec.syncPolicy.retry
-
objectspec.generators.merge.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.merge.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.merge.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.merge.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.merge.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.merge.template.spec.syncPolicy.syncOptions
-
-
-
-
-
objectspec.generators.plugin
-
objectspec.generators.plugin.configMapRef
Required value
-
stringspec.generators.plugin.configMapRef.name
Required value
-
-
objectspec.generators.plugin.input
-
objectspec.generators.plugin.input.parameters
-
-
integerspec.generators.plugin.requeueAfterSeconds
-
objectspec.generators.plugin.template
-
objectspec.generators.plugin.template.metadata
Required value
-
objectspec.generators.plugin.template.metadata.annotations
-
array of stringsspec.generators.plugin.template.metadata.finalizers
-
objectspec.generators.plugin.template.metadata.labels
-
stringspec.generators.plugin.template.metadata.name
-
stringspec.generators.plugin.template.metadata.namespace
-
-
objectspec.generators.plugin.template.spec
Required value
-
objectspec.generators.plugin.template.spec.destination
Required value
-
stringspec.generators.plugin.template.spec.destination.name
-
stringspec.generators.plugin.template.spec.destination.namespace
-
stringspec.generators.plugin.template.spec.destination.server
-
-
array of objectsspec.generators.plugin.template.spec.ignoreDifferences
-
stringspec.generators.plugin.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.plugin.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.plugin.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.plugin.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.plugin.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.plugin.template.spec.ignoreDifferences.name
-
stringspec.generators.plugin.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.plugin.template.spec.info
-
stringspec.generators.plugin.template.spec.info.name
-
stringspec.generators.plugin.template.spec.info.value
-
-
stringspec.generators.plugin.template.spec.project
Required value
-
integerspec.generators.plugin.template.spec.revisionHistoryLimit
-
objectspec.generators.plugin.template.spec.source
-
stringspec.generators.plugin.template.spec.source.chart
-
objectspec.generators.plugin.template.spec.source.directory
-
stringspec.generators.plugin.template.spec.source.directory.exclude
-
stringspec.generators.plugin.template.spec.source.directory.include
-
objectspec.generators.plugin.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.plugin.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.plugin.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.plugin.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.plugin.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.plugin.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.plugin.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.plugin.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.plugin.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.plugin.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.plugin.template.spec.source.directory.recurse
-
-
objectspec.generators.plugin.template.spec.source.helm
-
array of stringsspec.generators.plugin.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.plugin.template.spec.source.helm.fileParameters
-
stringspec.generators.plugin.template.spec.source.helm.fileParameters.name
-
stringspec.generators.plugin.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.plugin.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.plugin.template.spec.source.helm.kubeVersion
-
stringspec.generators.plugin.template.spec.source.helm.namespace
-
array of objectsspec.generators.plugin.template.spec.source.helm.parameters
-
booleanspec.generators.plugin.template.spec.source.helm.parameters.forceString
-
stringspec.generators.plugin.template.spec.source.helm.parameters.name
-
stringspec.generators.plugin.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.plugin.template.spec.source.helm.passCredentials
-
stringspec.generators.plugin.template.spec.source.helm.releaseName
-
booleanspec.generators.plugin.template.spec.source.helm.skipCrds
-
booleanspec.generators.plugin.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.plugin.template.spec.source.helm.skipTests
-
array of stringsspec.generators.plugin.template.spec.source.helm.valueFiles
-
stringspec.generators.plugin.template.spec.source.helm.values
-
objectspec.generators.plugin.template.spec.source.helm.valuesObject
-
stringspec.generators.plugin.template.spec.source.helm.version
-
-
objectspec.generators.plugin.template.spec.source.kustomize
-
array of stringsspec.generators.plugin.template.spec.source.kustomize.apiVersions
-
objectspec.generators.plugin.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.plugin.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.plugin.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.plugin.template.spec.source.kustomize.components
-
booleanspec.generators.plugin.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.plugin.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.plugin.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.plugin.template.spec.source.kustomize.images
-
stringspec.generators.plugin.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.plugin.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.plugin.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.plugin.template.spec.source.kustomize.namePrefix
-
stringspec.generators.plugin.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.plugin.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.plugin.template.spec.source.kustomize.patches
-
objectspec.generators.plugin.template.spec.source.kustomize.patches.options
-
stringspec.generators.plugin.template.spec.source.kustomize.patches.patch
-
stringspec.generators.plugin.template.spec.source.kustomize.patches.path
-
objectspec.generators.plugin.template.spec.source.kustomize.patches.target
-
stringspec.generators.plugin.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.plugin.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.plugin.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.plugin.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.plugin.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.plugin.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.plugin.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.plugin.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.plugin.template.spec.source.kustomize.replicas.count
-
stringspec.generators.plugin.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.plugin.template.spec.source.kustomize.version
-
-
stringspec.generators.plugin.template.spec.source.name
-
stringspec.generators.plugin.template.spec.source.path
-
objectspec.generators.plugin.template.spec.source.plugin
-
array of objectsspec.generators.plugin.template.spec.source.plugin.env
-
stringspec.generators.plugin.template.spec.source.plugin.env.name
-
stringspec.generators.plugin.template.spec.source.plugin.env.value
-
-
stringspec.generators.plugin.template.spec.source.plugin.name
-
array of objectsspec.generators.plugin.template.spec.source.plugin.parameters
-
array of stringsspec.generators.plugin.template.spec.source.plugin.parameters.array
-
objectspec.generators.plugin.template.spec.source.plugin.parameters.map
-
stringspec.generators.plugin.template.spec.source.plugin.parameters.name
-
stringspec.generators.plugin.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.plugin.template.spec.source.ref
-
stringspec.generators.plugin.template.spec.source.repoURL
Required value
-
stringspec.generators.plugin.template.spec.source.targetRevision
-
-
objectspec.generators.plugin.template.spec.sourceHydrator
-
objectspec.generators.plugin.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.plugin.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.plugin.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.plugin.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.plugin.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.plugin.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.plugin.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.plugin.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.plugin.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.plugin.template.spec.sources
-
stringspec.generators.plugin.template.spec.sources.chart
-
objectspec.generators.plugin.template.spec.sources.directory
-
stringspec.generators.plugin.template.spec.sources.directory.exclude
-
stringspec.generators.plugin.template.spec.sources.directory.include
-
objectspec.generators.plugin.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.plugin.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.plugin.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.plugin.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.plugin.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.plugin.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.plugin.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.plugin.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.plugin.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.plugin.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.plugin.template.spec.sources.directory.recurse
-
-
objectspec.generators.plugin.template.spec.sources.helm
-
array of stringsspec.generators.plugin.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.plugin.template.spec.sources.helm.fileParameters
-
stringspec.generators.plugin.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.plugin.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.plugin.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.plugin.template.spec.sources.helm.kubeVersion
-
stringspec.generators.plugin.template.spec.sources.helm.namespace
-
array of objectsspec.generators.plugin.template.spec.sources.helm.parameters
-
booleanspec.generators.plugin.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.plugin.template.spec.sources.helm.parameters.name
-
stringspec.generators.plugin.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.plugin.template.spec.sources.helm.passCredentials
-
stringspec.generators.plugin.template.spec.sources.helm.releaseName
-
booleanspec.generators.plugin.template.spec.sources.helm.skipCrds
-
booleanspec.generators.plugin.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.plugin.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.plugin.template.spec.sources.helm.valueFiles
-
stringspec.generators.plugin.template.spec.sources.helm.values
-
objectspec.generators.plugin.template.spec.sources.helm.valuesObject
-
stringspec.generators.plugin.template.spec.sources.helm.version
-
-
objectspec.generators.plugin.template.spec.sources.kustomize
-
array of stringsspec.generators.plugin.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.plugin.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.plugin.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.plugin.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.plugin.template.spec.sources.kustomize.components
-
booleanspec.generators.plugin.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.plugin.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.plugin.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.plugin.template.spec.sources.kustomize.images
-
stringspec.generators.plugin.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.plugin.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.plugin.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.plugin.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.plugin.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.plugin.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.plugin.template.spec.sources.kustomize.patches
-
objectspec.generators.plugin.template.spec.sources.kustomize.patches.options
-
stringspec.generators.plugin.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.plugin.template.spec.sources.kustomize.patches.path
-
objectspec.generators.plugin.template.spec.sources.kustomize.patches.target
-
stringspec.generators.plugin.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.plugin.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.plugin.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.plugin.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.plugin.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.plugin.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.plugin.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.plugin.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.plugin.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.plugin.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.plugin.template.spec.sources.kustomize.version
-
-
stringspec.generators.plugin.template.spec.sources.name
-
stringspec.generators.plugin.template.spec.sources.path
-
objectspec.generators.plugin.template.spec.sources.plugin
-
array of objectsspec.generators.plugin.template.spec.sources.plugin.env
-
stringspec.generators.plugin.template.spec.sources.plugin.env.name
-
stringspec.generators.plugin.template.spec.sources.plugin.env.value
-
-
stringspec.generators.plugin.template.spec.sources.plugin.name
-
array of objectsspec.generators.plugin.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.plugin.template.spec.sources.plugin.parameters.array
-
objectspec.generators.plugin.template.spec.sources.plugin.parameters.map
-
stringspec.generators.plugin.template.spec.sources.plugin.parameters.name
-
stringspec.generators.plugin.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.plugin.template.spec.sources.ref
-
stringspec.generators.plugin.template.spec.sources.repoURL
-
stringspec.generators.plugin.template.spec.sources.targetRevision
-
-
objectspec.generators.plugin.template.spec.syncPolicy
-
objectspec.generators.plugin.template.spec.syncPolicy.automated
-
booleanspec.generators.plugin.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.plugin.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.plugin.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.plugin.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.plugin.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.plugin.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.plugin.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.plugin.template.spec.syncPolicy.retry
-
objectspec.generators.plugin.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.plugin.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.plugin.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.plugin.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.plugin.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.plugin.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.plugin.values
-
-
objectspec.generators.pullRequest
-
objectspec.generators.pullRequest.azuredevops
-
stringspec.generators.pullRequest.azuredevops.api
-
array of stringsspec.generators.pullRequest.azuredevops.labels
-
stringspec.generators.pullRequest.azuredevops.organization
Required value
-
stringspec.generators.pullRequest.azuredevops.project
Required value
-
stringspec.generators.pullRequest.azuredevops.repo
Required value
-
objectspec.generators.pullRequest.azuredevops.tokenRef
-
stringspec.generators.pullRequest.azuredevops.tokenRef.key
Required value
-
stringspec.generators.pullRequest.azuredevops.tokenRef.secretName
Required value
-
-
-
objectspec.generators.pullRequest.bitbucket
-
stringspec.generators.pullRequest.bitbucket.api
-
objectspec.generators.pullRequest.bitbucket.basicAuth
-
objectspec.generators.pullRequest.bitbucket.basicAuth.passwordRef
Required value
-
stringspec.generators.pullRequest.bitbucket.basicAuth.passwordRef.key
Required value
-
stringspec.generators.pullRequest.bitbucket.basicAuth.passwordRef.secretName
Required value
-
-
stringspec.generators.pullRequest.bitbucket.basicAuth.username
Required value
-
-
objectspec.generators.pullRequest.bitbucket.bearerToken
-
objectspec.generators.pullRequest.bitbucket.bearerToken.tokenRef
Required value
-
stringspec.generators.pullRequest.bitbucket.bearerToken.tokenRef.key
Required value
-
stringspec.generators.pullRequest.bitbucket.bearerToken.tokenRef.secretName
Required value
-
-
-
stringspec.generators.pullRequest.bitbucket.owner
Required value
-
stringspec.generators.pullRequest.bitbucket.repo
Required value
-
-
objectspec.generators.pullRequest.bitbucketServer
-
stringspec.generators.pullRequest.bitbucketServer.api
Required value
-
objectspec.generators.pullRequest.bitbucketServer.basicAuth
-
objectspec.generators.pullRequest.bitbucketServer.basicAuth.passwordRef
Required value
-
stringspec.generators.pullRequest.bitbucketServer.basicAuth.passwordRef.key
Required value
-
stringspec.generators.pullRequest.bitbucketServer.basicAuth.passwordRef.secretName
Required value
-
-
stringspec.generators.pullRequest.bitbucketServer.basicAuth.username
Required value
-
-
objectspec.generators.pullRequest.bitbucketServer.bearerToken
-
objectspec.generators.pullRequest.bitbucketServer.bearerToken.tokenRef
Required value
-
stringspec.generators.pullRequest.bitbucketServer.bearerToken.tokenRef.key
Required value
-
stringspec.generators.pullRequest.bitbucketServer.bearerToken.tokenRef.secretName
Required value
-
-
-
objectspec.generators.pullRequest.bitbucketServer.caRef
-
stringspec.generators.pullRequest.bitbucketServer.caRef.configMapName
Required value
-
stringspec.generators.pullRequest.bitbucketServer.caRef.key
Required value
-
-
booleanspec.generators.pullRequest.bitbucketServer.insecure
-
stringspec.generators.pullRequest.bitbucketServer.project
Required value
-
stringspec.generators.pullRequest.bitbucketServer.repo
Required value
-
-
array of objectsspec.generators.pullRequest.filters
-
stringspec.generators.pullRequest.filters.branchMatch
-
stringspec.generators.pullRequest.filters.targetBranchMatch
-
-
objectspec.generators.pullRequest.gitea
-
stringspec.generators.pullRequest.gitea.api
Required value
-
booleanspec.generators.pullRequest.gitea.insecure
-
array of stringsspec.generators.pullRequest.gitea.labels
-
stringspec.generators.pullRequest.gitea.owner
Required value
-
stringspec.generators.pullRequest.gitea.repo
Required value
-
objectspec.generators.pullRequest.gitea.tokenRef
-
stringspec.generators.pullRequest.gitea.tokenRef.key
Required value
-
stringspec.generators.pullRequest.gitea.tokenRef.secretName
Required value
-
-
-
objectspec.generators.pullRequest.github
-
stringspec.generators.pullRequest.github.api
-
stringspec.generators.pullRequest.github.appSecretName
-
array of stringsspec.generators.pullRequest.github.labels
-
stringspec.generators.pullRequest.github.owner
Required value
-
stringspec.generators.pullRequest.github.repo
Required value
-
objectspec.generators.pullRequest.github.tokenRef
-
stringspec.generators.pullRequest.github.tokenRef.key
Required value
-
stringspec.generators.pullRequest.github.tokenRef.secretName
Required value
-
-
-
objectspec.generators.pullRequest.gitlab
-
stringspec.generators.pullRequest.gitlab.api
-
objectspec.generators.pullRequest.gitlab.caRef
-
stringspec.generators.pullRequest.gitlab.caRef.configMapName
Required value
-
stringspec.generators.pullRequest.gitlab.caRef.key
Required value
-
-
booleanspec.generators.pullRequest.gitlab.insecure
-
array of stringsspec.generators.pullRequest.gitlab.labels
-
stringspec.generators.pullRequest.gitlab.project
Required value
-
stringspec.generators.pullRequest.gitlab.pullRequestState
-
objectspec.generators.pullRequest.gitlab.tokenRef
-
stringspec.generators.pullRequest.gitlab.tokenRef.key
Required value
-
stringspec.generators.pullRequest.gitlab.tokenRef.secretName
Required value
-
-
-
integerspec.generators.pullRequest.requeueAfterSeconds
-
objectspec.generators.pullRequest.template
-
objectspec.generators.pullRequest.template.metadata
Required value
-
objectspec.generators.pullRequest.template.metadata.annotations
-
array of stringsspec.generators.pullRequest.template.metadata.finalizers
-
objectspec.generators.pullRequest.template.metadata.labels
-
stringspec.generators.pullRequest.template.metadata.name
-
stringspec.generators.pullRequest.template.metadata.namespace
-
-
objectspec.generators.pullRequest.template.spec
Required value
-
objectspec.generators.pullRequest.template.spec.destination
Required value
-
stringspec.generators.pullRequest.template.spec.destination.name
-
stringspec.generators.pullRequest.template.spec.destination.namespace
-
stringspec.generators.pullRequest.template.spec.destination.server
-
-
array of objectsspec.generators.pullRequest.template.spec.ignoreDifferences
-
stringspec.generators.pullRequest.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.pullRequest.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.pullRequest.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.pullRequest.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.pullRequest.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.pullRequest.template.spec.ignoreDifferences.name
-
stringspec.generators.pullRequest.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.pullRequest.template.spec.info
-
stringspec.generators.pullRequest.template.spec.info.name
-
stringspec.generators.pullRequest.template.spec.info.value
-
-
stringspec.generators.pullRequest.template.spec.project
Required value
-
integerspec.generators.pullRequest.template.spec.revisionHistoryLimit
-
objectspec.generators.pullRequest.template.spec.source
-
stringspec.generators.pullRequest.template.spec.source.chart
-
objectspec.generators.pullRequest.template.spec.source.directory
-
stringspec.generators.pullRequest.template.spec.source.directory.exclude
-
stringspec.generators.pullRequest.template.spec.source.directory.include
-
objectspec.generators.pullRequest.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.pullRequest.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.pullRequest.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.pullRequest.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.pullRequest.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.pullRequest.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.pullRequest.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.pullRequest.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.pullRequest.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.pullRequest.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.pullRequest.template.spec.source.directory.recurse
-
-
objectspec.generators.pullRequest.template.spec.source.helm
-
array of stringsspec.generators.pullRequest.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.pullRequest.template.spec.source.helm.fileParameters
-
stringspec.generators.pullRequest.template.spec.source.helm.fileParameters.name
-
stringspec.generators.pullRequest.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.pullRequest.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.pullRequest.template.spec.source.helm.kubeVersion
-
stringspec.generators.pullRequest.template.spec.source.helm.namespace
-
array of objectsspec.generators.pullRequest.template.spec.source.helm.parameters
-
booleanspec.generators.pullRequest.template.spec.source.helm.parameters.forceString
-
stringspec.generators.pullRequest.template.spec.source.helm.parameters.name
-
stringspec.generators.pullRequest.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.pullRequest.template.spec.source.helm.passCredentials
-
stringspec.generators.pullRequest.template.spec.source.helm.releaseName
-
booleanspec.generators.pullRequest.template.spec.source.helm.skipCrds
-
booleanspec.generators.pullRequest.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.pullRequest.template.spec.source.helm.skipTests
-
array of stringsspec.generators.pullRequest.template.spec.source.helm.valueFiles
-
stringspec.generators.pullRequest.template.spec.source.helm.values
-
objectspec.generators.pullRequest.template.spec.source.helm.valuesObject
-
stringspec.generators.pullRequest.template.spec.source.helm.version
-
-
objectspec.generators.pullRequest.template.spec.source.kustomize
-
array of stringsspec.generators.pullRequest.template.spec.source.kustomize.apiVersions
-
objectspec.generators.pullRequest.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.pullRequest.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.pullRequest.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.pullRequest.template.spec.source.kustomize.components
-
booleanspec.generators.pullRequest.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.pullRequest.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.pullRequest.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.pullRequest.template.spec.source.kustomize.images
-
stringspec.generators.pullRequest.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.pullRequest.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.pullRequest.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.pullRequest.template.spec.source.kustomize.namePrefix
-
stringspec.generators.pullRequest.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.pullRequest.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.pullRequest.template.spec.source.kustomize.patches
-
objectspec.generators.pullRequest.template.spec.source.kustomize.patches.options
-
stringspec.generators.pullRequest.template.spec.source.kustomize.patches.patch
-
stringspec.generators.pullRequest.template.spec.source.kustomize.patches.path
-
objectspec.generators.pullRequest.template.spec.source.kustomize.patches.target
-
stringspec.generators.pullRequest.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.pullRequest.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.pullRequest.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.pullRequest.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.pullRequest.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.pullRequest.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.pullRequest.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.pullRequest.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.pullRequest.template.spec.source.kustomize.replicas.count
-
stringspec.generators.pullRequest.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.pullRequest.template.spec.source.kustomize.version
-
-
stringspec.generators.pullRequest.template.spec.source.name
-
stringspec.generators.pullRequest.template.spec.source.path
-
objectspec.generators.pullRequest.template.spec.source.plugin
-
array of objectsspec.generators.pullRequest.template.spec.source.plugin.env
-
stringspec.generators.pullRequest.template.spec.source.plugin.env.name
-
stringspec.generators.pullRequest.template.spec.source.plugin.env.value
-
-
stringspec.generators.pullRequest.template.spec.source.plugin.name
-
array of objectsspec.generators.pullRequest.template.spec.source.plugin.parameters
-
array of stringsspec.generators.pullRequest.template.spec.source.plugin.parameters.array
-
objectspec.generators.pullRequest.template.spec.source.plugin.parameters.map
-
stringspec.generators.pullRequest.template.spec.source.plugin.parameters.name
-
stringspec.generators.pullRequest.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.pullRequest.template.spec.source.ref
-
stringspec.generators.pullRequest.template.spec.source.repoURL
Required value
-
stringspec.generators.pullRequest.template.spec.source.targetRevision
-
-
objectspec.generators.pullRequest.template.spec.sourceHydrator
-
objectspec.generators.pullRequest.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.pullRequest.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.pullRequest.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.pullRequest.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.pullRequest.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.pullRequest.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.pullRequest.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.pullRequest.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.pullRequest.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.pullRequest.template.spec.sources
-
stringspec.generators.pullRequest.template.spec.sources.chart
-
objectspec.generators.pullRequest.template.spec.sources.directory
-
stringspec.generators.pullRequest.template.spec.sources.directory.exclude
-
stringspec.generators.pullRequest.template.spec.sources.directory.include
-
objectspec.generators.pullRequest.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.pullRequest.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.pullRequest.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.pullRequest.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.pullRequest.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.pullRequest.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.pullRequest.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.pullRequest.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.pullRequest.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.pullRequest.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.pullRequest.template.spec.sources.directory.recurse
-
-
objectspec.generators.pullRequest.template.spec.sources.helm
-
array of stringsspec.generators.pullRequest.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.pullRequest.template.spec.sources.helm.fileParameters
-
stringspec.generators.pullRequest.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.pullRequest.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.pullRequest.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.pullRequest.template.spec.sources.helm.kubeVersion
-
stringspec.generators.pullRequest.template.spec.sources.helm.namespace
-
array of objectsspec.generators.pullRequest.template.spec.sources.helm.parameters
-
booleanspec.generators.pullRequest.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.pullRequest.template.spec.sources.helm.parameters.name
-
stringspec.generators.pullRequest.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.pullRequest.template.spec.sources.helm.passCredentials
-
stringspec.generators.pullRequest.template.spec.sources.helm.releaseName
-
booleanspec.generators.pullRequest.template.spec.sources.helm.skipCrds
-
booleanspec.generators.pullRequest.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.pullRequest.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.pullRequest.template.spec.sources.helm.valueFiles
-
stringspec.generators.pullRequest.template.spec.sources.helm.values
-
objectspec.generators.pullRequest.template.spec.sources.helm.valuesObject
-
stringspec.generators.pullRequest.template.spec.sources.helm.version
-
-
objectspec.generators.pullRequest.template.spec.sources.kustomize
-
array of stringsspec.generators.pullRequest.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.pullRequest.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.pullRequest.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.pullRequest.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.pullRequest.template.spec.sources.kustomize.components
-
booleanspec.generators.pullRequest.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.pullRequest.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.pullRequest.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.pullRequest.template.spec.sources.kustomize.images
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.pullRequest.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.pullRequest.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.pullRequest.template.spec.sources.kustomize.patches
-
objectspec.generators.pullRequest.template.spec.sources.kustomize.patches.options
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.patches.path
-
objectspec.generators.pullRequest.template.spec.sources.kustomize.patches.target
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.pullRequest.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.pullRequest.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.pullRequest.template.spec.sources.kustomize.version
-
-
stringspec.generators.pullRequest.template.spec.sources.name
-
stringspec.generators.pullRequest.template.spec.sources.path
-
objectspec.generators.pullRequest.template.spec.sources.plugin
-
array of objectsspec.generators.pullRequest.template.spec.sources.plugin.env
-
stringspec.generators.pullRequest.template.spec.sources.plugin.env.name
-
stringspec.generators.pullRequest.template.spec.sources.plugin.env.value
-
-
stringspec.generators.pullRequest.template.spec.sources.plugin.name
-
array of objectsspec.generators.pullRequest.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.pullRequest.template.spec.sources.plugin.parameters.array
-
objectspec.generators.pullRequest.template.spec.sources.plugin.parameters.map
-
stringspec.generators.pullRequest.template.spec.sources.plugin.parameters.name
-
stringspec.generators.pullRequest.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.pullRequest.template.spec.sources.ref
-
stringspec.generators.pullRequest.template.spec.sources.repoURL
-
stringspec.generators.pullRequest.template.spec.sources.targetRevision
-
-
objectspec.generators.pullRequest.template.spec.syncPolicy
-
objectspec.generators.pullRequest.template.spec.syncPolicy.automated
-
booleanspec.generators.pullRequest.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.pullRequest.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.pullRequest.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.pullRequest.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.pullRequest.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.pullRequest.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.pullRequest.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.pullRequest.template.spec.syncPolicy.retry
-
objectspec.generators.pullRequest.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.pullRequest.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.pullRequest.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.pullRequest.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.pullRequest.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.pullRequest.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.pullRequest.values
-
-
objectspec.generators.scmProvider
-
objectspec.generators.scmProvider.awsCodeCommit
-
booleanspec.generators.scmProvider.awsCodeCommit.allBranches
-
stringspec.generators.scmProvider.awsCodeCommit.region
-
stringspec.generators.scmProvider.awsCodeCommit.role
-
array of objectsspec.generators.scmProvider.awsCodeCommit.tagFilters
-
stringspec.generators.scmProvider.awsCodeCommit.tagFilters.key
-
stringspec.generators.scmProvider.awsCodeCommit.tagFilters.value
-
-
-
objectspec.generators.scmProvider.azureDevOps
-
objectspec.generators.scmProvider.azureDevOps.accessTokenRef
Required value
-
stringspec.generators.scmProvider.azureDevOps.accessTokenRef.key
Required value
-
stringspec.generators.scmProvider.azureDevOps.accessTokenRef.secretName
Required value
-
-
booleanspec.generators.scmProvider.azureDevOps.allBranches
-
stringspec.generators.scmProvider.azureDevOps.api
-
stringspec.generators.scmProvider.azureDevOps.organization
Required value
-
stringspec.generators.scmProvider.azureDevOps.teamProject
Required value
-
-
objectspec.generators.scmProvider.bitbucket
-
booleanspec.generators.scmProvider.bitbucket.allBranches
-
objectspec.generators.scmProvider.bitbucket.appPasswordRef
Required value
-
stringspec.generators.scmProvider.bitbucket.appPasswordRef.key
Required value
-
stringspec.generators.scmProvider.bitbucket.appPasswordRef.secretName
Required value
-
-
stringspec.generators.scmProvider.bitbucket.owner
Required value
-
stringspec.generators.scmProvider.bitbucket.user
Required value
-
-
objectspec.generators.scmProvider.bitbucketServer
-
booleanspec.generators.scmProvider.bitbucketServer.allBranches
-
stringspec.generators.scmProvider.bitbucketServer.api
Required value
-
objectspec.generators.scmProvider.bitbucketServer.basicAuth
-
objectspec.generators.scmProvider.bitbucketServer.basicAuth.passwordRef
Required value
-
stringspec.generators.scmProvider.bitbucketServer.basicAuth.passwordRef.key
Required value
-
stringspec.generators.scmProvider.bitbucketServer.basicAuth.passwordRef.secretName
Required value
-
-
stringspec.generators.scmProvider.bitbucketServer.basicAuth.username
Required value
-
-
objectspec.generators.scmProvider.bitbucketServer.bearerToken
-
objectspec.generators.scmProvider.bitbucketServer.bearerToken.tokenRef
Required value
-
stringspec.generators.scmProvider.bitbucketServer.bearerToken.tokenRef.key
Required value
-
stringspec.generators.scmProvider.bitbucketServer.bearerToken.tokenRef.secretName
Required value
-
-
-
objectspec.generators.scmProvider.bitbucketServer.caRef
-
stringspec.generators.scmProvider.bitbucketServer.caRef.configMapName
Required value
-
stringspec.generators.scmProvider.bitbucketServer.caRef.key
Required value
-
-
booleanspec.generators.scmProvider.bitbucketServer.insecure
-
stringspec.generators.scmProvider.bitbucketServer.project
Required value
-
-
stringspec.generators.scmProvider.cloneProtocol
-
array of objectsspec.generators.scmProvider.filters
-
stringspec.generators.scmProvider.filters.branchMatch
-
stringspec.generators.scmProvider.filters.labelMatch
-
array of stringsspec.generators.scmProvider.filters.pathsDoNotExist
-
array of stringsspec.generators.scmProvider.filters.pathsExist
-
stringspec.generators.scmProvider.filters.repositoryMatch
-
-
objectspec.generators.scmProvider.gitea
-
booleanspec.generators.scmProvider.gitea.allBranches
-
stringspec.generators.scmProvider.gitea.api
Required value
-
booleanspec.generators.scmProvider.gitea.insecure
-
stringspec.generators.scmProvider.gitea.owner
Required value
-
objectspec.generators.scmProvider.gitea.tokenRef
-
stringspec.generators.scmProvider.gitea.tokenRef.key
Required value
-
stringspec.generators.scmProvider.gitea.tokenRef.secretName
Required value
-
-
-
objectspec.generators.scmProvider.github
-
booleanspec.generators.scmProvider.github.allBranches
-
stringspec.generators.scmProvider.github.api
-
stringspec.generators.scmProvider.github.appSecretName
-
stringspec.generators.scmProvider.github.organization
Required value
-
objectspec.generators.scmProvider.github.tokenRef
-
stringspec.generators.scmProvider.github.tokenRef.key
Required value
-
stringspec.generators.scmProvider.github.tokenRef.secretName
Required value
-
-
-
objectspec.generators.scmProvider.gitlab
-
booleanspec.generators.scmProvider.gitlab.allBranches
-
stringspec.generators.scmProvider.gitlab.api
-
objectspec.generators.scmProvider.gitlab.caRef
-
stringspec.generators.scmProvider.gitlab.caRef.configMapName
Required value
-
stringspec.generators.scmProvider.gitlab.caRef.key
Required value
-
-
stringspec.generators.scmProvider.gitlab.group
Required value
-
boolean
-
booleanspec.generators.scmProvider.gitlab.includeSubgroups
-
booleanspec.generators.scmProvider.gitlab.insecure
-
objectspec.generators.scmProvider.gitlab.tokenRef
-
stringspec.generators.scmProvider.gitlab.tokenRef.key
Required value
-
stringspec.generators.scmProvider.gitlab.tokenRef.secretName
Required value
-
-
stringspec.generators.scmProvider.gitlab.topic
-
-
integerspec.generators.scmProvider.requeueAfterSeconds
-
objectspec.generators.scmProvider.template
-
objectspec.generators.scmProvider.template.metadata
Required value
-
objectspec.generators.scmProvider.template.metadata.annotations
-
array of stringsspec.generators.scmProvider.template.metadata.finalizers
-
objectspec.generators.scmProvider.template.metadata.labels
-
stringspec.generators.scmProvider.template.metadata.name
-
stringspec.generators.scmProvider.template.metadata.namespace
-
-
objectspec.generators.scmProvider.template.spec
Required value
-
objectspec.generators.scmProvider.template.spec.destination
Required value
-
stringspec.generators.scmProvider.template.spec.destination.name
-
stringspec.generators.scmProvider.template.spec.destination.namespace
-
stringspec.generators.scmProvider.template.spec.destination.server
-
-
array of objectsspec.generators.scmProvider.template.spec.ignoreDifferences
-
stringspec.generators.scmProvider.template.spec.ignoreDifferences.group
-
array of stringsspec.generators.scmProvider.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.generators.scmProvider.template.spec.ignoreDifferences.jsonPointers
-
stringspec.generators.scmProvider.template.spec.ignoreDifferences.kind
-
array of stringsspec.generators.scmProvider.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.generators.scmProvider.template.spec.ignoreDifferences.name
-
stringspec.generators.scmProvider.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.generators.scmProvider.template.spec.info
-
stringspec.generators.scmProvider.template.spec.info.name
-
stringspec.generators.scmProvider.template.spec.info.value
-
-
stringspec.generators.scmProvider.template.spec.project
Required value
-
integerspec.generators.scmProvider.template.spec.revisionHistoryLimit
-
objectspec.generators.scmProvider.template.spec.source
-
stringspec.generators.scmProvider.template.spec.source.chart
-
objectspec.generators.scmProvider.template.spec.source.directory
-
stringspec.generators.scmProvider.template.spec.source.directory.exclude
-
stringspec.generators.scmProvider.template.spec.source.directory.include
-
objectspec.generators.scmProvider.template.spec.source.directory.jsonnet
-
array of objectsspec.generators.scmProvider.template.spec.source.directory.jsonnet.extVars
-
booleanspec.generators.scmProvider.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.generators.scmProvider.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.generators.scmProvider.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.scmProvider.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.generators.scmProvider.template.spec.source.directory.jsonnet.tlas
-
booleanspec.generators.scmProvider.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.generators.scmProvider.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.generators.scmProvider.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.scmProvider.template.spec.source.directory.recurse
-
-
objectspec.generators.scmProvider.template.spec.source.helm
-
array of stringsspec.generators.scmProvider.template.spec.source.helm.apiVersions
-
array of objectsspec.generators.scmProvider.template.spec.source.helm.fileParameters
-
stringspec.generators.scmProvider.template.spec.source.helm.fileParameters.name
-
stringspec.generators.scmProvider.template.spec.source.helm.fileParameters.path
-
-
booleanspec.generators.scmProvider.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.generators.scmProvider.template.spec.source.helm.kubeVersion
-
stringspec.generators.scmProvider.template.spec.source.helm.namespace
-
array of objectsspec.generators.scmProvider.template.spec.source.helm.parameters
-
booleanspec.generators.scmProvider.template.spec.source.helm.parameters.forceString
-
stringspec.generators.scmProvider.template.spec.source.helm.parameters.name
-
stringspec.generators.scmProvider.template.spec.source.helm.parameters.value
-
-
booleanspec.generators.scmProvider.template.spec.source.helm.passCredentials
-
stringspec.generators.scmProvider.template.spec.source.helm.releaseName
-
booleanspec.generators.scmProvider.template.spec.source.helm.skipCrds
-
booleanspec.generators.scmProvider.template.spec.source.helm.skipSchemaValidation
-
booleanspec.generators.scmProvider.template.spec.source.helm.skipTests
-
array of stringsspec.generators.scmProvider.template.spec.source.helm.valueFiles
-
stringspec.generators.scmProvider.template.spec.source.helm.values
-
objectspec.generators.scmProvider.template.spec.source.helm.valuesObject
-
stringspec.generators.scmProvider.template.spec.source.helm.version
-
-
objectspec.generators.scmProvider.template.spec.source.kustomize
-
array of stringsspec.generators.scmProvider.template.spec.source.kustomize.apiVersions
-
objectspec.generators.scmProvider.template.spec.source.kustomize.commonAnnotations
-
booleanspec.generators.scmProvider.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.scmProvider.template.spec.source.kustomize.commonLabels
-
array of stringsspec.generators.scmProvider.template.spec.source.kustomize.components
-
booleanspec.generators.scmProvider.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.generators.scmProvider.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.generators.scmProvider.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.scmProvider.template.spec.source.kustomize.images
-
stringspec.generators.scmProvider.template.spec.source.kustomize.kubeVersion
-
booleanspec.generators.scmProvider.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.generators.scmProvider.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.generators.scmProvider.template.spec.source.kustomize.namePrefix
-
stringspec.generators.scmProvider.template.spec.source.kustomize.nameSuffix
-
stringspec.generators.scmProvider.template.spec.source.kustomize.namespace
-
array of objectsspec.generators.scmProvider.template.spec.source.kustomize.patches
-
objectspec.generators.scmProvider.template.spec.source.kustomize.patches.options
-
stringspec.generators.scmProvider.template.spec.source.kustomize.patches.patch
-
stringspec.generators.scmProvider.template.spec.source.kustomize.patches.path
-
objectspec.generators.scmProvider.template.spec.source.kustomize.patches.target
-
stringspec.generators.scmProvider.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.generators.scmProvider.template.spec.source.kustomize.patches.target.group
-
stringspec.generators.scmProvider.template.spec.source.kustomize.patches.target.kind
-
stringspec.generators.scmProvider.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.generators.scmProvider.template.spec.source.kustomize.patches.target.name
-
stringspec.generators.scmProvider.template.spec.source.kustomize.patches.target.namespace
-
stringspec.generators.scmProvider.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.scmProvider.template.spec.source.kustomize.replicas
-
integer or stringspec.generators.scmProvider.template.spec.source.kustomize.replicas.count
-
stringspec.generators.scmProvider.template.spec.source.kustomize.replicas.name
-
-
stringspec.generators.scmProvider.template.spec.source.kustomize.version
-
-
stringspec.generators.scmProvider.template.spec.source.name
-
stringspec.generators.scmProvider.template.spec.source.path
-
objectspec.generators.scmProvider.template.spec.source.plugin
-
array of objectsspec.generators.scmProvider.template.spec.source.plugin.env
-
stringspec.generators.scmProvider.template.spec.source.plugin.env.name
-
stringspec.generators.scmProvider.template.spec.source.plugin.env.value
-
-
stringspec.generators.scmProvider.template.spec.source.plugin.name
-
array of objectsspec.generators.scmProvider.template.spec.source.plugin.parameters
-
array of stringsspec.generators.scmProvider.template.spec.source.plugin.parameters.array
-
objectspec.generators.scmProvider.template.spec.source.plugin.parameters.map
-
stringspec.generators.scmProvider.template.spec.source.plugin.parameters.name
-
stringspec.generators.scmProvider.template.spec.source.plugin.parameters.string
-
-
-
stringspec.generators.scmProvider.template.spec.source.ref
-
stringspec.generators.scmProvider.template.spec.source.repoURL
Required value
-
stringspec.generators.scmProvider.template.spec.source.targetRevision
-
-
objectspec.generators.scmProvider.template.spec.sourceHydrator
-
objectspec.generators.scmProvider.template.spec.sourceHydrator.drySource
Required value
-
stringspec.generators.scmProvider.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.generators.scmProvider.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.generators.scmProvider.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.generators.scmProvider.template.spec.sourceHydrator.hydrateTo
-
stringspec.generators.scmProvider.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.generators.scmProvider.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.generators.scmProvider.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.generators.scmProvider.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.generators.scmProvider.template.spec.sources
-
stringspec.generators.scmProvider.template.spec.sources.chart
-
objectspec.generators.scmProvider.template.spec.sources.directory
-
stringspec.generators.scmProvider.template.spec.sources.directory.exclude
-
stringspec.generators.scmProvider.template.spec.sources.directory.include
-
objectspec.generators.scmProvider.template.spec.sources.directory.jsonnet
-
array of objectsspec.generators.scmProvider.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.generators.scmProvider.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.generators.scmProvider.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.generators.scmProvider.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.generators.scmProvider.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.generators.scmProvider.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.generators.scmProvider.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.generators.scmProvider.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.generators.scmProvider.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.generators.scmProvider.template.spec.sources.directory.recurse
-
-
objectspec.generators.scmProvider.template.spec.sources.helm
-
array of stringsspec.generators.scmProvider.template.spec.sources.helm.apiVersions
-
array of objectsspec.generators.scmProvider.template.spec.sources.helm.fileParameters
-
stringspec.generators.scmProvider.template.spec.sources.helm.fileParameters.name
-
stringspec.generators.scmProvider.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.generators.scmProvider.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.generators.scmProvider.template.spec.sources.helm.kubeVersion
-
stringspec.generators.scmProvider.template.spec.sources.helm.namespace
-
array of objectsspec.generators.scmProvider.template.spec.sources.helm.parameters
-
booleanspec.generators.scmProvider.template.spec.sources.helm.parameters.forceString
-
stringspec.generators.scmProvider.template.spec.sources.helm.parameters.name
-
stringspec.generators.scmProvider.template.spec.sources.helm.parameters.value
-
-
booleanspec.generators.scmProvider.template.spec.sources.helm.passCredentials
-
stringspec.generators.scmProvider.template.spec.sources.helm.releaseName
-
booleanspec.generators.scmProvider.template.spec.sources.helm.skipCrds
-
booleanspec.generators.scmProvider.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.generators.scmProvider.template.spec.sources.helm.skipTests
-
array of stringsspec.generators.scmProvider.template.spec.sources.helm.valueFiles
-
stringspec.generators.scmProvider.template.spec.sources.helm.values
-
objectspec.generators.scmProvider.template.spec.sources.helm.valuesObject
-
stringspec.generators.scmProvider.template.spec.sources.helm.version
-
-
objectspec.generators.scmProvider.template.spec.sources.kustomize
-
array of stringsspec.generators.scmProvider.template.spec.sources.kustomize.apiVersions
-
objectspec.generators.scmProvider.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.generators.scmProvider.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.generators.scmProvider.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.generators.scmProvider.template.spec.sources.kustomize.components
-
booleanspec.generators.scmProvider.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.generators.scmProvider.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.generators.scmProvider.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.generators.scmProvider.template.spec.sources.kustomize.images
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.kubeVersion
-
booleanspec.generators.scmProvider.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.generators.scmProvider.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.namePrefix
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.nameSuffix
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.namespace
-
array of objectsspec.generators.scmProvider.template.spec.sources.kustomize.patches
-
objectspec.generators.scmProvider.template.spec.sources.kustomize.patches.options
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.patches.patch
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.patches.path
-
objectspec.generators.scmProvider.template.spec.sources.kustomize.patches.target
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.patches.target.group
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.patches.target.kind
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.patches.target.name
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.generators.scmProvider.template.spec.sources.kustomize.replicas
-
integer or stringspec.generators.scmProvider.template.spec.sources.kustomize.replicas.count
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.replicas.name
-
-
stringspec.generators.scmProvider.template.spec.sources.kustomize.version
-
-
stringspec.generators.scmProvider.template.spec.sources.name
-
stringspec.generators.scmProvider.template.spec.sources.path
-
objectspec.generators.scmProvider.template.spec.sources.plugin
-
array of objectsspec.generators.scmProvider.template.spec.sources.plugin.env
-
stringspec.generators.scmProvider.template.spec.sources.plugin.env.name
-
stringspec.generators.scmProvider.template.spec.sources.plugin.env.value
-
-
stringspec.generators.scmProvider.template.spec.sources.plugin.name
-
array of objectsspec.generators.scmProvider.template.spec.sources.plugin.parameters
-
array of stringsspec.generators.scmProvider.template.spec.sources.plugin.parameters.array
-
objectspec.generators.scmProvider.template.spec.sources.plugin.parameters.map
-
stringspec.generators.scmProvider.template.spec.sources.plugin.parameters.name
-
stringspec.generators.scmProvider.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.generators.scmProvider.template.spec.sources.ref
-
stringspec.generators.scmProvider.template.spec.sources.repoURL
-
stringspec.generators.scmProvider.template.spec.sources.targetRevision
-
-
objectspec.generators.scmProvider.template.spec.syncPolicy
-
objectspec.generators.scmProvider.template.spec.syncPolicy.automated
-
booleanspec.generators.scmProvider.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.generators.scmProvider.template.spec.syncPolicy.automated.enabled
-
booleanspec.generators.scmProvider.template.spec.syncPolicy.automated.prune
-
booleanspec.generators.scmProvider.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.generators.scmProvider.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.generators.scmProvider.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.generators.scmProvider.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.generators.scmProvider.template.spec.syncPolicy.retry
-
objectspec.generators.scmProvider.template.spec.syncPolicy.retry.backoff
-
stringspec.generators.scmProvider.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.generators.scmProvider.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.generators.scmProvider.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.generators.scmProvider.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.generators.scmProvider.template.spec.syncPolicy.syncOptions
-
-
-
-
objectspec.generators.scmProvider.values
-
-
objectspec.generators.selector
-
array of objectsspec.generators.selector.matchExpressions
-
stringspec.generators.selector.matchExpressions.key
-
stringspec.generators.selector.matchExpressions.operator
-
array of stringsspec.generators.selector.matchExpressions.values
-
-
objectspec.generators.selector.matchLabels
-
-
-
booleanspec.goTemplate
-
array of stringsspec.goTemplateOptions
-
array of objectsspec.ignoreApplicationDifferences
-
array of stringsspec.ignoreApplicationDifferences.jqPathExpressions
-
array of stringsspec.ignoreApplicationDifferences.jsonPointers
-
stringspec.ignoreApplicationDifferences.name
-
-
objectspec.preservedFields
-
array of stringsspec.preservedFields.annotations
-
array of stringsspec.preservedFields.labels
-
-
objectspec.strategy
-
objectspec.strategy.rollingSync
-
array of objectsspec.strategy.rollingSync.steps
-
array of objectsspec.strategy.rollingSync.steps.matchExpressions
-
stringspec.strategy.rollingSync.steps.matchExpressions.key
-
stringspec.strategy.rollingSync.steps.matchExpressions.operator
-
array of stringsspec.strategy.rollingSync.steps.matchExpressions.values
-
-
integer or stringspec.strategy.rollingSync.steps.maxUpdate
-
-
-
stringspec.strategy.type
-
-
objectspec.syncPolicy
-
stringspec.syncPolicy.applicationsSync
Allowed values:
create-only,create-update,create-delete,sync -
booleanspec.syncPolicy.preserveResourcesOnDeletion
-
-
objectspec.template
Required value
-
objectspec.template.metadata
Required value
-
objectspec.template.metadata.annotations
-
array of stringsspec.template.metadata.finalizers
-
objectspec.template.metadata.labels
-
stringspec.template.metadata.name
-
stringspec.template.metadata.namespace
-
-
objectspec.template.spec
Required value
-
objectspec.template.spec.destination
Required value
-
stringspec.template.spec.destination.name
-
stringspec.template.spec.destination.namespace
-
stringspec.template.spec.destination.server
-
-
array of objectsspec.template.spec.ignoreDifferences
-
stringspec.template.spec.ignoreDifferences.group
-
array of stringsspec.template.spec.ignoreDifferences.jqPathExpressions
-
array of stringsspec.template.spec.ignoreDifferences.jsonPointers
-
stringspec.template.spec.ignoreDifferences.kind
-
array of stringsspec.template.spec.ignoreDifferences.managedFieldsManagers
-
stringspec.template.spec.ignoreDifferences.name
-
stringspec.template.spec.ignoreDifferences.namespace
-
-
array of objectsspec.template.spec.info
-
stringspec.template.spec.info.name
-
stringspec.template.spec.info.value
-
-
stringspec.template.spec.project
Required value
-
integerspec.template.spec.revisionHistoryLimit
-
objectspec.template.spec.source
-
stringspec.template.spec.source.chart
-
objectspec.template.spec.source.directory
-
stringspec.template.spec.source.directory.exclude
-
stringspec.template.spec.source.directory.include
-
objectspec.template.spec.source.directory.jsonnet
-
array of objectsspec.template.spec.source.directory.jsonnet.extVars
-
booleanspec.template.spec.source.directory.jsonnet.extVars.code
-
stringspec.template.spec.source.directory.jsonnet.extVars.name
-
stringspec.template.spec.source.directory.jsonnet.extVars.value
-
-
array of stringsspec.template.spec.source.directory.jsonnet.libs
-
array of objectsspec.template.spec.source.directory.jsonnet.tlas
-
booleanspec.template.spec.source.directory.jsonnet.tlas.code
-
stringspec.template.spec.source.directory.jsonnet.tlas.name
-
stringspec.template.spec.source.directory.jsonnet.tlas.value
-
-
-
booleanspec.template.spec.source.directory.recurse
-
-
objectspec.template.spec.source.helm
-
array of stringsspec.template.spec.source.helm.apiVersions
-
array of objectsspec.template.spec.source.helm.fileParameters
-
stringspec.template.spec.source.helm.fileParameters.name
-
stringspec.template.spec.source.helm.fileParameters.path
-
-
booleanspec.template.spec.source.helm.ignoreMissingValueFiles
-
stringspec.template.spec.source.helm.kubeVersion
-
stringspec.template.spec.source.helm.namespace
-
array of objectsspec.template.spec.source.helm.parameters
-
booleanspec.template.spec.source.helm.parameters.forceString
-
stringspec.template.spec.source.helm.parameters.name
-
stringspec.template.spec.source.helm.parameters.value
-
-
booleanspec.template.spec.source.helm.passCredentials
-
stringspec.template.spec.source.helm.releaseName
-
booleanspec.template.spec.source.helm.skipCrds
-
booleanspec.template.spec.source.helm.skipSchemaValidation
-
booleanspec.template.spec.source.helm.skipTests
-
array of stringsspec.template.spec.source.helm.valueFiles
-
stringspec.template.spec.source.helm.values
-
objectspec.template.spec.source.helm.valuesObject
-
stringspec.template.spec.source.helm.version
-
-
objectspec.template.spec.source.kustomize
-
array of stringsspec.template.spec.source.kustomize.apiVersions
-
objectspec.template.spec.source.kustomize.commonAnnotations
-
booleanspec.template.spec.source.kustomize.commonAnnotationsEnvsubst
-
objectspec.template.spec.source.kustomize.commonLabels
-
array of stringsspec.template.spec.source.kustomize.components
-
booleanspec.template.spec.source.kustomize.forceCommonAnnotations
-
booleanspec.template.spec.source.kustomize.forceCommonLabels
-
booleanspec.template.spec.source.kustomize.ignoreMissingComponents
-
array of stringsspec.template.spec.source.kustomize.images
-
stringspec.template.spec.source.kustomize.kubeVersion
-
booleanspec.template.spec.source.kustomize.labelIncludeTemplates
-
booleanspec.template.spec.source.kustomize.labelWithoutSelector
-
stringspec.template.spec.source.kustomize.namePrefix
-
stringspec.template.spec.source.kustomize.nameSuffix
-
stringspec.template.spec.source.kustomize.namespace
-
array of objectsspec.template.spec.source.kustomize.patches
-
objectspec.template.spec.source.kustomize.patches.options
-
stringspec.template.spec.source.kustomize.patches.patch
-
stringspec.template.spec.source.kustomize.patches.path
-
objectspec.template.spec.source.kustomize.patches.target
-
stringspec.template.spec.source.kustomize.patches.target.annotationSelector
-
stringspec.template.spec.source.kustomize.patches.target.group
-
stringspec.template.spec.source.kustomize.patches.target.kind
-
stringspec.template.spec.source.kustomize.patches.target.labelSelector
-
stringspec.template.spec.source.kustomize.patches.target.name
-
stringspec.template.spec.source.kustomize.patches.target.namespace
-
stringspec.template.spec.source.kustomize.patches.target.version
-
-
-
array of objectsspec.template.spec.source.kustomize.replicas
-
integer or stringspec.template.spec.source.kustomize.replicas.count
-
stringspec.template.spec.source.kustomize.replicas.name
-
-
stringspec.template.spec.source.kustomize.version
-
-
stringspec.template.spec.source.name
-
stringspec.template.spec.source.path
-
objectspec.template.spec.source.plugin
-
array of objectsspec.template.spec.source.plugin.env
-
stringspec.template.spec.source.plugin.env.name
-
stringspec.template.spec.source.plugin.env.value
-
-
stringspec.template.spec.source.plugin.name
-
array of objectsspec.template.spec.source.plugin.parameters
-
array of stringsspec.template.spec.source.plugin.parameters.array
-
objectspec.template.spec.source.plugin.parameters.map
-
stringspec.template.spec.source.plugin.parameters.name
-
stringspec.template.spec.source.plugin.parameters.string
-
-
-
stringspec.template.spec.source.ref
-
stringspec.template.spec.source.repoURL
Required value
-
stringspec.template.spec.source.targetRevision
-
-
objectspec.template.spec.sourceHydrator
-
objectspec.template.spec.sourceHydrator.drySource
Required value
-
stringspec.template.spec.sourceHydrator.drySource.path
Required value
-
stringspec.template.spec.sourceHydrator.drySource.repoURL
Required value
-
stringspec.template.spec.sourceHydrator.drySource.targetRevision
Required value
-
-
objectspec.template.spec.sourceHydrator.hydrateTo
-
stringspec.template.spec.sourceHydrator.hydrateTo.targetBranch
Required value
-
-
objectspec.template.spec.sourceHydrator.syncSource
Required value
-
stringspec.template.spec.sourceHydrator.syncSource.path
Required value
-
stringspec.template.spec.sourceHydrator.syncSource.targetBranch
Required value
-
-
-
array of objectsspec.template.spec.sources
-
stringspec.template.spec.sources.chart
-
objectspec.template.spec.sources.directory
-
stringspec.template.spec.sources.directory.exclude
-
stringspec.template.spec.sources.directory.include
-
objectspec.template.spec.sources.directory.jsonnet
-
array of objectsspec.template.spec.sources.directory.jsonnet.extVars
-
booleanspec.template.spec.sources.directory.jsonnet.extVars.code
-
stringspec.template.spec.sources.directory.jsonnet.extVars.name
-
stringspec.template.spec.sources.directory.jsonnet.extVars.value
-
-
array of stringsspec.template.spec.sources.directory.jsonnet.libs
-
array of objectsspec.template.spec.sources.directory.jsonnet.tlas
-
booleanspec.template.spec.sources.directory.jsonnet.tlas.code
-
stringspec.template.spec.sources.directory.jsonnet.tlas.name
-
stringspec.template.spec.sources.directory.jsonnet.tlas.value
-
-
-
booleanspec.template.spec.sources.directory.recurse
-
-
objectspec.template.spec.sources.helm
-
array of stringsspec.template.spec.sources.helm.apiVersions
-
array of objectsspec.template.spec.sources.helm.fileParameters
-
stringspec.template.spec.sources.helm.fileParameters.name
-
stringspec.template.spec.sources.helm.fileParameters.path
-
-
booleanspec.template.spec.sources.helm.ignoreMissingValueFiles
-
stringspec.template.spec.sources.helm.kubeVersion
-
stringspec.template.spec.sources.helm.namespace
-
array of objectsspec.template.spec.sources.helm.parameters
-
booleanspec.template.spec.sources.helm.parameters.forceString
-
stringspec.template.spec.sources.helm.parameters.name
-
stringspec.template.spec.sources.helm.parameters.value
-
-
booleanspec.template.spec.sources.helm.passCredentials
-
stringspec.template.spec.sources.helm.releaseName
-
booleanspec.template.spec.sources.helm.skipCrds
-
booleanspec.template.spec.sources.helm.skipSchemaValidation
-
booleanspec.template.spec.sources.helm.skipTests
-
array of stringsspec.template.spec.sources.helm.valueFiles
-
stringspec.template.spec.sources.helm.values
-
objectspec.template.spec.sources.helm.valuesObject
-
stringspec.template.spec.sources.helm.version
-
-
objectspec.template.spec.sources.kustomize
-
array of stringsspec.template.spec.sources.kustomize.apiVersions
-
objectspec.template.spec.sources.kustomize.commonAnnotations
-
booleanspec.template.spec.sources.kustomize.commonAnnotationsEnvsubst
-
objectspec.template.spec.sources.kustomize.commonLabels
-
array of stringsspec.template.spec.sources.kustomize.components
-
booleanspec.template.spec.sources.kustomize.forceCommonAnnotations
-
booleanspec.template.spec.sources.kustomize.forceCommonLabels
-
booleanspec.template.spec.sources.kustomize.ignoreMissingComponents
-
array of stringsspec.template.spec.sources.kustomize.images
-
stringspec.template.spec.sources.kustomize.kubeVersion
-
booleanspec.template.spec.sources.kustomize.labelIncludeTemplates
-
booleanspec.template.spec.sources.kustomize.labelWithoutSelector
-
stringspec.template.spec.sources.kustomize.namePrefix
-
stringspec.template.spec.sources.kustomize.nameSuffix
-
stringspec.template.spec.sources.kustomize.namespace
-
array of objectsspec.template.spec.sources.kustomize.patches
-
objectspec.template.spec.sources.kustomize.patches.options
-
stringspec.template.spec.sources.kustomize.patches.patch
-
stringspec.template.spec.sources.kustomize.patches.path
-
objectspec.template.spec.sources.kustomize.patches.target
-
stringspec.template.spec.sources.kustomize.patches.target.annotationSelector
-
stringspec.template.spec.sources.kustomize.patches.target.group
-
stringspec.template.spec.sources.kustomize.patches.target.kind
-
stringspec.template.spec.sources.kustomize.patches.target.labelSelector
-
stringspec.template.spec.sources.kustomize.patches.target.name
-
stringspec.template.spec.sources.kustomize.patches.target.namespace
-
stringspec.template.spec.sources.kustomize.patches.target.version
-
-
-
array of objectsspec.template.spec.sources.kustomize.replicas
-
integer or stringspec.template.spec.sources.kustomize.replicas.count
-
stringspec.template.spec.sources.kustomize.replicas.name
-
-
stringspec.template.spec.sources.kustomize.version
-
-
stringspec.template.spec.sources.name
-
stringspec.template.spec.sources.path
-
objectspec.template.spec.sources.plugin
-
array of objectsspec.template.spec.sources.plugin.env
-
stringspec.template.spec.sources.plugin.env.name
-
stringspec.template.spec.sources.plugin.env.value
-
-
stringspec.template.spec.sources.plugin.name
-
array of objectsspec.template.spec.sources.plugin.parameters
-
array of stringsspec.template.spec.sources.plugin.parameters.array
-
objectspec.template.spec.sources.plugin.parameters.map
-
stringspec.template.spec.sources.plugin.parameters.name
-
stringspec.template.spec.sources.plugin.parameters.string
-
-
-
stringspec.template.spec.sources.ref
-
stringspec.template.spec.sources.repoURL
-
stringspec.template.spec.sources.targetRevision
-
-
objectspec.template.spec.syncPolicy
-
objectspec.template.spec.syncPolicy.automated
-
booleanspec.template.spec.syncPolicy.automated.allowEmpty
-
booleanspec.template.spec.syncPolicy.automated.enabled
-
booleanspec.template.spec.syncPolicy.automated.prune
-
booleanspec.template.spec.syncPolicy.automated.selfHeal
-
-
objectspec.template.spec.syncPolicy.managedNamespaceMetadata
-
objectspec.template.spec.syncPolicy.managedNamespaceMetadata.annotations
-
objectspec.template.spec.syncPolicy.managedNamespaceMetadata.labels
-
-
objectspec.template.spec.syncPolicy.retry
-
objectspec.template.spec.syncPolicy.retry.backoff
-
stringspec.template.spec.syncPolicy.retry.backoff.duration
-
integerspec.template.spec.syncPolicy.retry.backoff.factor
-
stringspec.template.spec.syncPolicy.retry.backoff.maxDuration
-
-
integerspec.template.spec.syncPolicy.retry.limit
-
-
array of stringsspec.template.spec.syncPolicy.syncOptions
-
-
-
-
stringspec.templatePatch
-
-
objectstatus
-
array of objectsstatus.applicationStatus
-
stringstatus.applicationStatus.application
-
stringstatus.applicationStatus.lastTransitionTime
-
stringstatus.applicationStatus.message
-
stringstatus.applicationStatus.status
-
stringstatus.applicationStatus.step
-
array of stringsstatus.applicationStatus.targetRevisions
-
-
array of objectsstatus.conditions
-
stringstatus.conditions.lastTransitionTime
-
stringstatus.conditions.message
-
stringstatus.conditions.reason
-
stringstatus.conditions.status
-
stringstatus.conditions.type
-
-
array of objectsstatus.resources
-
stringstatus.resources.group
-
objectstatus.resources.health
-
stringstatus.resources.health.lastTransitionTime
-
stringstatus.resources.health.message
-
stringstatus.resources.health.status
-
-
booleanstatus.resources.hook
-
stringstatus.resources.kind
-
stringstatus.resources.name
-
stringstatus.resources.namespace
-
booleanstatus.resources.requiresDeletionConfirmation
-
booleanstatus.resources.requiresPruning
-
stringstatus.resources.status
-
integerstatus.resources.syncWave
-
stringstatus.resources.version
-
-
AppProject
Scope: Namespaced
Version: v1alpha1
AppProject provides a logical grouping of applications, providing controls for:
- where the apps may deploy to (cluster whitelist)
- what may be deployed (repository whitelist, resource whitelist/blacklist)
- who can access these applications (roles, OIDC group claims bindings)
- and what they can do (RBAC policies)
- automation access to these roles (JWT tokens)
-
stringapiVersionAPIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-
stringkindKind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-
objectmetadata
-
objectspecAppProjectSpec is the specification of an AppProject
-
array of objectsspec.clusterResourceBlacklistClusterResourceBlacklist contains list of blacklisted cluster level resources
-
stringspec.clusterResourceBlacklist.group
-
stringspec.clusterResourceBlacklist.kind
-
-
array of objectsspec.clusterResourceWhitelistClusterResourceWhitelist contains list of whitelisted cluster level resources
-
stringspec.clusterResourceWhitelist.group
-
stringspec.clusterResourceWhitelist.kind
-
-
stringspec.descriptionDescription contains optional project description
Maximum length:
255 -
array of objectsspec.destinationServiceAccountsDestinationServiceAccounts holds information about the service accounts to be impersonated for the application sync operation for each destination.
-
stringspec.destinationServiceAccounts.defaultServiceAccountDefaultServiceAccount to be used for impersonation during the sync operation
-
stringspec.destinationServiceAccounts.namespaceNamespace specifies the target namespace for the application’s resources.
-
stringspec.destinationServiceAccounts.serverServer specifies the URL of the target cluster’s Kubernetes control plane API.
-
-
array of objectsspec.destinationsDestinations contains list of destinations available for deployment
-
stringspec.destinations.nameName is an alternate way of specifying the target cluster by its symbolic name. This must be set if Server is not set.
-
stringspec.destinations.namespaceNamespace specifies the target namespace for the application’s resources. The namespace will only be set for namespace-scoped resources that have not set a value for .metadata.namespace
-
stringspec.destinations.serverServer specifies the URL of the target cluster’s Kubernetes control plane API. This must be set if Name is not set.
-
-
array of objectsspec.namespaceResourceBlacklistNamespaceResourceBlacklist contains list of blacklisted namespace level resources
-
stringspec.namespaceResourceBlacklist.group
-
stringspec.namespaceResourceBlacklist.kind
-
-
array of objectsspec.namespaceResourceWhitelistNamespaceResourceWhitelist contains list of whitelisted namespace level resources
-
stringspec.namespaceResourceWhitelist.group
-
stringspec.namespaceResourceWhitelist.kind
-
-
objectspec.orphanedResourcesOrphanedResources specifies if controller should monitor orphaned resources of apps in this project
-
array of objectsspec.orphanedResources.ignoreIgnore contains a list of resources that are to be excluded from orphaned resources monitoring
-
stringspec.orphanedResources.ignore.group
-
stringspec.orphanedResources.ignore.kind
-
stringspec.orphanedResources.ignore.name
-
-
booleanspec.orphanedResources.warnWarn indicates if warning condition should be created for apps which have orphaned resources
-
-
booleanspec.permitOnlyProjectScopedClustersPermitOnlyProjectScopedClusters determines whether destinations can only reference clusters which are project-scoped
-
array of objectsspec.rolesRoles are user defined RBAC roles associated with this project
-
stringspec.roles.descriptionDescription is a description of the role
-
array of stringsspec.roles.groupsGroups are a list of OIDC group claims bound to this role
-
array of objectsspec.roles.jwtTokensJWTTokens are a list of generated JWT tokens bound to this role
-
integerspec.roles.jwtTokens.exp
-
integerspec.roles.jwtTokens.iat
-
stringspec.roles.jwtTokens.id
-
-
stringspec.roles.nameName is a name for this role
-
array of stringsspec.roles.policiesPolicies Stores a list of casbin formatted strings that define access policies for the role in the project
-
-
array of objectsspec.signatureKeysSignatureKeys contains a list of PGP key IDs that commits in Git must be signed with in order to be allowed for sync
-
stringspec.signatureKeys.keyIDThe ID of the key in hexadecimal notation
-
-
array of stringsspec.sourceNamespacesSourceNamespaces defines the namespaces application resources are allowed to be created in
-
array of stringsspec.sourceReposSourceRepos contains list of repository URLs which can be used for deployment
-
array of objectsspec.syncWindowsSyncWindows controls when syncs can be run for apps in this project
-
booleanspec.syncWindows.andOperatorUseAndOperator use AND operator for matching applications, namespaces and clusters instead of the default OR operator
-
array of stringsspec.syncWindows.applicationsApplications contains a list of applications that the window will apply to
-
array of stringsspec.syncWindows.clustersClusters contains a list of clusters that the window will apply to
-
stringspec.syncWindows.descriptionDescription of the sync that will be applied to the schedule, can be used to add any information such as a ticket number for example
-
stringspec.syncWindows.durationDuration is the amount of time the sync window will be open
-
stringspec.syncWindows.kindKind defines if the window allows or blocks syncs
-
booleanspec.syncWindows.manualSyncManualSync enables manual syncs when they would otherwise be blocked
-
array of stringsspec.syncWindows.namespacesNamespaces contains a list of namespaces that the window will apply to
-
stringspec.syncWindows.scheduleSchedule is the time the window will begin, specified in cron format
-
stringspec.syncWindows.timeZoneTimeZone of the sync that will be applied to the schedule
-
-
-
objectstatusAppProjectStatus contains status information for AppProject CRs
-
objectstatus.jwtTokensByRoleJWTTokensByRole contains a list of JWT tokens issued for a given role
-
objectstatus.jwtTokensByRole.<KEY_NAME>
<KEY_NAME>— item (key) name.JWTTokens represents a list of JWT tokens
-
array of objectsstatus.jwtTokensByRole.<KEY_NAME>.items
-
integerstatus.jwtTokensByRole.<KEY_NAME>.items.exp
-
integerstatus.jwtTokensByRole.<KEY_NAME>.items.iat
-
stringstatus.jwtTokensByRole.<KEY_NAME>.items.id
-
-
-
-
ArgoCD
Scope: Namespaced
-
stringapiVersionAPIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-
stringkindKind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-
objectmetadata
-
objectspecArgoCDSpec defines the desired state of ArgoCD
-
booleanspec.aggregatedClusterRolesAggregatedClusterRoles will allow users to have aggregated ClusterRoles for a cluster scoped instance.
-
stringspec.applicationInstanceLabelKeyApplicationInstanceLabelKey is the key name where Argo CD injects the app name as a tracking label.
-
objectspec.applicationSetArgoCDApplicationSet defines whether the Argo CD ApplicationSet controller should be installed.
-
objectspec.applicationSet.annotationsCustom annotations to pods deployed by the operator
-
booleanspec.applicationSet.enabledEnabled is the flag to enable the Application Set Controller during ArgoCD installation. (optional, default
true) -
array of objectsspec.applicationSet.envEnv lets you specify environment for applicationSet controller pods
-
stringspec.applicationSet.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.applicationSet.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.applicationSet.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.applicationSet.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.applicationSet.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.applicationSet.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.applicationSet.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.applicationSet.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.applicationSet.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.applicationSet.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.applicationSet.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.applicationSet.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.applicationSet.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.applicationSet.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.applicationSet.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.applicationSet.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.applicationSet.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.applicationSet.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.applicationSet.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.applicationSet.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.applicationSet.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.applicationSet.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.applicationSet.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of stringsspec.applicationSet.extraCommandArgsExtraCommandArgs allows users to pass command line arguments to ApplicationSet controller. They get added to default command line arguments provided by the operator. Please note that the command line arguments provided as part of ExtraCommandArgs will not overwrite the default command line arguments.
-
objectspec.applicationSet.labelsCustom labels to pods deployed by the operator
-
stringspec.applicationSet.logLevelLogLevel describes the log level that should be used by the ApplicationSet controller. Defaults to ArgoCDDefaultLogLevel if not set. Valid options are debug,info, error, and warn.
-
stringspec.applicationSet.logformatLogFormat refers to the log format used by the ApplicationSet component. Defaults to ArgoCDDefaultLogFormat if not configured. Valid options are text or json.
Allowed values:
text,json -
objectspec.applicationSet.resourcesResources defines the Compute Resources required by the container for ApplicationSet.
-
array of objectsspec.applicationSet.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.applicationSet.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.applicationSet.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.applicationSet.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.applicationSet.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
array of stringsspec.applicationSet.scmProvidersSCMProviders defines the list of allowed custom SCM provider API URLs
-
stringspec.applicationSet.scmRootCAConfigMapSCMRootCAConfigMap is the name of the config map that stores the Gitlab SCM Provider’s TLS certificate which will be mounted on the ApplicationSet Controller (optional).
-
array of stringsspec.applicationSet.sourceNamespacesSourceNamespaces defines the namespaces applicationset resources are allowed to be created in
-
array of objectsspec.applicationSet.volumeMountsVolumeMounts adds volumeMounts to the Argo CD ApplicationSet Controller container.
-
stringspec.applicationSet.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.applicationSet.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.applicationSet.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.applicationSet.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.applicationSet.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.applicationSet.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.applicationSet.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
array of objectsspec.applicationSet.volumesVolumes adds volumes to the Argo CD ApplicationSet Controller container.
-
objectspec.applicationSet.volumes.awsElasticBlockStoreawsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. Deprecated: AWSElasticBlockStore is deprecated. All operations for the in-tree awsElasticBlockStore type are redirected to the ebs.csi.aws.com CSI driver. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
stringspec.applicationSet.volumes.awsElasticBlockStore.fsTypefsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
integerspec.applicationSet.volumes.awsElasticBlockStore.partitionpartition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as “1”. Similarly, the volume partition for /dev/sda is “0” (or you can leave the property empty).
-
booleanspec.applicationSet.volumes.awsElasticBlockStore.readOnlyreadOnly value true will force the readOnly setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
stringspec.applicationSet.volumes.awsElasticBlockStore.volumeID
Required value
volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
-
objectspec.applicationSet.volumes.azureDiskazureDisk represents an Azure Data Disk mount on the host and bind mount to the pod. Deprecated: AzureDisk is deprecated. All operations for the in-tree azureDisk type are redirected to the disk.csi.azure.com CSI driver.
-
stringspec.applicationSet.volumes.azureDisk.cachingModecachingMode is the Host Caching mode: None, Read Only, Read Write.
-
stringspec.applicationSet.volumes.azureDisk.diskName
Required value
diskName is the Name of the data disk in the blob storage -
stringspec.applicationSet.volumes.azureDisk.diskURI
Required value
diskURI is the URI of data disk in the blob storage -
stringspec.applicationSet.volumes.azureDisk.fsTypefsType is Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
Default:
ext4 -
stringspec.applicationSet.volumes.azureDisk.kindkind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared
-
booleanspec.applicationSet.volumes.azureDisk.readOnlyreadOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
Default:
false
-
-
objectspec.applicationSet.volumes.azureFileazureFile represents an Azure File Service mount on the host and bind mount to the pod. Deprecated: AzureFile is deprecated. All operations for the in-tree azureFile type are redirected to the file.csi.azure.com CSI driver.
-
booleanspec.applicationSet.volumes.azureFile.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
stringspec.applicationSet.volumes.azureFile.secretName
Required value
secretName is the name of secret that contains Azure Storage Account Name and Key -
string
Required value
shareName is the azure share Name
-
-
objectspec.applicationSet.volumes.cephfscephFS represents a Ceph FS mount on the host that shares a pod’s lifetime. Deprecated: CephFS is deprecated and the in-tree cephfs type is no longer supported.
-
array of stringsspec.applicationSet.volumes.cephfs.monitors
Required value
monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it -
stringspec.applicationSet.volumes.cephfs.pathpath is Optional: Used as the mounted root, rather than the full Ceph tree, default is /
-
booleanspec.applicationSet.volumes.cephfs.readOnlyreadOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
stringspec.applicationSet.volumes.cephfs.secretFilesecretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
objectspec.applicationSet.volumes.cephfs.secretRefsecretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
stringspec.applicationSet.volumes.cephfs.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.applicationSet.volumes.cephfs.useruser is optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
-
objectspec.applicationSet.volumes.cindercinder represents a cinder volume attached and mounted on kubelets host machine. Deprecated: Cinder is deprecated. All operations for the in-tree cinder type are redirected to the cinder.csi.openstack.org CSI driver. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
stringspec.applicationSet.volumes.cinder.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
booleanspec.applicationSet.volumes.cinder.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
objectspec.applicationSet.volumes.cinder.secretRefsecretRef is optional: points to a secret object containing parameters used to connect to OpenStack.
-
stringspec.applicationSet.volumes.cinder.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.applicationSet.volumes.cinder.volumeID
Required value
volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
-
objectspec.applicationSet.volumes.configMapconfigMap represents a configMap that should populate this volume
-
integerspec.applicationSet.volumes.configMap.defaultModedefaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.applicationSet.volumes.configMap.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.applicationSet.volumes.configMap.items.keykey is the key to project.
-
integerspec.applicationSet.volumes.configMap.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.applicationSet.volumes.configMap.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.applicationSet.volumes.configMap.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.applicationSet.volumes.configMap.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
objectspec.applicationSet.volumes.csicsi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers.
-
stringspec.applicationSet.volumes.csi.driver
Required value
driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster. -
stringspec.applicationSet.volumes.csi.fsTypefsType to mount. Ex. “ext4”, “xfs”, “ntfs”. If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
-
objectspec.applicationSet.volumes.csi.nodePublishSecretRefnodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.
-
stringspec.applicationSet.volumes.csi.nodePublishSecretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
booleanspec.applicationSet.volumes.csi.readOnlyreadOnly specifies a read-only configuration for the volume. Defaults to false (read/write).
-
objectspec.applicationSet.volumes.csi.volumeAttributesvolumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver’s documentation for supported values.
-
-
objectspec.applicationSet.volumes.downwardAPIdownwardAPI represents downward API about the pod that should populate this volume
-
integerspec.applicationSet.volumes.downwardAPI.defaultModeOptional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.applicationSet.volumes.downwardAPI.itemsItems is a list of downward API volume file
-
objectspec.applicationSet.volumes.downwardAPI.items.fieldRefRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
-
stringspec.applicationSet.volumes.downwardAPI.items.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.applicationSet.volumes.downwardAPI.items.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
integerspec.applicationSet.volumes.downwardAPI.items.modeOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.applicationSet.volumes.downwardAPI.items.pathRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the ‘..’ path. Must be utf-8 encoded. The first item of the relative path must not start with ‘..’
-
objectspec.applicationSet.volumes.downwardAPI.items.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
stringspec.applicationSet.volumes.downwardAPI.items.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.applicationSet.volumes.downwardAPI.items.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.applicationSet.volumes.downwardAPI.items.resourceFieldRef.resource
Required value
Required: resource to select
-
-
-
-
objectspec.applicationSet.volumes.emptyDiremptyDir represents a temporary directory that shares a pod’s lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
stringspec.applicationSet.volumes.emptyDir.mediummedium represents what type of storage medium should back this directory. The default is "" which means to use the node’s default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
integer or stringspec.applicationSet.volumes.emptyDir.sizeLimitsizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-
-
objectspec.applicationSet.volumes.ephemeral
ephemeral represents a volume that is handled by a cluster storage driver. The volume’s lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.
Use this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity tracking are needed, c) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim).
Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod.
Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.
A pod can use both types of ephemeral volumes and persistent volumes at the same time.
-
objectspec.applicationSet.volumes.ephemeral.volumeClaimTemplate
Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be
<pod name>-<volume name>where<volume name>is the name from thePodSpec.Volumesarray entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long).An existing PVC with that name that is not owned by the pod will not be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster.
This field is read-only and no changes will be made by Kubernetes to the PVC after it has been created.
Required, must not be nil.
-
objectspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.metadataMay contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
-
objectspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec
Required value
The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.-
array of stringsspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.accessModesaccessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
-
objectspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.dataSource
dataSource field can be used to specify either:
- An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
- An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource.
-
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.kind
Required value
Kind is the type of resource being referenced -
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.name
Required value
Name is the name of resource being referenced
-
objectspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef
dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn’t specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn’t set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef:
- While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.
- While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.
- While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.kind
Required value
Kind is the type of resource being referenced -
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.name
Required value
Name is the name of resource being referenced -
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.namespaceNamespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace’s owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
objectspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.resourcesresources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
-
objectspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
objectspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.selectorselector is a label query over volumes to consider for binding.
-
array of objectsspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.storageClassNamestorageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
-
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.volumeAttributesClassNamevolumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string or nil value indicates that no VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state, this field can be reset to its previous value (including nil) to cancel the modification. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
-
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.volumeModevolumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.
-
stringspec.applicationSet.volumes.ephemeral.volumeClaimTemplate.spec.volumeNamevolumeName is the binding reference to the PersistentVolume backing this claim.
-
-
-
-
objectspec.applicationSet.volumes.fcfc represents a Fibre Channel resource that is attached to a kubelet’s host machine and then exposed to the pod.
-
stringspec.applicationSet.volumes.fc.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
integerspec.applicationSet.volumes.fc.lunlun is Optional: FC target lun number
-
booleanspec.applicationSet.volumes.fc.readOnlyreadOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
array of stringsspec.applicationSet.volumes.fc.targetWWNstargetWWNs is Optional: FC target worldwide names (WWNs)
-
array of stringsspec.applicationSet.volumes.fc.wwidswwids Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
-
-
objectspec.applicationSet.volumes.flexVolumeflexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. Deprecated: FlexVolume is deprecated. Consider using a CSIDriver instead.
-
stringspec.applicationSet.volumes.flexVolume.driver
Required value
driver is the name of the driver to use for this volume. -
stringspec.applicationSet.volumes.flexVolume.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. The default filesystem depends on FlexVolume script.
-
objectspec.applicationSet.volumes.flexVolume.optionsoptions is Optional: this field holds extra command options if any.
-
booleanspec.applicationSet.volumes.flexVolume.readOnlyreadOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.applicationSet.volumes.flexVolume.secretRefsecretRef is Optional: secretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.
-
stringspec.applicationSet.volumes.flexVolume.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
-
objectspec.applicationSet.volumes.flockerflocker represents a Flocker volume attached to a kubelet’s host machine. This depends on the Flocker control service being running. Deprecated: Flocker is deprecated and the in-tree flocker type is no longer supported.
-
stringspec.applicationSet.volumes.flocker.datasetNamedatasetName is Name of the dataset stored as metadata -> name on the dataset for Flocker should be considered as deprecated
-
stringspec.applicationSet.volumes.flocker.datasetUUIDdatasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset
-
-
objectspec.applicationSet.volumes.gcePersistentDiskgcePersistentDisk represents a GCE Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. Deprecated: GCEPersistentDisk is deprecated. All operations for the in-tree gcePersistentDisk type are redirected to the pd.csi.storage.gke.io CSI driver. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
stringspec.applicationSet.volumes.gcePersistentDisk.fsTypefsType is filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
integerspec.applicationSet.volumes.gcePersistentDisk.partitionpartition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as “1”. Similarly, the volume partition for /dev/sda is “0” (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
stringspec.applicationSet.volumes.gcePersistentDisk.pdName
Required value
pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk -
booleanspec.applicationSet.volumes.gcePersistentDisk.readOnlyreadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
-
objectspec.applicationSet.volumes.gitRepogitRepo represents a git repository at a particular revision. Deprecated: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod’s container.
-
stringspec.applicationSet.volumes.gitRepo.directorydirectory is the target directory name. Must not contain or start with ‘..’. If ‘.’ is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.
-
stringspec.applicationSet.volumes.gitRepo.repository
Required value
repository is the URL -
stringspec.applicationSet.volumes.gitRepo.revisionrevision is the commit hash for the specified revision.
-
-
objectspec.applicationSet.volumes.glusterfsglusterfs represents a Glusterfs mount on the host that shares a pod’s lifetime. Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
-
stringspec.applicationSet.volumes.glusterfs.endpoints
Required value
endpoints is the endpoint name that details Glusterfs topology. -
stringspec.applicationSet.volumes.glusterfs.path
Required value
path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod -
booleanspec.applicationSet.volumes.glusterfs.readOnlyreadOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
-
-
objectspec.applicationSet.volumes.hostPathhostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
stringspec.applicationSet.volumes.hostPath.path
Required value
path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath -
stringspec.applicationSet.volumes.hostPath.typetype for HostPath Volume Defaults to "" More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
-
objectspec.applicationSet.volumes.image
image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet’s host machine. The volume is resolved at pod startup depending on which PullPolicy value is provided:
- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.
- Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn’t present.
- IfNotPresent: the kubelet pulls if the reference isn’t already present on disk. Container creation will fail if the reference isn’t present and the pull fails.
The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro) and non-executable files (noexec). Sub path mounts for containers are not supported (spec.containers[].volumeMounts.subpath) before 1.33. The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
-
stringspec.applicationSet.volumes.image.pullPolicyPolicy for pulling OCI objects. Possible values are: Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn’t present. IfNotPresent: the kubelet pulls if the reference isn’t already present on disk. Container creation will fail if the reference isn’t present and the pull fails. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
-
stringspec.applicationSet.volumes.image.referenceRequired: Image or artifact reference to be used. Behaves in the same way as pod.spec.containers[*].image. Pull secrets will be assembled in the same way as for the container image by looking up node credentials, SA image pull secrets, and pod spec image pull secrets. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
objectspec.applicationSet.volumes.iscsiiscsi represents an ISCSI Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes/#iscsi
-
booleanspec.applicationSet.volumes.iscsi.chapAuthDiscoverychapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication
-
booleanspec.applicationSet.volumes.iscsi.chapAuthSessionchapAuthSession defines whether support iSCSI Session CHAP authentication
-
stringspec.applicationSet.volumes.iscsi.fsTypefsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
-
stringspec.applicationSet.volumes.iscsi.initiatorNameinitiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface
: will be created for the connection. -
stringspec.applicationSet.volumes.iscsi.iqn
Required value
iqn is the target iSCSI Qualified Name. -
stringspec.applicationSet.volumes.iscsi.iscsiInterfaceiscsiInterface is the interface Name that uses an iSCSI transport. Defaults to ‘default’ (tcp).
Default:
default -
integerspec.applicationSet.volumes.iscsi.lun
Required value
lun represents iSCSI Target Lun number. -
array of stringsspec.applicationSet.volumes.iscsi.portalsportals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-
booleanspec.applicationSet.volumes.iscsi.readOnlyreadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.
-
objectspec.applicationSet.volumes.iscsi.secretRefsecretRef is the CHAP Secret for iSCSI target and initiator authentication
-
stringspec.applicationSet.volumes.iscsi.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.applicationSet.volumes.iscsi.targetPortal
Required value
targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-
-
stringspec.applicationSet.volumes.namename of the volume. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
objectspec.applicationSet.volumes.nfsnfs represents an NFS mount on the host that shares a pod’s lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
stringspec.applicationSet.volumes.nfs.path
Required value
path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs -
booleanspec.applicationSet.volumes.nfs.readOnlyreadOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
stringspec.applicationSet.volumes.nfs.server
Required value
server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
-
objectspec.applicationSet.volumes.persistentVolumeClaimpersistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
-
stringspec.applicationSet.volumes.persistentVolumeClaim.claimName
Required value
claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims -
booleanspec.applicationSet.volumes.persistentVolumeClaim.readOnlyreadOnly Will force the ReadOnly setting in VolumeMounts. Default false.
-
-
objectspec.applicationSet.volumes.photonPersistentDiskphotonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine. Deprecated: PhotonPersistentDisk is deprecated and the in-tree photonPersistentDisk type is no longer supported.
-
stringspec.applicationSet.volumes.photonPersistentDisk.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
stringspec.applicationSet.volumes.photonPersistentDisk.pdID
Required value
pdID is the ID that identifies Photon Controller persistent disk
-
-
objectspec.applicationSet.volumes.portworxVolumeportworxVolume represents a portworx volume attached and mounted on kubelets host machine. Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate is on.
-
stringspec.applicationSet.volumes.portworxVolume.fsTypefSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”. Implicitly inferred to be “ext4” if unspecified.
-
booleanspec.applicationSet.volumes.portworxVolume.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
stringspec.applicationSet.volumes.portworxVolume.volumeID
Required value
volumeID uniquely identifies a Portworx volume
-
-
objectspec.applicationSet.volumes.projectedprojected items for all in one resources secrets, configmaps, and downward API
-
integerspec.applicationSet.volumes.projected.defaultModedefaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.applicationSet.volumes.projected.sourcessources is the list of volume projections. Each entry in this list handles one source.
-
objectspec.applicationSet.volumes.projected.sources.clusterTrustBundle
ClusterTrustBundle allows a pod to access the
.spec.trustBundlefield of ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.
ClusterTrustBundle objects can either be selected by name, or by the combination of signer name and a label selector.
Kubelet performs aggressive normalization of the PEM contents written into the pod filesystem. Esoteric PEM features such as inter-block comments and block headers are stripped. Certificates are deduplicated. The ordering of certificates within the file is arbitrary, and Kubelet may change the order over time.
-
objectspec.applicationSet.volumes.projected.sources.clusterTrustBundle.labelSelectorSelect all ClusterTrustBundles that match this label selector. Only has effect if signerName is set. Mutually-exclusive with name. If unset, interpreted as “match nothing”. If set but empty, interpreted as “match everything”.
-
array of objectsspec.applicationSet.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.applicationSet.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.applicationSet.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.applicationSet.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.applicationSet.volumes.projected.sources.clusterTrustBundle.labelSelector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.applicationSet.volumes.projected.sources.clusterTrustBundle.nameSelect a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.
-
booleanspec.applicationSet.volumes.projected.sources.clusterTrustBundle.optionalIf true, don’t block pod startup if the referenced ClusterTrustBundle(s) aren’t available. If using name, then the named ClusterTrustBundle is allowed not to exist. If using signerName, then the combination of signerName and labelSelector is allowed to match zero ClusterTrustBundles.
-
stringspec.applicationSet.volumes.projected.sources.clusterTrustBundle.path
Required value
Relative path from the volume root to write the bundle. -
stringspec.applicationSet.volumes.projected.sources.clusterTrustBundle.signerNameSelect all ClusterTrustBundles that match this signer name. Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated.
-
-
objectspec.applicationSet.volumes.projected.sources.configMapconfigMap information about the configMap data to project
-
array of objectsspec.applicationSet.volumes.projected.sources.configMap.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.applicationSet.volumes.projected.sources.configMap.items.keykey is the key to project.
-
integerspec.applicationSet.volumes.projected.sources.configMap.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.applicationSet.volumes.projected.sources.configMap.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.applicationSet.volumes.projected.sources.configMap.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.applicationSet.volumes.projected.sources.configMap.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
objectspec.applicationSet.volumes.projected.sources.downwardAPIdownwardAPI information about the downwardAPI data to project
-
array of objectsspec.applicationSet.volumes.projected.sources.downwardAPI.itemsItems is a list of DownwardAPIVolume file
-
objectspec.applicationSet.volumes.projected.sources.downwardAPI.items.fieldRefRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
-
stringspec.applicationSet.volumes.projected.sources.downwardAPI.items.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.applicationSet.volumes.projected.sources.downwardAPI.items.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
integerspec.applicationSet.volumes.projected.sources.downwardAPI.items.modeOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.applicationSet.volumes.projected.sources.downwardAPI.items.pathRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the ‘..’ path. Must be utf-8 encoded. The first item of the relative path must not start with ‘..’
-
objectspec.applicationSet.volumes.projected.sources.downwardAPI.items.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
stringspec.applicationSet.volumes.projected.sources.downwardAPI.items.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.applicationSet.volumes.projected.sources.downwardAPI.items.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.applicationSet.volumes.projected.sources.downwardAPI.items.resourceFieldRef.resource
Required value
Required: resource to select
-
-
-
-
objectspec.applicationSet.volumes.projected.sources.podCertificate
Projects an auto-rotating credential bundle (private key and certificate chain) that the pod can use either as a TLS client or server.
Kubelet generates a private key and uses it to send a PodCertificateRequest to the named signer. Once the signer approves the request and issues a certificate chain, Kubelet writes the key and certificate chain to the pod filesystem. The pod does not start until certificates have been issued for each podCertificate projected volume source in its spec.
Kubelet will begin trying to rotate the certificate at the time indicated by the signer using the PodCertificateRequest.Status.BeginRefreshAt timestamp.
Kubelet can write a single file, indicated by the credentialBundlePath field, or separate files, indicated by the keyPath and certificateChainPath fields.
The credential bundle is a single file in PEM format. The first PEM entry is the private key (in PKCS#8 format), and the remaining PEM entries are the certificate chain issued by the signer (typically, signers will return their certificate chain in leaf-to-root order).
Prefer using the credential bundle format, since your application code can read it atomically. If you use keyPath and certificateChainPath, your application must make two separate file reads. If these coincide with a certificate rotation, it is possible that the private key and leaf certificate you read may not correspond to each other. Your application will need to check for this condition, and re-read until they are consistent.
The named signer controls chooses the format of the certificate it issues; consult the signer implementation’s documentation to learn how to use the certificates it issues.
-
stringspec.applicationSet.volumes.projected.sources.podCertificate.certificateChainPath
Write the certificate chain at this path in the projected volume.
Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.
-
stringspec.applicationSet.volumes.projected.sources.podCertificate.credentialBundlePath
Write the credential bundle at this path in the projected volume.
The credential bundle is a single file that contains multiple PEM blocks. The first PEM block is a PRIVATE KEY block, containing a PKCS#8 private key.
The remaining blocks are CERTIFICATE blocks, containing the issued certificate chain from the signer (leaf and any intermediates).
Using credentialBundlePath lets your Pod’s application code make a single atomic read that retrieves a consistent key and certificate chain. If you project them to separate files, your application code will need to additionally check that the leaf certificate was issued to the key.
-
stringspec.applicationSet.volumes.projected.sources.podCertificate.keyPath
Write the key at this path in the projected volume.
Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.
-
stringspec.applicationSet.volumes.projected.sources.podCertificate.keyType
Required value
The type of keypair Kubelet will generate for the pod.
Valid values are “RSA3072”, “RSA4096”, “ECDSAP256”, “ECDSAP384”, “ECDSAP521”, and “ED25519”.
-
integerspec.applicationSet.volumes.projected.sources.podCertificate.maxExpirationSeconds
maxExpirationSeconds is the maximum lifetime permitted for the certificate.
Kubelet copies this value verbatim into the PodCertificateRequests it generates for this projection.
If omitted, kube-apiserver will set it to 86400(24 hours). kube-apiserver will reject values shorter than 3600 (1 hour). The maximum allowable value is 7862400 (91 days).
The signer implementation is then free to issue a certificate with any lifetime shorter than MaxExpirationSeconds, but no shorter than 3600 seconds (1 hour). This constraint is enforced by kube-apiserver.
kubernetes.iosigners will never issue certificates with a lifetime longer than 24 hours. -
stringspec.applicationSet.volumes.projected.sources.podCertificate.signerName
Required value
Kubelet’s generated CSRs will be addressed to this signer.
-
-
objectspec.applicationSet.volumes.projected.sources.secretsecret information about the secret data to project
-
array of objectsspec.applicationSet.volumes.projected.sources.secret.itemsitems if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.applicationSet.volumes.projected.sources.secret.items.keykey is the key to project.
-
integerspec.applicationSet.volumes.projected.sources.secret.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.applicationSet.volumes.projected.sources.secret.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.applicationSet.volumes.projected.sources.secret.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.applicationSet.volumes.projected.sources.secret.optionaloptional field specify whether the Secret or its key must be defined
-
-
objectspec.applicationSet.volumes.projected.sources.serviceAccountTokenserviceAccountToken is information about the serviceAccountToken data to project
-
stringspec.applicationSet.volumes.projected.sources.serviceAccountToken.audienceaudience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
-
integerspec.applicationSet.volumes.projected.sources.serviceAccountToken.expirationSecondsexpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
-
stringspec.applicationSet.volumes.projected.sources.serviceAccountToken.path
Required value
path is the path relative to the mount point of the file to project the token into.
-
-
-
-
objectspec.applicationSet.volumes.quobytequobyte represents a Quobyte mount on the host that shares a pod’s lifetime. Deprecated: Quobyte is deprecated and the in-tree quobyte type is no longer supported.
-
stringspec.applicationSet.volumes.quobyte.groupgroup to map volume access to Default is no group
-
booleanspec.applicationSet.volumes.quobyte.readOnlyreadOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.
-
stringspec.applicationSet.volumes.quobyte.registry
Required value
registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes -
stringspec.applicationSet.volumes.quobyte.tenanttenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin
-
stringspec.applicationSet.volumes.quobyte.useruser to map volume access to Defaults to serivceaccount user
-
stringspec.applicationSet.volumes.quobyte.volume
Required value
volume is a string that references an already created Quobyte volume by name.
-
-
objectspec.applicationSet.volumes.scaleIOscaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. Deprecated: ScaleIO is deprecated and the in-tree scaleIO type is no longer supported.
-
stringspec.applicationSet.volumes.scaleIO.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Default is “xfs”.
Default:
xfs -
stringspec.applicationSet.volumes.scaleIO.gateway
Required value
gateway is the host address of the ScaleIO API Gateway. -
stringspec.applicationSet.volumes.scaleIO.protectionDomainprotectionDomain is the name of the ScaleIO Protection Domain for the configured storage.
-
booleanspec.applicationSet.volumes.scaleIO.readOnlyreadOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.applicationSet.volumes.scaleIO.secretRef
Required value
secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail.-
stringspec.applicationSet.volumes.scaleIO.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
booleanspec.applicationSet.volumes.scaleIO.sslEnabledsslEnabled Flag enable/disable SSL communication with Gateway, default false
-
stringspec.applicationSet.volumes.scaleIO.storageModestorageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.
Default:
ThinProvisioned -
stringspec.applicationSet.volumes.scaleIO.storagePoolstoragePool is the ScaleIO Storage Pool associated with the protection domain.
-
stringspec.applicationSet.volumes.scaleIO.system
Required value
system is the name of the storage system as configured in ScaleIO. -
stringspec.applicationSet.volumes.scaleIO.volumeNamevolumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.
-
-
objectspec.applicationSet.volumes.secretsecret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
integerspec.applicationSet.volumes.secret.defaultModedefaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.applicationSet.volumes.secret.itemsitems If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.applicationSet.volumes.secret.items.keykey is the key to project.
-
integerspec.applicationSet.volumes.secret.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.applicationSet.volumes.secret.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
booleanspec.applicationSet.volumes.secret.optionaloptional field specify whether the Secret or its keys must be defined
-
stringspec.applicationSet.volumes.secret.secretNamesecretName is the name of the secret in the pod’s namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
-
objectspec.applicationSet.volumes.storageosstorageOS represents a StorageOS volume attached and mounted on Kubernetes nodes. Deprecated: StorageOS is deprecated and the in-tree storageos type is no longer supported.
-
stringspec.applicationSet.volumes.storageos.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
booleanspec.applicationSet.volumes.storageos.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.applicationSet.volumes.storageos.secretRefsecretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted.
-
stringspec.applicationSet.volumes.storageos.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.applicationSet.volumes.storageos.volumeNamevolumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.
-
stringspec.applicationSet.volumes.storageos.volumeNamespacevolumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod’s namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to “default” if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.
-
-
objectspec.applicationSet.volumes.vsphereVolumevsphereVolume represents a vSphere volume attached and mounted on kubelets host machine. Deprecated: VsphereVolume is deprecated. All operations for the in-tree vsphereVolume type are redirected to the csi.vsphere.vmware.com CSI driver.
-
stringspec.applicationSet.volumes.vsphereVolume.fsTypefsType is filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
stringspec.applicationSet.volumes.vsphereVolume.storagePolicyIDstoragePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.
-
stringspec.applicationSet.volumes.vsphereVolume.storagePolicyNamestoragePolicyName is the storage Policy Based Management (SPBM) profile name.
-
stringspec.applicationSet.volumes.vsphereVolume.volumePath
Required value
volumePath is the path that identifies vSphere volume vmdk
-
-
-
objectspec.applicationSet.webhookServerWebhookServerSpec defines the options for the ApplicationSet Webhook Server component.
-
stringspec.applicationSet.webhookServer.hostHost is the hostname to use for Ingress/Route resources.
-
objectspec.applicationSet.webhookServer.ingressIngress defines the desired state for an Ingress for the Application set webhook component.
-
objectspec.applicationSet.webhookServer.ingress.annotationsAnnotations is the map of annotations to apply to the Ingress.
-
booleanspec.applicationSet.webhookServer.ingress.enabled
Required value
Enabled will toggle the creation of the Ingress. -
stringspec.applicationSet.webhookServer.ingress.ingressClassNameIngressClassName for the Ingress resource.
-
stringspec.applicationSet.webhookServer.ingress.pathPath used for the Ingress resource.
-
array of objectsspec.applicationSet.webhookServer.ingress.tlsTLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.
-
array of stringsspec.applicationSet.webhookServer.ingress.tls.hostshosts is a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.
-
stringspec.applicationSet.webhookServer.ingress.tls.secretNamesecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the “Host” header field used by an IngressRule, the SNI host is used for termination and value of the “Host” header is used for routing.
-
-
-
-
-
objectspec.argoCDAgentArgoCDAgent defines configurations for the ArgoCD Agent component.
-
objectspec.argoCDAgent.agentAgent defines configurations for the Agent component of Argo CD Agent.
-
array of stringsspec.argoCDAgent.agent.allowedNamespacesAllowedNamespaces is a list of additional namespaces the agent is allowed to manage applications in. Supports glob patterns.
-
objectspec.argoCDAgent.agent.clientClient defines the client options for the Agent component.
-
booleanspec.argoCDAgent.agent.client.enableCompressionEnableCompression is the flag to enable compression while sending data between Principal and Agent using gRPC
-
booleanspec.argoCDAgent.agent.client.enableWebSocketEnableWebSocket is the flag to enable WebSocket for event streaming
-
stringspec.argoCDAgent.agent.client.keepAliveIntervalKeepAliveInterval is the interval for keep-alive pings to the principal
-
stringspec.argoCDAgent.agent.client.modeMode is the operational mode for the agent (managed or autonomous)
-
stringspec.argoCDAgent.agent.client.principalServerAddressPrincipalServerAddress is the remote address of the principal server to connect to.
-
stringspec.argoCDAgent.agent.client.principalServerPortPrincipalServerPort is the remote port of the principal server to connect to.
-
-
stringspec.argoCDAgent.agent.credsCreds is the credential identifier for the agent authentication
-
objectspec.argoCDAgent.agent.destinationBasedMappingDestinationBasedMapping defines the options for destination based mapping for the Agent component.
-
booleanspec.argoCDAgent.agent.destinationBasedMapping.createNamespaceCreateNamespace enables automatic creation of target namespaces on the managed cluster when destination-based mapping is enabled.
-
booleanspec.argoCDAgent.agent.destinationBasedMapping.enabledEnabled is the flag to enable destination based mapping for the Agent component.
-
-
booleanspec.argoCDAgent.agent.enabledEnabled is the flag to enable the Agent component during Argo CD installation. (optional, default
false) -
array of objectsspec.argoCDAgent.agent.envEnv lets you specify environment for agent pods
-
stringspec.argoCDAgent.agent.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.argoCDAgent.agent.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.argoCDAgent.agent.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.argoCDAgent.agent.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.argoCDAgent.agent.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.argoCDAgent.agent.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.argoCDAgent.agent.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.argoCDAgent.agent.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.argoCDAgent.agent.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.argoCDAgent.agent.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.argoCDAgent.agent.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.argoCDAgent.agent.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.argoCDAgent.agent.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.argoCDAgent.agent.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.argoCDAgent.agent.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.argoCDAgent.agent.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.argoCDAgent.agent.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.argoCDAgent.agent.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.argoCDAgent.agent.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.argoCDAgent.agent.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.argoCDAgent.agent.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.argoCDAgent.agent.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.argoCDAgent.agent.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
stringspec.argoCDAgent.agent.imageImage is the name of Argo CD Agent image
-
stringspec.argoCDAgent.agent.logFormatLogFormat refers to the log format used by the Agent component.
-
stringspec.argoCDAgent.agent.logLevelLogLevel refers to the log level used by the Agent component.
-
objectspec.argoCDAgent.agent.redisRedis defines the Redis options for the Agent component.
-
stringspec.argoCDAgent.agent.redis.serverAddressServerAddress is the address of the Redis server to be used by the PrincAgentipal component.
-
-
objectspec.argoCDAgent.agent.tlsTLS defines the TLS options for the Agent component.
-
booleanspec.argoCDAgent.agent.tls.insecureInsecure is the flag to skip TLS certificate validation when connecting to the principal (insecure, for development only)
-
stringspec.argoCDAgent.agent.tls.rootCASecretNameRootCASecretName is the name of the secret containing the root CA certificate
-
stringspec.argoCDAgent.agent.tls.secretNameSecretName is the name of the secret containing the agent client TLS certificate
-
-
-
objectspec.argoCDAgent.principalPrincipal defines configurations for the Principal component of Argo CD Agent.
-
stringspec.argoCDAgent.principal.authAuth is the authentication method for the Principal component.
-
booleanspec.argoCDAgent.principal.destinationBasedMappingDestinationBasedMapping is the flag to enable destination based mapping for the Principal component.
-
booleanspec.argoCDAgent.principal.enabledEnabled is the flag to enable the Principal component during Argo CD installation. (optional, default
false) -
array of objectsspec.argoCDAgent.principal.envEnv lets you specify environment for principal pods
-
stringspec.argoCDAgent.principal.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.argoCDAgent.principal.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.argoCDAgent.principal.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.argoCDAgent.principal.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.argoCDAgent.principal.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.argoCDAgent.principal.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.argoCDAgent.principal.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.argoCDAgent.principal.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.argoCDAgent.principal.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.argoCDAgent.principal.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.argoCDAgent.principal.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.argoCDAgent.principal.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.argoCDAgent.principal.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.argoCDAgent.principal.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.argoCDAgent.principal.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.argoCDAgent.principal.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.argoCDAgent.principal.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.argoCDAgent.principal.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.argoCDAgent.principal.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.argoCDAgent.principal.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.argoCDAgent.principal.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.argoCDAgent.principal.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.argoCDAgent.principal.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
stringspec.argoCDAgent.principal.imageImage is the name of Argo CD Agent image
-
objectspec.argoCDAgent.principal.jwtJWT defines the JWT options for the Principal component.
-
booleanspec.argoCDAgent.principal.jwt.insecureGenerateInsecureGenerate is the flag to allow the principal to generate its own private key for signing JWT tokens (insecure).
-
stringspec.argoCDAgent.principal.jwt.secretNameSecretName is the name of the secret containing the JWT signing key.
-
-
stringspec.argoCDAgent.principal.logFormatLogFormat refers to the log format used by the Principal component.
-
stringspec.argoCDAgent.principal.logLevelLogLevel refers to the log level used by the Principal component.
-
objectspec.argoCDAgent.principal.namespaceNamespace is the configuration for the Principal component namespace.
-
array of stringsspec.argoCDAgent.principal.namespace.allowedNamespacesAllowedNamespaces is a list of namespaces the principal shall watch and process Argo CD resources in.
-
booleanspec.argoCDAgent.principal.namespace.enableNamespaceCreateEnableNamespaceCreate is the flag to enable namespace creation for agents.
-
array of stringsspec.argoCDAgent.principal.namespace.namespaceCreateLabelsNamespaceCreateLabels is the set of labels to apply to namespaces created for agents. Ex: “foo=bar,bar=baz”
-
stringspec.argoCDAgent.principal.namespace.namespaceCreatePatternNamespaceCreatePattern is a regexp pattern to restrict the names of namespaces to be created.
-
-
objectspec.argoCDAgent.principal.redisRedis defines the Redis options for the Principal component.
-
stringspec.argoCDAgent.principal.redis.compressionTypeCompressionType is the compression type to be used by Redis.
-
stringspec.argoCDAgent.principal.redis.serverAddressServerAddress is the address of the Redis server to be used by the Principal component.
-
-
objectspec.argoCDAgent.principal.resourceProxyResourceProxy defines the Resource Proxy options for the Principal component.
-
stringspec.argoCDAgent.principal.resourceProxy.caSecretNameCASecretName is the name of the secret containing the CA certificate for the resource proxy.
-
stringspec.argoCDAgent.principal.resourceProxy.secretNameSecretName is the name of the secret containing the TLS certificate and key for the resource proxy.
-
-
objectspec.argoCDAgent.principal.serverServer defines the server options for the Principal component.
-
booleanspec.argoCDAgent.principal.server.enableWebSocketEnableWebSocket is the flag to enable the WebSocket on gRPC to stream events to the Agent.
-
stringspec.argoCDAgent.principal.server.keepAliveMinIntervalKeepAliveMinInterval is the minimum interval between keep-alive messages sent by the Agent to the Principal.
-
objectspec.argoCDAgent.principal.server.serviceService defines the options for the Service backing the ArgoCD Agent component. If not set, type ClusterIP will be used by default.
-
stringspec.argoCDAgent.principal.server.service.type
Required value
Type is the ServiceType to use for the Service resource. If not set, type ClusterIP will be used by default.
-
-
-
objectspec.argoCDAgent.principal.tlsTLS defines the TLS options for the Principal component.
-
booleanspec.argoCDAgent.principal.tls.insecureGenerateInsecureGenerate is the flag to allow the principal to generate its own set of TLS cert and key on startup when none are configured
-
stringspec.argoCDAgent.principal.tls.rootCASecretNameRootCASecretName is the name of the secret containing the root CA TLS certificate
-
stringspec.argoCDAgent.principal.tls.secretNameSecretName is The name of the secret containing the TLS certificate and key.
-
-
-
-
objectspec.bannerBanner defines an additional banner to be displayed in Argo CD UI
-
stringspec.banner.content
Required value
Content defines the banner message content to display -
booleanspec.banner.permanentPermanent defines if the banner should be displayed permanently or only for a certain period of time
-
stringspec.banner.positionPosition defines the position of the banner in the UI
-
stringspec.banner.urlURL defines an optional URL to be used as banner message link
-
-
stringspec.clusterDomainClusterDomain is the cluster domain to use.
-
objectspec.cmdParamsCmdParams specifies command-line parameters for the Argo CD components.
-
stringspec.configManagementPluginsDeprecated: ConfigManagementPlugins field is no longer supported. Argo CD now requires plugins to be defined as sidecar containers of repo server component. See ‘.spec.repo.sidecarContainers’. ConfigManagementPlugins was previously used to specify additional config management plugins.
-
objectspec.controllerController defines the Application Controller options for ArgoCD.
-
objectspec.controller.annotationsCustom annotations to pods deployed by the operator
-
stringspec.controller.appSync
AppSync is used to control the sync frequency, by default the ArgoCD controller polls Git every 3m.
Set this to a duration, e.g. 10m or 600s to control the synchronisation frequency.
-
booleanspec.controller.enabledEnabled is the flag to enable the Application Controller during ArgoCD installation. (optional, default
true) -
array of objectsspec.controller.envEnv lets you specify environment for application controller pods
-
stringspec.controller.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.controller.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.controller.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.controller.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.controller.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.controller.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.controller.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.controller.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.controller.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.controller.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.controller.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.controller.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.controller.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.controller.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.controller.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.controller.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.controller.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.controller.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.controller.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.controller.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.controller.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of stringsspec.controller.extraCommandArgsExtra Command arguments allows users to pass command line arguments to controller workload. They get added to default command line arguments provided by the operator. Please note that the command line arguments provided as part of ExtraCommandArgs will not overwrite the default command line arguments.
-
array of objectsspec.controller.initContainersInitContainers defines the list of initialization containers for the Application Controller component.
-
array of stringsspec.controller.initContainers.argsArguments to the entrypoint. The container image’s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of stringsspec.controller.initContainers.commandEntrypoint array. Not executed within a shell. The container image’s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of objectsspec.controller.initContainers.envList of environment variables to set in the container. Cannot be updated.
-
stringspec.controller.initContainers.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.controller.initContainers.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.controller.initContainers.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.controller.initContainers.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.controller.initContainers.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.controller.initContainers.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.initContainers.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.controller.initContainers.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.controller.initContainers.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.controller.initContainers.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.controller.initContainers.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.controller.initContainers.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.controller.initContainers.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.controller.initContainers.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.controller.initContainers.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.controller.initContainers.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.controller.initContainers.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.controller.initContainers.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.controller.initContainers.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.controller.initContainers.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.controller.initContainers.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.controller.initContainers.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.initContainers.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of objectsspec.controller.initContainers.envFromList of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except ‘=’. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
-
objectspec.controller.initContainers.envFrom.configMapRefThe ConfigMap to select from
-
stringspec.controller.initContainers.envFrom.configMapRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.initContainers.envFrom.configMapRef.optionalSpecify whether the ConfigMap must be defined
-
-
stringspec.controller.initContainers.envFrom.prefixOptional text to prepend to the name of each environment variable. May consist of any printable ASCII characters except ‘=’.
-
objectspec.controller.initContainers.envFrom.secretRefThe Secret to select from
-
stringspec.controller.initContainers.envFrom.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.initContainers.envFrom.secretRef.optionalSpecify whether the Secret must be defined
-
-
-
stringspec.controller.initContainers.imageContainer image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
stringspec.controller.initContainers.imagePullPolicyImage pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-
objectspec.controller.initContainers.lifecycleActions that the management system should take in response to container lifecycle events. Cannot be updated.
-
objectspec.controller.initContainers.lifecycle.postStartPostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.controller.initContainers.lifecycle.postStart.execExec specifies a command to execute in the container.
-
array of stringsspec.controller.initContainers.lifecycle.postStart.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.controller.initContainers.lifecycle.postStart.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.controller.initContainers.lifecycle.postStart.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.controller.initContainers.lifecycle.postStart.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.controller.initContainers.lifecycle.postStart.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.controller.initContainers.lifecycle.postStart.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.controller.initContainers.lifecycle.postStart.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.controller.initContainers.lifecycle.postStart.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.controller.initContainers.lifecycle.postStart.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.controller.initContainers.lifecycle.postStart.sleepSleep represents a duration that the container should sleep.
-
integerspec.controller.initContainers.lifecycle.postStart.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.controller.initContainers.lifecycle.postStart.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.controller.initContainers.lifecycle.postStart.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.controller.initContainers.lifecycle.postStart.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
objectspec.controller.initContainers.lifecycle.preStopPreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod’s termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod’s termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.controller.initContainers.lifecycle.preStop.execExec specifies a command to execute in the container.
-
array of stringsspec.controller.initContainers.lifecycle.preStop.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.controller.initContainers.lifecycle.preStop.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.controller.initContainers.lifecycle.preStop.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.controller.initContainers.lifecycle.preStop.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.controller.initContainers.lifecycle.preStop.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.controller.initContainers.lifecycle.preStop.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.controller.initContainers.lifecycle.preStop.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.controller.initContainers.lifecycle.preStop.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.controller.initContainers.lifecycle.preStop.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.controller.initContainers.lifecycle.preStop.sleepSleep represents a duration that the container should sleep.
-
integerspec.controller.initContainers.lifecycle.preStop.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.controller.initContainers.lifecycle.preStop.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.controller.initContainers.lifecycle.preStop.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.controller.initContainers.lifecycle.preStop.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
stringspec.controller.initContainers.lifecycle.stopSignalStopSignal defines which signal will be sent to a container when it is being stopped. If not specified, the default is defined by the container runtime in use. StopSignal can only be set for Pods with a non-empty .spec.os.name
-
-
objectspec.controller.initContainers.livenessProbePeriodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.controller.initContainers.livenessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.controller.initContainers.livenessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.controller.initContainers.livenessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.controller.initContainers.livenessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.controller.initContainers.livenessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.controller.initContainers.livenessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.controller.initContainers.livenessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.controller.initContainers.livenessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.controller.initContainers.livenessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.controller.initContainers.livenessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.controller.initContainers.livenessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.controller.initContainers.livenessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.controller.initContainers.livenessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.controller.initContainers.livenessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.controller.initContainers.livenessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.controller.initContainers.livenessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.controller.initContainers.livenessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.controller.initContainers.livenessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.controller.initContainers.livenessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.controller.initContainers.livenessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.controller.initContainers.livenessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.controller.initContainers.livenessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
stringspec.controller.initContainers.nameName of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
-
array of objectsspec.controller.initContainers.portsList of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default “0.0.0.0” address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated.
-
integerspec.controller.initContainers.ports.containerPortNumber of port to expose on the pod’s IP address. This must be a valid port number, 0 < x < 65536.
-
stringspec.controller.initContainers.ports.hostIPWhat host IP to bind the external port to.
-
integerspec.controller.initContainers.ports.hostPortNumber of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-
stringspec.controller.initContainers.ports.nameIf specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-
stringspec.controller.initContainers.ports.protocolProtocol for port. Must be UDP, TCP, or SCTP. Defaults to “TCP”.
Default:
TCP
-
-
objectspec.controller.initContainers.readinessProbePeriodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.controller.initContainers.readinessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.controller.initContainers.readinessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.controller.initContainers.readinessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.controller.initContainers.readinessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.controller.initContainers.readinessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.controller.initContainers.readinessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.controller.initContainers.readinessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.controller.initContainers.readinessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.controller.initContainers.readinessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.controller.initContainers.readinessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.controller.initContainers.readinessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.controller.initContainers.readinessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.controller.initContainers.readinessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.controller.initContainers.readinessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.controller.initContainers.readinessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.controller.initContainers.readinessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.controller.initContainers.readinessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.controller.initContainers.readinessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.controller.initContainers.readinessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.controller.initContainers.readinessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.controller.initContainers.readinessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.controller.initContainers.readinessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
array of objectsspec.controller.initContainers.resizePolicyResources resize policy for the container.
-
stringspec.controller.initContainers.resizePolicy.resourceNameName of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-
stringspec.controller.initContainers.resizePolicy.restartPolicyRestart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
-
-
objectspec.controller.initContainers.resourcesCompute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
array of objectsspec.controller.initContainers.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.controller.initContainers.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.controller.initContainers.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.controller.initContainers.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.controller.initContainers.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
stringspec.controller.initContainers.restartPolicyRestartPolicy defines the restart behavior of individual containers in a pod. This overrides the pod-level restart policy. When this field is not specified, the restart behavior is defined by the Pod’s restart policy and the container type. Additionally, setting the RestartPolicy as “Always” for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy “Always” will be shut down. This lifecycle differs from normal init containers and is often referred to as a “sidecar” container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-
array of objectsspec.controller.initContainers.restartPolicyRules
Represents a list of rules to be checked to determine if the container should be restarted on exit. The rules are evaluated in order. Once a rule matches a container exit condition, the remaining rules are ignored. If no rule matches the container exit condition, the Container-level restart policy determines the whether the container is restarted or not. Constraints on the rules:
- At most 20 rules are allowed.
- Rules can have the same action.
- Identical rules are not forbidden in validations. When rules are specified, container MUST set RestartPolicy explicitly even it if matches the Pod’s RestartPolicy.
-
stringspec.controller.initContainers.restartPolicyRules.actionSpecifies the action taken on a container exit if the requirements are satisfied. The only possible value is “Restart” to restart the container.
-
objectspec.controller.initContainers.restartPolicyRules.exitCodesRepresents the exit codes to check on container exits.
-
stringspec.controller.initContainers.restartPolicyRules.exitCodes.operator
Required value
Represents the relationship between the container exit code(s) and the specified values. Possible values are:
- In: the requirement is satisfied if the container exit code is in the set of specified values.
- NotIn: the requirement is satisfied if the container exit code is not in the set of specified values.
-
array of integersspec.controller.initContainers.restartPolicyRules.exitCodes.valuesSpecifies the set of values to check for container exit codes. At most 255 elements are allowed.
-
-
objectspec.controller.initContainers.securityContextSecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
-
booleanspec.controller.initContainers.securityContext.allowPrivilegeEscalation
AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is:
- run as Privileged
- has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-
objectspec.controller.initContainers.securityContext.appArmorProfileappArmorProfile is the AppArmor options to use by this container. If set, this profile overrides the pod’s appArmorProfile. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.controller.initContainers.securityContext.appArmorProfile.localhostProfilelocalhostProfile indicates a profile loaded on the node that should be used. The profile must be preconfigured on the node to work. Must match the loaded name of the profile. Must be set if and only if type is “Localhost”.
-
stringspec.controller.initContainers.securityContext.appArmorProfile.type
Required value
type indicates which kind of AppArmor profile will be applied. Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime’s default profile. Unconfined - no AppArmor enforcement.
-
-
objectspec.controller.initContainers.securityContext.capabilitiesThe capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows.
-
array of stringsspec.controller.initContainers.securityContext.capabilities.addAdded capabilities
-
stringspec.controller.initContainers.securityContext.capabilities.add.Element of the arrayCapability represent POSIX capabilities type
-
-
array of stringsspec.controller.initContainers.securityContext.capabilities.dropRemoved capabilities
-
stringspec.controller.initContainers.securityContext.capabilities.drop.Element of the arrayCapability represent POSIX capabilities type
-
-
-
booleanspec.controller.initContainers.securityContext.privilegedRun container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.controller.initContainers.securityContext.procMountprocMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.controller.initContainers.securityContext.readOnlyRootFilesystemWhether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-
integerspec.controller.initContainers.securityContext.runAsGroupThe GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.controller.initContainers.securityContext.runAsNonRootIndicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
integerspec.controller.initContainers.securityContext.runAsUserThe UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
objectspec.controller.initContainers.securityContext.seLinuxOptionsThe SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.controller.initContainers.securityContext.seLinuxOptions.levelLevel is SELinux level label that applies to the container.
-
stringspec.controller.initContainers.securityContext.seLinuxOptions.roleRole is a SELinux role label that applies to the container.
-
stringspec.controller.initContainers.securityContext.seLinuxOptions.typeType is a SELinux type label that applies to the container.
-
stringspec.controller.initContainers.securityContext.seLinuxOptions.userUser is a SELinux user label that applies to the container.
-
-
objectspec.controller.initContainers.securityContext.seccompProfileThe seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.controller.initContainers.securityContext.seccompProfile.localhostProfilelocalhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet’s configured seccomp profile location. Must be set if type is “Localhost”. Must NOT be set for any other type.
-
stringspec.controller.initContainers.securityContext.seccompProfile.type
Required value
type indicates which kind of seccomp profile will be applied. Valid options are:
Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-
objectspec.controller.initContainers.securityContext.windowsOptionsThe Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.
-
stringspec.controller.initContainers.securityContext.windowsOptions.gmsaCredentialSpecGMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
stringspec.controller.initContainers.securityContext.windowsOptions.gmsaCredentialSpecNameGMSACredentialSpecName is the name of the GMSA credential spec to use.
-
booleanspec.controller.initContainers.securityContext.windowsOptions.hostProcessHostProcess determines if a container should be run as a ‘Host Process’ container. All of a Pod’s containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-
stringspec.controller.initContainers.securityContext.windowsOptions.runAsUserNameThe UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-
-
objectspec.controller.initContainers.startupProbeStartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod’s lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.controller.initContainers.startupProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.controller.initContainers.startupProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.controller.initContainers.startupProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.controller.initContainers.startupProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.controller.initContainers.startupProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.controller.initContainers.startupProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.controller.initContainers.startupProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.controller.initContainers.startupProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.controller.initContainers.startupProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.controller.initContainers.startupProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.controller.initContainers.startupProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.controller.initContainers.startupProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.controller.initContainers.startupProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.controller.initContainers.startupProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.controller.initContainers.startupProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.controller.initContainers.startupProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.controller.initContainers.startupProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.controller.initContainers.startupProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.controller.initContainers.startupProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.controller.initContainers.startupProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.controller.initContainers.startupProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.controller.initContainers.startupProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
booleanspec.controller.initContainers.stdinWhether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-
booleanspec.controller.initContainers.stdinOnceWhether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-
stringspec.controller.initContainers.terminationMessagePathOptional: Path at which the file to which the container’s termination message will be written is mounted into the container’s filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-
stringspec.controller.initContainers.terminationMessagePolicyIndicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-
booleanspec.controller.initContainers.ttyWhether this container should allocate a TTY for itself, also requires ‘stdin’ to be true. Default is false.
-
array of objectsspec.controller.initContainers.volumeDevicesvolumeDevices is the list of block devices to be used by the container.
-
stringspec.controller.initContainers.volumeDevices.devicePathdevicePath is the path inside of the container that the device will be mapped to.
-
stringspec.controller.initContainers.volumeDevices.namename must match the name of a persistentVolumeClaim in the pod
-
-
array of objectsspec.controller.initContainers.volumeMountsPod volumes to mount into the container’s filesystem. Cannot be updated.
-
stringspec.controller.initContainers.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.controller.initContainers.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.controller.initContainers.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.controller.initContainers.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.controller.initContainers.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.controller.initContainers.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.controller.initContainers.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
stringspec.controller.initContainers.workingDirContainer’s working directory. If not specified, the container runtime’s default will be used, which might be configured in the container image. Cannot be updated.
-
-
objectspec.controller.labelsCustom labels to pods deployed by the operator
-
stringspec.controller.logFormatLogFormat refers to the log format used by the Application Controller component. Defaults to ArgoCDDefaultLogFormat if not configured. Valid options are text or json.
-
stringspec.controller.logLevelLogLevel refers to the log level used by the Application Controller component. Defaults to ArgoCDDefaultLogLevel if not configured. Valid options are debug, info, error, and warn.
-
integerspec.controller.parallelismLimitParallelismLimit defines the limit for parallel kubectl operations
-
objectspec.controller.processorsProcessors contains the options for the Application Controller processors.
-
integerspec.controller.processors.operationOperation is the number of application operation processors.
-
integerspec.controller.processors.statusStatus is the number of application status processors.
-
-
objectspec.controller.resourcesResources defines the Compute Resources required by the container for the Application Controller.
-
array of objectsspec.controller.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.controller.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.controller.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.controller.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.controller.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
stringspec.controller.respectRBACRespectRBAC restricts controller from discovering/syncing specific resources, Defaults is empty if not configured. Valid options are strict and normal.
-
objectspec.controller.shardingSharding contains the options for the Application Controller sharding configuration.
-
integerspec.controller.sharding.clustersPerShardClustersPerShard defines the maximum number of clusters managed by each argocd shard
Allowed values:
1 <= X -
booleanspec.controller.sharding.dynamicScalingEnabledDynamicScalingEnabled defines whether dynamic scaling should be enabled for Application Controller component
-
booleanspec.controller.sharding.enabledEnabled defines whether sharding should be enabled on the Application Controller component.
-
integerspec.controller.sharding.maxShardsMaxShards defines the maximum number of shards at any given point
-
integerspec.controller.sharding.minShardsMinShards defines the minimum number of shards at any given point
Allowed values:
1 <= X -
integerspec.controller.sharding.replicasReplicas defines the number of replicas to run in the Application controller shard.
-
-
array of objectsspec.controller.sidecarContainersSidecarContainers defines the list of sidecar containers for the controller deployment
-
array of stringsspec.controller.sidecarContainers.argsArguments to the entrypoint. The container image’s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of stringsspec.controller.sidecarContainers.commandEntrypoint array. Not executed within a shell. The container image’s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of objectsspec.controller.sidecarContainers.envList of environment variables to set in the container. Cannot be updated.
-
stringspec.controller.sidecarContainers.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.controller.sidecarContainers.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.controller.sidecarContainers.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.controller.sidecarContainers.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.controller.sidecarContainers.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.controller.sidecarContainers.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.sidecarContainers.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.controller.sidecarContainers.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.controller.sidecarContainers.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.controller.sidecarContainers.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.controller.sidecarContainers.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.controller.sidecarContainers.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.controller.sidecarContainers.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.controller.sidecarContainers.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.controller.sidecarContainers.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.controller.sidecarContainers.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.controller.sidecarContainers.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.controller.sidecarContainers.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.controller.sidecarContainers.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.controller.sidecarContainers.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.controller.sidecarContainers.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.controller.sidecarContainers.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.sidecarContainers.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of objectsspec.controller.sidecarContainers.envFromList of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except ‘=’. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
-
objectspec.controller.sidecarContainers.envFrom.configMapRefThe ConfigMap to select from
-
stringspec.controller.sidecarContainers.envFrom.configMapRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.sidecarContainers.envFrom.configMapRef.optionalSpecify whether the ConfigMap must be defined
-
-
stringspec.controller.sidecarContainers.envFrom.prefixOptional text to prepend to the name of each environment variable. May consist of any printable ASCII characters except ‘=’.
-
objectspec.controller.sidecarContainers.envFrom.secretRefThe Secret to select from
-
stringspec.controller.sidecarContainers.envFrom.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.sidecarContainers.envFrom.secretRef.optionalSpecify whether the Secret must be defined
-
-
-
stringspec.controller.sidecarContainers.imageContainer image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
stringspec.controller.sidecarContainers.imagePullPolicyImage pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-
objectspec.controller.sidecarContainers.lifecycleActions that the management system should take in response to container lifecycle events. Cannot be updated.
-
objectspec.controller.sidecarContainers.lifecycle.postStartPostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.controller.sidecarContainers.lifecycle.postStart.execExec specifies a command to execute in the container.
-
array of stringsspec.controller.sidecarContainers.lifecycle.postStart.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.controller.sidecarContainers.lifecycle.postStart.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.controller.sidecarContainers.lifecycle.postStart.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.controller.sidecarContainers.lifecycle.postStart.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.controller.sidecarContainers.lifecycle.postStart.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.controller.sidecarContainers.lifecycle.postStart.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.controller.sidecarContainers.lifecycle.postStart.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.controller.sidecarContainers.lifecycle.postStart.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.controller.sidecarContainers.lifecycle.postStart.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.controller.sidecarContainers.lifecycle.postStart.sleepSleep represents a duration that the container should sleep.
-
integerspec.controller.sidecarContainers.lifecycle.postStart.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.controller.sidecarContainers.lifecycle.postStart.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.controller.sidecarContainers.lifecycle.postStart.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.controller.sidecarContainers.lifecycle.postStart.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
objectspec.controller.sidecarContainers.lifecycle.preStopPreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod’s termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod’s termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.controller.sidecarContainers.lifecycle.preStop.execExec specifies a command to execute in the container.
-
array of stringsspec.controller.sidecarContainers.lifecycle.preStop.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.controller.sidecarContainers.lifecycle.preStop.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.controller.sidecarContainers.lifecycle.preStop.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.controller.sidecarContainers.lifecycle.preStop.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.controller.sidecarContainers.lifecycle.preStop.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.controller.sidecarContainers.lifecycle.preStop.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.controller.sidecarContainers.lifecycle.preStop.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.controller.sidecarContainers.lifecycle.preStop.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.controller.sidecarContainers.lifecycle.preStop.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.controller.sidecarContainers.lifecycle.preStop.sleepSleep represents a duration that the container should sleep.
-
integerspec.controller.sidecarContainers.lifecycle.preStop.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.controller.sidecarContainers.lifecycle.preStop.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.controller.sidecarContainers.lifecycle.preStop.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.controller.sidecarContainers.lifecycle.preStop.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
stringspec.controller.sidecarContainers.lifecycle.stopSignalStopSignal defines which signal will be sent to a container when it is being stopped. If not specified, the default is defined by the container runtime in use. StopSignal can only be set for Pods with a non-empty .spec.os.name
-
-
objectspec.controller.sidecarContainers.livenessProbePeriodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.controller.sidecarContainers.livenessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.controller.sidecarContainers.livenessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.controller.sidecarContainers.livenessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.controller.sidecarContainers.livenessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.controller.sidecarContainers.livenessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.controller.sidecarContainers.livenessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.controller.sidecarContainers.livenessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.controller.sidecarContainers.livenessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.controller.sidecarContainers.livenessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.controller.sidecarContainers.livenessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.controller.sidecarContainers.livenessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.controller.sidecarContainers.livenessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.controller.sidecarContainers.livenessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.controller.sidecarContainers.livenessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.controller.sidecarContainers.livenessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.controller.sidecarContainers.livenessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.controller.sidecarContainers.livenessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.controller.sidecarContainers.livenessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.controller.sidecarContainers.livenessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.controller.sidecarContainers.livenessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.controller.sidecarContainers.livenessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.controller.sidecarContainers.livenessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
stringspec.controller.sidecarContainers.nameName of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
-
array of objectsspec.controller.sidecarContainers.portsList of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default “0.0.0.0” address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated.
-
integerspec.controller.sidecarContainers.ports.containerPortNumber of port to expose on the pod’s IP address. This must be a valid port number, 0 < x < 65536.
-
stringspec.controller.sidecarContainers.ports.hostIPWhat host IP to bind the external port to.
-
integerspec.controller.sidecarContainers.ports.hostPortNumber of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-
stringspec.controller.sidecarContainers.ports.nameIf specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-
stringspec.controller.sidecarContainers.ports.protocolProtocol for port. Must be UDP, TCP, or SCTP. Defaults to “TCP”.
Default:
TCP
-
-
objectspec.controller.sidecarContainers.readinessProbePeriodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.controller.sidecarContainers.readinessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.controller.sidecarContainers.readinessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.controller.sidecarContainers.readinessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.controller.sidecarContainers.readinessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.controller.sidecarContainers.readinessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.controller.sidecarContainers.readinessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.controller.sidecarContainers.readinessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.controller.sidecarContainers.readinessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.controller.sidecarContainers.readinessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.controller.sidecarContainers.readinessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.controller.sidecarContainers.readinessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.controller.sidecarContainers.readinessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.controller.sidecarContainers.readinessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.controller.sidecarContainers.readinessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.controller.sidecarContainers.readinessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.controller.sidecarContainers.readinessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.controller.sidecarContainers.readinessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.controller.sidecarContainers.readinessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.controller.sidecarContainers.readinessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.controller.sidecarContainers.readinessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.controller.sidecarContainers.readinessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.controller.sidecarContainers.readinessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
array of objectsspec.controller.sidecarContainers.resizePolicyResources resize policy for the container.
-
stringspec.controller.sidecarContainers.resizePolicy.resourceNameName of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-
stringspec.controller.sidecarContainers.resizePolicy.restartPolicyRestart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
-
-
objectspec.controller.sidecarContainers.resourcesCompute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
array of objectsspec.controller.sidecarContainers.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.controller.sidecarContainers.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.controller.sidecarContainers.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.controller.sidecarContainers.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.controller.sidecarContainers.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
stringspec.controller.sidecarContainers.restartPolicyRestartPolicy defines the restart behavior of individual containers in a pod. This overrides the pod-level restart policy. When this field is not specified, the restart behavior is defined by the Pod’s restart policy and the container type. Additionally, setting the RestartPolicy as “Always” for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy “Always” will be shut down. This lifecycle differs from normal init containers and is often referred to as a “sidecar” container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-
array of objectsspec.controller.sidecarContainers.restartPolicyRules
Represents a list of rules to be checked to determine if the container should be restarted on exit. The rules are evaluated in order. Once a rule matches a container exit condition, the remaining rules are ignored. If no rule matches the container exit condition, the Container-level restart policy determines the whether the container is restarted or not. Constraints on the rules:
- At most 20 rules are allowed.
- Rules can have the same action.
- Identical rules are not forbidden in validations. When rules are specified, container MUST set RestartPolicy explicitly even it if matches the Pod’s RestartPolicy.
-
stringspec.controller.sidecarContainers.restartPolicyRules.actionSpecifies the action taken on a container exit if the requirements are satisfied. The only possible value is “Restart” to restart the container.
-
objectspec.controller.sidecarContainers.restartPolicyRules.exitCodesRepresents the exit codes to check on container exits.
-
stringspec.controller.sidecarContainers.restartPolicyRules.exitCodes.operator
Required value
Represents the relationship between the container exit code(s) and the specified values. Possible values are:
- In: the requirement is satisfied if the container exit code is in the set of specified values.
- NotIn: the requirement is satisfied if the container exit code is not in the set of specified values.
-
array of integersspec.controller.sidecarContainers.restartPolicyRules.exitCodes.valuesSpecifies the set of values to check for container exit codes. At most 255 elements are allowed.
-
-
objectspec.controller.sidecarContainers.securityContextSecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
-
booleanspec.controller.sidecarContainers.securityContext.allowPrivilegeEscalation
AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is:
- run as Privileged
- has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-
objectspec.controller.sidecarContainers.securityContext.appArmorProfileappArmorProfile is the AppArmor options to use by this container. If set, this profile overrides the pod’s appArmorProfile. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.controller.sidecarContainers.securityContext.appArmorProfile.localhostProfilelocalhostProfile indicates a profile loaded on the node that should be used. The profile must be preconfigured on the node to work. Must match the loaded name of the profile. Must be set if and only if type is “Localhost”.
-
stringspec.controller.sidecarContainers.securityContext.appArmorProfile.type
Required value
type indicates which kind of AppArmor profile will be applied. Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime’s default profile. Unconfined - no AppArmor enforcement.
-
-
objectspec.controller.sidecarContainers.securityContext.capabilitiesThe capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows.
-
array of stringsspec.controller.sidecarContainers.securityContext.capabilities.addAdded capabilities
-
stringspec.controller.sidecarContainers.securityContext.capabilities.add.Element of the arrayCapability represent POSIX capabilities type
-
-
array of stringsspec.controller.sidecarContainers.securityContext.capabilities.dropRemoved capabilities
-
stringspec.controller.sidecarContainers.securityContext.capabilities.drop.Element of the arrayCapability represent POSIX capabilities type
-
-
-
booleanspec.controller.sidecarContainers.securityContext.privilegedRun container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.controller.sidecarContainers.securityContext.procMountprocMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.controller.sidecarContainers.securityContext.readOnlyRootFilesystemWhether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-
integerspec.controller.sidecarContainers.securityContext.runAsGroupThe GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.controller.sidecarContainers.securityContext.runAsNonRootIndicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
integerspec.controller.sidecarContainers.securityContext.runAsUserThe UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
objectspec.controller.sidecarContainers.securityContext.seLinuxOptionsThe SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.controller.sidecarContainers.securityContext.seLinuxOptions.levelLevel is SELinux level label that applies to the container.
-
stringspec.controller.sidecarContainers.securityContext.seLinuxOptions.roleRole is a SELinux role label that applies to the container.
-
stringspec.controller.sidecarContainers.securityContext.seLinuxOptions.typeType is a SELinux type label that applies to the container.
-
stringspec.controller.sidecarContainers.securityContext.seLinuxOptions.userUser is a SELinux user label that applies to the container.
-
-
objectspec.controller.sidecarContainers.securityContext.seccompProfileThe seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.controller.sidecarContainers.securityContext.seccompProfile.localhostProfilelocalhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet’s configured seccomp profile location. Must be set if type is “Localhost”. Must NOT be set for any other type.
-
stringspec.controller.sidecarContainers.securityContext.seccompProfile.type
Required value
type indicates which kind of seccomp profile will be applied. Valid options are:
Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-
objectspec.controller.sidecarContainers.securityContext.windowsOptionsThe Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.
-
stringspec.controller.sidecarContainers.securityContext.windowsOptions.gmsaCredentialSpecGMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
stringspec.controller.sidecarContainers.securityContext.windowsOptions.gmsaCredentialSpecNameGMSACredentialSpecName is the name of the GMSA credential spec to use.
-
booleanspec.controller.sidecarContainers.securityContext.windowsOptions.hostProcessHostProcess determines if a container should be run as a ‘Host Process’ container. All of a Pod’s containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-
stringspec.controller.sidecarContainers.securityContext.windowsOptions.runAsUserNameThe UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-
-
objectspec.controller.sidecarContainers.startupProbeStartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod’s lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.controller.sidecarContainers.startupProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.controller.sidecarContainers.startupProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.controller.sidecarContainers.startupProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.controller.sidecarContainers.startupProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.controller.sidecarContainers.startupProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.controller.sidecarContainers.startupProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.controller.sidecarContainers.startupProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.controller.sidecarContainers.startupProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.controller.sidecarContainers.startupProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.controller.sidecarContainers.startupProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.controller.sidecarContainers.startupProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.controller.sidecarContainers.startupProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.controller.sidecarContainers.startupProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.controller.sidecarContainers.startupProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.controller.sidecarContainers.startupProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.controller.sidecarContainers.startupProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.controller.sidecarContainers.startupProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.controller.sidecarContainers.startupProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.controller.sidecarContainers.startupProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.controller.sidecarContainers.startupProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.controller.sidecarContainers.startupProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.controller.sidecarContainers.startupProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
booleanspec.controller.sidecarContainers.stdinWhether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-
booleanspec.controller.sidecarContainers.stdinOnceWhether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-
stringspec.controller.sidecarContainers.terminationMessagePathOptional: Path at which the file to which the container’s termination message will be written is mounted into the container’s filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-
stringspec.controller.sidecarContainers.terminationMessagePolicyIndicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-
booleanspec.controller.sidecarContainers.ttyWhether this container should allocate a TTY for itself, also requires ‘stdin’ to be true. Default is false.
-
array of objectsspec.controller.sidecarContainers.volumeDevicesvolumeDevices is the list of block devices to be used by the container.
-
stringspec.controller.sidecarContainers.volumeDevices.devicePathdevicePath is the path inside of the container that the device will be mapped to.
-
stringspec.controller.sidecarContainers.volumeDevices.namename must match the name of a persistentVolumeClaim in the pod
-
-
array of objectsspec.controller.sidecarContainers.volumeMountsPod volumes to mount into the container’s filesystem. Cannot be updated.
-
stringspec.controller.sidecarContainers.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.controller.sidecarContainers.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.controller.sidecarContainers.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.controller.sidecarContainers.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.controller.sidecarContainers.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.controller.sidecarContainers.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.controller.sidecarContainers.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
stringspec.controller.sidecarContainers.workingDirContainer’s working directory. If not specified, the container runtime’s default will be used, which might be configured in the container image. Cannot be updated.
-
-
array of objectsspec.controller.volumeMountsVolumeMounts adds volumeMounts to the Argo CD Controller container.
-
stringspec.controller.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.controller.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.controller.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.controller.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.controller.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.controller.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.controller.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
array of objectsspec.controller.volumesVolumes adds volumes to the Argo CD Controller container.
-
objectspec.controller.volumes.awsElasticBlockStoreawsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. Deprecated: AWSElasticBlockStore is deprecated. All operations for the in-tree awsElasticBlockStore type are redirected to the ebs.csi.aws.com CSI driver. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
stringspec.controller.volumes.awsElasticBlockStore.fsTypefsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
integerspec.controller.volumes.awsElasticBlockStore.partitionpartition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as “1”. Similarly, the volume partition for /dev/sda is “0” (or you can leave the property empty).
-
booleanspec.controller.volumes.awsElasticBlockStore.readOnlyreadOnly value true will force the readOnly setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
stringspec.controller.volumes.awsElasticBlockStore.volumeID
Required value
volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
-
objectspec.controller.volumes.azureDiskazureDisk represents an Azure Data Disk mount on the host and bind mount to the pod. Deprecated: AzureDisk is deprecated. All operations for the in-tree azureDisk type are redirected to the disk.csi.azure.com CSI driver.
-
stringspec.controller.volumes.azureDisk.cachingModecachingMode is the Host Caching mode: None, Read Only, Read Write.
-
stringspec.controller.volumes.azureDisk.diskName
Required value
diskName is the Name of the data disk in the blob storage -
stringspec.controller.volumes.azureDisk.diskURI
Required value
diskURI is the URI of data disk in the blob storage -
stringspec.controller.volumes.azureDisk.fsTypefsType is Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
Default:
ext4 -
stringspec.controller.volumes.azureDisk.kindkind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared
-
booleanspec.controller.volumes.azureDisk.readOnlyreadOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
Default:
false
-
-
objectspec.controller.volumes.azureFileazureFile represents an Azure File Service mount on the host and bind mount to the pod. Deprecated: AzureFile is deprecated. All operations for the in-tree azureFile type are redirected to the file.csi.azure.com CSI driver.
-
booleanspec.controller.volumes.azureFile.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
stringspec.controller.volumes.azureFile.secretName
Required value
secretName is the name of secret that contains Azure Storage Account Name and Key -
string
Required value
shareName is the azure share Name
-
-
objectspec.controller.volumes.cephfscephFS represents a Ceph FS mount on the host that shares a pod’s lifetime. Deprecated: CephFS is deprecated and the in-tree cephfs type is no longer supported.
-
array of stringsspec.controller.volumes.cephfs.monitors
Required value
monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it -
stringspec.controller.volumes.cephfs.pathpath is Optional: Used as the mounted root, rather than the full Ceph tree, default is /
-
booleanspec.controller.volumes.cephfs.readOnlyreadOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
stringspec.controller.volumes.cephfs.secretFilesecretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
objectspec.controller.volumes.cephfs.secretRefsecretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
stringspec.controller.volumes.cephfs.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.controller.volumes.cephfs.useruser is optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
-
objectspec.controller.volumes.cindercinder represents a cinder volume attached and mounted on kubelets host machine. Deprecated: Cinder is deprecated. All operations for the in-tree cinder type are redirected to the cinder.csi.openstack.org CSI driver. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
stringspec.controller.volumes.cinder.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
booleanspec.controller.volumes.cinder.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
objectspec.controller.volumes.cinder.secretRefsecretRef is optional: points to a secret object containing parameters used to connect to OpenStack.
-
stringspec.controller.volumes.cinder.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.controller.volumes.cinder.volumeID
Required value
volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
-
objectspec.controller.volumes.configMapconfigMap represents a configMap that should populate this volume
-
integerspec.controller.volumes.configMap.defaultModedefaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.controller.volumes.configMap.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.controller.volumes.configMap.items.keykey is the key to project.
-
integerspec.controller.volumes.configMap.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.controller.volumes.configMap.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.controller.volumes.configMap.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.volumes.configMap.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
objectspec.controller.volumes.csicsi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers.
-
stringspec.controller.volumes.csi.driver
Required value
driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster. -
stringspec.controller.volumes.csi.fsTypefsType to mount. Ex. “ext4”, “xfs”, “ntfs”. If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
-
objectspec.controller.volumes.csi.nodePublishSecretRefnodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.
-
stringspec.controller.volumes.csi.nodePublishSecretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
booleanspec.controller.volumes.csi.readOnlyreadOnly specifies a read-only configuration for the volume. Defaults to false (read/write).
-
objectspec.controller.volumes.csi.volumeAttributesvolumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver’s documentation for supported values.
-
-
objectspec.controller.volumes.downwardAPIdownwardAPI represents downward API about the pod that should populate this volume
-
integerspec.controller.volumes.downwardAPI.defaultModeOptional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.controller.volumes.downwardAPI.itemsItems is a list of downward API volume file
-
objectspec.controller.volumes.downwardAPI.items.fieldRefRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
-
stringspec.controller.volumes.downwardAPI.items.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.controller.volumes.downwardAPI.items.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
integerspec.controller.volumes.downwardAPI.items.modeOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.controller.volumes.downwardAPI.items.pathRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the ‘..’ path. Must be utf-8 encoded. The first item of the relative path must not start with ‘..’
-
objectspec.controller.volumes.downwardAPI.items.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
stringspec.controller.volumes.downwardAPI.items.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.controller.volumes.downwardAPI.items.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.controller.volumes.downwardAPI.items.resourceFieldRef.resource
Required value
Required: resource to select
-
-
-
-
objectspec.controller.volumes.emptyDiremptyDir represents a temporary directory that shares a pod’s lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
stringspec.controller.volumes.emptyDir.mediummedium represents what type of storage medium should back this directory. The default is "" which means to use the node’s default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
integer or stringspec.controller.volumes.emptyDir.sizeLimitsizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-
-
objectspec.controller.volumes.ephemeral
ephemeral represents a volume that is handled by a cluster storage driver. The volume’s lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.
Use this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity tracking are needed, c) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim).
Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod.
Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.
A pod can use both types of ephemeral volumes and persistent volumes at the same time.
-
objectspec.controller.volumes.ephemeral.volumeClaimTemplate
Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be
<pod name>-<volume name>where<volume name>is the name from thePodSpec.Volumesarray entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long).An existing PVC with that name that is not owned by the pod will not be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster.
This field is read-only and no changes will be made by Kubernetes to the PVC after it has been created.
Required, must not be nil.
-
objectspec.controller.volumes.ephemeral.volumeClaimTemplate.metadataMay contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
-
objectspec.controller.volumes.ephemeral.volumeClaimTemplate.spec
Required value
The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.-
array of stringsspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.accessModesaccessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
-
objectspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.dataSource
dataSource field can be used to specify either:
- An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
- An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource.
-
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.kind
Required value
Kind is the type of resource being referenced -
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.name
Required value
Name is the name of resource being referenced
-
objectspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef
dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn’t specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn’t set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef:
- While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.
- While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.
- While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.kind
Required value
Kind is the type of resource being referenced -
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.name
Required value
Name is the name of resource being referenced -
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.namespaceNamespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace’s owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
objectspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.resourcesresources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
-
objectspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
objectspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.selectorselector is a label query over volumes to consider for binding.
-
array of objectsspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.storageClassNamestorageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
-
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.volumeAttributesClassNamevolumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string or nil value indicates that no VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state, this field can be reset to its previous value (including nil) to cancel the modification. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
-
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.volumeModevolumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.
-
stringspec.controller.volumes.ephemeral.volumeClaimTemplate.spec.volumeNamevolumeName is the binding reference to the PersistentVolume backing this claim.
-
-
-
-
objectspec.controller.volumes.fcfc represents a Fibre Channel resource that is attached to a kubelet’s host machine and then exposed to the pod.
-
stringspec.controller.volumes.fc.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
integerspec.controller.volumes.fc.lunlun is Optional: FC target lun number
-
booleanspec.controller.volumes.fc.readOnlyreadOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
array of stringsspec.controller.volumes.fc.targetWWNstargetWWNs is Optional: FC target worldwide names (WWNs)
-
array of stringsspec.controller.volumes.fc.wwidswwids Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
-
-
objectspec.controller.volumes.flexVolumeflexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. Deprecated: FlexVolume is deprecated. Consider using a CSIDriver instead.
-
stringspec.controller.volumes.flexVolume.driver
Required value
driver is the name of the driver to use for this volume. -
stringspec.controller.volumes.flexVolume.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. The default filesystem depends on FlexVolume script.
-
objectspec.controller.volumes.flexVolume.optionsoptions is Optional: this field holds extra command options if any.
-
booleanspec.controller.volumes.flexVolume.readOnlyreadOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.controller.volumes.flexVolume.secretRefsecretRef is Optional: secretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.
-
stringspec.controller.volumes.flexVolume.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
-
objectspec.controller.volumes.flockerflocker represents a Flocker volume attached to a kubelet’s host machine. This depends on the Flocker control service being running. Deprecated: Flocker is deprecated and the in-tree flocker type is no longer supported.
-
stringspec.controller.volumes.flocker.datasetNamedatasetName is Name of the dataset stored as metadata -> name on the dataset for Flocker should be considered as deprecated
-
stringspec.controller.volumes.flocker.datasetUUIDdatasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset
-
-
objectspec.controller.volumes.gcePersistentDiskgcePersistentDisk represents a GCE Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. Deprecated: GCEPersistentDisk is deprecated. All operations for the in-tree gcePersistentDisk type are redirected to the pd.csi.storage.gke.io CSI driver. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
stringspec.controller.volumes.gcePersistentDisk.fsTypefsType is filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
integerspec.controller.volumes.gcePersistentDisk.partitionpartition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as “1”. Similarly, the volume partition for /dev/sda is “0” (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
stringspec.controller.volumes.gcePersistentDisk.pdName
Required value
pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk -
booleanspec.controller.volumes.gcePersistentDisk.readOnlyreadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
-
objectspec.controller.volumes.gitRepogitRepo represents a git repository at a particular revision. Deprecated: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod’s container.
-
stringspec.controller.volumes.gitRepo.directorydirectory is the target directory name. Must not contain or start with ‘..’. If ‘.’ is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.
-
stringspec.controller.volumes.gitRepo.repository
Required value
repository is the URL -
stringspec.controller.volumes.gitRepo.revisionrevision is the commit hash for the specified revision.
-
-
objectspec.controller.volumes.glusterfsglusterfs represents a Glusterfs mount on the host that shares a pod’s lifetime. Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
-
stringspec.controller.volumes.glusterfs.endpoints
Required value
endpoints is the endpoint name that details Glusterfs topology. -
stringspec.controller.volumes.glusterfs.path
Required value
path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod -
booleanspec.controller.volumes.glusterfs.readOnlyreadOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
-
-
objectspec.controller.volumes.hostPathhostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
stringspec.controller.volumes.hostPath.path
Required value
path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath -
stringspec.controller.volumes.hostPath.typetype for HostPath Volume Defaults to "" More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
-
objectspec.controller.volumes.image
image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet’s host machine. The volume is resolved at pod startup depending on which PullPolicy value is provided:
- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.
- Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn’t present.
- IfNotPresent: the kubelet pulls if the reference isn’t already present on disk. Container creation will fail if the reference isn’t present and the pull fails.
The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro) and non-executable files (noexec). Sub path mounts for containers are not supported (spec.containers[].volumeMounts.subpath) before 1.33. The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
-
stringspec.controller.volumes.image.pullPolicyPolicy for pulling OCI objects. Possible values are: Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn’t present. IfNotPresent: the kubelet pulls if the reference isn’t already present on disk. Container creation will fail if the reference isn’t present and the pull fails. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
-
stringspec.controller.volumes.image.referenceRequired: Image or artifact reference to be used. Behaves in the same way as pod.spec.containers[*].image. Pull secrets will be assembled in the same way as for the container image by looking up node credentials, SA image pull secrets, and pod spec image pull secrets. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
objectspec.controller.volumes.iscsiiscsi represents an ISCSI Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes/#iscsi
-
booleanspec.controller.volumes.iscsi.chapAuthDiscoverychapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication
-
booleanspec.controller.volumes.iscsi.chapAuthSessionchapAuthSession defines whether support iSCSI Session CHAP authentication
-
stringspec.controller.volumes.iscsi.fsTypefsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
-
stringspec.controller.volumes.iscsi.initiatorNameinitiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface
: will be created for the connection. -
stringspec.controller.volumes.iscsi.iqn
Required value
iqn is the target iSCSI Qualified Name. -
stringspec.controller.volumes.iscsi.iscsiInterfaceiscsiInterface is the interface Name that uses an iSCSI transport. Defaults to ‘default’ (tcp).
Default:
default -
integerspec.controller.volumes.iscsi.lun
Required value
lun represents iSCSI Target Lun number. -
array of stringsspec.controller.volumes.iscsi.portalsportals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-
booleanspec.controller.volumes.iscsi.readOnlyreadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.
-
objectspec.controller.volumes.iscsi.secretRefsecretRef is the CHAP Secret for iSCSI target and initiator authentication
-
stringspec.controller.volumes.iscsi.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.controller.volumes.iscsi.targetPortal
Required value
targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-
-
stringspec.controller.volumes.namename of the volume. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
objectspec.controller.volumes.nfsnfs represents an NFS mount on the host that shares a pod’s lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
stringspec.controller.volumes.nfs.path
Required value
path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs -
booleanspec.controller.volumes.nfs.readOnlyreadOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
stringspec.controller.volumes.nfs.server
Required value
server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
-
objectspec.controller.volumes.persistentVolumeClaimpersistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
-
stringspec.controller.volumes.persistentVolumeClaim.claimName
Required value
claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims -
booleanspec.controller.volumes.persistentVolumeClaim.readOnlyreadOnly Will force the ReadOnly setting in VolumeMounts. Default false.
-
-
objectspec.controller.volumes.photonPersistentDiskphotonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine. Deprecated: PhotonPersistentDisk is deprecated and the in-tree photonPersistentDisk type is no longer supported.
-
stringspec.controller.volumes.photonPersistentDisk.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
stringspec.controller.volumes.photonPersistentDisk.pdID
Required value
pdID is the ID that identifies Photon Controller persistent disk
-
-
objectspec.controller.volumes.portworxVolumeportworxVolume represents a portworx volume attached and mounted on kubelets host machine. Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate is on.
-
stringspec.controller.volumes.portworxVolume.fsTypefSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”. Implicitly inferred to be “ext4” if unspecified.
-
booleanspec.controller.volumes.portworxVolume.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
stringspec.controller.volumes.portworxVolume.volumeID
Required value
volumeID uniquely identifies a Portworx volume
-
-
objectspec.controller.volumes.projectedprojected items for all in one resources secrets, configmaps, and downward API
-
integerspec.controller.volumes.projected.defaultModedefaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.controller.volumes.projected.sourcessources is the list of volume projections. Each entry in this list handles one source.
-
objectspec.controller.volumes.projected.sources.clusterTrustBundle
ClusterTrustBundle allows a pod to access the
.spec.trustBundlefield of ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.
ClusterTrustBundle objects can either be selected by name, or by the combination of signer name and a label selector.
Kubelet performs aggressive normalization of the PEM contents written into the pod filesystem. Esoteric PEM features such as inter-block comments and block headers are stripped. Certificates are deduplicated. The ordering of certificates within the file is arbitrary, and Kubelet may change the order over time.
-
objectspec.controller.volumes.projected.sources.clusterTrustBundle.labelSelectorSelect all ClusterTrustBundles that match this label selector. Only has effect if signerName is set. Mutually-exclusive with name. If unset, interpreted as “match nothing”. If set but empty, interpreted as “match everything”.
-
array of objectsspec.controller.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.controller.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.controller.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.controller.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.controller.volumes.projected.sources.clusterTrustBundle.labelSelector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.controller.volumes.projected.sources.clusterTrustBundle.nameSelect a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.
-
booleanspec.controller.volumes.projected.sources.clusterTrustBundle.optionalIf true, don’t block pod startup if the referenced ClusterTrustBundle(s) aren’t available. If using name, then the named ClusterTrustBundle is allowed not to exist. If using signerName, then the combination of signerName and labelSelector is allowed to match zero ClusterTrustBundles.
-
stringspec.controller.volumes.projected.sources.clusterTrustBundle.path
Required value
Relative path from the volume root to write the bundle. -
stringspec.controller.volumes.projected.sources.clusterTrustBundle.signerNameSelect all ClusterTrustBundles that match this signer name. Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated.
-
-
objectspec.controller.volumes.projected.sources.configMapconfigMap information about the configMap data to project
-
array of objectsspec.controller.volumes.projected.sources.configMap.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.controller.volumes.projected.sources.configMap.items.keykey is the key to project.
-
integerspec.controller.volumes.projected.sources.configMap.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.controller.volumes.projected.sources.configMap.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.controller.volumes.projected.sources.configMap.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.volumes.projected.sources.configMap.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
objectspec.controller.volumes.projected.sources.downwardAPIdownwardAPI information about the downwardAPI data to project
-
array of objectsspec.controller.volumes.projected.sources.downwardAPI.itemsItems is a list of DownwardAPIVolume file
-
objectspec.controller.volumes.projected.sources.downwardAPI.items.fieldRefRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
-
stringspec.controller.volumes.projected.sources.downwardAPI.items.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.controller.volumes.projected.sources.downwardAPI.items.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
integerspec.controller.volumes.projected.sources.downwardAPI.items.modeOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.controller.volumes.projected.sources.downwardAPI.items.pathRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the ‘..’ path. Must be utf-8 encoded. The first item of the relative path must not start with ‘..’
-
objectspec.controller.volumes.projected.sources.downwardAPI.items.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
stringspec.controller.volumes.projected.sources.downwardAPI.items.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.controller.volumes.projected.sources.downwardAPI.items.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.controller.volumes.projected.sources.downwardAPI.items.resourceFieldRef.resource
Required value
Required: resource to select
-
-
-
-
objectspec.controller.volumes.projected.sources.podCertificate
Projects an auto-rotating credential bundle (private key and certificate chain) that the pod can use either as a TLS client or server.
Kubelet generates a private key and uses it to send a PodCertificateRequest to the named signer. Once the signer approves the request and issues a certificate chain, Kubelet writes the key and certificate chain to the pod filesystem. The pod does not start until certificates have been issued for each podCertificate projected volume source in its spec.
Kubelet will begin trying to rotate the certificate at the time indicated by the signer using the PodCertificateRequest.Status.BeginRefreshAt timestamp.
Kubelet can write a single file, indicated by the credentialBundlePath field, or separate files, indicated by the keyPath and certificateChainPath fields.
The credential bundle is a single file in PEM format. The first PEM entry is the private key (in PKCS#8 format), and the remaining PEM entries are the certificate chain issued by the signer (typically, signers will return their certificate chain in leaf-to-root order).
Prefer using the credential bundle format, since your application code can read it atomically. If you use keyPath and certificateChainPath, your application must make two separate file reads. If these coincide with a certificate rotation, it is possible that the private key and leaf certificate you read may not correspond to each other. Your application will need to check for this condition, and re-read until they are consistent.
The named signer controls chooses the format of the certificate it issues; consult the signer implementation’s documentation to learn how to use the certificates it issues.
-
stringspec.controller.volumes.projected.sources.podCertificate.certificateChainPath
Write the certificate chain at this path in the projected volume.
Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.
-
stringspec.controller.volumes.projected.sources.podCertificate.credentialBundlePath
Write the credential bundle at this path in the projected volume.
The credential bundle is a single file that contains multiple PEM blocks. The first PEM block is a PRIVATE KEY block, containing a PKCS#8 private key.
The remaining blocks are CERTIFICATE blocks, containing the issued certificate chain from the signer (leaf and any intermediates).
Using credentialBundlePath lets your Pod’s application code make a single atomic read that retrieves a consistent key and certificate chain. If you project them to separate files, your application code will need to additionally check that the leaf certificate was issued to the key.
-
stringspec.controller.volumes.projected.sources.podCertificate.keyPath
Write the key at this path in the projected volume.
Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.
-
stringspec.controller.volumes.projected.sources.podCertificate.keyType
Required value
The type of keypair Kubelet will generate for the pod.
Valid values are “RSA3072”, “RSA4096”, “ECDSAP256”, “ECDSAP384”, “ECDSAP521”, and “ED25519”.
-
integerspec.controller.volumes.projected.sources.podCertificate.maxExpirationSeconds
maxExpirationSeconds is the maximum lifetime permitted for the certificate.
Kubelet copies this value verbatim into the PodCertificateRequests it generates for this projection.
If omitted, kube-apiserver will set it to 86400(24 hours). kube-apiserver will reject values shorter than 3600 (1 hour). The maximum allowable value is 7862400 (91 days).
The signer implementation is then free to issue a certificate with any lifetime shorter than MaxExpirationSeconds, but no shorter than 3600 seconds (1 hour). This constraint is enforced by kube-apiserver.
kubernetes.iosigners will never issue certificates with a lifetime longer than 24 hours. -
stringspec.controller.volumes.projected.sources.podCertificate.signerName
Required value
Kubelet’s generated CSRs will be addressed to this signer.
-
-
objectspec.controller.volumes.projected.sources.secretsecret information about the secret data to project
-
array of objectsspec.controller.volumes.projected.sources.secret.itemsitems if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.controller.volumes.projected.sources.secret.items.keykey is the key to project.
-
integerspec.controller.volumes.projected.sources.secret.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.controller.volumes.projected.sources.secret.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.controller.volumes.projected.sources.secret.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.volumes.projected.sources.secret.optionaloptional field specify whether the Secret or its key must be defined
-
-
objectspec.controller.volumes.projected.sources.serviceAccountTokenserviceAccountToken is information about the serviceAccountToken data to project
-
stringspec.controller.volumes.projected.sources.serviceAccountToken.audienceaudience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
-
integerspec.controller.volumes.projected.sources.serviceAccountToken.expirationSecondsexpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
-
stringspec.controller.volumes.projected.sources.serviceAccountToken.path
Required value
path is the path relative to the mount point of the file to project the token into.
-
-
-
-
objectspec.controller.volumes.quobytequobyte represents a Quobyte mount on the host that shares a pod’s lifetime. Deprecated: Quobyte is deprecated and the in-tree quobyte type is no longer supported.
-
stringspec.controller.volumes.quobyte.groupgroup to map volume access to Default is no group
-
booleanspec.controller.volumes.quobyte.readOnlyreadOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.
-
stringspec.controller.volumes.quobyte.registry
Required value
registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes -
stringspec.controller.volumes.quobyte.tenanttenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin
-
stringspec.controller.volumes.quobyte.useruser to map volume access to Defaults to serivceaccount user
-
stringspec.controller.volumes.quobyte.volume
Required value
volume is a string that references an already created Quobyte volume by name.
-
-
objectspec.controller.volumes.scaleIOscaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. Deprecated: ScaleIO is deprecated and the in-tree scaleIO type is no longer supported.
-
stringspec.controller.volumes.scaleIO.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Default is “xfs”.
Default:
xfs -
stringspec.controller.volumes.scaleIO.gateway
Required value
gateway is the host address of the ScaleIO API Gateway. -
stringspec.controller.volumes.scaleIO.protectionDomainprotectionDomain is the name of the ScaleIO Protection Domain for the configured storage.
-
booleanspec.controller.volumes.scaleIO.readOnlyreadOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.controller.volumes.scaleIO.secretRef
Required value
secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail.-
stringspec.controller.volumes.scaleIO.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
booleanspec.controller.volumes.scaleIO.sslEnabledsslEnabled Flag enable/disable SSL communication with Gateway, default false
-
stringspec.controller.volumes.scaleIO.storageModestorageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.
Default:
ThinProvisioned -
stringspec.controller.volumes.scaleIO.storagePoolstoragePool is the ScaleIO Storage Pool associated with the protection domain.
-
stringspec.controller.volumes.scaleIO.system
Required value
system is the name of the storage system as configured in ScaleIO. -
stringspec.controller.volumes.scaleIO.volumeNamevolumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.
-
-
objectspec.controller.volumes.secretsecret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
integerspec.controller.volumes.secret.defaultModedefaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.controller.volumes.secret.itemsitems If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.controller.volumes.secret.items.keykey is the key to project.
-
integerspec.controller.volumes.secret.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.controller.volumes.secret.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
booleanspec.controller.volumes.secret.optionaloptional field specify whether the Secret or its keys must be defined
-
stringspec.controller.volumes.secret.secretNamesecretName is the name of the secret in the pod’s namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
-
objectspec.controller.volumes.storageosstorageOS represents a StorageOS volume attached and mounted on Kubernetes nodes. Deprecated: StorageOS is deprecated and the in-tree storageos type is no longer supported.
-
stringspec.controller.volumes.storageos.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
booleanspec.controller.volumes.storageos.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.controller.volumes.storageos.secretRefsecretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted.
-
stringspec.controller.volumes.storageos.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.controller.volumes.storageos.volumeNamevolumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.
-
stringspec.controller.volumes.storageos.volumeNamespacevolumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod’s namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to “default” if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.
-
-
objectspec.controller.volumes.vsphereVolumevsphereVolume represents a vSphere volume attached and mounted on kubelets host machine. Deprecated: VsphereVolume is deprecated. All operations for the in-tree vsphereVolume type are redirected to the csi.vsphere.vmware.com CSI driver.
-
stringspec.controller.volumes.vsphereVolume.fsTypefsType is filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
stringspec.controller.volumes.vsphereVolume.storagePolicyIDstoragePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.
-
stringspec.controller.volumes.vsphereVolume.storagePolicyNamestoragePolicyName is the storage Policy Based Management (SPBM) profile name.
-
stringspec.controller.volumes.vsphereVolume.volumePath
Required value
volumePath is the path that identifies vSphere volume vmdk
-
-
-
-
booleanspec.defaultClusterScopedRoleDisabledDefaultClusterScopedRoleDisabled will disable creation of default ClusterRoles for a cluster scoped instance.
-
booleanspec.disableAdminDisableAdmin will disable the admin user.
-
objectspec.extraConfig
ExtraConfig can be used to add fields to Argo CD configmap that are not supported by Argo CD CRD.
Note: ExtraConfig takes precedence over Argo CD CRD. For example, A user sets
argocd.Spec.DisableAdmin= true and alsoa.Spec.ExtraConfig["admin.enabled"]= true. In this case, operator updates Argo CD Configmap as follows -> argocd-cm.Data[“admin.enabled”] = true. -
booleanspec.gaAnonymizeUsersGAAnonymizeUsers toggles user IDs being hashed before sending to google analytics.
-
stringspec.gaTrackingIDGATrackingID is the google analytics tracking ID to use.
-
objectspec.haHA options for High Availability support for the Redis component.
-
booleanspec.ha.enabled
Required value
Enabled will toggle HA support globally for Argo CD. -
stringspec.ha.redisProxyImageRedisProxyImage is the Redis HAProxy container image.
-
stringspec.ha.redisProxyVersionRedisProxyVersion is the Redis HAProxy container image tag.
-
objectspec.ha.resourcesResources defines the Compute Resources required by the container for HA.
-
array of objectsspec.ha.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This is an alpha field and requires enabling the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.ha.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
-
objectspec.ha.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.ha.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
-
stringspec.helpChatTextHelpChatText is the text for getting chat help, defaults to “Chat now!”
-
stringspec.helpChatURLHelpChatURL is the URL for getting chat help, this will typically be your Slack channel for support.
-
stringspec.imagePullPolicyImagePullPolicy is the image pull policy for all ArgoCD components. Valid values are Always, IfNotPresent, Never. If not specified, defaults to the operator’s global setting.
Allowed values:
Always,IfNotPresent,Never -
objectspec.imageUpdaterImageUpdater defines whether the Argo CD ImageUpdater controller should be installed.
-
booleanspec.imageUpdater.enabled
Required value
Enabled defines whether argocd image updater controller should be deployed or not -
array of objectsspec.imageUpdater.envEnv let you specify environment variables for ImageUpdater pods
-
stringspec.imageUpdater.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.imageUpdater.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.imageUpdater.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.imageUpdater.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.imageUpdater.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.imageUpdater.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.imageUpdater.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.imageUpdater.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.imageUpdater.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.imageUpdater.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.imageUpdater.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.imageUpdater.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.imageUpdater.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.imageUpdater.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.imageUpdater.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.imageUpdater.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.imageUpdater.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.imageUpdater.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.imageUpdater.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.imageUpdater.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.imageUpdater.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.imageUpdater.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.imageUpdater.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
objectspec.imageUpdater.resourcesResources defines the Compute Resources required by the container for Argo CD Image Updater.
-
array of objectsspec.imageUpdater.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.imageUpdater.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.imageUpdater.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.imageUpdater.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.imageUpdater.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
-
objectspec.importImport is the import/restore options for ArgoCD.
-
stringspec.import.name
Required value
Name of an ArgoCDExport from which to import data. -
stringspec.import.namespaceNamespace for the ArgoCDExport, defaults to the same namespace as the ArgoCD.
-
-
stringspec.initialRepositoriesDeprecated: InitialRepositories to configure Argo CD with upon creation of the cluster.
-
objectspec.initialSSHKnownHostsInitialSSHKnownHosts defines the SSH known hosts data upon creation of the cluster for connecting Git repositories via SSH.
-
booleanspec.initialSSHKnownHosts.excludedefaulthostsExcludeDefaultHosts describes whether you would like to include the default list of SSH Known Hosts provided by ArgoCD.
-
stringspec.initialSSHKnownHosts.keysKeys describes a custom set of SSH Known Hosts that you would like to have included in your ArgoCD server.
-
-
stringspec.installationIDInstallationID uniquely identifies an Argo CD instance in multi-instance clusters.
-
stringspec.kustomizeBuildOptionsKustomizeBuildOptions is used to specify build options/parameters to use with
kustomize build. -
array of objectsspec.kustomizeVersionsKustomizeVersions is a listing of configured versions of Kustomize to be made available within ArgoCD.
-
stringspec.kustomizeVersions.pathPath is the path to a configured kustomize version on the filesystem of your repo server.
-
stringspec.kustomizeVersions.versionVersion is a configured kustomize version in the format of vX.Y.Z
-
-
array of objectsspec.localUsersLocalUsers is a listing of local users to be created by the operator for the purpose of issuing ArgoCD API keys.
-
booleanspec.localUsers.apiKeyApiKey defines whether or not the user is configured to use an ArgoCD API key. Default is true
-
booleanspec.localUsers.autoRenewTokenAutoRenewToken specifies if a new token is to be issued once the existing one has expired. Default is true
-
booleanspec.localUsers.enabledEnabled defines whether or not this local user is enabled. Default is true
-
booleanspec.localUsers.loginLogin defines whether or not the user is configured to be able to login. Default is false
-
stringspec.localUsers.nameName of the local user
-
stringspec.localUsers.tokenLifetimeTokenLifetime defines the how long the token issued to this user is valid for. An empty string or the value 0 indicates an infinite lifetime. Examples: “30m”, “8760h”
-
-
objectspec.monitoringMonitoring defines whether workload status monitoring configuration for this instance.
-
booleanspec.monitoring.disableMetricsDisableMetrics field can be used to enable or disable the collection of Metrics on Openshift
-
booleanspec.monitoring.enabled
Required value
Enabled defines whether workload status monitoring is enabled for this instance or not
-
-
array of objectsspec.namespaceManagementNamespaceManagement defines the list of namespaces that Argo CD is allowed to manage.
-
booleanspec.namespaceManagement.allowManagedByWhether the namespace can be managed by ArgoCD
-
stringspec.namespaceManagement.nameName of the namespace or pattern to be managed
-
-
objectspec.networkPolicyNetworkPolicy controls whether the operator should create NetworkPolicy resources for this Argo CD instance.
-
booleanspec.networkPolicy.enabledEnabled defines whether NetworkPolicy resources are created for this Argo CD instance. When enabled, the operator will reconcile NetworkPolicies for Argo CD components. When disabled, the operator will remove any previously-created NetworkPolicies.
-
-
objectspec.nodePlacementNodePlacement defines NodeSelectors and Taints for Argo CD workloads
-
objectspec.nodePlacement.nodeSelectorNodeSelector is a field of PodSpec, it is a map of key value pairs used for node selection
-
array of objectsspec.nodePlacement.tolerationsTolerations allow the pods to schedule onto nodes with matching taints
-
stringspec.nodePlacement.tolerations.effectEffect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
-
stringspec.nodePlacement.tolerations.keyKey is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.
-
stringspec.nodePlacement.tolerations.operatorOperator represents a key’s relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
-
integerspec.nodePlacement.tolerations.tolerationSecondsTolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.
-
stringspec.nodePlacement.tolerations.valueValue is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.
-
-
-
objectspec.notificationsNotifications defines whether the Argo CD Notifications controller should be installed.
-
booleanspec.notifications.enabled
Required value
Enabled defines whether argocd-notifications controller should be deployed or not -
array of objectsspec.notifications.envEnv let you specify environment variables for Notifications pods
-
stringspec.notifications.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.notifications.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.notifications.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.notifications.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.notifications.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.notifications.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.notifications.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.notifications.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.notifications.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.notifications.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.notifications.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.notifications.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.notifications.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.notifications.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.notifications.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.notifications.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.notifications.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.notifications.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.notifications.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.notifications.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.notifications.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.notifications.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.notifications.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
stringspec.notifications.logLevelLogLevel describes the log level that should be used by the argocd-notifications. Defaults to ArgoCDDefaultLogLevel if not set. Valid options are debug,info, error, and warn.
-
stringspec.notifications.logformatLogFormat refers to the log format used by the argocd-notifications. Defaults to ArgoCDDefaultLogFormat if not configured. Valid options are text or json.
Allowed values:
text,json -
integerspec.notifications.replicasReplicas defines the number of replicas to run for notifications-controller
-
objectspec.notifications.resourcesResources defines the Compute Resources required by the container for Argo CD Notifications.
-
array of objectsspec.notifications.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.notifications.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.notifications.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.notifications.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.notifications.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
array of stringsspec.notifications.sourceNamespacesSourceNamespaces is a list of namespaces from which the notifications controller will watch for ArgoCD Notification resources.
-
-
objectspec.prometheusPrometheus defines the Prometheus server options for ArgoCD.
-
booleanspec.prometheus.enabled
Required value
Enabled will toggle Prometheus support globally for ArgoCD. When set to true, ServiceMonitors and PrometheusRules will be created for Argo CD metrics. The Prometheus CR, Route, and Ingress are deprecated and will no longer be created. -
stringspec.prometheus.hostHost is the hostname to use for Ingress/Route resources. Deprecated: This field is no longer used and will be ignored.
-
objectspec.prometheus.ingressIngress defines the desired state for an Ingress for the Prometheus component. Deprecated: This field is no longer used and will be ignored.
-
objectspec.prometheus.ingress.annotationsAnnotations is the map of annotations to apply to the Ingress.
-
booleanspec.prometheus.ingress.enabled
Required value
Enabled will toggle the creation of the Ingress. -
stringspec.prometheus.ingress.ingressClassNameIngressClassName for the Ingress resource.
-
stringspec.prometheus.ingress.pathPath used for the Ingress resource.
-
array of objectsspec.prometheus.ingress.tlsTLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.
-
array of stringsspec.prometheus.ingress.tls.hostshosts is a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.
-
stringspec.prometheus.ingress.tls.secretNamesecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the “Host” header field used by an IngressRule, the SNI host is used for termination and value of the “Host” header is used for routing.
-
-
-
integerspec.prometheus.sizeSize is the replica count for the Prometheus StatefulSet. Deprecated: This field is no longer used and will be ignored.
-
-
objectspec.rbacRBAC defines the RBAC configuration for Argo CD.
-
stringspec.rbac.defaultPolicyDefaultPolicy is the name of the default role which Argo CD will falls back to, when authorizing API requests (optional). If omitted or empty, users may be still be able to login, but will see no apps, projects, etc…
-
stringspec.rbac.policyPolicy is CSV containing user-defined RBAC policies and role definitions. Policy rules are in the form: p, subject, resource, action, object, effect Role definitions and bindings are in the form: g, subject, inherited-subject See https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/rbac.md for additional information.
-
stringspec.rbac.policyMatcherModePolicyMatcherMode configures the matchers function mode for casbin. There are two options for this, ‘glob’ for glob matcher or ‘regex’ for regex matcher.
-
stringspec.rbac.scopesScopes controls which OIDC scopes to examine during rbac enforcement (in addition to
subscope). If omitted, defaults to: ‘[groups]’.
-
-
objectspec.redisRedis defines the Redis server options for ArgoCD.
-
booleanspec.redis.disableTLSVerificationDisableTLSVerification defines whether redis server API should be accessed using strict TLS validation
-
booleanspec.redis.enabledEnabled is the flag to enable Redis during ArgoCD installation. (optional, default
true) -
stringspec.redis.remoteRemote specifies the remote URL of the Redis container. (optional, by default, a local instance managed by the operator is used.)
-
objectspec.redis.resourcesResources defines the Compute Resources required by the container for Redis.
-
array of objectsspec.redis.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.redis.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.redis.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.redis.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.redis.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
-
objectspec.repoRepo defines the repo server options for Argo CD.
-
objectspec.repo.annotationsCustom annotations to pods deployed by the operator
-
booleanspec.repo.enabledEnabled is the flag to enable Repo Server during ArgoCD installation. (optional, default
true) -
array of objectsspec.repo.envEnv lets you specify environment for repo server pods
-
stringspec.repo.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.repo.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.repo.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.repo.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.repo.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.repo.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.repo.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.repo.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.repo.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.repo.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.repo.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.repo.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.repo.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.repo.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.repo.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.repo.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.repo.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.repo.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.repo.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.repo.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.repo.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
integerspec.repo.execTimeoutExecTimeout specifies the timeout in seconds for tool execution
-
array of stringsspec.repo.extraRepoCommandArgsExtra Command arguments allows users to pass command line arguments to repo server workload. They get added to default command line arguments provided by the operator. Please note that the command line arguments provided as part of ExtraRepoCommandArgs will not overwrite the default command line arguments.
-
array of objectsspec.repo.initContainersInitContainers defines the list of initialization containers for the repo server deployment
-
array of stringsspec.repo.initContainers.argsArguments to the entrypoint. The container image’s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of stringsspec.repo.initContainers.commandEntrypoint array. Not executed within a shell. The container image’s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of objectsspec.repo.initContainers.envList of environment variables to set in the container. Cannot be updated.
-
stringspec.repo.initContainers.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.repo.initContainers.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.repo.initContainers.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.repo.initContainers.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.repo.initContainers.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.repo.initContainers.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.initContainers.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.repo.initContainers.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.repo.initContainers.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.repo.initContainers.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.repo.initContainers.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.repo.initContainers.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.repo.initContainers.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.repo.initContainers.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.repo.initContainers.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.repo.initContainers.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.repo.initContainers.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.repo.initContainers.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.repo.initContainers.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.repo.initContainers.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.repo.initContainers.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.repo.initContainers.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.initContainers.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of objectsspec.repo.initContainers.envFromList of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except ‘=’. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
-
objectspec.repo.initContainers.envFrom.configMapRefThe ConfigMap to select from
-
stringspec.repo.initContainers.envFrom.configMapRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.initContainers.envFrom.configMapRef.optionalSpecify whether the ConfigMap must be defined
-
-
stringspec.repo.initContainers.envFrom.prefixOptional text to prepend to the name of each environment variable. May consist of any printable ASCII characters except ‘=’.
-
objectspec.repo.initContainers.envFrom.secretRefThe Secret to select from
-
stringspec.repo.initContainers.envFrom.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.initContainers.envFrom.secretRef.optionalSpecify whether the Secret must be defined
-
-
-
stringspec.repo.initContainers.imageContainer image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
stringspec.repo.initContainers.imagePullPolicyImage pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-
objectspec.repo.initContainers.lifecycleActions that the management system should take in response to container lifecycle events. Cannot be updated.
-
objectspec.repo.initContainers.lifecycle.postStartPostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.repo.initContainers.lifecycle.postStart.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.initContainers.lifecycle.postStart.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.repo.initContainers.lifecycle.postStart.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.initContainers.lifecycle.postStart.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.initContainers.lifecycle.postStart.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.initContainers.lifecycle.postStart.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.initContainers.lifecycle.postStart.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.initContainers.lifecycle.postStart.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.initContainers.lifecycle.postStart.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.initContainers.lifecycle.postStart.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.repo.initContainers.lifecycle.postStart.sleepSleep represents a duration that the container should sleep.
-
integerspec.repo.initContainers.lifecycle.postStart.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.repo.initContainers.lifecycle.postStart.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.repo.initContainers.lifecycle.postStart.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.initContainers.lifecycle.postStart.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
objectspec.repo.initContainers.lifecycle.preStopPreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod’s termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod’s termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.repo.initContainers.lifecycle.preStop.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.initContainers.lifecycle.preStop.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.repo.initContainers.lifecycle.preStop.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.initContainers.lifecycle.preStop.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.initContainers.lifecycle.preStop.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.initContainers.lifecycle.preStop.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.initContainers.lifecycle.preStop.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.initContainers.lifecycle.preStop.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.initContainers.lifecycle.preStop.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.initContainers.lifecycle.preStop.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.repo.initContainers.lifecycle.preStop.sleepSleep represents a duration that the container should sleep.
-
integerspec.repo.initContainers.lifecycle.preStop.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.repo.initContainers.lifecycle.preStop.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.repo.initContainers.lifecycle.preStop.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.initContainers.lifecycle.preStop.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
stringspec.repo.initContainers.lifecycle.stopSignalStopSignal defines which signal will be sent to a container when it is being stopped. If not specified, the default is defined by the container runtime in use. StopSignal can only be set for Pods with a non-empty .spec.os.name
-
-
objectspec.repo.initContainers.livenessProbePeriodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.repo.initContainers.livenessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.initContainers.livenessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.repo.initContainers.livenessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.repo.initContainers.livenessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.repo.initContainers.livenessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.repo.initContainers.livenessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.repo.initContainers.livenessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.initContainers.livenessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.initContainers.livenessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.initContainers.livenessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.initContainers.livenessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.initContainers.livenessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.initContainers.livenessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.initContainers.livenessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.repo.initContainers.livenessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.repo.initContainers.livenessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.repo.initContainers.livenessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.repo.initContainers.livenessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.repo.initContainers.livenessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.initContainers.livenessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.repo.initContainers.livenessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.repo.initContainers.livenessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
stringspec.repo.initContainers.nameName of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
-
array of objectsspec.repo.initContainers.portsList of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default “0.0.0.0” address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated.
-
integerspec.repo.initContainers.ports.containerPortNumber of port to expose on the pod’s IP address. This must be a valid port number, 0 < x < 65536.
-
stringspec.repo.initContainers.ports.hostIPWhat host IP to bind the external port to.
-
integerspec.repo.initContainers.ports.hostPortNumber of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-
stringspec.repo.initContainers.ports.nameIf specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-
stringspec.repo.initContainers.ports.protocolProtocol for port. Must be UDP, TCP, or SCTP. Defaults to “TCP”.
Default:
TCP
-
-
objectspec.repo.initContainers.readinessProbePeriodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.repo.initContainers.readinessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.initContainers.readinessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.repo.initContainers.readinessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.repo.initContainers.readinessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.repo.initContainers.readinessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.repo.initContainers.readinessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.repo.initContainers.readinessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.initContainers.readinessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.initContainers.readinessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.initContainers.readinessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.initContainers.readinessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.initContainers.readinessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.initContainers.readinessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.initContainers.readinessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.repo.initContainers.readinessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.repo.initContainers.readinessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.repo.initContainers.readinessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.repo.initContainers.readinessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.repo.initContainers.readinessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.initContainers.readinessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.repo.initContainers.readinessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.repo.initContainers.readinessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
array of objectsspec.repo.initContainers.resizePolicyResources resize policy for the container.
-
stringspec.repo.initContainers.resizePolicy.resourceNameName of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-
stringspec.repo.initContainers.resizePolicy.restartPolicyRestart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
-
-
objectspec.repo.initContainers.resourcesCompute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
array of objectsspec.repo.initContainers.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.repo.initContainers.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.repo.initContainers.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.repo.initContainers.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.repo.initContainers.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
stringspec.repo.initContainers.restartPolicyRestartPolicy defines the restart behavior of individual containers in a pod. This overrides the pod-level restart policy. When this field is not specified, the restart behavior is defined by the Pod’s restart policy and the container type. Additionally, setting the RestartPolicy as “Always” for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy “Always” will be shut down. This lifecycle differs from normal init containers and is often referred to as a “sidecar” container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-
array of objectsspec.repo.initContainers.restartPolicyRules
Represents a list of rules to be checked to determine if the container should be restarted on exit. The rules are evaluated in order. Once a rule matches a container exit condition, the remaining rules are ignored. If no rule matches the container exit condition, the Container-level restart policy determines the whether the container is restarted or not. Constraints on the rules:
- At most 20 rules are allowed.
- Rules can have the same action.
- Identical rules are not forbidden in validations. When rules are specified, container MUST set RestartPolicy explicitly even it if matches the Pod’s RestartPolicy.
-
stringspec.repo.initContainers.restartPolicyRules.actionSpecifies the action taken on a container exit if the requirements are satisfied. The only possible value is “Restart” to restart the container.
-
objectspec.repo.initContainers.restartPolicyRules.exitCodesRepresents the exit codes to check on container exits.
-
stringspec.repo.initContainers.restartPolicyRules.exitCodes.operator
Required value
Represents the relationship between the container exit code(s) and the specified values. Possible values are:
- In: the requirement is satisfied if the container exit code is in the set of specified values.
- NotIn: the requirement is satisfied if the container exit code is not in the set of specified values.
-
array of integersspec.repo.initContainers.restartPolicyRules.exitCodes.valuesSpecifies the set of values to check for container exit codes. At most 255 elements are allowed.
-
-
objectspec.repo.initContainers.securityContextSecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
-
booleanspec.repo.initContainers.securityContext.allowPrivilegeEscalation
AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is:
- run as Privileged
- has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-
objectspec.repo.initContainers.securityContext.appArmorProfileappArmorProfile is the AppArmor options to use by this container. If set, this profile overrides the pod’s appArmorProfile. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.initContainers.securityContext.appArmorProfile.localhostProfilelocalhostProfile indicates a profile loaded on the node that should be used. The profile must be preconfigured on the node to work. Must match the loaded name of the profile. Must be set if and only if type is “Localhost”.
-
stringspec.repo.initContainers.securityContext.appArmorProfile.type
Required value
type indicates which kind of AppArmor profile will be applied. Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime’s default profile. Unconfined - no AppArmor enforcement.
-
-
objectspec.repo.initContainers.securityContext.capabilitiesThe capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows.
-
array of stringsspec.repo.initContainers.securityContext.capabilities.addAdded capabilities
-
stringspec.repo.initContainers.securityContext.capabilities.add.Element of the arrayCapability represent POSIX capabilities type
-
-
array of stringsspec.repo.initContainers.securityContext.capabilities.dropRemoved capabilities
-
stringspec.repo.initContainers.securityContext.capabilities.drop.Element of the arrayCapability represent POSIX capabilities type
-
-
-
booleanspec.repo.initContainers.securityContext.privilegedRun container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.initContainers.securityContext.procMountprocMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.repo.initContainers.securityContext.readOnlyRootFilesystemWhether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-
integerspec.repo.initContainers.securityContext.runAsGroupThe GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.repo.initContainers.securityContext.runAsNonRootIndicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
integerspec.repo.initContainers.securityContext.runAsUserThe UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
objectspec.repo.initContainers.securityContext.seLinuxOptionsThe SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.initContainers.securityContext.seLinuxOptions.levelLevel is SELinux level label that applies to the container.
-
stringspec.repo.initContainers.securityContext.seLinuxOptions.roleRole is a SELinux role label that applies to the container.
-
stringspec.repo.initContainers.securityContext.seLinuxOptions.typeType is a SELinux type label that applies to the container.
-
stringspec.repo.initContainers.securityContext.seLinuxOptions.userUser is a SELinux user label that applies to the container.
-
-
objectspec.repo.initContainers.securityContext.seccompProfileThe seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.initContainers.securityContext.seccompProfile.localhostProfilelocalhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet’s configured seccomp profile location. Must be set if type is “Localhost”. Must NOT be set for any other type.
-
stringspec.repo.initContainers.securityContext.seccompProfile.type
Required value
type indicates which kind of seccomp profile will be applied. Valid options are:
Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-
objectspec.repo.initContainers.securityContext.windowsOptionsThe Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.
-
stringspec.repo.initContainers.securityContext.windowsOptions.gmsaCredentialSpecGMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
stringspec.repo.initContainers.securityContext.windowsOptions.gmsaCredentialSpecNameGMSACredentialSpecName is the name of the GMSA credential spec to use.
-
booleanspec.repo.initContainers.securityContext.windowsOptions.hostProcessHostProcess determines if a container should be run as a ‘Host Process’ container. All of a Pod’s containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-
stringspec.repo.initContainers.securityContext.windowsOptions.runAsUserNameThe UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-
-
objectspec.repo.initContainers.startupProbeStartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod’s lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.repo.initContainers.startupProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.initContainers.startupProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.repo.initContainers.startupProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.repo.initContainers.startupProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.repo.initContainers.startupProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.repo.initContainers.startupProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.repo.initContainers.startupProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.initContainers.startupProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.initContainers.startupProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.initContainers.startupProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.initContainers.startupProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.initContainers.startupProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.initContainers.startupProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.initContainers.startupProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.repo.initContainers.startupProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.repo.initContainers.startupProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.repo.initContainers.startupProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.repo.initContainers.startupProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.repo.initContainers.startupProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.initContainers.startupProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.repo.initContainers.startupProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.repo.initContainers.startupProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
booleanspec.repo.initContainers.stdinWhether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-
booleanspec.repo.initContainers.stdinOnceWhether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-
stringspec.repo.initContainers.terminationMessagePathOptional: Path at which the file to which the container’s termination message will be written is mounted into the container’s filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-
stringspec.repo.initContainers.terminationMessagePolicyIndicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-
booleanspec.repo.initContainers.ttyWhether this container should allocate a TTY for itself, also requires ‘stdin’ to be true. Default is false.
-
array of objectsspec.repo.initContainers.volumeDevicesvolumeDevices is the list of block devices to be used by the container.
-
stringspec.repo.initContainers.volumeDevices.devicePathdevicePath is the path inside of the container that the device will be mapped to.
-
stringspec.repo.initContainers.volumeDevices.namename must match the name of a persistentVolumeClaim in the pod
-
-
array of objectsspec.repo.initContainers.volumeMountsPod volumes to mount into the container’s filesystem. Cannot be updated.
-
stringspec.repo.initContainers.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.repo.initContainers.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.repo.initContainers.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.repo.initContainers.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.repo.initContainers.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.repo.initContainers.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.repo.initContainers.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
stringspec.repo.initContainers.workingDirContainer’s working directory. If not specified, the container runtime’s default will be used, which might be configured in the container image. Cannot be updated.
-
-
objectspec.repo.labelsCustom labels to pods deployed by the operator
-
stringspec.repo.logFormatLogFormat describes the log format that should be used by the Repo Server. Defaults to ArgoCDDefaultLogFormat if not configured. Valid options are text or json.
-
stringspec.repo.logLevelLogLevel describes the log level that should be used by the Repo Server. Defaults to ArgoCDDefaultLogLevel if not set. Valid options are debug, info, error, and warn.
-
booleanspec.repo.mountsatokenMountSAToken describes whether you would like to have the Repo server mount the service account token
-
stringspec.repo.remoteRemote specifies the remote URL of the Repo Server container. (optional, by default, a local instance managed by the operator is used.)
-
integerspec.repo.replicasReplicas defines the number of replicas for argocd-repo-server. Value should be greater than or equal to 0. Default is nil.
-
objectspec.repo.resourcesResources defines the Compute Resources required by the container for Redis.
-
array of objectsspec.repo.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.repo.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.repo.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.repo.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.repo.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
stringspec.repo.serviceaccountServiceAccount defines the ServiceAccount user that you would like the Repo server to use
-
array of objectsspec.repo.sidecarContainersSidecarContainers defines the list of sidecar containers for the repo server deployment. If the image field is omitted from a SidecarContainer, the image for the repo server will be used.
-
array of stringsspec.repo.sidecarContainers.argsArguments to the entrypoint. The container image’s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of stringsspec.repo.sidecarContainers.commandEntrypoint array. Not executed within a shell. The container image’s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of objectsspec.repo.sidecarContainers.envList of environment variables to set in the container. Cannot be updated.
-
stringspec.repo.sidecarContainers.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.repo.sidecarContainers.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.repo.sidecarContainers.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.repo.sidecarContainers.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.repo.sidecarContainers.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.repo.sidecarContainers.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.sidecarContainers.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.repo.sidecarContainers.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.repo.sidecarContainers.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.repo.sidecarContainers.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.repo.sidecarContainers.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.repo.sidecarContainers.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.repo.sidecarContainers.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.repo.sidecarContainers.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.repo.sidecarContainers.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.repo.sidecarContainers.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.repo.sidecarContainers.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.repo.sidecarContainers.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.repo.sidecarContainers.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.repo.sidecarContainers.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.repo.sidecarContainers.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.repo.sidecarContainers.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.sidecarContainers.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of objectsspec.repo.sidecarContainers.envFromList of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except ‘=’. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
-
objectspec.repo.sidecarContainers.envFrom.configMapRefThe ConfigMap to select from
-
stringspec.repo.sidecarContainers.envFrom.configMapRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.sidecarContainers.envFrom.configMapRef.optionalSpecify whether the ConfigMap must be defined
-
-
stringspec.repo.sidecarContainers.envFrom.prefixOptional text to prepend to the name of each environment variable. May consist of any printable ASCII characters except ‘=’.
-
objectspec.repo.sidecarContainers.envFrom.secretRefThe Secret to select from
-
stringspec.repo.sidecarContainers.envFrom.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.sidecarContainers.envFrom.secretRef.optionalSpecify whether the Secret must be defined
-
-
-
stringspec.repo.sidecarContainers.imageContainer image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
stringspec.repo.sidecarContainers.imagePullPolicyImage pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-
objectspec.repo.sidecarContainers.lifecycleActions that the management system should take in response to container lifecycle events. Cannot be updated.
-
objectspec.repo.sidecarContainers.lifecycle.postStartPostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.repo.sidecarContainers.lifecycle.postStart.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.sidecarContainers.lifecycle.postStart.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.repo.sidecarContainers.lifecycle.postStart.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.sidecarContainers.lifecycle.postStart.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.sidecarContainers.lifecycle.postStart.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.sidecarContainers.lifecycle.postStart.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.sidecarContainers.lifecycle.postStart.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.sidecarContainers.lifecycle.postStart.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.sidecarContainers.lifecycle.postStart.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.sidecarContainers.lifecycle.postStart.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.repo.sidecarContainers.lifecycle.postStart.sleepSleep represents a duration that the container should sleep.
-
integerspec.repo.sidecarContainers.lifecycle.postStart.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.repo.sidecarContainers.lifecycle.postStart.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.repo.sidecarContainers.lifecycle.postStart.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.sidecarContainers.lifecycle.postStart.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
objectspec.repo.sidecarContainers.lifecycle.preStopPreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod’s termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod’s termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.repo.sidecarContainers.lifecycle.preStop.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.sidecarContainers.lifecycle.preStop.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.repo.sidecarContainers.lifecycle.preStop.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.sidecarContainers.lifecycle.preStop.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.sidecarContainers.lifecycle.preStop.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.sidecarContainers.lifecycle.preStop.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.sidecarContainers.lifecycle.preStop.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.sidecarContainers.lifecycle.preStop.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.sidecarContainers.lifecycle.preStop.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.sidecarContainers.lifecycle.preStop.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.repo.sidecarContainers.lifecycle.preStop.sleepSleep represents a duration that the container should sleep.
-
integerspec.repo.sidecarContainers.lifecycle.preStop.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.repo.sidecarContainers.lifecycle.preStop.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.repo.sidecarContainers.lifecycle.preStop.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.sidecarContainers.lifecycle.preStop.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
stringspec.repo.sidecarContainers.lifecycle.stopSignalStopSignal defines which signal will be sent to a container when it is being stopped. If not specified, the default is defined by the container runtime in use. StopSignal can only be set for Pods with a non-empty .spec.os.name
-
-
objectspec.repo.sidecarContainers.livenessProbePeriodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.repo.sidecarContainers.livenessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.sidecarContainers.livenessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.repo.sidecarContainers.livenessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.repo.sidecarContainers.livenessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.repo.sidecarContainers.livenessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.repo.sidecarContainers.livenessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.repo.sidecarContainers.livenessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.sidecarContainers.livenessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.sidecarContainers.livenessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.sidecarContainers.livenessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.sidecarContainers.livenessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.sidecarContainers.livenessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.sidecarContainers.livenessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.sidecarContainers.livenessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.repo.sidecarContainers.livenessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.repo.sidecarContainers.livenessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.repo.sidecarContainers.livenessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.repo.sidecarContainers.livenessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.repo.sidecarContainers.livenessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.sidecarContainers.livenessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.repo.sidecarContainers.livenessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.repo.sidecarContainers.livenessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
stringspec.repo.sidecarContainers.nameName of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
-
array of objectsspec.repo.sidecarContainers.portsList of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default “0.0.0.0” address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated.
-
integerspec.repo.sidecarContainers.ports.containerPortNumber of port to expose on the pod’s IP address. This must be a valid port number, 0 < x < 65536.
-
stringspec.repo.sidecarContainers.ports.hostIPWhat host IP to bind the external port to.
-
integerspec.repo.sidecarContainers.ports.hostPortNumber of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-
stringspec.repo.sidecarContainers.ports.nameIf specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-
stringspec.repo.sidecarContainers.ports.protocolProtocol for port. Must be UDP, TCP, or SCTP. Defaults to “TCP”.
Default:
TCP
-
-
objectspec.repo.sidecarContainers.readinessProbePeriodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.repo.sidecarContainers.readinessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.sidecarContainers.readinessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.repo.sidecarContainers.readinessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.repo.sidecarContainers.readinessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.repo.sidecarContainers.readinessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.repo.sidecarContainers.readinessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.repo.sidecarContainers.readinessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.sidecarContainers.readinessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.sidecarContainers.readinessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.sidecarContainers.readinessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.sidecarContainers.readinessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.sidecarContainers.readinessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.sidecarContainers.readinessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.sidecarContainers.readinessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.repo.sidecarContainers.readinessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.repo.sidecarContainers.readinessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.repo.sidecarContainers.readinessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.repo.sidecarContainers.readinessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.repo.sidecarContainers.readinessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.sidecarContainers.readinessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.repo.sidecarContainers.readinessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.repo.sidecarContainers.readinessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
array of objectsspec.repo.sidecarContainers.resizePolicyResources resize policy for the container.
-
stringspec.repo.sidecarContainers.resizePolicy.resourceNameName of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-
stringspec.repo.sidecarContainers.resizePolicy.restartPolicyRestart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
-
-
objectspec.repo.sidecarContainers.resourcesCompute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
array of objectsspec.repo.sidecarContainers.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.repo.sidecarContainers.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.repo.sidecarContainers.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.repo.sidecarContainers.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.repo.sidecarContainers.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
stringspec.repo.sidecarContainers.restartPolicyRestartPolicy defines the restart behavior of individual containers in a pod. This overrides the pod-level restart policy. When this field is not specified, the restart behavior is defined by the Pod’s restart policy and the container type. Additionally, setting the RestartPolicy as “Always” for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy “Always” will be shut down. This lifecycle differs from normal init containers and is often referred to as a “sidecar” container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-
array of objectsspec.repo.sidecarContainers.restartPolicyRules
Represents a list of rules to be checked to determine if the container should be restarted on exit. The rules are evaluated in order. Once a rule matches a container exit condition, the remaining rules are ignored. If no rule matches the container exit condition, the Container-level restart policy determines the whether the container is restarted or not. Constraints on the rules:
- At most 20 rules are allowed.
- Rules can have the same action.
- Identical rules are not forbidden in validations. When rules are specified, container MUST set RestartPolicy explicitly even it if matches the Pod’s RestartPolicy.
-
stringspec.repo.sidecarContainers.restartPolicyRules.actionSpecifies the action taken on a container exit if the requirements are satisfied. The only possible value is “Restart” to restart the container.
-
objectspec.repo.sidecarContainers.restartPolicyRules.exitCodesRepresents the exit codes to check on container exits.
-
stringspec.repo.sidecarContainers.restartPolicyRules.exitCodes.operator
Required value
Represents the relationship between the container exit code(s) and the specified values. Possible values are:
- In: the requirement is satisfied if the container exit code is in the set of specified values.
- NotIn: the requirement is satisfied if the container exit code is not in the set of specified values.
-
array of integersspec.repo.sidecarContainers.restartPolicyRules.exitCodes.valuesSpecifies the set of values to check for container exit codes. At most 255 elements are allowed.
-
-
objectspec.repo.sidecarContainers.securityContextSecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
-
booleanspec.repo.sidecarContainers.securityContext.allowPrivilegeEscalation
AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is:
- run as Privileged
- has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-
objectspec.repo.sidecarContainers.securityContext.appArmorProfileappArmorProfile is the AppArmor options to use by this container. If set, this profile overrides the pod’s appArmorProfile. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.sidecarContainers.securityContext.appArmorProfile.localhostProfilelocalhostProfile indicates a profile loaded on the node that should be used. The profile must be preconfigured on the node to work. Must match the loaded name of the profile. Must be set if and only if type is “Localhost”.
-
stringspec.repo.sidecarContainers.securityContext.appArmorProfile.type
Required value
type indicates which kind of AppArmor profile will be applied. Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime’s default profile. Unconfined - no AppArmor enforcement.
-
-
objectspec.repo.sidecarContainers.securityContext.capabilitiesThe capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows.
-
array of stringsspec.repo.sidecarContainers.securityContext.capabilities.addAdded capabilities
-
stringspec.repo.sidecarContainers.securityContext.capabilities.add.Element of the arrayCapability represent POSIX capabilities type
-
-
array of stringsspec.repo.sidecarContainers.securityContext.capabilities.dropRemoved capabilities
-
stringspec.repo.sidecarContainers.securityContext.capabilities.drop.Element of the arrayCapability represent POSIX capabilities type
-
-
-
booleanspec.repo.sidecarContainers.securityContext.privilegedRun container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.sidecarContainers.securityContext.procMountprocMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.repo.sidecarContainers.securityContext.readOnlyRootFilesystemWhether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-
integerspec.repo.sidecarContainers.securityContext.runAsGroupThe GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.repo.sidecarContainers.securityContext.runAsNonRootIndicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
integerspec.repo.sidecarContainers.securityContext.runAsUserThe UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
objectspec.repo.sidecarContainers.securityContext.seLinuxOptionsThe SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.sidecarContainers.securityContext.seLinuxOptions.levelLevel is SELinux level label that applies to the container.
-
stringspec.repo.sidecarContainers.securityContext.seLinuxOptions.roleRole is a SELinux role label that applies to the container.
-
stringspec.repo.sidecarContainers.securityContext.seLinuxOptions.typeType is a SELinux type label that applies to the container.
-
stringspec.repo.sidecarContainers.securityContext.seLinuxOptions.userUser is a SELinux user label that applies to the container.
-
-
objectspec.repo.sidecarContainers.securityContext.seccompProfileThe seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.sidecarContainers.securityContext.seccompProfile.localhostProfilelocalhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet’s configured seccomp profile location. Must be set if type is “Localhost”. Must NOT be set for any other type.
-
stringspec.repo.sidecarContainers.securityContext.seccompProfile.type
Required value
type indicates which kind of seccomp profile will be applied. Valid options are:
Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-
objectspec.repo.sidecarContainers.securityContext.windowsOptionsThe Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.
-
stringspec.repo.sidecarContainers.securityContext.windowsOptions.gmsaCredentialSpecGMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
stringspec.repo.sidecarContainers.securityContext.windowsOptions.gmsaCredentialSpecNameGMSACredentialSpecName is the name of the GMSA credential spec to use.
-
booleanspec.repo.sidecarContainers.securityContext.windowsOptions.hostProcessHostProcess determines if a container should be run as a ‘Host Process’ container. All of a Pod’s containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-
stringspec.repo.sidecarContainers.securityContext.windowsOptions.runAsUserNameThe UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-
-
objectspec.repo.sidecarContainers.startupProbeStartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod’s lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.repo.sidecarContainers.startupProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.sidecarContainers.startupProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.repo.sidecarContainers.startupProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.repo.sidecarContainers.startupProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.repo.sidecarContainers.startupProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.repo.sidecarContainers.startupProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.repo.sidecarContainers.startupProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.sidecarContainers.startupProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.sidecarContainers.startupProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.sidecarContainers.startupProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.sidecarContainers.startupProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.sidecarContainers.startupProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.sidecarContainers.startupProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.sidecarContainers.startupProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.repo.sidecarContainers.startupProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.repo.sidecarContainers.startupProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.repo.sidecarContainers.startupProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.repo.sidecarContainers.startupProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.repo.sidecarContainers.startupProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.sidecarContainers.startupProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.repo.sidecarContainers.startupProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.repo.sidecarContainers.startupProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
booleanspec.repo.sidecarContainers.stdinWhether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-
booleanspec.repo.sidecarContainers.stdinOnceWhether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-
stringspec.repo.sidecarContainers.terminationMessagePathOptional: Path at which the file to which the container’s termination message will be written is mounted into the container’s filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-
stringspec.repo.sidecarContainers.terminationMessagePolicyIndicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-
booleanspec.repo.sidecarContainers.ttyWhether this container should allocate a TTY for itself, also requires ‘stdin’ to be true. Default is false.
-
array of objectsspec.repo.sidecarContainers.volumeDevicesvolumeDevices is the list of block devices to be used by the container.
-
stringspec.repo.sidecarContainers.volumeDevices.devicePathdevicePath is the path inside of the container that the device will be mapped to.
-
stringspec.repo.sidecarContainers.volumeDevices.namename must match the name of a persistentVolumeClaim in the pod
-
-
array of objectsspec.repo.sidecarContainers.volumeMountsPod volumes to mount into the container’s filesystem. Cannot be updated.
-
stringspec.repo.sidecarContainers.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.repo.sidecarContainers.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.repo.sidecarContainers.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.repo.sidecarContainers.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.repo.sidecarContainers.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.repo.sidecarContainers.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.repo.sidecarContainers.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
stringspec.repo.sidecarContainers.workingDirContainer’s working directory. If not specified, the container runtime’s default will be used, which might be configured in the container image. Cannot be updated.
-
-
objectspec.repo.systemCATrustCustom certificates to inject into the repo server container and its plugins to trust source hosting sites
-
array of objectsspec.repo.systemCATrust.clusterTrustBundlesClusterTrustBundles is a list of projected ClusterTrustBundle volume definitions from where to take the trust certs.
-
objectspec.repo.systemCATrust.clusterTrustBundles.labelSelectorSelect all ClusterTrustBundles that match this label selector. Only has effect if signerName is set. Mutually-exclusive with name. If unset, interpreted as “match nothing”. If set but empty, interpreted as “match everything”.
-
array of objectsspec.repo.systemCATrust.clusterTrustBundles.labelSelector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.repo.systemCATrust.clusterTrustBundles.labelSelector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.repo.systemCATrust.clusterTrustBundles.labelSelector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.repo.systemCATrust.clusterTrustBundles.labelSelector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.repo.systemCATrust.clusterTrustBundles.labelSelector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.repo.systemCATrust.clusterTrustBundles.nameSelect a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.
-
booleanspec.repo.systemCATrust.clusterTrustBundles.optionalIf true, don’t block pod startup if the referenced ClusterTrustBundle(s) aren’t available. If using name, then the named ClusterTrustBundle is allowed not to exist. If using signerName, then the combination of signerName and labelSelector is allowed to match zero ClusterTrustBundles.
-
stringspec.repo.systemCATrust.clusterTrustBundles.pathRelative path from the volume root to write the bundle.
-
stringspec.repo.systemCATrust.clusterTrustBundles.signerNameSelect all ClusterTrustBundles that match this signer name. Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated.
-
-
array of objectsspec.repo.systemCATrust.configMapsConfigMaps is a list of projected ConfigMap volume definitions from where to take the trust certs.
-
array of objectsspec.repo.systemCATrust.configMaps.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.repo.systemCATrust.configMaps.items.keykey is the key to project.
-
integerspec.repo.systemCATrust.configMaps.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.systemCATrust.configMaps.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.repo.systemCATrust.configMaps.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.systemCATrust.configMaps.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
booleanspec.repo.systemCATrust.dropImageCertificatesDropImageCertificates will remove all certs that are present in the image, leaving only those explicitly configured here.
-
array of objectsspec.repo.systemCATrust.secretsSecrets is a list of projected Secret volume definitions from where to take the trust certs.
-
array of objectsspec.repo.systemCATrust.secrets.itemsitems if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.repo.systemCATrust.secrets.items.keykey is the key to project.
-
integerspec.repo.systemCATrust.secrets.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.systemCATrust.secrets.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.repo.systemCATrust.secrets.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.systemCATrust.secrets.optionaloptional field specify whether the Secret or its key must be defined
-
-
-
booleanspec.repo.verifytlsVerifyTLS defines whether repo server API should be accessed using strict TLS validation
-
array of objectsspec.repo.volumeMountsVolumeMounts adds volumeMounts to the repo server container
-
stringspec.repo.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.repo.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.repo.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.repo.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.repo.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.repo.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.repo.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
array of objectsspec.repo.volumesVolumes adds volumes to the repo server deployment
-
objectspec.repo.volumes.awsElasticBlockStoreawsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. Deprecated: AWSElasticBlockStore is deprecated. All operations for the in-tree awsElasticBlockStore type are redirected to the ebs.csi.aws.com CSI driver. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
stringspec.repo.volumes.awsElasticBlockStore.fsTypefsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
integerspec.repo.volumes.awsElasticBlockStore.partitionpartition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as “1”. Similarly, the volume partition for /dev/sda is “0” (or you can leave the property empty).
-
booleanspec.repo.volumes.awsElasticBlockStore.readOnlyreadOnly value true will force the readOnly setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
stringspec.repo.volumes.awsElasticBlockStore.volumeID
Required value
volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
-
objectspec.repo.volumes.azureDiskazureDisk represents an Azure Data Disk mount on the host and bind mount to the pod. Deprecated: AzureDisk is deprecated. All operations for the in-tree azureDisk type are redirected to the disk.csi.azure.com CSI driver.
-
stringspec.repo.volumes.azureDisk.cachingModecachingMode is the Host Caching mode: None, Read Only, Read Write.
-
stringspec.repo.volumes.azureDisk.diskName
Required value
diskName is the Name of the data disk in the blob storage -
stringspec.repo.volumes.azureDisk.diskURI
Required value
diskURI is the URI of data disk in the blob storage -
stringspec.repo.volumes.azureDisk.fsTypefsType is Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
Default:
ext4 -
stringspec.repo.volumes.azureDisk.kindkind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared
-
booleanspec.repo.volumes.azureDisk.readOnlyreadOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
Default:
false
-
-
objectspec.repo.volumes.azureFileazureFile represents an Azure File Service mount on the host and bind mount to the pod. Deprecated: AzureFile is deprecated. All operations for the in-tree azureFile type are redirected to the file.csi.azure.com CSI driver.
-
booleanspec.repo.volumes.azureFile.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
stringspec.repo.volumes.azureFile.secretName
Required value
secretName is the name of secret that contains Azure Storage Account Name and Key -
string
Required value
shareName is the azure share Name
-
-
objectspec.repo.volumes.cephfscephFS represents a Ceph FS mount on the host that shares a pod’s lifetime. Deprecated: CephFS is deprecated and the in-tree cephfs type is no longer supported.
-
array of stringsspec.repo.volumes.cephfs.monitors
Required value
monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it -
stringspec.repo.volumes.cephfs.pathpath is Optional: Used as the mounted root, rather than the full Ceph tree, default is /
-
booleanspec.repo.volumes.cephfs.readOnlyreadOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
stringspec.repo.volumes.cephfs.secretFilesecretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
objectspec.repo.volumes.cephfs.secretRefsecretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
stringspec.repo.volumes.cephfs.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.repo.volumes.cephfs.useruser is optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
-
objectspec.repo.volumes.cindercinder represents a cinder volume attached and mounted on kubelets host machine. Deprecated: Cinder is deprecated. All operations for the in-tree cinder type are redirected to the cinder.csi.openstack.org CSI driver. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
stringspec.repo.volumes.cinder.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
booleanspec.repo.volumes.cinder.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
objectspec.repo.volumes.cinder.secretRefsecretRef is optional: points to a secret object containing parameters used to connect to OpenStack.
-
stringspec.repo.volumes.cinder.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.repo.volumes.cinder.volumeID
Required value
volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
-
objectspec.repo.volumes.configMapconfigMap represents a configMap that should populate this volume
-
integerspec.repo.volumes.configMap.defaultModedefaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.repo.volumes.configMap.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.repo.volumes.configMap.items.keykey is the key to project.
-
integerspec.repo.volumes.configMap.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.volumes.configMap.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.repo.volumes.configMap.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.volumes.configMap.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
objectspec.repo.volumes.csicsi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers.
-
stringspec.repo.volumes.csi.driver
Required value
driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster. -
stringspec.repo.volumes.csi.fsTypefsType to mount. Ex. “ext4”, “xfs”, “ntfs”. If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
-
objectspec.repo.volumes.csi.nodePublishSecretRefnodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.
-
stringspec.repo.volumes.csi.nodePublishSecretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
booleanspec.repo.volumes.csi.readOnlyreadOnly specifies a read-only configuration for the volume. Defaults to false (read/write).
-
objectspec.repo.volumes.csi.volumeAttributesvolumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver’s documentation for supported values.
-
-
objectspec.repo.volumes.downwardAPIdownwardAPI represents downward API about the pod that should populate this volume
-
integerspec.repo.volumes.downwardAPI.defaultModeOptional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.repo.volumes.downwardAPI.itemsItems is a list of downward API volume file
-
objectspec.repo.volumes.downwardAPI.items.fieldRefRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
-
stringspec.repo.volumes.downwardAPI.items.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.repo.volumes.downwardAPI.items.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
integerspec.repo.volumes.downwardAPI.items.modeOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.volumes.downwardAPI.items.pathRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the ‘..’ path. Must be utf-8 encoded. The first item of the relative path must not start with ‘..’
-
objectspec.repo.volumes.downwardAPI.items.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
stringspec.repo.volumes.downwardAPI.items.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.repo.volumes.downwardAPI.items.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.repo.volumes.downwardAPI.items.resourceFieldRef.resource
Required value
Required: resource to select
-
-
-
-
objectspec.repo.volumes.emptyDiremptyDir represents a temporary directory that shares a pod’s lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
stringspec.repo.volumes.emptyDir.mediummedium represents what type of storage medium should back this directory. The default is "" which means to use the node’s default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
integer or stringspec.repo.volumes.emptyDir.sizeLimitsizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-
-
objectspec.repo.volumes.ephemeral
ephemeral represents a volume that is handled by a cluster storage driver. The volume’s lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.
Use this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity tracking are needed, c) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim).
Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod.
Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.
A pod can use both types of ephemeral volumes and persistent volumes at the same time.
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate
Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be
<pod name>-<volume name>where<volume name>is the name from thePodSpec.Volumesarray entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long).An existing PVC with that name that is not owned by the pod will not be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster.
This field is read-only and no changes will be made by Kubernetes to the PVC after it has been created.
Required, must not be nil.
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.metadataMay contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec
Required value
The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.-
array of stringsspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.accessModesaccessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSource
dataSource field can be used to specify either:
- An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
- An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.kind
Required value
Kind is the type of resource being referenced -
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.name
Required value
Name is the name of resource being referenced
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef
dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn’t specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn’t set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef:
- While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.
- While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.
- While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.kind
Required value
Kind is the type of resource being referenced -
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.name
Required value
Name is the name of resource being referenced -
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.namespaceNamespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace’s owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.resourcesresources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.selectorselector is a label query over volumes to consider for binding.
-
array of objectsspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.storageClassNamestorageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.volumeAttributesClassNamevolumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string or nil value indicates that no VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state, this field can be reset to its previous value (including nil) to cancel the modification. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.volumeModevolumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.volumeNamevolumeName is the binding reference to the PersistentVolume backing this claim.
-
-
-
-
objectspec.repo.volumes.fcfc represents a Fibre Channel resource that is attached to a kubelet’s host machine and then exposed to the pod.
-
stringspec.repo.volumes.fc.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
integerspec.repo.volumes.fc.lunlun is Optional: FC target lun number
-
booleanspec.repo.volumes.fc.readOnlyreadOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
array of stringsspec.repo.volumes.fc.targetWWNstargetWWNs is Optional: FC target worldwide names (WWNs)
-
array of stringsspec.repo.volumes.fc.wwidswwids Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
-
-
objectspec.repo.volumes.flexVolumeflexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. Deprecated: FlexVolume is deprecated. Consider using a CSIDriver instead.
-
stringspec.repo.volumes.flexVolume.driver
Required value
driver is the name of the driver to use for this volume. -
stringspec.repo.volumes.flexVolume.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. The default filesystem depends on FlexVolume script.
-
objectspec.repo.volumes.flexVolume.optionsoptions is Optional: this field holds extra command options if any.
-
booleanspec.repo.volumes.flexVolume.readOnlyreadOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.repo.volumes.flexVolume.secretRefsecretRef is Optional: secretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.
-
stringspec.repo.volumes.flexVolume.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
-
objectspec.repo.volumes.flockerflocker represents a Flocker volume attached to a kubelet’s host machine. This depends on the Flocker control service being running. Deprecated: Flocker is deprecated and the in-tree flocker type is no longer supported.
-
stringspec.repo.volumes.flocker.datasetNamedatasetName is Name of the dataset stored as metadata -> name on the dataset for Flocker should be considered as deprecated
-
stringspec.repo.volumes.flocker.datasetUUIDdatasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset
-
-
objectspec.repo.volumes.gcePersistentDiskgcePersistentDisk represents a GCE Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. Deprecated: GCEPersistentDisk is deprecated. All operations for the in-tree gcePersistentDisk type are redirected to the pd.csi.storage.gke.io CSI driver. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
stringspec.repo.volumes.gcePersistentDisk.fsTypefsType is filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
integerspec.repo.volumes.gcePersistentDisk.partitionpartition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as “1”. Similarly, the volume partition for /dev/sda is “0” (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
stringspec.repo.volumes.gcePersistentDisk.pdName
Required value
pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk -
booleanspec.repo.volumes.gcePersistentDisk.readOnlyreadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
-
objectspec.repo.volumes.gitRepogitRepo represents a git repository at a particular revision. Deprecated: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod’s container.
-
stringspec.repo.volumes.gitRepo.directorydirectory is the target directory name. Must not contain or start with ‘..’. If ‘.’ is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.
-
stringspec.repo.volumes.gitRepo.repository
Required value
repository is the URL -
stringspec.repo.volumes.gitRepo.revisionrevision is the commit hash for the specified revision.
-
-
objectspec.repo.volumes.glusterfsglusterfs represents a Glusterfs mount on the host that shares a pod’s lifetime. Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
-
stringspec.repo.volumes.glusterfs.endpoints
Required value
endpoints is the endpoint name that details Glusterfs topology. -
stringspec.repo.volumes.glusterfs.path
Required value
path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod -
booleanspec.repo.volumes.glusterfs.readOnlyreadOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
-
-
objectspec.repo.volumes.hostPathhostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
stringspec.repo.volumes.hostPath.path
Required value
path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath -
stringspec.repo.volumes.hostPath.typetype for HostPath Volume Defaults to "" More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
-
objectspec.repo.volumes.image
image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet’s host machine. The volume is resolved at pod startup depending on which PullPolicy value is provided:
- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.
- Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn’t present.
- IfNotPresent: the kubelet pulls if the reference isn’t already present on disk. Container creation will fail if the reference isn’t present and the pull fails.
The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro) and non-executable files (noexec). Sub path mounts for containers are not supported (spec.containers[].volumeMounts.subpath) before 1.33. The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
-
stringspec.repo.volumes.image.pullPolicyPolicy for pulling OCI objects. Possible values are: Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn’t present. IfNotPresent: the kubelet pulls if the reference isn’t already present on disk. Container creation will fail if the reference isn’t present and the pull fails. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
-
stringspec.repo.volumes.image.referenceRequired: Image or artifact reference to be used. Behaves in the same way as pod.spec.containers[*].image. Pull secrets will be assembled in the same way as for the container image by looking up node credentials, SA image pull secrets, and pod spec image pull secrets. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
objectspec.repo.volumes.iscsiiscsi represents an ISCSI Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes/#iscsi
-
booleanspec.repo.volumes.iscsi.chapAuthDiscoverychapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication
-
booleanspec.repo.volumes.iscsi.chapAuthSessionchapAuthSession defines whether support iSCSI Session CHAP authentication
-
stringspec.repo.volumes.iscsi.fsTypefsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
-
stringspec.repo.volumes.iscsi.initiatorNameinitiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface
: will be created for the connection. -
stringspec.repo.volumes.iscsi.iqn
Required value
iqn is the target iSCSI Qualified Name. -
stringspec.repo.volumes.iscsi.iscsiInterfaceiscsiInterface is the interface Name that uses an iSCSI transport. Defaults to ‘default’ (tcp).
Default:
default -
integerspec.repo.volumes.iscsi.lun
Required value
lun represents iSCSI Target Lun number. -
array of stringsspec.repo.volumes.iscsi.portalsportals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-
booleanspec.repo.volumes.iscsi.readOnlyreadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.
-
objectspec.repo.volumes.iscsi.secretRefsecretRef is the CHAP Secret for iSCSI target and initiator authentication
-
stringspec.repo.volumes.iscsi.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.repo.volumes.iscsi.targetPortal
Required value
targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-
-
stringspec.repo.volumes.namename of the volume. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
objectspec.repo.volumes.nfsnfs represents an NFS mount on the host that shares a pod’s lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
stringspec.repo.volumes.nfs.path
Required value
path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs -
booleanspec.repo.volumes.nfs.readOnlyreadOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
stringspec.repo.volumes.nfs.server
Required value
server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
-
objectspec.repo.volumes.persistentVolumeClaimpersistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
-
stringspec.repo.volumes.persistentVolumeClaim.claimName
Required value
claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims -
booleanspec.repo.volumes.persistentVolumeClaim.readOnlyreadOnly Will force the ReadOnly setting in VolumeMounts. Default false.
-
-
objectspec.repo.volumes.photonPersistentDiskphotonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine. Deprecated: PhotonPersistentDisk is deprecated and the in-tree photonPersistentDisk type is no longer supported.
-
stringspec.repo.volumes.photonPersistentDisk.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
stringspec.repo.volumes.photonPersistentDisk.pdID
Required value
pdID is the ID that identifies Photon Controller persistent disk
-
-
objectspec.repo.volumes.portworxVolumeportworxVolume represents a portworx volume attached and mounted on kubelets host machine. Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate is on.
-
stringspec.repo.volumes.portworxVolume.fsTypefSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”. Implicitly inferred to be “ext4” if unspecified.
-
booleanspec.repo.volumes.portworxVolume.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
stringspec.repo.volumes.portworxVolume.volumeID
Required value
volumeID uniquely identifies a Portworx volume
-
-
objectspec.repo.volumes.projectedprojected items for all in one resources secrets, configmaps, and downward API
-
integerspec.repo.volumes.projected.defaultModedefaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.repo.volumes.projected.sourcessources is the list of volume projections. Each entry in this list handles one source.
-
objectspec.repo.volumes.projected.sources.clusterTrustBundle
ClusterTrustBundle allows a pod to access the
.spec.trustBundlefield of ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.
ClusterTrustBundle objects can either be selected by name, or by the combination of signer name and a label selector.
Kubelet performs aggressive normalization of the PEM contents written into the pod filesystem. Esoteric PEM features such as inter-block comments and block headers are stripped. Certificates are deduplicated. The ordering of certificates within the file is arbitrary, and Kubelet may change the order over time.
-
objectspec.repo.volumes.projected.sources.clusterTrustBundle.labelSelectorSelect all ClusterTrustBundles that match this label selector. Only has effect if signerName is set. Mutually-exclusive with name. If unset, interpreted as “match nothing”. If set but empty, interpreted as “match everything”.
-
array of objectsspec.repo.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.repo.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.repo.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.repo.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.repo.volumes.projected.sources.clusterTrustBundle.labelSelector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.repo.volumes.projected.sources.clusterTrustBundle.nameSelect a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.
-
booleanspec.repo.volumes.projected.sources.clusterTrustBundle.optionalIf true, don’t block pod startup if the referenced ClusterTrustBundle(s) aren’t available. If using name, then the named ClusterTrustBundle is allowed not to exist. If using signerName, then the combination of signerName and labelSelector is allowed to match zero ClusterTrustBundles.
-
stringspec.repo.volumes.projected.sources.clusterTrustBundle.path
Required value
Relative path from the volume root to write the bundle. -
stringspec.repo.volumes.projected.sources.clusterTrustBundle.signerNameSelect all ClusterTrustBundles that match this signer name. Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated.
-
-
objectspec.repo.volumes.projected.sources.configMapconfigMap information about the configMap data to project
-
array of objectsspec.repo.volumes.projected.sources.configMap.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.repo.volumes.projected.sources.configMap.items.keykey is the key to project.
-
integerspec.repo.volumes.projected.sources.configMap.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.volumes.projected.sources.configMap.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.repo.volumes.projected.sources.configMap.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.volumes.projected.sources.configMap.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
objectspec.repo.volumes.projected.sources.downwardAPIdownwardAPI information about the downwardAPI data to project
-
array of objectsspec.repo.volumes.projected.sources.downwardAPI.itemsItems is a list of DownwardAPIVolume file
-
objectspec.repo.volumes.projected.sources.downwardAPI.items.fieldRefRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
-
stringspec.repo.volumes.projected.sources.downwardAPI.items.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.repo.volumes.projected.sources.downwardAPI.items.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
integerspec.repo.volumes.projected.sources.downwardAPI.items.modeOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.volumes.projected.sources.downwardAPI.items.pathRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the ‘..’ path. Must be utf-8 encoded. The first item of the relative path must not start with ‘..’
-
objectspec.repo.volumes.projected.sources.downwardAPI.items.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
stringspec.repo.volumes.projected.sources.downwardAPI.items.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.repo.volumes.projected.sources.downwardAPI.items.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.repo.volumes.projected.sources.downwardAPI.items.resourceFieldRef.resource
Required value
Required: resource to select
-
-
-
-
objectspec.repo.volumes.projected.sources.podCertificate
Projects an auto-rotating credential bundle (private key and certificate chain) that the pod can use either as a TLS client or server.
Kubelet generates a private key and uses it to send a PodCertificateRequest to the named signer. Once the signer approves the request and issues a certificate chain, Kubelet writes the key and certificate chain to the pod filesystem. The pod does not start until certificates have been issued for each podCertificate projected volume source in its spec.
Kubelet will begin trying to rotate the certificate at the time indicated by the signer using the PodCertificateRequest.Status.BeginRefreshAt timestamp.
Kubelet can write a single file, indicated by the credentialBundlePath field, or separate files, indicated by the keyPath and certificateChainPath fields.
The credential bundle is a single file in PEM format. The first PEM entry is the private key (in PKCS#8 format), and the remaining PEM entries are the certificate chain issued by the signer (typically, signers will return their certificate chain in leaf-to-root order).
Prefer using the credential bundle format, since your application code can read it atomically. If you use keyPath and certificateChainPath, your application must make two separate file reads. If these coincide with a certificate rotation, it is possible that the private key and leaf certificate you read may not correspond to each other. Your application will need to check for this condition, and re-read until they are consistent.
The named signer controls chooses the format of the certificate it issues; consult the signer implementation’s documentation to learn how to use the certificates it issues.
-
stringspec.repo.volumes.projected.sources.podCertificate.certificateChainPath
Write the certificate chain at this path in the projected volume.
Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.
-
stringspec.repo.volumes.projected.sources.podCertificate.credentialBundlePath
Write the credential bundle at this path in the projected volume.
The credential bundle is a single file that contains multiple PEM blocks. The first PEM block is a PRIVATE KEY block, containing a PKCS#8 private key.
The remaining blocks are CERTIFICATE blocks, containing the issued certificate chain from the signer (leaf and any intermediates).
Using credentialBundlePath lets your Pod’s application code make a single atomic read that retrieves a consistent key and certificate chain. If you project them to separate files, your application code will need to additionally check that the leaf certificate was issued to the key.
-
stringspec.repo.volumes.projected.sources.podCertificate.keyPath
Write the key at this path in the projected volume.
Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.
-
stringspec.repo.volumes.projected.sources.podCertificate.keyType
Required value
The type of keypair Kubelet will generate for the pod.
Valid values are “RSA3072”, “RSA4096”, “ECDSAP256”, “ECDSAP384”, “ECDSAP521”, and “ED25519”.
-
integerspec.repo.volumes.projected.sources.podCertificate.maxExpirationSeconds
maxExpirationSeconds is the maximum lifetime permitted for the certificate.
Kubelet copies this value verbatim into the PodCertificateRequests it generates for this projection.
If omitted, kube-apiserver will set it to 86400(24 hours). kube-apiserver will reject values shorter than 3600 (1 hour). The maximum allowable value is 7862400 (91 days).
The signer implementation is then free to issue a certificate with any lifetime shorter than MaxExpirationSeconds, but no shorter than 3600 seconds (1 hour). This constraint is enforced by kube-apiserver.
kubernetes.iosigners will never issue certificates with a lifetime longer than 24 hours. -
stringspec.repo.volumes.projected.sources.podCertificate.signerName
Required value
Kubelet’s generated CSRs will be addressed to this signer.
-
-
objectspec.repo.volumes.projected.sources.secretsecret information about the secret data to project
-
array of objectsspec.repo.volumes.projected.sources.secret.itemsitems if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.repo.volumes.projected.sources.secret.items.keykey is the key to project.
-
integerspec.repo.volumes.projected.sources.secret.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.volumes.projected.sources.secret.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.repo.volumes.projected.sources.secret.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.volumes.projected.sources.secret.optionaloptional field specify whether the Secret or its key must be defined
-
-
objectspec.repo.volumes.projected.sources.serviceAccountTokenserviceAccountToken is information about the serviceAccountToken data to project
-
stringspec.repo.volumes.projected.sources.serviceAccountToken.audienceaudience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
-
integerspec.repo.volumes.projected.sources.serviceAccountToken.expirationSecondsexpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
-
stringspec.repo.volumes.projected.sources.serviceAccountToken.path
Required value
path is the path relative to the mount point of the file to project the token into.
-
-
-
-
objectspec.repo.volumes.quobytequobyte represents a Quobyte mount on the host that shares a pod’s lifetime. Deprecated: Quobyte is deprecated and the in-tree quobyte type is no longer supported.
-
stringspec.repo.volumes.quobyte.groupgroup to map volume access to Default is no group
-
booleanspec.repo.volumes.quobyte.readOnlyreadOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.
-
stringspec.repo.volumes.quobyte.registry
Required value
registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes -
stringspec.repo.volumes.quobyte.tenanttenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin
-
stringspec.repo.volumes.quobyte.useruser to map volume access to Defaults to serivceaccount user
-
stringspec.repo.volumes.quobyte.volume
Required value
volume is a string that references an already created Quobyte volume by name.
-
-
objectspec.repo.volumes.scaleIOscaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. Deprecated: ScaleIO is deprecated and the in-tree scaleIO type is no longer supported.
-
stringspec.repo.volumes.scaleIO.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Default is “xfs”.
Default:
xfs -
stringspec.repo.volumes.scaleIO.gateway
Required value
gateway is the host address of the ScaleIO API Gateway. -
stringspec.repo.volumes.scaleIO.protectionDomainprotectionDomain is the name of the ScaleIO Protection Domain for the configured storage.
-
booleanspec.repo.volumes.scaleIO.readOnlyreadOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.repo.volumes.scaleIO.secretRef
Required value
secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail.-
stringspec.repo.volumes.scaleIO.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
booleanspec.repo.volumes.scaleIO.sslEnabledsslEnabled Flag enable/disable SSL communication with Gateway, default false
-
stringspec.repo.volumes.scaleIO.storageModestorageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.
Default:
ThinProvisioned -
stringspec.repo.volumes.scaleIO.storagePoolstoragePool is the ScaleIO Storage Pool associated with the protection domain.
-
stringspec.repo.volumes.scaleIO.system
Required value
system is the name of the storage system as configured in ScaleIO. -
stringspec.repo.volumes.scaleIO.volumeNamevolumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.
-
-
objectspec.repo.volumes.secretsecret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
integerspec.repo.volumes.secret.defaultModedefaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.repo.volumes.secret.itemsitems If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.repo.volumes.secret.items.keykey is the key to project.
-
integerspec.repo.volumes.secret.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.volumes.secret.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
booleanspec.repo.volumes.secret.optionaloptional field specify whether the Secret or its keys must be defined
-
stringspec.repo.volumes.secret.secretNamesecretName is the name of the secret in the pod’s namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
-
objectspec.repo.volumes.storageosstorageOS represents a StorageOS volume attached and mounted on Kubernetes nodes. Deprecated: StorageOS is deprecated and the in-tree storageos type is no longer supported.
-
stringspec.repo.volumes.storageos.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
booleanspec.repo.volumes.storageos.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.repo.volumes.storageos.secretRefsecretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted.
-
stringspec.repo.volumes.storageos.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.repo.volumes.storageos.volumeNamevolumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.
-
stringspec.repo.volumes.storageos.volumeNamespacevolumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod’s namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to “default” if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.
-
-
objectspec.repo.volumes.vsphereVolumevsphereVolume represents a vSphere volume attached and mounted on kubelets host machine. Deprecated: VsphereVolume is deprecated. All operations for the in-tree vsphereVolume type are redirected to the csi.vsphere.vmware.com CSI driver.
-
stringspec.repo.volumes.vsphereVolume.fsTypefsType is filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
stringspec.repo.volumes.vsphereVolume.storagePolicyIDstoragePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.
-
stringspec.repo.volumes.vsphereVolume.storagePolicyNamestoragePolicyName is the storage Policy Based Management (SPBM) profile name.
-
stringspec.repo.volumes.vsphereVolume.volumePath
Required value
volumePath is the path that identifies vSphere volume vmdk
-
-
-
-
stringspec.repositoryCredentialsDeprecated: RepositoryCredentials are the Git pull credentials to configure Argo CD with upon creation of the cluster.
-
array of objectsspec.resourceActionsResourceActions customizes resource action behavior.
-
stringspec.resourceActions.action
-
stringspec.resourceActions.group
-
stringspec.resourceActions.kind
-
-
stringspec.resourceExclusionsResourceExclusions is used to completely ignore entire classes of resource group/kinds.
-
array of objectsspec.resourceHealthChecksResourceHealthChecks customizes resource health check behavior.
-
stringspec.resourceHealthChecks.check
-
stringspec.resourceHealthChecks.group
-
stringspec.resourceHealthChecks.kind
-
-
objectspec.resourceIgnoreDifferencesResourceIgnoreDifferences customizes resource ignore difference behavior.
-
objectspec.resourceIgnoreDifferences.all
-
array of stringsspec.resourceIgnoreDifferences.all.jqPathExpressions
-
array of stringsspec.resourceIgnoreDifferences.all.jsonPointers
-
array of stringsspec.resourceIgnoreDifferences.all.managedFieldsManagers
-
-
array of objectsspec.resourceIgnoreDifferences.resourceIdentifiers
-
objectspec.resourceIgnoreDifferences.resourceIdentifiers.customization
-
array of stringsspec.resourceIgnoreDifferences.resourceIdentifiers.customization.jqPathExpressions
-
array of stringsspec.resourceIgnoreDifferences.resourceIdentifiers.customization.jsonPointers
-
array of stringsspec.resourceIgnoreDifferences.resourceIdentifiers.customization.managedFieldsManagers
-
-
stringspec.resourceIgnoreDifferences.resourceIdentifiers.group
-
stringspec.resourceIgnoreDifferences.resourceIdentifiers.kind
-
-
-
stringspec.resourceInclusionsResourceInclusions is used to only include specific group/kinds in the reconciliation process.
-
stringspec.resourceTrackingMethodResourceTrackingMethod defines how Argo CD should track resources that it manages
-
objectspec.serverServer defines the options for the ArgoCD Server component.
-
objectspec.server.annotationsCustom annotations to pods deployed by the operator
-
objectspec.server.autoscaleAutoscale defines the autoscale options for the Argo CD Server component.
-
booleanspec.server.autoscale.enabled
Required value
Enabled will toggle autoscaling support for the Argo CD Server component. -
objectspec.server.autoscale.hpaHPA defines the HorizontalPodAutoscaler options for the Argo CD Server component.
-
integerspec.server.autoscale.hpa.maxReplicas
Required value
maxReplicas is the upper limit for the number of pods that can be set by the autoscaler; cannot be smaller than MinReplicas. -
integerspec.server.autoscale.hpa.minReplicasminReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.
-
objectspec.server.autoscale.hpa.scaleTargetRef
Required value
reference to scaled resource; horizontal pod autoscaler will learn the current resource consumption and will set the desired number of pods by using its Scale subresource.-
stringspec.server.autoscale.hpa.scaleTargetRef.apiVersionapiVersion is the API version of the referent
-
stringspec.server.autoscale.hpa.scaleTargetRef.kind
Required value
kind is the kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds -
stringspec.server.autoscale.hpa.scaleTargetRef.name
Required value
name is the name of the referent; More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-
integerspec.server.autoscale.hpa.targetCPUUtilizationPercentagetargetCPUUtilizationPercentage is the target average CPU utilization (represented as a percentage of requested CPU) over all the pods; if not specified the default autoscaling policy will be used.
-
-
-
booleanspec.server.enableRolloutsUIEnableRolloutsUI will add the Argo Rollouts UI extension in ArgoCD Dashboard.
-
booleanspec.server.enabledEnabled is the flag to enable ArgoCD Server during ArgoCD installation. (optional, default
true) -
array of objectsspec.server.envEnv lets you specify environment for API server pods
-
stringspec.server.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.server.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.server.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.server.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.server.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.server.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.server.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.server.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.server.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.server.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.server.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.server.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.server.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.server.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.server.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.server.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.server.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.server.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.server.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.server.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.server.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of stringsspec.server.extraCommandArgsExtra Command arguments that would append to the Argo CD server command. ExtraCommandArgs will not be added, if one of these commands is already part of the server command with same or different value.
-
objectspec.server.grpcGRPC defines the state for the Argo CD Server GRPC options.
-
stringspec.server.grpc.hostHost is the hostname to use for Ingress/Route resources.
-
objectspec.server.grpc.ingressIngress defines the desired state for the Argo CD Server GRPC Ingress.
-
objectspec.server.grpc.ingress.annotationsAnnotations is the map of annotations to apply to the Ingress.
-
booleanspec.server.grpc.ingress.enabled
Required value
Enabled will toggle the creation of the Ingress. -
stringspec.server.grpc.ingress.ingressClassNameIngressClassName for the Ingress resource.
-
stringspec.server.grpc.ingress.pathPath used for the Ingress resource.
-
array of objectsspec.server.grpc.ingress.tlsTLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.
-
array of stringsspec.server.grpc.ingress.tls.hostshosts is a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.
-
stringspec.server.grpc.ingress.tls.secretNamesecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the “Host” header field used by an IngressRule, the SNI host is used for termination and value of the “Host” header is used for routing.
-
-
-
-
stringspec.server.hostHost is the hostname to use for Ingress/Route resources.
-
objectspec.server.ingressIngress defines the desired state for an Ingress for the Argo CD Server component.
-
objectspec.server.ingress.annotationsAnnotations is the map of annotations to apply to the Ingress.
-
booleanspec.server.ingress.enabled
Required value
Enabled will toggle the creation of the Ingress. -
stringspec.server.ingress.ingressClassNameIngressClassName for the Ingress resource.
-
stringspec.server.ingress.pathPath used for the Ingress resource.
-
array of objectsspec.server.ingress.tlsTLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.
-
array of stringsspec.server.ingress.tls.hostshosts is a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.
-
stringspec.server.ingress.tls.secretNamesecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the “Host” header field used by an IngressRule, the SNI host is used for termination and value of the “Host” header is used for routing.
-
-
-
array of objectsspec.server.initContainersInitContainers defines the list of initialization containers for the Argo CD Server component.
-
array of stringsspec.server.initContainers.argsArguments to the entrypoint. The container image’s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of stringsspec.server.initContainers.commandEntrypoint array. Not executed within a shell. The container image’s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of objectsspec.server.initContainers.envList of environment variables to set in the container. Cannot be updated.
-
stringspec.server.initContainers.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.server.initContainers.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.server.initContainers.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.server.initContainers.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.server.initContainers.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.server.initContainers.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.initContainers.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.server.initContainers.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.server.initContainers.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.server.initContainers.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.server.initContainers.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.server.initContainers.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.server.initContainers.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.server.initContainers.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.server.initContainers.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.server.initContainers.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.server.initContainers.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.server.initContainers.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.server.initContainers.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.server.initContainers.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.server.initContainers.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.server.initContainers.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.initContainers.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of objectsspec.server.initContainers.envFromList of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except ‘=’. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
-
objectspec.server.initContainers.envFrom.configMapRefThe ConfigMap to select from
-
stringspec.server.initContainers.envFrom.configMapRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.initContainers.envFrom.configMapRef.optionalSpecify whether the ConfigMap must be defined
-
-
stringspec.server.initContainers.envFrom.prefixOptional text to prepend to the name of each environment variable. May consist of any printable ASCII characters except ‘=’.
-
objectspec.server.initContainers.envFrom.secretRefThe Secret to select from
-
stringspec.server.initContainers.envFrom.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.initContainers.envFrom.secretRef.optionalSpecify whether the Secret must be defined
-
-
-
stringspec.server.initContainers.imageContainer image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
stringspec.server.initContainers.imagePullPolicyImage pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-
objectspec.server.initContainers.lifecycleActions that the management system should take in response to container lifecycle events. Cannot be updated.
-
objectspec.server.initContainers.lifecycle.postStartPostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.server.initContainers.lifecycle.postStart.execExec specifies a command to execute in the container.
-
array of stringsspec.server.initContainers.lifecycle.postStart.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.server.initContainers.lifecycle.postStart.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.server.initContainers.lifecycle.postStart.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.server.initContainers.lifecycle.postStart.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.server.initContainers.lifecycle.postStart.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.server.initContainers.lifecycle.postStart.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.server.initContainers.lifecycle.postStart.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.server.initContainers.lifecycle.postStart.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.server.initContainers.lifecycle.postStart.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.server.initContainers.lifecycle.postStart.sleepSleep represents a duration that the container should sleep.
-
integerspec.server.initContainers.lifecycle.postStart.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.server.initContainers.lifecycle.postStart.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.server.initContainers.lifecycle.postStart.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.server.initContainers.lifecycle.postStart.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
objectspec.server.initContainers.lifecycle.preStopPreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod’s termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod’s termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.server.initContainers.lifecycle.preStop.execExec specifies a command to execute in the container.
-
array of stringsspec.server.initContainers.lifecycle.preStop.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.server.initContainers.lifecycle.preStop.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.server.initContainers.lifecycle.preStop.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.server.initContainers.lifecycle.preStop.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.server.initContainers.lifecycle.preStop.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.server.initContainers.lifecycle.preStop.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.server.initContainers.lifecycle.preStop.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.server.initContainers.lifecycle.preStop.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.server.initContainers.lifecycle.preStop.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.server.initContainers.lifecycle.preStop.sleepSleep represents a duration that the container should sleep.
-
integerspec.server.initContainers.lifecycle.preStop.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.server.initContainers.lifecycle.preStop.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.server.initContainers.lifecycle.preStop.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.server.initContainers.lifecycle.preStop.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
stringspec.server.initContainers.lifecycle.stopSignalStopSignal defines which signal will be sent to a container when it is being stopped. If not specified, the default is defined by the container runtime in use. StopSignal can only be set for Pods with a non-empty .spec.os.name
-
-
objectspec.server.initContainers.livenessProbePeriodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.server.initContainers.livenessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.server.initContainers.livenessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.server.initContainers.livenessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.server.initContainers.livenessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.server.initContainers.livenessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.server.initContainers.livenessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.server.initContainers.livenessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.server.initContainers.livenessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.server.initContainers.livenessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.server.initContainers.livenessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.server.initContainers.livenessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.server.initContainers.livenessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.server.initContainers.livenessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.server.initContainers.livenessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.server.initContainers.livenessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.server.initContainers.livenessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.server.initContainers.livenessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.server.initContainers.livenessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.server.initContainers.livenessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.server.initContainers.livenessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.server.initContainers.livenessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.server.initContainers.livenessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
stringspec.server.initContainers.nameName of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
-
array of objectsspec.server.initContainers.portsList of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default “0.0.0.0” address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated.
-
integerspec.server.initContainers.ports.containerPortNumber of port to expose on the pod’s IP address. This must be a valid port number, 0 < x < 65536.
-
stringspec.server.initContainers.ports.hostIPWhat host IP to bind the external port to.
-
integerspec.server.initContainers.ports.hostPortNumber of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-
stringspec.server.initContainers.ports.nameIf specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-
stringspec.server.initContainers.ports.protocolProtocol for port. Must be UDP, TCP, or SCTP. Defaults to “TCP”.
Default:
TCP
-
-
objectspec.server.initContainers.readinessProbePeriodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.server.initContainers.readinessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.server.initContainers.readinessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.server.initContainers.readinessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.server.initContainers.readinessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.server.initContainers.readinessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.server.initContainers.readinessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.server.initContainers.readinessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.server.initContainers.readinessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.server.initContainers.readinessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.server.initContainers.readinessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.server.initContainers.readinessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.server.initContainers.readinessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.server.initContainers.readinessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.server.initContainers.readinessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.server.initContainers.readinessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.server.initContainers.readinessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.server.initContainers.readinessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.server.initContainers.readinessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.server.initContainers.readinessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.server.initContainers.readinessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.server.initContainers.readinessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.server.initContainers.readinessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
array of objectsspec.server.initContainers.resizePolicyResources resize policy for the container.
-
stringspec.server.initContainers.resizePolicy.resourceNameName of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-
stringspec.server.initContainers.resizePolicy.restartPolicyRestart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
-
-
objectspec.server.initContainers.resourcesCompute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
array of objectsspec.server.initContainers.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.server.initContainers.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.server.initContainers.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.server.initContainers.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.server.initContainers.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
stringspec.server.initContainers.restartPolicyRestartPolicy defines the restart behavior of individual containers in a pod. This overrides the pod-level restart policy. When this field is not specified, the restart behavior is defined by the Pod’s restart policy and the container type. Additionally, setting the RestartPolicy as “Always” for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy “Always” will be shut down. This lifecycle differs from normal init containers and is often referred to as a “sidecar” container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-
array of objectsspec.server.initContainers.restartPolicyRules
Represents a list of rules to be checked to determine if the container should be restarted on exit. The rules are evaluated in order. Once a rule matches a container exit condition, the remaining rules are ignored. If no rule matches the container exit condition, the Container-level restart policy determines the whether the container is restarted or not. Constraints on the rules:
- At most 20 rules are allowed.
- Rules can have the same action.
- Identical rules are not forbidden in validations. When rules are specified, container MUST set RestartPolicy explicitly even it if matches the Pod’s RestartPolicy.
-
stringspec.server.initContainers.restartPolicyRules.actionSpecifies the action taken on a container exit if the requirements are satisfied. The only possible value is “Restart” to restart the container.
-
objectspec.server.initContainers.restartPolicyRules.exitCodesRepresents the exit codes to check on container exits.
-
stringspec.server.initContainers.restartPolicyRules.exitCodes.operator
Required value
Represents the relationship between the container exit code(s) and the specified values. Possible values are:
- In: the requirement is satisfied if the container exit code is in the set of specified values.
- NotIn: the requirement is satisfied if the container exit code is not in the set of specified values.
-
array of integersspec.server.initContainers.restartPolicyRules.exitCodes.valuesSpecifies the set of values to check for container exit codes. At most 255 elements are allowed.
-
-
objectspec.server.initContainers.securityContextSecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
-
booleanspec.server.initContainers.securityContext.allowPrivilegeEscalation
AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is:
- run as Privileged
- has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-
objectspec.server.initContainers.securityContext.appArmorProfileappArmorProfile is the AppArmor options to use by this container. If set, this profile overrides the pod’s appArmorProfile. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.server.initContainers.securityContext.appArmorProfile.localhostProfilelocalhostProfile indicates a profile loaded on the node that should be used. The profile must be preconfigured on the node to work. Must match the loaded name of the profile. Must be set if and only if type is “Localhost”.
-
stringspec.server.initContainers.securityContext.appArmorProfile.type
Required value
type indicates which kind of AppArmor profile will be applied. Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime’s default profile. Unconfined - no AppArmor enforcement.
-
-
objectspec.server.initContainers.securityContext.capabilitiesThe capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows.
-
array of stringsspec.server.initContainers.securityContext.capabilities.addAdded capabilities
-
stringspec.server.initContainers.securityContext.capabilities.add.Element of the arrayCapability represent POSIX capabilities type
-
-
array of stringsspec.server.initContainers.securityContext.capabilities.dropRemoved capabilities
-
stringspec.server.initContainers.securityContext.capabilities.drop.Element of the arrayCapability represent POSIX capabilities type
-
-
-
booleanspec.server.initContainers.securityContext.privilegedRun container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.server.initContainers.securityContext.procMountprocMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.server.initContainers.securityContext.readOnlyRootFilesystemWhether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-
integerspec.server.initContainers.securityContext.runAsGroupThe GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.server.initContainers.securityContext.runAsNonRootIndicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
integerspec.server.initContainers.securityContext.runAsUserThe UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
objectspec.server.initContainers.securityContext.seLinuxOptionsThe SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.server.initContainers.securityContext.seLinuxOptions.levelLevel is SELinux level label that applies to the container.
-
stringspec.server.initContainers.securityContext.seLinuxOptions.roleRole is a SELinux role label that applies to the container.
-
stringspec.server.initContainers.securityContext.seLinuxOptions.typeType is a SELinux type label that applies to the container.
-
stringspec.server.initContainers.securityContext.seLinuxOptions.userUser is a SELinux user label that applies to the container.
-
-
objectspec.server.initContainers.securityContext.seccompProfileThe seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.server.initContainers.securityContext.seccompProfile.localhostProfilelocalhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet’s configured seccomp profile location. Must be set if type is “Localhost”. Must NOT be set for any other type.
-
stringspec.server.initContainers.securityContext.seccompProfile.type
Required value
type indicates which kind of seccomp profile will be applied. Valid options are:
Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-
objectspec.server.initContainers.securityContext.windowsOptionsThe Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.
-
stringspec.server.initContainers.securityContext.windowsOptions.gmsaCredentialSpecGMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
stringspec.server.initContainers.securityContext.windowsOptions.gmsaCredentialSpecNameGMSACredentialSpecName is the name of the GMSA credential spec to use.
-
booleanspec.server.initContainers.securityContext.windowsOptions.hostProcessHostProcess determines if a container should be run as a ‘Host Process’ container. All of a Pod’s containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-
stringspec.server.initContainers.securityContext.windowsOptions.runAsUserNameThe UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-
-
objectspec.server.initContainers.startupProbeStartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod’s lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.server.initContainers.startupProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.server.initContainers.startupProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.server.initContainers.startupProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.server.initContainers.startupProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.server.initContainers.startupProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.server.initContainers.startupProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.server.initContainers.startupProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.server.initContainers.startupProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.server.initContainers.startupProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.server.initContainers.startupProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.server.initContainers.startupProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.server.initContainers.startupProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.server.initContainers.startupProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.server.initContainers.startupProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.server.initContainers.startupProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.server.initContainers.startupProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.server.initContainers.startupProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.server.initContainers.startupProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.server.initContainers.startupProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.server.initContainers.startupProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.server.initContainers.startupProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.server.initContainers.startupProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
booleanspec.server.initContainers.stdinWhether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-
booleanspec.server.initContainers.stdinOnceWhether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-
stringspec.server.initContainers.terminationMessagePathOptional: Path at which the file to which the container’s termination message will be written is mounted into the container’s filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-
stringspec.server.initContainers.terminationMessagePolicyIndicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-
booleanspec.server.initContainers.ttyWhether this container should allocate a TTY for itself, also requires ‘stdin’ to be true. Default is false.
-
array of objectsspec.server.initContainers.volumeDevicesvolumeDevices is the list of block devices to be used by the container.
-
stringspec.server.initContainers.volumeDevices.devicePathdevicePath is the path inside of the container that the device will be mapped to.
-
stringspec.server.initContainers.volumeDevices.namename must match the name of a persistentVolumeClaim in the pod
-
-
array of objectsspec.server.initContainers.volumeMountsPod volumes to mount into the container’s filesystem. Cannot be updated.
-
stringspec.server.initContainers.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.server.initContainers.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.server.initContainers.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.server.initContainers.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.server.initContainers.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.server.initContainers.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.server.initContainers.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
stringspec.server.initContainers.workingDirContainer’s working directory. If not specified, the container runtime’s default will be used, which might be configured in the container image. Cannot be updated.
-
-
booleanspec.server.insecureInsecure toggles the insecure flag.
-
objectspec.server.labelsCustom labels to pods deployed by the operator
-
stringspec.server.logFormatLogFormat refers to the log level to be used by the ArgoCD Server component. Defaults to ArgoCDDefaultLogFormat if not configured. Valid options are text or json.
-
stringspec.server.logLevelLogLevel refers to the log level to be used by the ArgoCD Server component. Defaults to ArgoCDDefaultLogLevel if not set. Valid options are debug, info, error, and warn.
-
integerspec.server.replicasReplicas defines the number of replicas for argocd-server. Default is nil. Value should be greater than or equal to 0. Value will be ignored if Autoscaler is enabled.
-
objectspec.server.resourcesResources defines the Compute Resources required by the container for the Argo CD server component.
-
array of objectsspec.server.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.server.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.server.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.server.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.server.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
objectspec.server.serviceService defines the options for the Service backing the ArgoCD Server component.
-
stringspec.server.service.type
Required value
Type is the ServiceType to use for the Service resource.
-
-
array of objectsspec.server.sidecarContainersSidecarContainers defines the list of sidecar containers for the server deployment
-
array of stringsspec.server.sidecarContainers.argsArguments to the entrypoint. The container image’s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of stringsspec.server.sidecarContainers.commandEntrypoint array. Not executed within a shell. The container image’s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of objectsspec.server.sidecarContainers.envList of environment variables to set in the container. Cannot be updated.
-
stringspec.server.sidecarContainers.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.server.sidecarContainers.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.server.sidecarContainers.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.server.sidecarContainers.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.server.sidecarContainers.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.server.sidecarContainers.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.sidecarContainers.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.server.sidecarContainers.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.server.sidecarContainers.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.server.sidecarContainers.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.server.sidecarContainers.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.server.sidecarContainers.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.server.sidecarContainers.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.server.sidecarContainers.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.server.sidecarContainers.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.server.sidecarContainers.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.server.sidecarContainers.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.server.sidecarContainers.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.server.sidecarContainers.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.server.sidecarContainers.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.server.sidecarContainers.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.server.sidecarContainers.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.sidecarContainers.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of objectsspec.server.sidecarContainers.envFromList of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except ‘=’. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
-
objectspec.server.sidecarContainers.envFrom.configMapRefThe ConfigMap to select from
-
stringspec.server.sidecarContainers.envFrom.configMapRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.sidecarContainers.envFrom.configMapRef.optionalSpecify whether the ConfigMap must be defined
-
-
stringspec.server.sidecarContainers.envFrom.prefixOptional text to prepend to the name of each environment variable. May consist of any printable ASCII characters except ‘=’.
-
objectspec.server.sidecarContainers.envFrom.secretRefThe Secret to select from
-
stringspec.server.sidecarContainers.envFrom.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.sidecarContainers.envFrom.secretRef.optionalSpecify whether the Secret must be defined
-
-
-
stringspec.server.sidecarContainers.imageContainer image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
stringspec.server.sidecarContainers.imagePullPolicyImage pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-
objectspec.server.sidecarContainers.lifecycleActions that the management system should take in response to container lifecycle events. Cannot be updated.
-
objectspec.server.sidecarContainers.lifecycle.postStartPostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.server.sidecarContainers.lifecycle.postStart.execExec specifies a command to execute in the container.
-
array of stringsspec.server.sidecarContainers.lifecycle.postStart.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.server.sidecarContainers.lifecycle.postStart.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.server.sidecarContainers.lifecycle.postStart.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.server.sidecarContainers.lifecycle.postStart.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.server.sidecarContainers.lifecycle.postStart.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.server.sidecarContainers.lifecycle.postStart.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.server.sidecarContainers.lifecycle.postStart.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.server.sidecarContainers.lifecycle.postStart.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.server.sidecarContainers.lifecycle.postStart.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.server.sidecarContainers.lifecycle.postStart.sleepSleep represents a duration that the container should sleep.
-
integerspec.server.sidecarContainers.lifecycle.postStart.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.server.sidecarContainers.lifecycle.postStart.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.server.sidecarContainers.lifecycle.postStart.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.server.sidecarContainers.lifecycle.postStart.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
objectspec.server.sidecarContainers.lifecycle.preStopPreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod’s termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod’s termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.server.sidecarContainers.lifecycle.preStop.execExec specifies a command to execute in the container.
-
array of stringsspec.server.sidecarContainers.lifecycle.preStop.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.server.sidecarContainers.lifecycle.preStop.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.server.sidecarContainers.lifecycle.preStop.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.server.sidecarContainers.lifecycle.preStop.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.server.sidecarContainers.lifecycle.preStop.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.server.sidecarContainers.lifecycle.preStop.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.server.sidecarContainers.lifecycle.preStop.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.server.sidecarContainers.lifecycle.preStop.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.server.sidecarContainers.lifecycle.preStop.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.server.sidecarContainers.lifecycle.preStop.sleepSleep represents a duration that the container should sleep.
-
integerspec.server.sidecarContainers.lifecycle.preStop.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.server.sidecarContainers.lifecycle.preStop.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.server.sidecarContainers.lifecycle.preStop.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.server.sidecarContainers.lifecycle.preStop.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
stringspec.server.sidecarContainers.lifecycle.stopSignalStopSignal defines which signal will be sent to a container when it is being stopped. If not specified, the default is defined by the container runtime in use. StopSignal can only be set for Pods with a non-empty .spec.os.name
-
-
objectspec.server.sidecarContainers.livenessProbePeriodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.server.sidecarContainers.livenessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.server.sidecarContainers.livenessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.server.sidecarContainers.livenessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.server.sidecarContainers.livenessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.server.sidecarContainers.livenessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.server.sidecarContainers.livenessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.server.sidecarContainers.livenessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.server.sidecarContainers.livenessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.server.sidecarContainers.livenessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.server.sidecarContainers.livenessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.server.sidecarContainers.livenessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.server.sidecarContainers.livenessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.server.sidecarContainers.livenessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.server.sidecarContainers.livenessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.server.sidecarContainers.livenessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.server.sidecarContainers.livenessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.server.sidecarContainers.livenessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.server.sidecarContainers.livenessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.server.sidecarContainers.livenessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.server.sidecarContainers.livenessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.server.sidecarContainers.livenessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.server.sidecarContainers.livenessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
stringspec.server.sidecarContainers.nameName of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
-
array of objectsspec.server.sidecarContainers.portsList of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default “0.0.0.0” address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated.
-
integerspec.server.sidecarContainers.ports.containerPortNumber of port to expose on the pod’s IP address. This must be a valid port number, 0 < x < 65536.
-
stringspec.server.sidecarContainers.ports.hostIPWhat host IP to bind the external port to.
-
integerspec.server.sidecarContainers.ports.hostPortNumber of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-
stringspec.server.sidecarContainers.ports.nameIf specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-
stringspec.server.sidecarContainers.ports.protocolProtocol for port. Must be UDP, TCP, or SCTP. Defaults to “TCP”.
Default:
TCP
-
-
objectspec.server.sidecarContainers.readinessProbePeriodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.server.sidecarContainers.readinessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.server.sidecarContainers.readinessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.server.sidecarContainers.readinessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.server.sidecarContainers.readinessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.server.sidecarContainers.readinessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.server.sidecarContainers.readinessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.server.sidecarContainers.readinessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.server.sidecarContainers.readinessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.server.sidecarContainers.readinessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.server.sidecarContainers.readinessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.server.sidecarContainers.readinessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.server.sidecarContainers.readinessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.server.sidecarContainers.readinessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.server.sidecarContainers.readinessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.server.sidecarContainers.readinessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.server.sidecarContainers.readinessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.server.sidecarContainers.readinessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.server.sidecarContainers.readinessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.server.sidecarContainers.readinessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.server.sidecarContainers.readinessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.server.sidecarContainers.readinessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.server.sidecarContainers.readinessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
array of objectsspec.server.sidecarContainers.resizePolicyResources resize policy for the container.
-
stringspec.server.sidecarContainers.resizePolicy.resourceNameName of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-
stringspec.server.sidecarContainers.resizePolicy.restartPolicyRestart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
-
-
objectspec.server.sidecarContainers.resourcesCompute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
array of objectsspec.server.sidecarContainers.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.server.sidecarContainers.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.server.sidecarContainers.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.server.sidecarContainers.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.server.sidecarContainers.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
stringspec.server.sidecarContainers.restartPolicyRestartPolicy defines the restart behavior of individual containers in a pod. This overrides the pod-level restart policy. When this field is not specified, the restart behavior is defined by the Pod’s restart policy and the container type. Additionally, setting the RestartPolicy as “Always” for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy “Always” will be shut down. This lifecycle differs from normal init containers and is often referred to as a “sidecar” container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-
array of objectsspec.server.sidecarContainers.restartPolicyRules
Represents a list of rules to be checked to determine if the container should be restarted on exit. The rules are evaluated in order. Once a rule matches a container exit condition, the remaining rules are ignored. If no rule matches the container exit condition, the Container-level restart policy determines the whether the container is restarted or not. Constraints on the rules:
- At most 20 rules are allowed.
- Rules can have the same action.
- Identical rules are not forbidden in validations. When rules are specified, container MUST set RestartPolicy explicitly even it if matches the Pod’s RestartPolicy.
-
stringspec.server.sidecarContainers.restartPolicyRules.actionSpecifies the action taken on a container exit if the requirements are satisfied. The only possible value is “Restart” to restart the container.
-
objectspec.server.sidecarContainers.restartPolicyRules.exitCodesRepresents the exit codes to check on container exits.
-
stringspec.server.sidecarContainers.restartPolicyRules.exitCodes.operator
Required value
Represents the relationship between the container exit code(s) and the specified values. Possible values are:
- In: the requirement is satisfied if the container exit code is in the set of specified values.
- NotIn: the requirement is satisfied if the container exit code is not in the set of specified values.
-
array of integersspec.server.sidecarContainers.restartPolicyRules.exitCodes.valuesSpecifies the set of values to check for container exit codes. At most 255 elements are allowed.
-
-
objectspec.server.sidecarContainers.securityContextSecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
-
booleanspec.server.sidecarContainers.securityContext.allowPrivilegeEscalation
AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is:
- run as Privileged
- has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-
objectspec.server.sidecarContainers.securityContext.appArmorProfileappArmorProfile is the AppArmor options to use by this container. If set, this profile overrides the pod’s appArmorProfile. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.server.sidecarContainers.securityContext.appArmorProfile.localhostProfilelocalhostProfile indicates a profile loaded on the node that should be used. The profile must be preconfigured on the node to work. Must match the loaded name of the profile. Must be set if and only if type is “Localhost”.
-
stringspec.server.sidecarContainers.securityContext.appArmorProfile.type
Required value
type indicates which kind of AppArmor profile will be applied. Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime’s default profile. Unconfined - no AppArmor enforcement.
-
-
objectspec.server.sidecarContainers.securityContext.capabilitiesThe capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows.
-
array of stringsspec.server.sidecarContainers.securityContext.capabilities.addAdded capabilities
-
stringspec.server.sidecarContainers.securityContext.capabilities.add.Element of the arrayCapability represent POSIX capabilities type
-
-
array of stringsspec.server.sidecarContainers.securityContext.capabilities.dropRemoved capabilities
-
stringspec.server.sidecarContainers.securityContext.capabilities.drop.Element of the arrayCapability represent POSIX capabilities type
-
-
-
booleanspec.server.sidecarContainers.securityContext.privilegedRun container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.server.sidecarContainers.securityContext.procMountprocMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.server.sidecarContainers.securityContext.readOnlyRootFilesystemWhether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-
integerspec.server.sidecarContainers.securityContext.runAsGroupThe GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.server.sidecarContainers.securityContext.runAsNonRootIndicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
integerspec.server.sidecarContainers.securityContext.runAsUserThe UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
objectspec.server.sidecarContainers.securityContext.seLinuxOptionsThe SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.server.sidecarContainers.securityContext.seLinuxOptions.levelLevel is SELinux level label that applies to the container.
-
stringspec.server.sidecarContainers.securityContext.seLinuxOptions.roleRole is a SELinux role label that applies to the container.
-
stringspec.server.sidecarContainers.securityContext.seLinuxOptions.typeType is a SELinux type label that applies to the container.
-
stringspec.server.sidecarContainers.securityContext.seLinuxOptions.userUser is a SELinux user label that applies to the container.
-
-
objectspec.server.sidecarContainers.securityContext.seccompProfileThe seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.server.sidecarContainers.securityContext.seccompProfile.localhostProfilelocalhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet’s configured seccomp profile location. Must be set if type is “Localhost”. Must NOT be set for any other type.
-
stringspec.server.sidecarContainers.securityContext.seccompProfile.type
Required value
type indicates which kind of seccomp profile will be applied. Valid options are:
Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-
objectspec.server.sidecarContainers.securityContext.windowsOptionsThe Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.
-
stringspec.server.sidecarContainers.securityContext.windowsOptions.gmsaCredentialSpecGMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
stringspec.server.sidecarContainers.securityContext.windowsOptions.gmsaCredentialSpecNameGMSACredentialSpecName is the name of the GMSA credential spec to use.
-
booleanspec.server.sidecarContainers.securityContext.windowsOptions.hostProcessHostProcess determines if a container should be run as a ‘Host Process’ container. All of a Pod’s containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-
stringspec.server.sidecarContainers.securityContext.windowsOptions.runAsUserNameThe UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-
-
objectspec.server.sidecarContainers.startupProbeStartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod’s lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.server.sidecarContainers.startupProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.server.sidecarContainers.startupProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.server.sidecarContainers.startupProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.server.sidecarContainers.startupProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.server.sidecarContainers.startupProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.server.sidecarContainers.startupProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.server.sidecarContainers.startupProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.server.sidecarContainers.startupProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.server.sidecarContainers.startupProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.server.sidecarContainers.startupProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.server.sidecarContainers.startupProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.server.sidecarContainers.startupProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.server.sidecarContainers.startupProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.server.sidecarContainers.startupProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.server.sidecarContainers.startupProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.server.sidecarContainers.startupProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.server.sidecarContainers.startupProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.server.sidecarContainers.startupProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.server.sidecarContainers.startupProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.server.sidecarContainers.startupProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.server.sidecarContainers.startupProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.server.sidecarContainers.startupProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
booleanspec.server.sidecarContainers.stdinWhether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-
booleanspec.server.sidecarContainers.stdinOnceWhether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-
stringspec.server.sidecarContainers.terminationMessagePathOptional: Path at which the file to which the container’s termination message will be written is mounted into the container’s filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-
stringspec.server.sidecarContainers.terminationMessagePolicyIndicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-
booleanspec.server.sidecarContainers.ttyWhether this container should allocate a TTY for itself, also requires ‘stdin’ to be true. Default is false.
-
array of objectsspec.server.sidecarContainers.volumeDevicesvolumeDevices is the list of block devices to be used by the container.
-
stringspec.server.sidecarContainers.volumeDevices.devicePathdevicePath is the path inside of the container that the device will be mapped to.
-
stringspec.server.sidecarContainers.volumeDevices.namename must match the name of a persistentVolumeClaim in the pod
-
-
array of objectsspec.server.sidecarContainers.volumeMountsPod volumes to mount into the container’s filesystem. Cannot be updated.
-
stringspec.server.sidecarContainers.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.server.sidecarContainers.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.server.sidecarContainers.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.server.sidecarContainers.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.server.sidecarContainers.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.server.sidecarContainers.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.server.sidecarContainers.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
stringspec.server.sidecarContainers.workingDirContainer’s working directory. If not specified, the container runtime’s default will be used, which might be configured in the container image. Cannot be updated.
-
-
array of objectsspec.server.volumeMountsVolumeMounts adds volumeMounts to the Argo CD Server container.
-
stringspec.server.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.server.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.server.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.server.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.server.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.server.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.server.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
array of objectsspec.server.volumesVolumes adds volumes to the Argo CD Server container.
-
objectspec.server.volumes.awsElasticBlockStoreawsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. Deprecated: AWSElasticBlockStore is deprecated. All operations for the in-tree awsElasticBlockStore type are redirected to the ebs.csi.aws.com CSI driver. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
stringspec.server.volumes.awsElasticBlockStore.fsTypefsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
integerspec.server.volumes.awsElasticBlockStore.partitionpartition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as “1”. Similarly, the volume partition for /dev/sda is “0” (or you can leave the property empty).
-
booleanspec.server.volumes.awsElasticBlockStore.readOnlyreadOnly value true will force the readOnly setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
stringspec.server.volumes.awsElasticBlockStore.volumeID
Required value
volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
-
objectspec.server.volumes.azureDiskazureDisk represents an Azure Data Disk mount on the host and bind mount to the pod. Deprecated: AzureDisk is deprecated. All operations for the in-tree azureDisk type are redirected to the disk.csi.azure.com CSI driver.
-
stringspec.server.volumes.azureDisk.cachingModecachingMode is the Host Caching mode: None, Read Only, Read Write.
-
stringspec.server.volumes.azureDisk.diskName
Required value
diskName is the Name of the data disk in the blob storage -
stringspec.server.volumes.azureDisk.diskURI
Required value
diskURI is the URI of data disk in the blob storage -
stringspec.server.volumes.azureDisk.fsTypefsType is Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
Default:
ext4 -
stringspec.server.volumes.azureDisk.kindkind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared
-
booleanspec.server.volumes.azureDisk.readOnlyreadOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
Default:
false
-
-
objectspec.server.volumes.azureFileazureFile represents an Azure File Service mount on the host and bind mount to the pod. Deprecated: AzureFile is deprecated. All operations for the in-tree azureFile type are redirected to the file.csi.azure.com CSI driver.
-
booleanspec.server.volumes.azureFile.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
stringspec.server.volumes.azureFile.secretName
Required value
secretName is the name of secret that contains Azure Storage Account Name and Key -
string
Required value
shareName is the azure share Name
-
-
objectspec.server.volumes.cephfscephFS represents a Ceph FS mount on the host that shares a pod’s lifetime. Deprecated: CephFS is deprecated and the in-tree cephfs type is no longer supported.
-
array of stringsspec.server.volumes.cephfs.monitors
Required value
monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it -
stringspec.server.volumes.cephfs.pathpath is Optional: Used as the mounted root, rather than the full Ceph tree, default is /
-
booleanspec.server.volumes.cephfs.readOnlyreadOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
stringspec.server.volumes.cephfs.secretFilesecretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
objectspec.server.volumes.cephfs.secretRefsecretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
stringspec.server.volumes.cephfs.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.server.volumes.cephfs.useruser is optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
-
objectspec.server.volumes.cindercinder represents a cinder volume attached and mounted on kubelets host machine. Deprecated: Cinder is deprecated. All operations for the in-tree cinder type are redirected to the cinder.csi.openstack.org CSI driver. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
stringspec.server.volumes.cinder.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
booleanspec.server.volumes.cinder.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
objectspec.server.volumes.cinder.secretRefsecretRef is optional: points to a secret object containing parameters used to connect to OpenStack.
-
stringspec.server.volumes.cinder.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.server.volumes.cinder.volumeID
Required value
volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
-
objectspec.server.volumes.configMapconfigMap represents a configMap that should populate this volume
-
integerspec.server.volumes.configMap.defaultModedefaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.server.volumes.configMap.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.server.volumes.configMap.items.keykey is the key to project.
-
integerspec.server.volumes.configMap.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.server.volumes.configMap.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.server.volumes.configMap.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.volumes.configMap.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
objectspec.server.volumes.csicsi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers.
-
stringspec.server.volumes.csi.driver
Required value
driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster. -
stringspec.server.volumes.csi.fsTypefsType to mount. Ex. “ext4”, “xfs”, “ntfs”. If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
-
objectspec.server.volumes.csi.nodePublishSecretRefnodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.
-
stringspec.server.volumes.csi.nodePublishSecretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
booleanspec.server.volumes.csi.readOnlyreadOnly specifies a read-only configuration for the volume. Defaults to false (read/write).
-
objectspec.server.volumes.csi.volumeAttributesvolumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver’s documentation for supported values.
-
-
objectspec.server.volumes.downwardAPIdownwardAPI represents downward API about the pod that should populate this volume
-
integerspec.server.volumes.downwardAPI.defaultModeOptional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.server.volumes.downwardAPI.itemsItems is a list of downward API volume file
-
objectspec.server.volumes.downwardAPI.items.fieldRefRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
-
stringspec.server.volumes.downwardAPI.items.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.server.volumes.downwardAPI.items.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
integerspec.server.volumes.downwardAPI.items.modeOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.server.volumes.downwardAPI.items.pathRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the ‘..’ path. Must be utf-8 encoded. The first item of the relative path must not start with ‘..’
-
objectspec.server.volumes.downwardAPI.items.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
stringspec.server.volumes.downwardAPI.items.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.server.volumes.downwardAPI.items.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.server.volumes.downwardAPI.items.resourceFieldRef.resource
Required value
Required: resource to select
-
-
-
-
objectspec.server.volumes.emptyDiremptyDir represents a temporary directory that shares a pod’s lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
stringspec.server.volumes.emptyDir.mediummedium represents what type of storage medium should back this directory. The default is "" which means to use the node’s default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
integer or stringspec.server.volumes.emptyDir.sizeLimitsizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-
-
objectspec.server.volumes.ephemeral
ephemeral represents a volume that is handled by a cluster storage driver. The volume’s lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.
Use this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity tracking are needed, c) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim).
Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod.
Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.
A pod can use both types of ephemeral volumes and persistent volumes at the same time.
-
objectspec.server.volumes.ephemeral.volumeClaimTemplate
Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be
<pod name>-<volume name>where<volume name>is the name from thePodSpec.Volumesarray entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long).An existing PVC with that name that is not owned by the pod will not be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster.
This field is read-only and no changes will be made by Kubernetes to the PVC after it has been created.
Required, must not be nil.
-
objectspec.server.volumes.ephemeral.volumeClaimTemplate.metadataMay contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
-
objectspec.server.volumes.ephemeral.volumeClaimTemplate.spec
Required value
The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.-
array of stringsspec.server.volumes.ephemeral.volumeClaimTemplate.spec.accessModesaccessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
-
objectspec.server.volumes.ephemeral.volumeClaimTemplate.spec.dataSource
dataSource field can be used to specify either:
- An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
- An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource.
-
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.kind
Required value
Kind is the type of resource being referenced -
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.name
Required value
Name is the name of resource being referenced
-
objectspec.server.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef
dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn’t specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn’t set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef:
- While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.
- While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.
- While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.kind
Required value
Kind is the type of resource being referenced -
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.name
Required value
Name is the name of resource being referenced -
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.namespaceNamespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace’s owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
objectspec.server.volumes.ephemeral.volumeClaimTemplate.spec.resourcesresources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
-
objectspec.server.volumes.ephemeral.volumeClaimTemplate.spec.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.server.volumes.ephemeral.volumeClaimTemplate.spec.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
objectspec.server.volumes.ephemeral.volumeClaimTemplate.spec.selectorselector is a label query over volumes to consider for binding.
-
array of objectsspec.server.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.server.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.server.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.storageClassNamestorageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
-
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.volumeAttributesClassNamevolumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string or nil value indicates that no VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state, this field can be reset to its previous value (including nil) to cancel the modification. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
-
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.volumeModevolumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.
-
stringspec.server.volumes.ephemeral.volumeClaimTemplate.spec.volumeNamevolumeName is the binding reference to the PersistentVolume backing this claim.
-
-
-
-
objectspec.server.volumes.fcfc represents a Fibre Channel resource that is attached to a kubelet’s host machine and then exposed to the pod.
-
stringspec.server.volumes.fc.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
integerspec.server.volumes.fc.lunlun is Optional: FC target lun number
-
booleanspec.server.volumes.fc.readOnlyreadOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
array of stringsspec.server.volumes.fc.targetWWNstargetWWNs is Optional: FC target worldwide names (WWNs)
-
array of stringsspec.server.volumes.fc.wwidswwids Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
-
-
objectspec.server.volumes.flexVolumeflexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. Deprecated: FlexVolume is deprecated. Consider using a CSIDriver instead.
-
stringspec.server.volumes.flexVolume.driver
Required value
driver is the name of the driver to use for this volume. -
stringspec.server.volumes.flexVolume.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. The default filesystem depends on FlexVolume script.
-
objectspec.server.volumes.flexVolume.optionsoptions is Optional: this field holds extra command options if any.
-
booleanspec.server.volumes.flexVolume.readOnlyreadOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.server.volumes.flexVolume.secretRefsecretRef is Optional: secretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.
-
stringspec.server.volumes.flexVolume.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
-
objectspec.server.volumes.flockerflocker represents a Flocker volume attached to a kubelet’s host machine. This depends on the Flocker control service being running. Deprecated: Flocker is deprecated and the in-tree flocker type is no longer supported.
-
stringspec.server.volumes.flocker.datasetNamedatasetName is Name of the dataset stored as metadata -> name on the dataset for Flocker should be considered as deprecated
-
stringspec.server.volumes.flocker.datasetUUIDdatasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset
-
-
objectspec.server.volumes.gcePersistentDiskgcePersistentDisk represents a GCE Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. Deprecated: GCEPersistentDisk is deprecated. All operations for the in-tree gcePersistentDisk type are redirected to the pd.csi.storage.gke.io CSI driver. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
stringspec.server.volumes.gcePersistentDisk.fsTypefsType is filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
integerspec.server.volumes.gcePersistentDisk.partitionpartition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as “1”. Similarly, the volume partition for /dev/sda is “0” (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
stringspec.server.volumes.gcePersistentDisk.pdName
Required value
pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk -
booleanspec.server.volumes.gcePersistentDisk.readOnlyreadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
-
objectspec.server.volumes.gitRepogitRepo represents a git repository at a particular revision. Deprecated: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod’s container.
-
stringspec.server.volumes.gitRepo.directorydirectory is the target directory name. Must not contain or start with ‘..’. If ‘.’ is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.
-
stringspec.server.volumes.gitRepo.repository
Required value
repository is the URL -
stringspec.server.volumes.gitRepo.revisionrevision is the commit hash for the specified revision.
-
-
objectspec.server.volumes.glusterfsglusterfs represents a Glusterfs mount on the host that shares a pod’s lifetime. Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
-
stringspec.server.volumes.glusterfs.endpoints
Required value
endpoints is the endpoint name that details Glusterfs topology. -
stringspec.server.volumes.glusterfs.path
Required value
path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod -
booleanspec.server.volumes.glusterfs.readOnlyreadOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
-
-
objectspec.server.volumes.hostPathhostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
stringspec.server.volumes.hostPath.path
Required value
path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath -
stringspec.server.volumes.hostPath.typetype for HostPath Volume Defaults to "" More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
-
objectspec.server.volumes.image
image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet’s host machine. The volume is resolved at pod startup depending on which PullPolicy value is provided:
- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.
- Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn’t present.
- IfNotPresent: the kubelet pulls if the reference isn’t already present on disk. Container creation will fail if the reference isn’t present and the pull fails.
The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro) and non-executable files (noexec). Sub path mounts for containers are not supported (spec.containers[].volumeMounts.subpath) before 1.33. The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
-
stringspec.server.volumes.image.pullPolicyPolicy for pulling OCI objects. Possible values are: Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn’t present. IfNotPresent: the kubelet pulls if the reference isn’t already present on disk. Container creation will fail if the reference isn’t present and the pull fails. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
-
stringspec.server.volumes.image.referenceRequired: Image or artifact reference to be used. Behaves in the same way as pod.spec.containers[*].image. Pull secrets will be assembled in the same way as for the container image by looking up node credentials, SA image pull secrets, and pod spec image pull secrets. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
objectspec.server.volumes.iscsiiscsi represents an ISCSI Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes/#iscsi
-
booleanspec.server.volumes.iscsi.chapAuthDiscoverychapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication
-
booleanspec.server.volumes.iscsi.chapAuthSessionchapAuthSession defines whether support iSCSI Session CHAP authentication
-
stringspec.server.volumes.iscsi.fsTypefsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
-
stringspec.server.volumes.iscsi.initiatorNameinitiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface
: will be created for the connection. -
stringspec.server.volumes.iscsi.iqn
Required value
iqn is the target iSCSI Qualified Name. -
stringspec.server.volumes.iscsi.iscsiInterfaceiscsiInterface is the interface Name that uses an iSCSI transport. Defaults to ‘default’ (tcp).
Default:
default -
integerspec.server.volumes.iscsi.lun
Required value
lun represents iSCSI Target Lun number. -
array of stringsspec.server.volumes.iscsi.portalsportals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-
booleanspec.server.volumes.iscsi.readOnlyreadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.
-
objectspec.server.volumes.iscsi.secretRefsecretRef is the CHAP Secret for iSCSI target and initiator authentication
-
stringspec.server.volumes.iscsi.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.server.volumes.iscsi.targetPortal
Required value
targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-
-
stringspec.server.volumes.namename of the volume. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
objectspec.server.volumes.nfsnfs represents an NFS mount on the host that shares a pod’s lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
stringspec.server.volumes.nfs.path
Required value
path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs -
booleanspec.server.volumes.nfs.readOnlyreadOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
stringspec.server.volumes.nfs.server
Required value
server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
-
objectspec.server.volumes.persistentVolumeClaimpersistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
-
stringspec.server.volumes.persistentVolumeClaim.claimName
Required value
claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims -
booleanspec.server.volumes.persistentVolumeClaim.readOnlyreadOnly Will force the ReadOnly setting in VolumeMounts. Default false.
-
-
objectspec.server.volumes.photonPersistentDiskphotonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine. Deprecated: PhotonPersistentDisk is deprecated and the in-tree photonPersistentDisk type is no longer supported.
-
stringspec.server.volumes.photonPersistentDisk.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
stringspec.server.volumes.photonPersistentDisk.pdID
Required value
pdID is the ID that identifies Photon Controller persistent disk
-
-
objectspec.server.volumes.portworxVolumeportworxVolume represents a portworx volume attached and mounted on kubelets host machine. Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate is on.
-
stringspec.server.volumes.portworxVolume.fsTypefSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”. Implicitly inferred to be “ext4” if unspecified.
-
booleanspec.server.volumes.portworxVolume.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
stringspec.server.volumes.portworxVolume.volumeID
Required value
volumeID uniquely identifies a Portworx volume
-
-
objectspec.server.volumes.projectedprojected items for all in one resources secrets, configmaps, and downward API
-
integerspec.server.volumes.projected.defaultModedefaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.server.volumes.projected.sourcessources is the list of volume projections. Each entry in this list handles one source.
-
objectspec.server.volumes.projected.sources.clusterTrustBundle
ClusterTrustBundle allows a pod to access the
.spec.trustBundlefield of ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.
ClusterTrustBundle objects can either be selected by name, or by the combination of signer name and a label selector.
Kubelet performs aggressive normalization of the PEM contents written into the pod filesystem. Esoteric PEM features such as inter-block comments and block headers are stripped. Certificates are deduplicated. The ordering of certificates within the file is arbitrary, and Kubelet may change the order over time.
-
objectspec.server.volumes.projected.sources.clusterTrustBundle.labelSelectorSelect all ClusterTrustBundles that match this label selector. Only has effect if signerName is set. Mutually-exclusive with name. If unset, interpreted as “match nothing”. If set but empty, interpreted as “match everything”.
-
array of objectsspec.server.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.server.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.server.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.server.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.server.volumes.projected.sources.clusterTrustBundle.labelSelector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.server.volumes.projected.sources.clusterTrustBundle.nameSelect a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.
-
booleanspec.server.volumes.projected.sources.clusterTrustBundle.optionalIf true, don’t block pod startup if the referenced ClusterTrustBundle(s) aren’t available. If using name, then the named ClusterTrustBundle is allowed not to exist. If using signerName, then the combination of signerName and labelSelector is allowed to match zero ClusterTrustBundles.
-
stringspec.server.volumes.projected.sources.clusterTrustBundle.path
Required value
Relative path from the volume root to write the bundle. -
stringspec.server.volumes.projected.sources.clusterTrustBundle.signerNameSelect all ClusterTrustBundles that match this signer name. Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated.
-
-
objectspec.server.volumes.projected.sources.configMapconfigMap information about the configMap data to project
-
array of objectsspec.server.volumes.projected.sources.configMap.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.server.volumes.projected.sources.configMap.items.keykey is the key to project.
-
integerspec.server.volumes.projected.sources.configMap.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.server.volumes.projected.sources.configMap.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.server.volumes.projected.sources.configMap.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.volumes.projected.sources.configMap.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
objectspec.server.volumes.projected.sources.downwardAPIdownwardAPI information about the downwardAPI data to project
-
array of objectsspec.server.volumes.projected.sources.downwardAPI.itemsItems is a list of DownwardAPIVolume file
-
objectspec.server.volumes.projected.sources.downwardAPI.items.fieldRefRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
-
stringspec.server.volumes.projected.sources.downwardAPI.items.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.server.volumes.projected.sources.downwardAPI.items.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
integerspec.server.volumes.projected.sources.downwardAPI.items.modeOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.server.volumes.projected.sources.downwardAPI.items.pathRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the ‘..’ path. Must be utf-8 encoded. The first item of the relative path must not start with ‘..’
-
objectspec.server.volumes.projected.sources.downwardAPI.items.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
stringspec.server.volumes.projected.sources.downwardAPI.items.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.server.volumes.projected.sources.downwardAPI.items.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.server.volumes.projected.sources.downwardAPI.items.resourceFieldRef.resource
Required value
Required: resource to select
-
-
-
-
objectspec.server.volumes.projected.sources.podCertificate
Projects an auto-rotating credential bundle (private key and certificate chain) that the pod can use either as a TLS client or server.
Kubelet generates a private key and uses it to send a PodCertificateRequest to the named signer. Once the signer approves the request and issues a certificate chain, Kubelet writes the key and certificate chain to the pod filesystem. The pod does not start until certificates have been issued for each podCertificate projected volume source in its spec.
Kubelet will begin trying to rotate the certificate at the time indicated by the signer using the PodCertificateRequest.Status.BeginRefreshAt timestamp.
Kubelet can write a single file, indicated by the credentialBundlePath field, or separate files, indicated by the keyPath and certificateChainPath fields.
The credential bundle is a single file in PEM format. The first PEM entry is the private key (in PKCS#8 format), and the remaining PEM entries are the certificate chain issued by the signer (typically, signers will return their certificate chain in leaf-to-root order).
Prefer using the credential bundle format, since your application code can read it atomically. If you use keyPath and certificateChainPath, your application must make two separate file reads. If these coincide with a certificate rotation, it is possible that the private key and leaf certificate you read may not correspond to each other. Your application will need to check for this condition, and re-read until they are consistent.
The named signer controls chooses the format of the certificate it issues; consult the signer implementation’s documentation to learn how to use the certificates it issues.
-
stringspec.server.volumes.projected.sources.podCertificate.certificateChainPath
Write the certificate chain at this path in the projected volume.
Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.
-
stringspec.server.volumes.projected.sources.podCertificate.credentialBundlePath
Write the credential bundle at this path in the projected volume.
The credential bundle is a single file that contains multiple PEM blocks. The first PEM block is a PRIVATE KEY block, containing a PKCS#8 private key.
The remaining blocks are CERTIFICATE blocks, containing the issued certificate chain from the signer (leaf and any intermediates).
Using credentialBundlePath lets your Pod’s application code make a single atomic read that retrieves a consistent key and certificate chain. If you project them to separate files, your application code will need to additionally check that the leaf certificate was issued to the key.
-
stringspec.server.volumes.projected.sources.podCertificate.keyPath
Write the key at this path in the projected volume.
Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.
-
stringspec.server.volumes.projected.sources.podCertificate.keyType
Required value
The type of keypair Kubelet will generate for the pod.
Valid values are “RSA3072”, “RSA4096”, “ECDSAP256”, “ECDSAP384”, “ECDSAP521”, and “ED25519”.
-
integerspec.server.volumes.projected.sources.podCertificate.maxExpirationSeconds
maxExpirationSeconds is the maximum lifetime permitted for the certificate.
Kubelet copies this value verbatim into the PodCertificateRequests it generates for this projection.
If omitted, kube-apiserver will set it to 86400(24 hours). kube-apiserver will reject values shorter than 3600 (1 hour). The maximum allowable value is 7862400 (91 days).
The signer implementation is then free to issue a certificate with any lifetime shorter than MaxExpirationSeconds, but no shorter than 3600 seconds (1 hour). This constraint is enforced by kube-apiserver.
kubernetes.iosigners will never issue certificates with a lifetime longer than 24 hours. -
stringspec.server.volumes.projected.sources.podCertificate.signerName
Required value
Kubelet’s generated CSRs will be addressed to this signer.
-
-
objectspec.server.volumes.projected.sources.secretsecret information about the secret data to project
-
array of objectsspec.server.volumes.projected.sources.secret.itemsitems if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.server.volumes.projected.sources.secret.items.keykey is the key to project.
-
integerspec.server.volumes.projected.sources.secret.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.server.volumes.projected.sources.secret.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.server.volumes.projected.sources.secret.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.volumes.projected.sources.secret.optionaloptional field specify whether the Secret or its key must be defined
-
-
objectspec.server.volumes.projected.sources.serviceAccountTokenserviceAccountToken is information about the serviceAccountToken data to project
-
stringspec.server.volumes.projected.sources.serviceAccountToken.audienceaudience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
-
integerspec.server.volumes.projected.sources.serviceAccountToken.expirationSecondsexpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
-
stringspec.server.volumes.projected.sources.serviceAccountToken.path
Required value
path is the path relative to the mount point of the file to project the token into.
-
-
-
-
objectspec.server.volumes.quobytequobyte represents a Quobyte mount on the host that shares a pod’s lifetime. Deprecated: Quobyte is deprecated and the in-tree quobyte type is no longer supported.
-
stringspec.server.volumes.quobyte.groupgroup to map volume access to Default is no group
-
booleanspec.server.volumes.quobyte.readOnlyreadOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.
-
stringspec.server.volumes.quobyte.registry
Required value
registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes -
stringspec.server.volumes.quobyte.tenanttenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin
-
stringspec.server.volumes.quobyte.useruser to map volume access to Defaults to serivceaccount user
-
stringspec.server.volumes.quobyte.volume
Required value
volume is a string that references an already created Quobyte volume by name.
-
-
objectspec.server.volumes.scaleIOscaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. Deprecated: ScaleIO is deprecated and the in-tree scaleIO type is no longer supported.
-
stringspec.server.volumes.scaleIO.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Default is “xfs”.
Default:
xfs -
stringspec.server.volumes.scaleIO.gateway
Required value
gateway is the host address of the ScaleIO API Gateway. -
stringspec.server.volumes.scaleIO.protectionDomainprotectionDomain is the name of the ScaleIO Protection Domain for the configured storage.
-
booleanspec.server.volumes.scaleIO.readOnlyreadOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.server.volumes.scaleIO.secretRef
Required value
secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail.-
stringspec.server.volumes.scaleIO.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
booleanspec.server.volumes.scaleIO.sslEnabledsslEnabled Flag enable/disable SSL communication with Gateway, default false
-
stringspec.server.volumes.scaleIO.storageModestorageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.
Default:
ThinProvisioned -
stringspec.server.volumes.scaleIO.storagePoolstoragePool is the ScaleIO Storage Pool associated with the protection domain.
-
stringspec.server.volumes.scaleIO.system
Required value
system is the name of the storage system as configured in ScaleIO. -
stringspec.server.volumes.scaleIO.volumeNamevolumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.
-
-
objectspec.server.volumes.secretsecret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
integerspec.server.volumes.secret.defaultModedefaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.server.volumes.secret.itemsitems If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.server.volumes.secret.items.keykey is the key to project.
-
integerspec.server.volumes.secret.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.server.volumes.secret.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
booleanspec.server.volumes.secret.optionaloptional field specify whether the Secret or its keys must be defined
-
stringspec.server.volumes.secret.secretNamesecretName is the name of the secret in the pod’s namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
-
objectspec.server.volumes.storageosstorageOS represents a StorageOS volume attached and mounted on Kubernetes nodes. Deprecated: StorageOS is deprecated and the in-tree storageos type is no longer supported.
-
stringspec.server.volumes.storageos.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
booleanspec.server.volumes.storageos.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.server.volumes.storageos.secretRefsecretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted.
-
stringspec.server.volumes.storageos.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.server.volumes.storageos.volumeNamevolumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.
-
stringspec.server.volumes.storageos.volumeNamespacevolumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod’s namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to “default” if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.
-
-
objectspec.server.volumes.vsphereVolumevsphereVolume represents a vSphere volume attached and mounted on kubelets host machine. Deprecated: VsphereVolume is deprecated. All operations for the in-tree vsphereVolume type are redirected to the csi.vsphere.vmware.com CSI driver.
-
stringspec.server.volumes.vsphereVolume.fsTypefsType is filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
stringspec.server.volumes.vsphereVolume.storagePolicyIDstoragePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.
-
stringspec.server.volumes.vsphereVolume.storagePolicyNamestoragePolicyName is the storage Policy Based Management (SPBM) profile name.
-
stringspec.server.volumes.vsphereVolume.volumePath
Required value
volumePath is the path that identifies vSphere volume vmdk
-
-
-
-
array of stringsspec.sourceNamespacesSourceNamespaces defines the namespaces application resources are allowed to be created in
-
objectspec.ssoSSO defines the Single Sign-on configuration for Argo CD
-
objectspec.sso.dexDex contains the configuration for Argo CD dex authentication
-
stringspec.sso.dex.configConfig is the dex connector configuration.
-
array of objectsspec.sso.dex.envEnv lets you specify environment variables for Dex.
-
stringspec.sso.dex.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.sso.dex.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.sso.dex.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.sso.dex.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.sso.dex.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.sso.dex.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.sso.dex.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.sso.dex.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.sso.dex.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.sso.dex.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.sso.dex.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.sso.dex.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.sso.dex.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.sso.dex.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.sso.dex.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.sso.dex.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.sso.dex.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.sso.dex.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.sso.dex.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.sso.dex.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.sso.dex.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.sso.dex.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.sso.dex.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of stringsspec.sso.dex.groupsOptional list of required groups a user must be a member of
-
objectspec.sso.dex.resourcesResources defines the Compute Resources required by the container for Dex.
-
array of objectsspec.sso.dex.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.sso.dex.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.sso.dex.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.sso.dex.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.sso.dex.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
array of objectsspec.sso.dex.volumeMountsVolumeMounts adds volumeMounts to the dex server container
-
stringspec.sso.dex.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.sso.dex.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.sso.dex.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.sso.dex.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.sso.dex.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.sso.dex.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.sso.dex.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
array of objectsspec.sso.dex.volumesVolumes adds volumes to the dex server container
-
objectspec.sso.dex.volumes.awsElasticBlockStoreawsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. Deprecated: AWSElasticBlockStore is deprecated. All operations for the in-tree awsElasticBlockStore type are redirected to the ebs.csi.aws.com CSI driver. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
stringspec.sso.dex.volumes.awsElasticBlockStore.fsTypefsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
integerspec.sso.dex.volumes.awsElasticBlockStore.partitionpartition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as “1”. Similarly, the volume partition for /dev/sda is “0” (or you can leave the property empty).
-
booleanspec.sso.dex.volumes.awsElasticBlockStore.readOnlyreadOnly value true will force the readOnly setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
stringspec.sso.dex.volumes.awsElasticBlockStore.volumeID
Required value
volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
-
objectspec.sso.dex.volumes.azureDiskazureDisk represents an Azure Data Disk mount on the host and bind mount to the pod. Deprecated: AzureDisk is deprecated. All operations for the in-tree azureDisk type are redirected to the disk.csi.azure.com CSI driver.
-
stringspec.sso.dex.volumes.azureDisk.cachingModecachingMode is the Host Caching mode: None, Read Only, Read Write.
-
stringspec.sso.dex.volumes.azureDisk.diskName
Required value
diskName is the Name of the data disk in the blob storage -
stringspec.sso.dex.volumes.azureDisk.diskURI
Required value
diskURI is the URI of data disk in the blob storage -
stringspec.sso.dex.volumes.azureDisk.fsTypefsType is Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
Default:
ext4 -
stringspec.sso.dex.volumes.azureDisk.kindkind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared
-
booleanspec.sso.dex.volumes.azureDisk.readOnlyreadOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
Default:
false
-
-
objectspec.sso.dex.volumes.azureFileazureFile represents an Azure File Service mount on the host and bind mount to the pod. Deprecated: AzureFile is deprecated. All operations for the in-tree azureFile type are redirected to the file.csi.azure.com CSI driver.
-
booleanspec.sso.dex.volumes.azureFile.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
stringspec.sso.dex.volumes.azureFile.secretName
Required value
secretName is the name of secret that contains Azure Storage Account Name and Key -
string
Required value
shareName is the azure share Name
-
-
objectspec.sso.dex.volumes.cephfscephFS represents a Ceph FS mount on the host that shares a pod’s lifetime. Deprecated: CephFS is deprecated and the in-tree cephfs type is no longer supported.
-
array of stringsspec.sso.dex.volumes.cephfs.monitors
Required value
monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it -
stringspec.sso.dex.volumes.cephfs.pathpath is Optional: Used as the mounted root, rather than the full Ceph tree, default is /
-
booleanspec.sso.dex.volumes.cephfs.readOnlyreadOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
stringspec.sso.dex.volumes.cephfs.secretFilesecretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
objectspec.sso.dex.volumes.cephfs.secretRefsecretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
stringspec.sso.dex.volumes.cephfs.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.sso.dex.volumes.cephfs.useruser is optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
-
objectspec.sso.dex.volumes.cindercinder represents a cinder volume attached and mounted on kubelets host machine. Deprecated: Cinder is deprecated. All operations for the in-tree cinder type are redirected to the cinder.csi.openstack.org CSI driver. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
stringspec.sso.dex.volumes.cinder.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
booleanspec.sso.dex.volumes.cinder.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
objectspec.sso.dex.volumes.cinder.secretRefsecretRef is optional: points to a secret object containing parameters used to connect to OpenStack.
-
stringspec.sso.dex.volumes.cinder.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.sso.dex.volumes.cinder.volumeID
Required value
volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
-
objectspec.sso.dex.volumes.configMapconfigMap represents a configMap that should populate this volume
-
integerspec.sso.dex.volumes.configMap.defaultModedefaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.sso.dex.volumes.configMap.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.sso.dex.volumes.configMap.items.keykey is the key to project.
-
integerspec.sso.dex.volumes.configMap.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.sso.dex.volumes.configMap.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.sso.dex.volumes.configMap.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.sso.dex.volumes.configMap.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
objectspec.sso.dex.volumes.csicsi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers.
-
stringspec.sso.dex.volumes.csi.driver
Required value
driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster. -
stringspec.sso.dex.volumes.csi.fsTypefsType to mount. Ex. “ext4”, “xfs”, “ntfs”. If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
-
objectspec.sso.dex.volumes.csi.nodePublishSecretRefnodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.
-
stringspec.sso.dex.volumes.csi.nodePublishSecretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
booleanspec.sso.dex.volumes.csi.readOnlyreadOnly specifies a read-only configuration for the volume. Defaults to false (read/write).
-
objectspec.sso.dex.volumes.csi.volumeAttributesvolumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver’s documentation for supported values.
-
-
objectspec.sso.dex.volumes.downwardAPIdownwardAPI represents downward API about the pod that should populate this volume
-
integerspec.sso.dex.volumes.downwardAPI.defaultModeOptional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.sso.dex.volumes.downwardAPI.itemsItems is a list of downward API volume file
-
objectspec.sso.dex.volumes.downwardAPI.items.fieldRefRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
-
stringspec.sso.dex.volumes.downwardAPI.items.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.sso.dex.volumes.downwardAPI.items.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
integerspec.sso.dex.volumes.downwardAPI.items.modeOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.sso.dex.volumes.downwardAPI.items.pathRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the ‘..’ path. Must be utf-8 encoded. The first item of the relative path must not start with ‘..’
-
objectspec.sso.dex.volumes.downwardAPI.items.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
stringspec.sso.dex.volumes.downwardAPI.items.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.sso.dex.volumes.downwardAPI.items.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.sso.dex.volumes.downwardAPI.items.resourceFieldRef.resource
Required value
Required: resource to select
-
-
-
-
objectspec.sso.dex.volumes.emptyDiremptyDir represents a temporary directory that shares a pod’s lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
stringspec.sso.dex.volumes.emptyDir.mediummedium represents what type of storage medium should back this directory. The default is "" which means to use the node’s default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
integer or stringspec.sso.dex.volumes.emptyDir.sizeLimitsizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-
-
objectspec.sso.dex.volumes.ephemeral
ephemeral represents a volume that is handled by a cluster storage driver. The volume’s lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.
Use this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity tracking are needed, c) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim).
Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod.
Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.
A pod can use both types of ephemeral volumes and persistent volumes at the same time.
-
objectspec.sso.dex.volumes.ephemeral.volumeClaimTemplate
Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be
<pod name>-<volume name>where<volume name>is the name from thePodSpec.Volumesarray entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long).An existing PVC with that name that is not owned by the pod will not be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster.
This field is read-only and no changes will be made by Kubernetes to the PVC after it has been created.
Required, must not be nil.
-
objectspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.metadataMay contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
-
objectspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec
Required value
The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.-
array of stringsspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.accessModesaccessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
-
objectspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.dataSource
dataSource field can be used to specify either:
- An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
- An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource.
-
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.kind
Required value
Kind is the type of resource being referenced -
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.name
Required value
Name is the name of resource being referenced
-
objectspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef
dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn’t specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn’t set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef:
- While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.
- While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.
- While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.kind
Required value
Kind is the type of resource being referenced -
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.name
Required value
Name is the name of resource being referenced -
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.namespaceNamespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace’s owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
objectspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.resourcesresources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
-
objectspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
objectspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.selectorselector is a label query over volumes to consider for binding.
-
array of objectsspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.storageClassNamestorageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
-
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.volumeAttributesClassNamevolumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string or nil value indicates that no VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state, this field can be reset to its previous value (including nil) to cancel the modification. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
-
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.volumeModevolumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.
-
stringspec.sso.dex.volumes.ephemeral.volumeClaimTemplate.spec.volumeNamevolumeName is the binding reference to the PersistentVolume backing this claim.
-
-
-
-
objectspec.sso.dex.volumes.fcfc represents a Fibre Channel resource that is attached to a kubelet’s host machine and then exposed to the pod.
-
stringspec.sso.dex.volumes.fc.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
integerspec.sso.dex.volumes.fc.lunlun is Optional: FC target lun number
-
booleanspec.sso.dex.volumes.fc.readOnlyreadOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
array of stringsspec.sso.dex.volumes.fc.targetWWNstargetWWNs is Optional: FC target worldwide names (WWNs)
-
array of stringsspec.sso.dex.volumes.fc.wwidswwids Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
-
-
objectspec.sso.dex.volumes.flexVolumeflexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. Deprecated: FlexVolume is deprecated. Consider using a CSIDriver instead.
-
stringspec.sso.dex.volumes.flexVolume.driver
Required value
driver is the name of the driver to use for this volume. -
stringspec.sso.dex.volumes.flexVolume.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. The default filesystem depends on FlexVolume script.
-
objectspec.sso.dex.volumes.flexVolume.optionsoptions is Optional: this field holds extra command options if any.
-
booleanspec.sso.dex.volumes.flexVolume.readOnlyreadOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.sso.dex.volumes.flexVolume.secretRefsecretRef is Optional: secretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.
-
stringspec.sso.dex.volumes.flexVolume.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
-
objectspec.sso.dex.volumes.flockerflocker represents a Flocker volume attached to a kubelet’s host machine. This depends on the Flocker control service being running. Deprecated: Flocker is deprecated and the in-tree flocker type is no longer supported.
-
stringspec.sso.dex.volumes.flocker.datasetNamedatasetName is Name of the dataset stored as metadata -> name on the dataset for Flocker should be considered as deprecated
-
stringspec.sso.dex.volumes.flocker.datasetUUIDdatasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset
-
-
objectspec.sso.dex.volumes.gcePersistentDiskgcePersistentDisk represents a GCE Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. Deprecated: GCEPersistentDisk is deprecated. All operations for the in-tree gcePersistentDisk type are redirected to the pd.csi.storage.gke.io CSI driver. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
stringspec.sso.dex.volumes.gcePersistentDisk.fsTypefsType is filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
integerspec.sso.dex.volumes.gcePersistentDisk.partitionpartition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as “1”. Similarly, the volume partition for /dev/sda is “0” (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
stringspec.sso.dex.volumes.gcePersistentDisk.pdName
Required value
pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk -
booleanspec.sso.dex.volumes.gcePersistentDisk.readOnlyreadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
-
objectspec.sso.dex.volumes.gitRepogitRepo represents a git repository at a particular revision. Deprecated: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod’s container.
-
stringspec.sso.dex.volumes.gitRepo.directorydirectory is the target directory name. Must not contain or start with ‘..’. If ‘.’ is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.
-
stringspec.sso.dex.volumes.gitRepo.repository
Required value
repository is the URL -
stringspec.sso.dex.volumes.gitRepo.revisionrevision is the commit hash for the specified revision.
-
-
objectspec.sso.dex.volumes.glusterfsglusterfs represents a Glusterfs mount on the host that shares a pod’s lifetime. Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
-
stringspec.sso.dex.volumes.glusterfs.endpoints
Required value
endpoints is the endpoint name that details Glusterfs topology. -
stringspec.sso.dex.volumes.glusterfs.path
Required value
path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod -
booleanspec.sso.dex.volumes.glusterfs.readOnlyreadOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
-
-
objectspec.sso.dex.volumes.hostPathhostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
stringspec.sso.dex.volumes.hostPath.path
Required value
path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath -
stringspec.sso.dex.volumes.hostPath.typetype for HostPath Volume Defaults to "" More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
-
objectspec.sso.dex.volumes.image
image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet’s host machine. The volume is resolved at pod startup depending on which PullPolicy value is provided:
- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.
- Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn’t present.
- IfNotPresent: the kubelet pulls if the reference isn’t already present on disk. Container creation will fail if the reference isn’t present and the pull fails.
The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro) and non-executable files (noexec). Sub path mounts for containers are not supported (spec.containers[].volumeMounts.subpath) before 1.33. The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
-
stringspec.sso.dex.volumes.image.pullPolicyPolicy for pulling OCI objects. Possible values are: Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn’t present. IfNotPresent: the kubelet pulls if the reference isn’t already present on disk. Container creation will fail if the reference isn’t present and the pull fails. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
-
stringspec.sso.dex.volumes.image.referenceRequired: Image or artifact reference to be used. Behaves in the same way as pod.spec.containers[*].image. Pull secrets will be assembled in the same way as for the container image by looking up node credentials, SA image pull secrets, and pod spec image pull secrets. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
objectspec.sso.dex.volumes.iscsiiscsi represents an ISCSI Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes/#iscsi
-
booleanspec.sso.dex.volumes.iscsi.chapAuthDiscoverychapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication
-
booleanspec.sso.dex.volumes.iscsi.chapAuthSessionchapAuthSession defines whether support iSCSI Session CHAP authentication
-
stringspec.sso.dex.volumes.iscsi.fsTypefsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
-
stringspec.sso.dex.volumes.iscsi.initiatorNameinitiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface
: will be created for the connection. -
stringspec.sso.dex.volumes.iscsi.iqn
Required value
iqn is the target iSCSI Qualified Name. -
stringspec.sso.dex.volumes.iscsi.iscsiInterfaceiscsiInterface is the interface Name that uses an iSCSI transport. Defaults to ‘default’ (tcp).
Default:
default -
integerspec.sso.dex.volumes.iscsi.lun
Required value
lun represents iSCSI Target Lun number. -
array of stringsspec.sso.dex.volumes.iscsi.portalsportals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-
booleanspec.sso.dex.volumes.iscsi.readOnlyreadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.
-
objectspec.sso.dex.volumes.iscsi.secretRefsecretRef is the CHAP Secret for iSCSI target and initiator authentication
-
stringspec.sso.dex.volumes.iscsi.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.sso.dex.volumes.iscsi.targetPortal
Required value
targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-
-
stringspec.sso.dex.volumes.namename of the volume. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
objectspec.sso.dex.volumes.nfsnfs represents an NFS mount on the host that shares a pod’s lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
stringspec.sso.dex.volumes.nfs.path
Required value
path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs -
booleanspec.sso.dex.volumes.nfs.readOnlyreadOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
stringspec.sso.dex.volumes.nfs.server
Required value
server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
-
objectspec.sso.dex.volumes.persistentVolumeClaimpersistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
-
stringspec.sso.dex.volumes.persistentVolumeClaim.claimName
Required value
claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims -
booleanspec.sso.dex.volumes.persistentVolumeClaim.readOnlyreadOnly Will force the ReadOnly setting in VolumeMounts. Default false.
-
-
objectspec.sso.dex.volumes.photonPersistentDiskphotonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine. Deprecated: PhotonPersistentDisk is deprecated and the in-tree photonPersistentDisk type is no longer supported.
-
stringspec.sso.dex.volumes.photonPersistentDisk.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
stringspec.sso.dex.volumes.photonPersistentDisk.pdID
Required value
pdID is the ID that identifies Photon Controller persistent disk
-
-
objectspec.sso.dex.volumes.portworxVolumeportworxVolume represents a portworx volume attached and mounted on kubelets host machine. Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate is on.
-
stringspec.sso.dex.volumes.portworxVolume.fsTypefSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”. Implicitly inferred to be “ext4” if unspecified.
-
booleanspec.sso.dex.volumes.portworxVolume.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
stringspec.sso.dex.volumes.portworxVolume.volumeID
Required value
volumeID uniquely identifies a Portworx volume
-
-
objectspec.sso.dex.volumes.projectedprojected items for all in one resources secrets, configmaps, and downward API
-
integerspec.sso.dex.volumes.projected.defaultModedefaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.sso.dex.volumes.projected.sourcessources is the list of volume projections. Each entry in this list handles one source.
-
objectspec.sso.dex.volumes.projected.sources.clusterTrustBundle
ClusterTrustBundle allows a pod to access the
.spec.trustBundlefield of ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.
ClusterTrustBundle objects can either be selected by name, or by the combination of signer name and a label selector.
Kubelet performs aggressive normalization of the PEM contents written into the pod filesystem. Esoteric PEM features such as inter-block comments and block headers are stripped. Certificates are deduplicated. The ordering of certificates within the file is arbitrary, and Kubelet may change the order over time.
-
objectspec.sso.dex.volumes.projected.sources.clusterTrustBundle.labelSelectorSelect all ClusterTrustBundles that match this label selector. Only has effect if signerName is set. Mutually-exclusive with name. If unset, interpreted as “match nothing”. If set but empty, interpreted as “match everything”.
-
array of objectsspec.sso.dex.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.sso.dex.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.sso.dex.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.sso.dex.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.sso.dex.volumes.projected.sources.clusterTrustBundle.labelSelector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.sso.dex.volumes.projected.sources.clusterTrustBundle.nameSelect a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.
-
booleanspec.sso.dex.volumes.projected.sources.clusterTrustBundle.optionalIf true, don’t block pod startup if the referenced ClusterTrustBundle(s) aren’t available. If using name, then the named ClusterTrustBundle is allowed not to exist. If using signerName, then the combination of signerName and labelSelector is allowed to match zero ClusterTrustBundles.
-
stringspec.sso.dex.volumes.projected.sources.clusterTrustBundle.path
Required value
Relative path from the volume root to write the bundle. -
stringspec.sso.dex.volumes.projected.sources.clusterTrustBundle.signerNameSelect all ClusterTrustBundles that match this signer name. Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated.
-
-
objectspec.sso.dex.volumes.projected.sources.configMapconfigMap information about the configMap data to project
-
array of objectsspec.sso.dex.volumes.projected.sources.configMap.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.sso.dex.volumes.projected.sources.configMap.items.keykey is the key to project.
-
integerspec.sso.dex.volumes.projected.sources.configMap.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.sso.dex.volumes.projected.sources.configMap.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.sso.dex.volumes.projected.sources.configMap.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.sso.dex.volumes.projected.sources.configMap.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
objectspec.sso.dex.volumes.projected.sources.downwardAPIdownwardAPI information about the downwardAPI data to project
-
array of objectsspec.sso.dex.volumes.projected.sources.downwardAPI.itemsItems is a list of DownwardAPIVolume file
-
objectspec.sso.dex.volumes.projected.sources.downwardAPI.items.fieldRefRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
-
stringspec.sso.dex.volumes.projected.sources.downwardAPI.items.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.sso.dex.volumes.projected.sources.downwardAPI.items.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
integerspec.sso.dex.volumes.projected.sources.downwardAPI.items.modeOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.sso.dex.volumes.projected.sources.downwardAPI.items.pathRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the ‘..’ path. Must be utf-8 encoded. The first item of the relative path must not start with ‘..’
-
objectspec.sso.dex.volumes.projected.sources.downwardAPI.items.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
stringspec.sso.dex.volumes.projected.sources.downwardAPI.items.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.sso.dex.volumes.projected.sources.downwardAPI.items.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.sso.dex.volumes.projected.sources.downwardAPI.items.resourceFieldRef.resource
Required value
Required: resource to select
-
-
-
-
objectspec.sso.dex.volumes.projected.sources.podCertificate
Projects an auto-rotating credential bundle (private key and certificate chain) that the pod can use either as a TLS client or server.
Kubelet generates a private key and uses it to send a PodCertificateRequest to the named signer. Once the signer approves the request and issues a certificate chain, Kubelet writes the key and certificate chain to the pod filesystem. The pod does not start until certificates have been issued for each podCertificate projected volume source in its spec.
Kubelet will begin trying to rotate the certificate at the time indicated by the signer using the PodCertificateRequest.Status.BeginRefreshAt timestamp.
Kubelet can write a single file, indicated by the credentialBundlePath field, or separate files, indicated by the keyPath and certificateChainPath fields.
The credential bundle is a single file in PEM format. The first PEM entry is the private key (in PKCS#8 format), and the remaining PEM entries are the certificate chain issued by the signer (typically, signers will return their certificate chain in leaf-to-root order).
Prefer using the credential bundle format, since your application code can read it atomically. If you use keyPath and certificateChainPath, your application must make two separate file reads. If these coincide with a certificate rotation, it is possible that the private key and leaf certificate you read may not correspond to each other. Your application will need to check for this condition, and re-read until they are consistent.
The named signer controls chooses the format of the certificate it issues; consult the signer implementation’s documentation to learn how to use the certificates it issues.
-
stringspec.sso.dex.volumes.projected.sources.podCertificate.certificateChainPath
Write the certificate chain at this path in the projected volume.
Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.
-
stringspec.sso.dex.volumes.projected.sources.podCertificate.credentialBundlePath
Write the credential bundle at this path in the projected volume.
The credential bundle is a single file that contains multiple PEM blocks. The first PEM block is a PRIVATE KEY block, containing a PKCS#8 private key.
The remaining blocks are CERTIFICATE blocks, containing the issued certificate chain from the signer (leaf and any intermediates).
Using credentialBundlePath lets your Pod’s application code make a single atomic read that retrieves a consistent key and certificate chain. If you project them to separate files, your application code will need to additionally check that the leaf certificate was issued to the key.
-
stringspec.sso.dex.volumes.projected.sources.podCertificate.keyPath
Write the key at this path in the projected volume.
Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.
-
stringspec.sso.dex.volumes.projected.sources.podCertificate.keyType
Required value
The type of keypair Kubelet will generate for the pod.
Valid values are “RSA3072”, “RSA4096”, “ECDSAP256”, “ECDSAP384”, “ECDSAP521”, and “ED25519”.
-
integerspec.sso.dex.volumes.projected.sources.podCertificate.maxExpirationSeconds
maxExpirationSeconds is the maximum lifetime permitted for the certificate.
Kubelet copies this value verbatim into the PodCertificateRequests it generates for this projection.
If omitted, kube-apiserver will set it to 86400(24 hours). kube-apiserver will reject values shorter than 3600 (1 hour). The maximum allowable value is 7862400 (91 days).
The signer implementation is then free to issue a certificate with any lifetime shorter than MaxExpirationSeconds, but no shorter than 3600 seconds (1 hour). This constraint is enforced by kube-apiserver.
kubernetes.iosigners will never issue certificates with a lifetime longer than 24 hours. -
stringspec.sso.dex.volumes.projected.sources.podCertificate.signerName
Required value
Kubelet’s generated CSRs will be addressed to this signer.
-
-
objectspec.sso.dex.volumes.projected.sources.secretsecret information about the secret data to project
-
array of objectsspec.sso.dex.volumes.projected.sources.secret.itemsitems if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.sso.dex.volumes.projected.sources.secret.items.keykey is the key to project.
-
integerspec.sso.dex.volumes.projected.sources.secret.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.sso.dex.volumes.projected.sources.secret.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.sso.dex.volumes.projected.sources.secret.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.sso.dex.volumes.projected.sources.secret.optionaloptional field specify whether the Secret or its key must be defined
-
-
objectspec.sso.dex.volumes.projected.sources.serviceAccountTokenserviceAccountToken is information about the serviceAccountToken data to project
-
stringspec.sso.dex.volumes.projected.sources.serviceAccountToken.audienceaudience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
-
integerspec.sso.dex.volumes.projected.sources.serviceAccountToken.expirationSecondsexpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
-
stringspec.sso.dex.volumes.projected.sources.serviceAccountToken.path
Required value
path is the path relative to the mount point of the file to project the token into.
-
-
-
-
objectspec.sso.dex.volumes.quobytequobyte represents a Quobyte mount on the host that shares a pod’s lifetime. Deprecated: Quobyte is deprecated and the in-tree quobyte type is no longer supported.
-
stringspec.sso.dex.volumes.quobyte.groupgroup to map volume access to Default is no group
-
booleanspec.sso.dex.volumes.quobyte.readOnlyreadOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.
-
stringspec.sso.dex.volumes.quobyte.registry
Required value
registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes -
stringspec.sso.dex.volumes.quobyte.tenanttenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin
-
stringspec.sso.dex.volumes.quobyte.useruser to map volume access to Defaults to serivceaccount user
-
stringspec.sso.dex.volumes.quobyte.volume
Required value
volume is a string that references an already created Quobyte volume by name.
-
-
objectspec.sso.dex.volumes.scaleIOscaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. Deprecated: ScaleIO is deprecated and the in-tree scaleIO type is no longer supported.
-
stringspec.sso.dex.volumes.scaleIO.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Default is “xfs”.
Default:
xfs -
stringspec.sso.dex.volumes.scaleIO.gateway
Required value
gateway is the host address of the ScaleIO API Gateway. -
stringspec.sso.dex.volumes.scaleIO.protectionDomainprotectionDomain is the name of the ScaleIO Protection Domain for the configured storage.
-
booleanspec.sso.dex.volumes.scaleIO.readOnlyreadOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.sso.dex.volumes.scaleIO.secretRef
Required value
secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail.-
stringspec.sso.dex.volumes.scaleIO.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
booleanspec.sso.dex.volumes.scaleIO.sslEnabledsslEnabled Flag enable/disable SSL communication with Gateway, default false
-
stringspec.sso.dex.volumes.scaleIO.storageModestorageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.
Default:
ThinProvisioned -
stringspec.sso.dex.volumes.scaleIO.storagePoolstoragePool is the ScaleIO Storage Pool associated with the protection domain.
-
stringspec.sso.dex.volumes.scaleIO.system
Required value
system is the name of the storage system as configured in ScaleIO. -
stringspec.sso.dex.volumes.scaleIO.volumeNamevolumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.
-
-
objectspec.sso.dex.volumes.secretsecret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
integerspec.sso.dex.volumes.secret.defaultModedefaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.sso.dex.volumes.secret.itemsitems If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.sso.dex.volumes.secret.items.keykey is the key to project.
-
integerspec.sso.dex.volumes.secret.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.sso.dex.volumes.secret.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
booleanspec.sso.dex.volumes.secret.optionaloptional field specify whether the Secret or its keys must be defined
-
stringspec.sso.dex.volumes.secret.secretNamesecretName is the name of the secret in the pod’s namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
-
objectspec.sso.dex.volumes.storageosstorageOS represents a StorageOS volume attached and mounted on Kubernetes nodes. Deprecated: StorageOS is deprecated and the in-tree storageos type is no longer supported.
-
stringspec.sso.dex.volumes.storageos.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
booleanspec.sso.dex.volumes.storageos.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.sso.dex.volumes.storageos.secretRefsecretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted.
-
stringspec.sso.dex.volumes.storageos.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.sso.dex.volumes.storageos.volumeNamevolumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.
-
stringspec.sso.dex.volumes.storageos.volumeNamespacevolumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod’s namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to “default” if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.
-
-
objectspec.sso.dex.volumes.vsphereVolumevsphereVolume represents a vSphere volume attached and mounted on kubelets host machine. Deprecated: VsphereVolume is deprecated. All operations for the in-tree vsphereVolume type are redirected to the csi.vsphere.vmware.com CSI driver.
-
stringspec.sso.dex.volumes.vsphereVolume.fsTypefsType is filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
stringspec.sso.dex.volumes.vsphereVolume.storagePolicyIDstoragePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.
-
stringspec.sso.dex.volumes.vsphereVolume.storagePolicyNamestoragePolicyName is the storage Policy Based Management (SPBM) profile name.
-
stringspec.sso.dex.volumes.vsphereVolume.volumePath
Required value
volumePath is the path that identifies vSphere volume vmdk
-
-
-
-
stringspec.sso.providerProvider installs and configures the given SSO Provider with Argo CD.
-
-
booleanspec.statusBadgeEnabledStatusBadgeEnabled toggles application status badge feature.
-
objectspec.tlsTLS defines the TLS options for ArgoCD.
-
objectspec.tls.caCA defines the CA options.
-
stringspec.tls.ca.configMapNameConfigMapName is the name of the ConfigMap containing the CA Certificate.
-
stringspec.tls.ca.secretNameSecretName is the name of the Secret containing the CA Certificate and Key.
-
-
objectspec.tls.initialCertsInitialCerts defines custom TLS certificates upon creation of the cluster for connecting Git repositories via HTTPS.
-
-
booleanspec.usersAnonymousEnabledUsersAnonymousEnabled toggles anonymous user access. The anonymous users get default role permissions specified argocd-rbac-cm.
-
-
objectstatusArgoCDStatus defines the observed state of ArgoCD
-
stringstatus.applicationControllerApplicationController is a simple, high-level summary of where the Argo CD application controller component is in its lifecycle. There are four possible ApplicationController values: Pending: The Argo CD application controller component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD application controller component are in a Ready state. Failed: At least one of the Argo CD application controller component Pods had a failure. Unknown: The state of the Argo CD application controller component could not be obtained.
-
stringstatus.applicationSetControllerApplicationSetController is a simple, high-level summary of where the Argo CD applicationSet controller component is in its lifecycle. There are four possible ApplicationSetController values: Pending: The Argo CD applicationSet controller component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD applicationSet controller component are in a Ready state. Failed: At least one of the Argo CD applicationSet controller component Pods had a failure. Unknown: The state of the Argo CD applicationSet controller component could not be obtained.
-
array of objectsstatus.conditionsConditions is an array of the ArgoCD’s status conditions
-
stringstatus.conditions.lastTransitionTimelastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
-
stringstatus.conditions.messagemessage is a human readable message indicating details about the transition. This may be an empty string.
Maximum length:
32768 -
integerstatus.conditions.observedGenerationobservedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
Allowed values:
0 <= X -
stringstatus.conditions.reasonreason contains a programmatic identifier indicating the reason for the condition’s last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
Length:
1..1024Pattern:
^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ -
stringstatus.conditions.statusstatus of the condition, one of True, False, Unknown.
Allowed values:
True,False,Unknown -
stringstatus.conditions.typetype of condition in CamelCase or in foo.example.com/CamelCase.
Maximum length:
316Pattern:
^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
-
-
stringstatus.hostHost is the hostname of the Ingress.
-
stringstatus.notificationsControllerNotificationsController is a simple, high-level summary of where the Argo CD notifications controller component is in its lifecycle. There are four possible NotificationsController values: Pending: The Argo CD notifications controller component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD notifications controller component are in a Ready state. Failed: At least one of the Argo CD notifications controller component Pods had a failure. Unknown: The state of the Argo CD notifications controller component could not be obtained.
-
stringstatus.phasePhase is a simple, high-level summary of where the ArgoCD is in its lifecycle. There are four possible phase values: Pending: The ArgoCD has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Available: All of the resources for the ArgoCD are ready. Failed: At least one resource has experienced a failure. Unknown: The state of the ArgoCD phase could not be obtained.
-
stringstatus.redisRedis is a simple, high-level summary of where the Argo CD Redis component is in its lifecycle. There are four possible redis values: Pending: The Argo CD Redis component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD Redis component are in a Ready state. Failed: At least one of the Argo CD Redis component Pods had a failure. Unknown: The state of the Argo CD Redis component could not be obtained.
-
stringstatus.redisTLSChecksumRedisTLSChecksum contains the SHA256 checksum of the latest known state of tls.crt and tls.key in the argocd-operator-redis-tls secret.
-
stringstatus.repoRepo is a simple, high-level summary of where the Argo CD Repo component is in its lifecycle. There are four possible repo values: Pending: The Argo CD Repo component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD Repo component are in a Ready state. Failed: At least one of the Argo CD Repo component Pods had a failure. Unknown: The state of the Argo CD Repo component could not be obtained.
-
stringstatus.repoTLSChecksumRepoTLSChecksum contains the SHA256 checksum of the latest known state of tls.crt and tls.key in the argocd-repo-server-tls secret.
-
stringstatus.serverServer is a simple, high-level summary of where the Argo CD server component is in its lifecycle. There are four possible server values: Pending: The Argo CD server component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD server component are in a Ready state. Failed: At least one of the Argo CD server component Pods had a failure. Unknown: The state of the Argo CD server component could not be obtained.
-
stringstatus.ssoSSO is a simple, high-level summary of where the Argo CD SSO(Dex/Keycloak) component is in its lifecycle. There are four possible sso values: Pending: The Argo CD SSO component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD SSO component are in a Ready state. Failed: At least one of the Argo CD SSO component Pods had a failure. Unknown: The state of the Argo CD SSO component could not be obtained.
-
-
stringapiVersionAPIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-
stringkindKind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-
objectmetadata
-
objectspecArgoCDSpec defines the desired state of ArgoCD
-
booleanspec.aggregatedClusterRolesAggregatedClusterRoles will allow users to have aggregated ClusterRoles for a cluster scoped instance.
-
stringspec.applicationInstanceLabelKeyApplicationInstanceLabelKey is the key name where Argo CD injects the app name as a tracking label.
-
objectspec.applicationSetArgoCDApplicationSet defines whether the Argo CD ApplicationSet controller should be installed.
-
array of objectsspec.applicationSet.envEnv lets you specify environment for applicationSet controller pods
-
stringspec.applicationSet.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.applicationSet.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.applicationSet.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.applicationSet.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.applicationSet.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.applicationSet.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.applicationSet.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.applicationSet.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.applicationSet.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.applicationSet.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.applicationSet.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.applicationSet.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.applicationSet.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.applicationSet.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.applicationSet.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.applicationSet.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.applicationSet.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.applicationSet.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.applicationSet.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.applicationSet.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.applicationSet.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.applicationSet.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.applicationSet.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of stringsspec.applicationSet.extraCommandArgsExtraCommandArgs allows users to pass command line arguments to ApplicationSet controller. They get added to default command line arguments provided by the operator. Please note that the command line arguments provided as part of ExtraCommandArgs will not overwrite the default command line arguments.
-
stringspec.applicationSet.logFormatLogFormat refers to the log format used by the ApplicationSet component. Defaults to ArgoCDDefaultLogFormat if not configured. Valid options are text or json.
Allowed values:
text,json -
stringspec.applicationSet.logLevelLogLevel describes the log level that should be used by the ApplicationSet controller. Defaults to ArgoCDDefaultLogLevel if not set. Valid options are debug,info, error, and warn.
-
objectspec.applicationSet.resourcesResources defines the Compute Resources required by the container for ApplicationSet.
-
array of objectsspec.applicationSet.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.applicationSet.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.applicationSet.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.applicationSet.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.applicationSet.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
objectspec.applicationSet.webhookServerWebhookServerSpec defines the options for the ApplicationSet Webhook Server component.
-
stringspec.applicationSet.webhookServer.hostHost is the hostname to use for Ingress/Route resources.
-
objectspec.applicationSet.webhookServer.ingressIngress defines the desired state for an Ingress for the Application set webhook component.
-
objectspec.applicationSet.webhookServer.ingress.annotationsAnnotations is the map of annotations to apply to the Ingress.
-
booleanspec.applicationSet.webhookServer.ingress.enabled
Required value
Enabled will toggle the creation of the Ingress. -
stringspec.applicationSet.webhookServer.ingress.ingressClassNameIngressClassName for the Ingress resource.
-
stringspec.applicationSet.webhookServer.ingress.pathPath used for the Ingress resource.
-
array of objectsspec.applicationSet.webhookServer.ingress.tlsTLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.
-
array of stringsspec.applicationSet.webhookServer.ingress.tls.hostshosts is a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.
-
stringspec.applicationSet.webhookServer.ingress.tls.secretNamesecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the “Host” header field used by an IngressRule, the SNI host is used for termination and value of the “Host” header is used for routing.
-
-
-
-
-
objectspec.argoCDAgentArgoCDAgent defines configurations for the ArgoCD Agent component.
-
objectspec.argoCDAgent.agentAgent defines configurations for the Agent component of Argo CD Agent.
-
objectspec.argoCDAgent.agent.clientClient defines the client options for the Agent component.
-
booleanspec.argoCDAgent.agent.client.enableCompressionEnableCompression is the flag to enable compression while sending data between Principal and Agent using gRPC
-
booleanspec.argoCDAgent.agent.client.enableWebSocketEnableWebSocket is the flag to enable WebSocket for event streaming
-
stringspec.argoCDAgent.agent.client.keepAliveIntervalKeepAliveInterval is the interval for keep-alive pings to the principal
-
stringspec.argoCDAgent.agent.client.modeMode is the operational mode for the agent (managed or autonomous)
-
stringspec.argoCDAgent.agent.client.principalServerAddressPrincipalServerAddress is the remote address of the principal server to connect to.
-
stringspec.argoCDAgent.agent.client.principalServerPortPrincipalServerPort is the remote port of the principal server to connect to.
-
-
stringspec.argoCDAgent.agent.credsCreds is the credential identifier for the agent authentication
-
booleanspec.argoCDAgent.agent.enabledEnabled is the flag to enable the Agent component during Argo CD installation. (optional, default
false) -
array of objectsspec.argoCDAgent.agent.envEnv lets you specify environment for agent pods
-
stringspec.argoCDAgent.agent.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.argoCDAgent.agent.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.argoCDAgent.agent.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.argoCDAgent.agent.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.argoCDAgent.agent.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.argoCDAgent.agent.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.argoCDAgent.agent.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.argoCDAgent.agent.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.argoCDAgent.agent.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.argoCDAgent.agent.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.argoCDAgent.agent.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.argoCDAgent.agent.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.argoCDAgent.agent.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.argoCDAgent.agent.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.argoCDAgent.agent.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.argoCDAgent.agent.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.argoCDAgent.agent.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.argoCDAgent.agent.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.argoCDAgent.agent.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.argoCDAgent.agent.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.argoCDAgent.agent.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.argoCDAgent.agent.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.argoCDAgent.agent.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
stringspec.argoCDAgent.agent.imageImage is the name of Argo CD Agent image
-
stringspec.argoCDAgent.agent.logFormatLogFormat refers to the log format used by the Agent component.
-
stringspec.argoCDAgent.agent.logLevelLogLevel refers to the log level used by the Agent component.
-
objectspec.argoCDAgent.agent.redisRedis defines the Redis options for the Agent component.
-
stringspec.argoCDAgent.agent.redis.serverAddressServerAddress is the address of the Redis server to be used by the PrincAgentipal component.
-
-
objectspec.argoCDAgent.agent.tlsTLS defines the TLS options for the Agent component.
-
booleanspec.argoCDAgent.agent.tls.insecureInsecure is the flag to skip TLS certificate validation when connecting to the principal (insecure, for development only)
-
stringspec.argoCDAgent.agent.tls.rootCASecretNameRootCASecretName is the name of the secret containing the root CA certificate
-
stringspec.argoCDAgent.agent.tls.secretNameSecretName is the name of the secret containing the agent client TLS certificate
-
-
-
objectspec.argoCDAgent.principalPrincipal defines configurations for the Principal component of Argo CD Agent.
-
stringspec.argoCDAgent.principal.authAuth is the authentication method for the Principal component.
-
booleanspec.argoCDAgent.principal.enabledEnabled is the flag to enable the Principal component during Argo CD installation. (optional, default
false) -
array of objectsspec.argoCDAgent.principal.envEnv lets you specify environment for principal pods
-
stringspec.argoCDAgent.principal.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.argoCDAgent.principal.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.argoCDAgent.principal.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.argoCDAgent.principal.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.argoCDAgent.principal.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.argoCDAgent.principal.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.argoCDAgent.principal.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.argoCDAgent.principal.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.argoCDAgent.principal.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.argoCDAgent.principal.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.argoCDAgent.principal.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.argoCDAgent.principal.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.argoCDAgent.principal.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.argoCDAgent.principal.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.argoCDAgent.principal.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.argoCDAgent.principal.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.argoCDAgent.principal.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.argoCDAgent.principal.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.argoCDAgent.principal.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.argoCDAgent.principal.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.argoCDAgent.principal.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.argoCDAgent.principal.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.argoCDAgent.principal.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
stringspec.argoCDAgent.principal.imageImage is the name of Argo CD Agent image
-
objectspec.argoCDAgent.principal.jwtJWT defines the JWT options for the Principal component.
-
booleanspec.argoCDAgent.principal.jwt.insecureGenerateInsecureGenerate is the flag to allow the principal to generate its own private key for signing JWT tokens (insecure).
-
stringspec.argoCDAgent.principal.jwt.secretNameSecretName is the name of the secret containing the JWT signing key.
-
-
stringspec.argoCDAgent.principal.logFormatLogFormat refers to the log format used by the Principal component.
-
stringspec.argoCDAgent.principal.logLevelLogLevel refers to the log level used by the Principal component.
-
objectspec.argoCDAgent.principal.namespaceNamespace is the configuration for the Principal component namespace.
-
array of stringsspec.argoCDAgent.principal.namespace.allowedNamespacesAllowedNamespaces is a list of namespaces the principal shall watch and process Argo CD resources in.
-
booleanspec.argoCDAgent.principal.namespace.enableNamespaceCreateEnableNamespaceCreate is the flag to enable namespace creation for agents.
-
array of stringsspec.argoCDAgent.principal.namespace.namespaceCreateLabelsNamespaceCreateLabels is the set of labels to apply to namespaces created for agents. Ex: “foo=bar,bar=baz”
-
stringspec.argoCDAgent.principal.namespace.namespaceCreatePatternNamespaceCreatePattern is a regexp pattern to restrict the names of namespaces to be created.
-
-
objectspec.argoCDAgent.principal.redisRedis defines the Redis options for the Principal component.
-
stringspec.argoCDAgent.principal.redis.compressionTypeCompressionType is the compression type to be used by Redis.
-
stringspec.argoCDAgent.principal.redis.serverAddressServerAddress is the address of the Redis server to be used by the Principal component.
-
-
objectspec.argoCDAgent.principal.resourceProxyResourceProxy defines the Resource Proxy options for the Principal component.
-
stringspec.argoCDAgent.principal.resourceProxy.caSecretNameCASecretName is the name of the secret containing the CA certificate for the resource proxy.
-
stringspec.argoCDAgent.principal.resourceProxy.secretNameSecretName is the name of the secret containing the TLS certificate and key for the resource proxy.
-
-
objectspec.argoCDAgent.principal.serverServer defines the server options for the Principal component.
-
booleanspec.argoCDAgent.principal.server.enableWebSocketEnableWebSocket is the flag to enable the WebSocket on gRPC to stream events to the Agent.
-
stringspec.argoCDAgent.principal.server.keepAliveMinIntervalKeepAliveMinInterval is the minimum interval between keep-alive messages sent by the Agent to the Principal.
-
objectspec.argoCDAgent.principal.server.serviceService defines the options for the Service backing the ArgoCD Agent component. If not set, type ClusterIP will be used by default.
-
stringspec.argoCDAgent.principal.server.service.type
Required value
Type is the ServiceType to use for the Service resource. If not set, type ClusterIP will be used by default.
-
-
-
objectspec.argoCDAgent.principal.tlsTLS defines the TLS options for the Principal component.
-
booleanspec.argoCDAgent.principal.tls.insecureGenerateInsecureGenerate is the flag to allow the principal to generate its own set of TLS cert and key on startup when none are configured
-
stringspec.argoCDAgent.principal.tls.rootCASecretNameRootCASecretName is the name of the secret containing the root CA TLS certificate
-
stringspec.argoCDAgent.principal.tls.secretNameSecretName is The name of the secret containing the TLS certificate and key.
-
-
-
-
objectspec.bannerBanner defines an additional banner to be displayed in Argo CD UI
-
stringspec.banner.content
Required value
Content defines the banner message content to display -
booleanspec.banner.permanentPermanent defines if the banner should be displayed permanently or only for a certain period of time
-
stringspec.banner.positionPosition defines the position of the banner in the UI
-
stringspec.banner.urlURL defines an optional URL to be used as banner message link
-
-
stringspec.clusterDomainClusterDomain is the cluster domain to use.
-
stringspec.configManagementPluginsDeprecated: ConfigManagementPlugins field is no longer supported. Argo CD now requires plugins to be defined as sidecar containers of repo server component. See ‘.spec.repo.sidecarContainers’. ConfigManagementPlugins was previously used to specify additional config management plugins.
-
objectspec.controllerController defines the Application Controller options for ArgoCD.
-
stringspec.controller.appSync
AppSync is used to control the sync frequency, by default the ArgoCD controller polls Git every 3m.
Set this to a duration, e.g. 10m or 600s to control the synchronisation frequency.
-
array of objectsspec.controller.envEnv lets you specify environment for application controller pods
-
stringspec.controller.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.controller.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.controller.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.controller.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.controller.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.controller.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.controller.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.controller.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.controller.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.controller.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.controller.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.controller.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.controller.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.controller.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.controller.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.controller.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.controller.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.controller.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.controller.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.controller.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.controller.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.controller.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
stringspec.controller.logFormatLogFormat refers to the log format used by the Application Controller component. Defaults to ArgoCDDefaultLogFormat if not configured. Valid options are text or json.
-
stringspec.controller.logLevelLogLevel refers to the log level used by the Application Controller component. Defaults to ArgoCDDefaultLogLevel if not configured. Valid options are debug, info, error, and warn.
-
integerspec.controller.parallelismLimitParallelismLimit defines the limit for parallel kubectl operations
-
objectspec.controller.processorsProcessors contains the options for the Application Controller processors.
-
integerspec.controller.processors.operationOperation is the number of application operation processors.
-
integerspec.controller.processors.statusStatus is the number of application status processors.
-
-
objectspec.controller.resourcesResources defines the Compute Resources required by the container for the Application Controller.
-
array of objectsspec.controller.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.controller.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.controller.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.controller.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.controller.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
objectspec.controller.shardingSharding contains the options for the Application Controller sharding configuration.
-
integerspec.controller.sharding.clustersPerShardClustersPerShard defines the maximum number of clusters managed by each argocd shard
Allowed values:
1 <= X -
booleanspec.controller.sharding.dynamicScalingEnabledDynamicScalingEnabled defines whether dynamic scaling should be enabled for Application Controller component
-
booleanspec.controller.sharding.enabledEnabled defines whether sharding should be enabled on the Application Controller component.
-
integerspec.controller.sharding.maxShardsMaxShards defines the maximum number of shards at any given point
-
integerspec.controller.sharding.minShardsMinShards defines the minimum number of shards at any given point
Allowed values:
1 <= X -
integerspec.controller.sharding.replicasReplicas defines the number of replicas to run in the Application controller shard.
-
-
-
booleanspec.defaultClusterScopedRoleDisabledDefaultClusterScopedRoleDisabled will disable creation of default ClusterRoles for a cluster scoped instance.
-
objectspec.dexDeprecated field. Support dropped in v1beta1 version. Dex defines the Dex server options for ArgoCD.
-
stringspec.dex.configConfig is the dex connector configuration.
-
array of stringsspec.dex.groupsOptional list of required groups a user must be a member of
-
objectspec.dex.resourcesResources defines the Compute Resources required by the container for Dex.
-
array of objectsspec.dex.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.dex.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.dex.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.dex.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.dex.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
-
booleanspec.disableAdminDisableAdmin will disable the admin user.
-
objectspec.extraConfig
ExtraConfig can be used to add fields to Argo CD configmap that are not supported by Argo CD CRD.
Note: ExtraConfig takes precedence over Argo CD CRD. For example, A user sets
argocd.Spec.DisableAdmin= true and alsoa.Spec.ExtraConfig["admin.enabled"]= true. In this case, operator updates Argo CD Configmap as follows -> argocd-cm.Data[“admin.enabled”] = true. -
booleanspec.gaAnonymizeUsersGAAnonymizeUsers toggles user IDs being hashed before sending to google analytics.
-
stringspec.gaTrackingIDGATrackingID is the google analytics tracking ID to use.
-
objectspec.haHA options for High Availability support for the Redis component.
-
booleanspec.ha.enabled
Required value
Enabled will toggle HA support globally for Argo CD. -
stringspec.ha.redisProxyImageRedisProxyImage is the Redis HAProxy container image.
-
stringspec.ha.redisProxyVersionRedisProxyVersion is the Redis HAProxy container image tag.
-
objectspec.ha.resourcesResources defines the Compute Resources required by the container for HA.
-
array of objectsspec.ha.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This is an alpha field and requires enabling the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.ha.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
-
objectspec.ha.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.ha.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
-
stringspec.helpChatTextHelpChatText is the text for getting chat help, defaults to “Chat now!”
-
stringspec.helpChatURLHelpChatURL is the URL for getting chat help, this will typically be your Slack channel for support.
-
stringspec.imagePullPolicyImagePullPolicy is the image pull policy for all ArgoCD components. Valid values are Always, IfNotPresent, Never. If not specified, defaults to the operator’s global setting.
Allowed values:
Always,IfNotPresent,Never -
objectspec.importImport is the import/restore options for ArgoCD.
-
stringspec.import.name
Required value
Name of an ArgoCDExport from which to import data. -
stringspec.import.namespaceNamespace for the ArgoCDExport, defaults to the same namespace as the ArgoCD.
-
-
stringspec.initialRepositoriesInitialRepositories to configure Argo CD with upon creation of the cluster.
-
objectspec.initialSSHKnownHostsInitialSSHKnownHosts defines the SSH known hosts data upon creation of the cluster for connecting Git repositories via SSH.
-
booleanspec.initialSSHKnownHosts.excludedefaulthostsExcludeDefaultHosts describes whether you would like to include the default list of SSH Known Hosts provided by ArgoCD.
-
stringspec.initialSSHKnownHosts.keysKeys describes a custom set of SSH Known Hosts that you would like to have included in your ArgoCD server.
-
-
stringspec.installationIDInstallationID uniquely identifies an Argo CD instance in multi-instance clusters.
-
stringspec.kustomizeBuildOptionsKustomizeBuildOptions is used to specify build options/parameters to use with
kustomize build. -
array of objectsspec.kustomizeVersionsKustomizeVersions is a listing of configured versions of Kustomize to be made available within ArgoCD.
-
stringspec.kustomizeVersions.pathPath is the path to a configured kustomize version on the filesystem of your repo server.
-
stringspec.kustomizeVersions.versionVersion is a configured kustomize version in the format of vX.Y.Z
-
-
objectspec.monitoringMonitoring defines whether workload status monitoring configuration for this instance.
-
booleanspec.monitoring.disableMetricsDisableMetrics field can be used to enable or disable the collection of Metrics on Openshift
-
booleanspec.monitoring.enabled
Required value
Enabled defines whether workload status monitoring is enabled for this instance or not
-
-
array of objectsspec.namespaceManagementNamespaceManagement defines the list of namespaces that Argo CD is allowed to manage.
-
booleanspec.namespaceManagement.allowManagedByWhether the namespace can be managed by ArgoCD
-
stringspec.namespaceManagement.nameName of the namespace or pattern to be managed
-
-
objectspec.networkPolicyNetworkPolicy controls whether the operator should create NetworkPolicy resources for this Argo CD instance.
-
booleanspec.networkPolicy.enabledEnabled defines whether NetworkPolicy resources should be created for this Argo CD instance. When enabled, the operator will reconcile NetworkPolicies for Argo CD components. When disabled, the operator will remove any previously-created NetworkPolicies.
-
-
objectspec.nodePlacementNodePlacement defines NodeSelectors and Taints for Argo CD workloads
-
objectspec.nodePlacement.nodeSelectorNodeSelector is a field of PodSpec, it is a map of key value pairs used for node selection
-
array of objectsspec.nodePlacement.tolerationsTolerations allow the pods to schedule onto nodes with matching taints
-
stringspec.nodePlacement.tolerations.effectEffect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
-
stringspec.nodePlacement.tolerations.keyKey is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.
-
stringspec.nodePlacement.tolerations.operatorOperator represents a key’s relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
-
integerspec.nodePlacement.tolerations.tolerationSecondsTolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.
-
stringspec.nodePlacement.tolerations.valueValue is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.
-
-
-
objectspec.notificationsNotifications defines whether the Argo CD Notifications controller should be installed.
-
booleanspec.notifications.enabled
Required value
Enabled defines whether argocd-notifications controller should be deployed or not -
array of objectsspec.notifications.envEnv let you specify environment variables for Notifications pods
-
stringspec.notifications.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.notifications.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.notifications.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.notifications.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.notifications.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.notifications.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.notifications.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.notifications.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.notifications.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.notifications.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.notifications.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.notifications.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.notifications.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.notifications.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.notifications.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.notifications.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.notifications.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.notifications.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.notifications.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.notifications.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.notifications.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.notifications.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.notifications.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
stringspec.notifications.logLevelLogLevel describes the log level that should be used by the argocd-notifications. Defaults to ArgoCDDefaultLogLevel if not set. Valid options are debug,info, error, and warn.
-
stringspec.notifications.logformatLogFormat refers to the log format used by the argocd-notifications. Defaults to ArgoCDDefaultLogFormat if not configured. Valid options are text or json.
Allowed values:
text,json -
integerspec.notifications.replicasReplicas defines the number of replicas to run for notifications-controller
-
objectspec.notifications.resourcesResources defines the Compute Resources required by the container for Argo CD Notifications.
-
array of objectsspec.notifications.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.notifications.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.notifications.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.notifications.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.notifications.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
array of stringsspec.notifications.sourceNamespacesSourceNamespaces is a list of namespaces from which the notifications controller will watch for ArgoCD Application resources.
-
-
objectspec.prometheusPrometheus defines the Prometheus server options for ArgoCD.
-
booleanspec.prometheus.enabled
Required value
Enabled will toggle Prometheus support globally for ArgoCD. When set to true, ServiceMonitors and PrometheusRules will be created for Argo CD metrics. The Prometheus CR, Route, and Ingress are deprecated and will no longer be created. -
stringspec.prometheus.hostHost is the hostname to use for Ingress/Route resources. Deprecated: This field is no longer used and will be ignored.
-
objectspec.prometheus.ingressIngress defines the desired state for an Ingress for the Prometheus component. Deprecated: This field is no longer used and will be ignored.
-
objectspec.prometheus.ingress.annotationsAnnotations is the map of annotations to apply to the Ingress.
-
booleanspec.prometheus.ingress.enabled
Required value
Enabled will toggle the creation of the Ingress. -
stringspec.prometheus.ingress.ingressClassNameIngressClassName for the Ingress resource.
-
stringspec.prometheus.ingress.pathPath used for the Ingress resource.
-
array of objectsspec.prometheus.ingress.tlsTLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.
-
array of stringsspec.prometheus.ingress.tls.hostshosts is a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.
-
stringspec.prometheus.ingress.tls.secretNamesecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the “Host” header field used by an IngressRule, the SNI host is used for termination and value of the “Host” header is used for routing.
-
-
-
integerspec.prometheus.sizeSize is the replica count for the Prometheus StatefulSet. Deprecated: This field is no longer used and will be ignored.
-
-
objectspec.rbacRBAC defines the RBAC configuration for Argo CD.
-
stringspec.rbac.defaultPolicyDefaultPolicy is the name of the default role which Argo CD will falls back to, when authorizing API requests (optional). If omitted or empty, users may be still be able to login, but will see no apps, projects, etc…
-
stringspec.rbac.policyPolicy is CSV containing user-defined RBAC policies and role definitions. Policy rules are in the form: p, subject, resource, action, object, effect Role definitions and bindings are in the form: g, subject, inherited-subject See https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/rbac.md for additional information.
-
stringspec.rbac.policyMatcherModePolicyMatcherMode configures the matchers function mode for casbin. There are two options for this, ‘glob’ for glob matcher or ‘regex’ for regex matcher.
-
stringspec.rbac.scopesScopes controls which OIDC scopes to examine during rbac enforcement (in addition to
subscope). If omitted, defaults to: ‘[groups]’.
-
-
objectspec.redisRedis defines the Redis server options for ArgoCD.
-
booleanspec.redis.disableTLSVerificationDisableTLSVerification defines whether redis server API should be accessed using strict TLS validation
-
objectspec.redis.resourcesResources defines the Compute Resources required by the container for Redis.
-
array of objectsspec.redis.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.redis.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.redis.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.redis.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.redis.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
-
objectspec.repoRepo defines the repo server options for Argo CD.
-
array of objectsspec.repo.envEnv lets you specify environment for repo server pods
-
stringspec.repo.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.repo.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.repo.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.repo.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.repo.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.repo.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.repo.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.repo.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.repo.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.repo.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.repo.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.repo.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.repo.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.repo.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.repo.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.repo.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.repo.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.repo.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.repo.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.repo.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.repo.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
integerspec.repo.execTimeoutExecTimeout specifies the timeout in seconds for tool execution
-
array of stringsspec.repo.extraRepoCommandArgsExtra Command arguments allows users to pass command line arguments to repo server workload. They get added to default command line arguments provided by the operator. Please note that the command line arguments provided as part of ExtraRepoCommandArgs will not overwrite the default command line arguments.
-
array of objectsspec.repo.initContainersInitContainers defines the list of initialization containers for the repo server deployment
-
array of stringsspec.repo.initContainers.argsArguments to the entrypoint. The container image’s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of stringsspec.repo.initContainers.commandEntrypoint array. Not executed within a shell. The container image’s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of objectsspec.repo.initContainers.envList of environment variables to set in the container. Cannot be updated.
-
stringspec.repo.initContainers.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.repo.initContainers.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.repo.initContainers.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.repo.initContainers.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.repo.initContainers.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.repo.initContainers.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.initContainers.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.repo.initContainers.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.repo.initContainers.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.repo.initContainers.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.repo.initContainers.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.repo.initContainers.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.repo.initContainers.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.repo.initContainers.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.repo.initContainers.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.repo.initContainers.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.repo.initContainers.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.repo.initContainers.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.repo.initContainers.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.repo.initContainers.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.repo.initContainers.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.repo.initContainers.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.initContainers.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of objectsspec.repo.initContainers.envFromList of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except ‘=’. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
-
objectspec.repo.initContainers.envFrom.configMapRefThe ConfigMap to select from
-
stringspec.repo.initContainers.envFrom.configMapRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.initContainers.envFrom.configMapRef.optionalSpecify whether the ConfigMap must be defined
-
-
stringspec.repo.initContainers.envFrom.prefixOptional text to prepend to the name of each environment variable. May consist of any printable ASCII characters except ‘=’.
-
objectspec.repo.initContainers.envFrom.secretRefThe Secret to select from
-
stringspec.repo.initContainers.envFrom.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.initContainers.envFrom.secretRef.optionalSpecify whether the Secret must be defined
-
-
-
stringspec.repo.initContainers.imageContainer image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
stringspec.repo.initContainers.imagePullPolicyImage pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-
objectspec.repo.initContainers.lifecycleActions that the management system should take in response to container lifecycle events. Cannot be updated.
-
objectspec.repo.initContainers.lifecycle.postStartPostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.repo.initContainers.lifecycle.postStart.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.initContainers.lifecycle.postStart.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.repo.initContainers.lifecycle.postStart.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.initContainers.lifecycle.postStart.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.initContainers.lifecycle.postStart.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.initContainers.lifecycle.postStart.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.initContainers.lifecycle.postStart.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.initContainers.lifecycle.postStart.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.initContainers.lifecycle.postStart.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.initContainers.lifecycle.postStart.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.repo.initContainers.lifecycle.postStart.sleepSleep represents a duration that the container should sleep.
-
integerspec.repo.initContainers.lifecycle.postStart.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.repo.initContainers.lifecycle.postStart.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.repo.initContainers.lifecycle.postStart.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.initContainers.lifecycle.postStart.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
objectspec.repo.initContainers.lifecycle.preStopPreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod’s termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod’s termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.repo.initContainers.lifecycle.preStop.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.initContainers.lifecycle.preStop.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.repo.initContainers.lifecycle.preStop.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.initContainers.lifecycle.preStop.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.initContainers.lifecycle.preStop.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.initContainers.lifecycle.preStop.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.initContainers.lifecycle.preStop.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.initContainers.lifecycle.preStop.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.initContainers.lifecycle.preStop.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.initContainers.lifecycle.preStop.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.repo.initContainers.lifecycle.preStop.sleepSleep represents a duration that the container should sleep.
-
integerspec.repo.initContainers.lifecycle.preStop.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.repo.initContainers.lifecycle.preStop.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.repo.initContainers.lifecycle.preStop.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.initContainers.lifecycle.preStop.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
stringspec.repo.initContainers.lifecycle.stopSignalStopSignal defines which signal will be sent to a container when it is being stopped. If not specified, the default is defined by the container runtime in use. StopSignal can only be set for Pods with a non-empty .spec.os.name
-
-
objectspec.repo.initContainers.livenessProbePeriodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.repo.initContainers.livenessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.initContainers.livenessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.repo.initContainers.livenessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.repo.initContainers.livenessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.repo.initContainers.livenessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.repo.initContainers.livenessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.repo.initContainers.livenessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.initContainers.livenessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.initContainers.livenessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.initContainers.livenessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.initContainers.livenessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.initContainers.livenessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.initContainers.livenessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.initContainers.livenessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.repo.initContainers.livenessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.repo.initContainers.livenessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.repo.initContainers.livenessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.repo.initContainers.livenessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.repo.initContainers.livenessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.initContainers.livenessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.repo.initContainers.livenessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.repo.initContainers.livenessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
stringspec.repo.initContainers.nameName of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
-
array of objectsspec.repo.initContainers.portsList of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default “0.0.0.0” address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated.
-
integerspec.repo.initContainers.ports.containerPortNumber of port to expose on the pod’s IP address. This must be a valid port number, 0 < x < 65536.
-
stringspec.repo.initContainers.ports.hostIPWhat host IP to bind the external port to.
-
integerspec.repo.initContainers.ports.hostPortNumber of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-
stringspec.repo.initContainers.ports.nameIf specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-
stringspec.repo.initContainers.ports.protocolProtocol for port. Must be UDP, TCP, or SCTP. Defaults to “TCP”.
Default:
TCP
-
-
objectspec.repo.initContainers.readinessProbePeriodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.repo.initContainers.readinessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.initContainers.readinessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.repo.initContainers.readinessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.repo.initContainers.readinessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.repo.initContainers.readinessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.repo.initContainers.readinessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.repo.initContainers.readinessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.initContainers.readinessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.initContainers.readinessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.initContainers.readinessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.initContainers.readinessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.initContainers.readinessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.initContainers.readinessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.initContainers.readinessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.repo.initContainers.readinessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.repo.initContainers.readinessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.repo.initContainers.readinessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.repo.initContainers.readinessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.repo.initContainers.readinessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.initContainers.readinessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.repo.initContainers.readinessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.repo.initContainers.readinessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
array of objectsspec.repo.initContainers.resizePolicyResources resize policy for the container.
-
stringspec.repo.initContainers.resizePolicy.resourceNameName of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-
stringspec.repo.initContainers.resizePolicy.restartPolicyRestart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
-
-
objectspec.repo.initContainers.resourcesCompute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
array of objectsspec.repo.initContainers.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.repo.initContainers.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.repo.initContainers.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.repo.initContainers.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.repo.initContainers.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
stringspec.repo.initContainers.restartPolicyRestartPolicy defines the restart behavior of individual containers in a pod. This overrides the pod-level restart policy. When this field is not specified, the restart behavior is defined by the Pod’s restart policy and the container type. Additionally, setting the RestartPolicy as “Always” for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy “Always” will be shut down. This lifecycle differs from normal init containers and is often referred to as a “sidecar” container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-
array of objectsspec.repo.initContainers.restartPolicyRules
Represents a list of rules to be checked to determine if the container should be restarted on exit. The rules are evaluated in order. Once a rule matches a container exit condition, the remaining rules are ignored. If no rule matches the container exit condition, the Container-level restart policy determines the whether the container is restarted or not. Constraints on the rules:
- At most 20 rules are allowed.
- Rules can have the same action.
- Identical rules are not forbidden in validations. When rules are specified, container MUST set RestartPolicy explicitly even it if matches the Pod’s RestartPolicy.
-
stringspec.repo.initContainers.restartPolicyRules.actionSpecifies the action taken on a container exit if the requirements are satisfied. The only possible value is “Restart” to restart the container.
-
objectspec.repo.initContainers.restartPolicyRules.exitCodesRepresents the exit codes to check on container exits.
-
stringspec.repo.initContainers.restartPolicyRules.exitCodes.operator
Required value
Represents the relationship between the container exit code(s) and the specified values. Possible values are:
- In: the requirement is satisfied if the container exit code is in the set of specified values.
- NotIn: the requirement is satisfied if the container exit code is not in the set of specified values.
-
array of integersspec.repo.initContainers.restartPolicyRules.exitCodes.valuesSpecifies the set of values to check for container exit codes. At most 255 elements are allowed.
-
-
objectspec.repo.initContainers.securityContextSecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
-
booleanspec.repo.initContainers.securityContext.allowPrivilegeEscalation
AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is:
- run as Privileged
- has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-
objectspec.repo.initContainers.securityContext.appArmorProfileappArmorProfile is the AppArmor options to use by this container. If set, this profile overrides the pod’s appArmorProfile. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.initContainers.securityContext.appArmorProfile.localhostProfilelocalhostProfile indicates a profile loaded on the node that should be used. The profile must be preconfigured on the node to work. Must match the loaded name of the profile. Must be set if and only if type is “Localhost”.
-
stringspec.repo.initContainers.securityContext.appArmorProfile.type
Required value
type indicates which kind of AppArmor profile will be applied. Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime’s default profile. Unconfined - no AppArmor enforcement.
-
-
objectspec.repo.initContainers.securityContext.capabilitiesThe capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows.
-
array of stringsspec.repo.initContainers.securityContext.capabilities.addAdded capabilities
-
stringspec.repo.initContainers.securityContext.capabilities.add.Element of the arrayCapability represent POSIX capabilities type
-
-
array of stringsspec.repo.initContainers.securityContext.capabilities.dropRemoved capabilities
-
stringspec.repo.initContainers.securityContext.capabilities.drop.Element of the arrayCapability represent POSIX capabilities type
-
-
-
booleanspec.repo.initContainers.securityContext.privilegedRun container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.initContainers.securityContext.procMountprocMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.repo.initContainers.securityContext.readOnlyRootFilesystemWhether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-
integerspec.repo.initContainers.securityContext.runAsGroupThe GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.repo.initContainers.securityContext.runAsNonRootIndicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
integerspec.repo.initContainers.securityContext.runAsUserThe UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
objectspec.repo.initContainers.securityContext.seLinuxOptionsThe SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.initContainers.securityContext.seLinuxOptions.levelLevel is SELinux level label that applies to the container.
-
stringspec.repo.initContainers.securityContext.seLinuxOptions.roleRole is a SELinux role label that applies to the container.
-
stringspec.repo.initContainers.securityContext.seLinuxOptions.typeType is a SELinux type label that applies to the container.
-
stringspec.repo.initContainers.securityContext.seLinuxOptions.userUser is a SELinux user label that applies to the container.
-
-
objectspec.repo.initContainers.securityContext.seccompProfileThe seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.initContainers.securityContext.seccompProfile.localhostProfilelocalhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet’s configured seccomp profile location. Must be set if type is “Localhost”. Must NOT be set for any other type.
-
stringspec.repo.initContainers.securityContext.seccompProfile.type
Required value
type indicates which kind of seccomp profile will be applied. Valid options are:
Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-
objectspec.repo.initContainers.securityContext.windowsOptionsThe Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.
-
stringspec.repo.initContainers.securityContext.windowsOptions.gmsaCredentialSpecGMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
stringspec.repo.initContainers.securityContext.windowsOptions.gmsaCredentialSpecNameGMSACredentialSpecName is the name of the GMSA credential spec to use.
-
booleanspec.repo.initContainers.securityContext.windowsOptions.hostProcessHostProcess determines if a container should be run as a ‘Host Process’ container. All of a Pod’s containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-
stringspec.repo.initContainers.securityContext.windowsOptions.runAsUserNameThe UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-
-
objectspec.repo.initContainers.startupProbeStartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod’s lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.repo.initContainers.startupProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.initContainers.startupProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.repo.initContainers.startupProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.repo.initContainers.startupProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.repo.initContainers.startupProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.repo.initContainers.startupProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.repo.initContainers.startupProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.initContainers.startupProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.initContainers.startupProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.initContainers.startupProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.initContainers.startupProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.initContainers.startupProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.initContainers.startupProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.initContainers.startupProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.repo.initContainers.startupProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.repo.initContainers.startupProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.repo.initContainers.startupProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.repo.initContainers.startupProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.repo.initContainers.startupProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.initContainers.startupProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.repo.initContainers.startupProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.repo.initContainers.startupProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
booleanspec.repo.initContainers.stdinWhether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-
booleanspec.repo.initContainers.stdinOnceWhether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-
stringspec.repo.initContainers.terminationMessagePathOptional: Path at which the file to which the container’s termination message will be written is mounted into the container’s filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-
stringspec.repo.initContainers.terminationMessagePolicyIndicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-
booleanspec.repo.initContainers.ttyWhether this container should allocate a TTY for itself, also requires ‘stdin’ to be true. Default is false.
-
array of objectsspec.repo.initContainers.volumeDevicesvolumeDevices is the list of block devices to be used by the container.
-
stringspec.repo.initContainers.volumeDevices.devicePathdevicePath is the path inside of the container that the device will be mapped to.
-
stringspec.repo.initContainers.volumeDevices.namename must match the name of a persistentVolumeClaim in the pod
-
-
array of objectsspec.repo.initContainers.volumeMountsPod volumes to mount into the container’s filesystem. Cannot be updated.
-
stringspec.repo.initContainers.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.repo.initContainers.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.repo.initContainers.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.repo.initContainers.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.repo.initContainers.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.repo.initContainers.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.repo.initContainers.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
stringspec.repo.initContainers.workingDirContainer’s working directory. If not specified, the container runtime’s default will be used, which might be configured in the container image. Cannot be updated.
-
-
stringspec.repo.logFormatLogFormat describes the log format that should be used by the Repo Server. Defaults to ArgoCDDefaultLogFormat if not configured. Valid options are text or json.
-
stringspec.repo.logLevelLogLevel describes the log level that should be used by the Repo Server. Defaults to ArgoCDDefaultLogLevel if not set. Valid options are debug, info, error, and warn.
-
booleanspec.repo.mountsatokenMountSAToken describes whether you would like to have the Repo server mount the service account token
-
integerspec.repo.replicasReplicas defines the number of replicas for argocd-repo-server. Value should be greater than or equal to 0. Default is nil.
-
objectspec.repo.resourcesResources defines the Compute Resources required by the container for Redis.
-
array of objectsspec.repo.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.repo.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.repo.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.repo.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.repo.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
stringspec.repo.serviceaccountServiceAccount defines the ServiceAccount user that you would like the Repo server to use
-
array of objectsspec.repo.sidecarContainersSidecarContainers defines the list of sidecar containers for the repo server deployment. If the image field is omitted from a SidecarContainer, the image for the repo server will be used.
-
array of stringsspec.repo.sidecarContainers.argsArguments to the entrypoint. The container image’s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of stringsspec.repo.sidecarContainers.commandEntrypoint array. Not executed within a shell. The container image’s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
array of objectsspec.repo.sidecarContainers.envList of environment variables to set in the container. Cannot be updated.
-
stringspec.repo.sidecarContainers.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.repo.sidecarContainers.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.repo.sidecarContainers.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.repo.sidecarContainers.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.repo.sidecarContainers.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.repo.sidecarContainers.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.sidecarContainers.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.repo.sidecarContainers.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.repo.sidecarContainers.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.repo.sidecarContainers.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.repo.sidecarContainers.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.repo.sidecarContainers.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.repo.sidecarContainers.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.repo.sidecarContainers.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.repo.sidecarContainers.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.repo.sidecarContainers.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.repo.sidecarContainers.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.repo.sidecarContainers.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.repo.sidecarContainers.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.repo.sidecarContainers.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.repo.sidecarContainers.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.repo.sidecarContainers.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.sidecarContainers.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of objectsspec.repo.sidecarContainers.envFromList of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except ‘=’. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
-
objectspec.repo.sidecarContainers.envFrom.configMapRefThe ConfigMap to select from
-
stringspec.repo.sidecarContainers.envFrom.configMapRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.sidecarContainers.envFrom.configMapRef.optionalSpecify whether the ConfigMap must be defined
-
-
stringspec.repo.sidecarContainers.envFrom.prefixOptional text to prepend to the name of each environment variable. May consist of any printable ASCII characters except ‘=’.
-
objectspec.repo.sidecarContainers.envFrom.secretRefThe Secret to select from
-
stringspec.repo.sidecarContainers.envFrom.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.sidecarContainers.envFrom.secretRef.optionalSpecify whether the Secret must be defined
-
-
-
stringspec.repo.sidecarContainers.imageContainer image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
stringspec.repo.sidecarContainers.imagePullPolicyImage pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-
objectspec.repo.sidecarContainers.lifecycleActions that the management system should take in response to container lifecycle events. Cannot be updated.
-
objectspec.repo.sidecarContainers.lifecycle.postStartPostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.repo.sidecarContainers.lifecycle.postStart.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.sidecarContainers.lifecycle.postStart.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.repo.sidecarContainers.lifecycle.postStart.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.sidecarContainers.lifecycle.postStart.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.sidecarContainers.lifecycle.postStart.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.sidecarContainers.lifecycle.postStart.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.sidecarContainers.lifecycle.postStart.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.sidecarContainers.lifecycle.postStart.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.sidecarContainers.lifecycle.postStart.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.sidecarContainers.lifecycle.postStart.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.repo.sidecarContainers.lifecycle.postStart.sleepSleep represents a duration that the container should sleep.
-
integerspec.repo.sidecarContainers.lifecycle.postStart.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.repo.sidecarContainers.lifecycle.postStart.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.repo.sidecarContainers.lifecycle.postStart.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.sidecarContainers.lifecycle.postStart.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
objectspec.repo.sidecarContainers.lifecycle.preStopPreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod’s termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod’s termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
objectspec.repo.sidecarContainers.lifecycle.preStop.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.sidecarContainers.lifecycle.preStop.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
objectspec.repo.sidecarContainers.lifecycle.preStop.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.sidecarContainers.lifecycle.preStop.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.sidecarContainers.lifecycle.preStop.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.sidecarContainers.lifecycle.preStop.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.sidecarContainers.lifecycle.preStop.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.sidecarContainers.lifecycle.preStop.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.sidecarContainers.lifecycle.preStop.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.sidecarContainers.lifecycle.preStop.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
objectspec.repo.sidecarContainers.lifecycle.preStop.sleepSleep represents a duration that the container should sleep.
-
integerspec.repo.sidecarContainers.lifecycle.preStop.sleep.seconds
Required value
Seconds is the number of seconds to sleep.
-
-
objectspec.repo.sidecarContainers.lifecycle.preStop.tcpSocketDeprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for backward compatibility. There is no validation of this field and lifecycle hooks will fail at runtime when it is specified.
-
stringspec.repo.sidecarContainers.lifecycle.preStop.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.sidecarContainers.lifecycle.preStop.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
-
stringspec.repo.sidecarContainers.lifecycle.stopSignalStopSignal defines which signal will be sent to a container when it is being stopped. If not specified, the default is defined by the container runtime in use. StopSignal can only be set for Pods with a non-empty .spec.os.name
-
-
objectspec.repo.sidecarContainers.livenessProbePeriodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.repo.sidecarContainers.livenessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.sidecarContainers.livenessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.repo.sidecarContainers.livenessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.repo.sidecarContainers.livenessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.repo.sidecarContainers.livenessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.repo.sidecarContainers.livenessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.repo.sidecarContainers.livenessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.sidecarContainers.livenessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.sidecarContainers.livenessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.sidecarContainers.livenessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.sidecarContainers.livenessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.sidecarContainers.livenessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.sidecarContainers.livenessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.sidecarContainers.livenessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.repo.sidecarContainers.livenessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.repo.sidecarContainers.livenessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.repo.sidecarContainers.livenessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.repo.sidecarContainers.livenessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.repo.sidecarContainers.livenessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.sidecarContainers.livenessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.repo.sidecarContainers.livenessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.repo.sidecarContainers.livenessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
stringspec.repo.sidecarContainers.nameName of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
-
array of objectsspec.repo.sidecarContainers.portsList of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default “0.0.0.0” address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated.
-
integerspec.repo.sidecarContainers.ports.containerPortNumber of port to expose on the pod’s IP address. This must be a valid port number, 0 < x < 65536.
-
stringspec.repo.sidecarContainers.ports.hostIPWhat host IP to bind the external port to.
-
integerspec.repo.sidecarContainers.ports.hostPortNumber of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-
stringspec.repo.sidecarContainers.ports.nameIf specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-
stringspec.repo.sidecarContainers.ports.protocolProtocol for port. Must be UDP, TCP, or SCTP. Defaults to “TCP”.
Default:
TCP
-
-
objectspec.repo.sidecarContainers.readinessProbePeriodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.repo.sidecarContainers.readinessProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.sidecarContainers.readinessProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.repo.sidecarContainers.readinessProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.repo.sidecarContainers.readinessProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.repo.sidecarContainers.readinessProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.repo.sidecarContainers.readinessProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.repo.sidecarContainers.readinessProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.sidecarContainers.readinessProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.sidecarContainers.readinessProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.sidecarContainers.readinessProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.sidecarContainers.readinessProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.sidecarContainers.readinessProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.sidecarContainers.readinessProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.sidecarContainers.readinessProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.repo.sidecarContainers.readinessProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.repo.sidecarContainers.readinessProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.repo.sidecarContainers.readinessProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.repo.sidecarContainers.readinessProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.repo.sidecarContainers.readinessProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.sidecarContainers.readinessProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.repo.sidecarContainers.readinessProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.repo.sidecarContainers.readinessProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
array of objectsspec.repo.sidecarContainers.resizePolicyResources resize policy for the container.
-
stringspec.repo.sidecarContainers.resizePolicy.resourceNameName of the resource to which this resource resize policy applies. Supported values: cpu, memory.
-
stringspec.repo.sidecarContainers.resizePolicy.restartPolicyRestart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
-
-
objectspec.repo.sidecarContainers.resourcesCompute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
array of objectsspec.repo.sidecarContainers.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.repo.sidecarContainers.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.repo.sidecarContainers.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.repo.sidecarContainers.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.repo.sidecarContainers.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
stringspec.repo.sidecarContainers.restartPolicyRestartPolicy defines the restart behavior of individual containers in a pod. This overrides the pod-level restart policy. When this field is not specified, the restart behavior is defined by the Pod’s restart policy and the container type. Additionally, setting the RestartPolicy as “Always” for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy “Always” will be shut down. This lifecycle differs from normal init containers and is often referred to as a “sidecar” container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.
-
array of objectsspec.repo.sidecarContainers.restartPolicyRules
Represents a list of rules to be checked to determine if the container should be restarted on exit. The rules are evaluated in order. Once a rule matches a container exit condition, the remaining rules are ignored. If no rule matches the container exit condition, the Container-level restart policy determines the whether the container is restarted or not. Constraints on the rules:
- At most 20 rules are allowed.
- Rules can have the same action.
- Identical rules are not forbidden in validations. When rules are specified, container MUST set RestartPolicy explicitly even it if matches the Pod’s RestartPolicy.
-
stringspec.repo.sidecarContainers.restartPolicyRules.actionSpecifies the action taken on a container exit if the requirements are satisfied. The only possible value is “Restart” to restart the container.
-
objectspec.repo.sidecarContainers.restartPolicyRules.exitCodesRepresents the exit codes to check on container exits.
-
stringspec.repo.sidecarContainers.restartPolicyRules.exitCodes.operator
Required value
Represents the relationship between the container exit code(s) and the specified values. Possible values are:
- In: the requirement is satisfied if the container exit code is in the set of specified values.
- NotIn: the requirement is satisfied if the container exit code is not in the set of specified values.
-
array of integersspec.repo.sidecarContainers.restartPolicyRules.exitCodes.valuesSpecifies the set of values to check for container exit codes. At most 255 elements are allowed.
-
-
objectspec.repo.sidecarContainers.securityContextSecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
-
booleanspec.repo.sidecarContainers.securityContext.allowPrivilegeEscalation
AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is:
- run as Privileged
- has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.
-
objectspec.repo.sidecarContainers.securityContext.appArmorProfileappArmorProfile is the AppArmor options to use by this container. If set, this profile overrides the pod’s appArmorProfile. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.sidecarContainers.securityContext.appArmorProfile.localhostProfilelocalhostProfile indicates a profile loaded on the node that should be used. The profile must be preconfigured on the node to work. Must match the loaded name of the profile. Must be set if and only if type is “Localhost”.
-
stringspec.repo.sidecarContainers.securityContext.appArmorProfile.type
Required value
type indicates which kind of AppArmor profile will be applied. Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime’s default profile. Unconfined - no AppArmor enforcement.
-
-
objectspec.repo.sidecarContainers.securityContext.capabilitiesThe capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows.
-
array of stringsspec.repo.sidecarContainers.securityContext.capabilities.addAdded capabilities
-
stringspec.repo.sidecarContainers.securityContext.capabilities.add.Element of the arrayCapability represent POSIX capabilities type
-
-
array of stringsspec.repo.sidecarContainers.securityContext.capabilities.dropRemoved capabilities
-
stringspec.repo.sidecarContainers.securityContext.capabilities.drop.Element of the arrayCapability represent POSIX capabilities type
-
-
-
booleanspec.repo.sidecarContainers.securityContext.privilegedRun container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.sidecarContainers.securityContext.procMountprocMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.repo.sidecarContainers.securityContext.readOnlyRootFilesystemWhether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.
-
integerspec.repo.sidecarContainers.securityContext.runAsGroupThe GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
booleanspec.repo.sidecarContainers.securityContext.runAsNonRootIndicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
integerspec.repo.sidecarContainers.securityContext.runAsUserThe UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
objectspec.repo.sidecarContainers.securityContext.seLinuxOptionsThe SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.sidecarContainers.securityContext.seLinuxOptions.levelLevel is SELinux level label that applies to the container.
-
stringspec.repo.sidecarContainers.securityContext.seLinuxOptions.roleRole is a SELinux role label that applies to the container.
-
stringspec.repo.sidecarContainers.securityContext.seLinuxOptions.typeType is a SELinux type label that applies to the container.
-
stringspec.repo.sidecarContainers.securityContext.seLinuxOptions.userUser is a SELinux user label that applies to the container.
-
-
objectspec.repo.sidecarContainers.securityContext.seccompProfileThe seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.
-
stringspec.repo.sidecarContainers.securityContext.seccompProfile.localhostProfilelocalhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet’s configured seccomp profile location. Must be set if type is “Localhost”. Must NOT be set for any other type.
-
stringspec.repo.sidecarContainers.securityContext.seccompProfile.type
Required value
type indicates which kind of seccomp profile will be applied. Valid options are:
Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-
objectspec.repo.sidecarContainers.securityContext.windowsOptionsThe Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.
-
stringspec.repo.sidecarContainers.securityContext.windowsOptions.gmsaCredentialSpecGMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
stringspec.repo.sidecarContainers.securityContext.windowsOptions.gmsaCredentialSpecNameGMSACredentialSpecName is the name of the GMSA credential spec to use.
-
booleanspec.repo.sidecarContainers.securityContext.windowsOptions.hostProcessHostProcess determines if a container should be run as a ‘Host Process’ container. All of a Pod’s containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
-
stringspec.repo.sidecarContainers.securityContext.windowsOptions.runAsUserNameThe UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-
-
objectspec.repo.sidecarContainers.startupProbeStartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod’s lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
objectspec.repo.sidecarContainers.startupProbe.execExec specifies a command to execute in the container.
-
array of stringsspec.repo.sidecarContainers.startupProbe.exec.commandCommand is the command line to execute inside the container, the working directory for the command is root (’/’) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions (’|’, etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
integerspec.repo.sidecarContainers.startupProbe.failureThresholdMinimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
objectspec.repo.sidecarContainers.startupProbe.grpcGRPC specifies a GRPC HealthCheckRequest.
-
integerspec.repo.sidecarContainers.startupProbe.grpc.port
Required value
Port number of the gRPC service. Number must be in the range 1 to 65535. -
stringspec.repo.sidecarContainers.startupProbe.grpc.service
Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
If this is not specified, the default behavior is defined by gRPC.
Default:
‘’
-
-
objectspec.repo.sidecarContainers.startupProbe.httpGetHTTPGet specifies an HTTP GET request to perform.
-
stringspec.repo.sidecarContainers.startupProbe.httpGet.hostHost name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.
-
array of objectsspec.repo.sidecarContainers.startupProbe.httpGet.httpHeadersCustom headers to set in the request. HTTP allows repeated headers.
-
stringspec.repo.sidecarContainers.startupProbe.httpGet.httpHeaders.nameThe header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
-
stringspec.repo.sidecarContainers.startupProbe.httpGet.httpHeaders.valueThe header field value
-
-
stringspec.repo.sidecarContainers.startupProbe.httpGet.pathPath to access on the HTTP server.
-
integer or stringspec.repo.sidecarContainers.startupProbe.httpGet.port
Required value
Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. -
stringspec.repo.sidecarContainers.startupProbe.httpGet.schemeScheme to use for connecting to the host. Defaults to HTTP.
-
-
integerspec.repo.sidecarContainers.startupProbe.initialDelaySecondsNumber of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
integerspec.repo.sidecarContainers.startupProbe.periodSecondsHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
integerspec.repo.sidecarContainers.startupProbe.successThresholdMinimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
objectspec.repo.sidecarContainers.startupProbe.tcpSocketTCPSocket specifies a connection to a TCP port.
-
stringspec.repo.sidecarContainers.startupProbe.tcpSocket.hostOptional: Host name to connect to, defaults to the pod IP.
-
integer or stringspec.repo.sidecarContainers.startupProbe.tcpSocket.port
Required value
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-
integerspec.repo.sidecarContainers.startupProbe.terminationGracePeriodSecondsOptional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
-
integerspec.repo.sidecarContainers.startupProbe.timeoutSecondsNumber of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-
booleanspec.repo.sidecarContainers.stdinWhether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-
booleanspec.repo.sidecarContainers.stdinOnceWhether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-
stringspec.repo.sidecarContainers.terminationMessagePathOptional: Path at which the file to which the container’s termination message will be written is mounted into the container’s filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-
stringspec.repo.sidecarContainers.terminationMessagePolicyIndicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-
booleanspec.repo.sidecarContainers.ttyWhether this container should allocate a TTY for itself, also requires ‘stdin’ to be true. Default is false.
-
array of objectsspec.repo.sidecarContainers.volumeDevicesvolumeDevices is the list of block devices to be used by the container.
-
stringspec.repo.sidecarContainers.volumeDevices.devicePathdevicePath is the path inside of the container that the device will be mapped to.
-
stringspec.repo.sidecarContainers.volumeDevices.namename must match the name of a persistentVolumeClaim in the pod
-
-
array of objectsspec.repo.sidecarContainers.volumeMountsPod volumes to mount into the container’s filesystem. Cannot be updated.
-
stringspec.repo.sidecarContainers.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.repo.sidecarContainers.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.repo.sidecarContainers.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.repo.sidecarContainers.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.repo.sidecarContainers.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.repo.sidecarContainers.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.repo.sidecarContainers.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
stringspec.repo.sidecarContainers.workingDirContainer’s working directory. If not specified, the container runtime’s default will be used, which might be configured in the container image. Cannot be updated.
-
-
booleanspec.repo.verifytlsVerifyTLS defines whether repo server API should be accessed using strict TLS validation
-
array of objectsspec.repo.volumeMountsVolumeMounts adds volumeMounts to the repo server container
-
stringspec.repo.volumeMounts.mountPathPath within the container at which the volume should be mounted. Must not contain ‘:’.
-
stringspec.repo.volumeMounts.mountPropagationmountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).
-
stringspec.repo.volumeMounts.nameThis must match the Name of a Volume.
-
booleanspec.repo.volumeMounts.readOnlyMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
stringspec.repo.volumeMounts.recursiveReadOnly
RecursiveReadOnly specifies whether read-only mounts should be handled recursively.
If ReadOnly is false, this field has no meaning and must be unspecified.
If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.
If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).
If this field is not specified, it is treated as an equivalent of Disabled.
-
stringspec.repo.volumeMounts.subPathPath within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
-
stringspec.repo.volumeMounts.subPathExprExpanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to "" (volume’s root). SubPathExpr and SubPath are mutually exclusive.
-
-
array of objectsspec.repo.volumesVolumes adds volumes to the repo server deployment
-
objectspec.repo.volumes.awsElasticBlockStoreawsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. Deprecated: AWSElasticBlockStore is deprecated. All operations for the in-tree awsElasticBlockStore type are redirected to the ebs.csi.aws.com CSI driver. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
stringspec.repo.volumes.awsElasticBlockStore.fsTypefsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
integerspec.repo.volumes.awsElasticBlockStore.partitionpartition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as “1”. Similarly, the volume partition for /dev/sda is “0” (or you can leave the property empty).
-
booleanspec.repo.volumes.awsElasticBlockStore.readOnlyreadOnly value true will force the readOnly setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
stringspec.repo.volumes.awsElasticBlockStore.volumeID
Required value
volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-
-
objectspec.repo.volumes.azureDiskazureDisk represents an Azure Data Disk mount on the host and bind mount to the pod. Deprecated: AzureDisk is deprecated. All operations for the in-tree azureDisk type are redirected to the disk.csi.azure.com CSI driver.
-
stringspec.repo.volumes.azureDisk.cachingModecachingMode is the Host Caching mode: None, Read Only, Read Write.
-
stringspec.repo.volumes.azureDisk.diskName
Required value
diskName is the Name of the data disk in the blob storage -
stringspec.repo.volumes.azureDisk.diskURI
Required value
diskURI is the URI of data disk in the blob storage -
stringspec.repo.volumes.azureDisk.fsTypefsType is Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
Default:
ext4 -
stringspec.repo.volumes.azureDisk.kindkind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared
-
booleanspec.repo.volumes.azureDisk.readOnlyreadOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
Default:
false
-
-
objectspec.repo.volumes.azureFileazureFile represents an Azure File Service mount on the host and bind mount to the pod. Deprecated: AzureFile is deprecated. All operations for the in-tree azureFile type are redirected to the file.csi.azure.com CSI driver.
-
booleanspec.repo.volumes.azureFile.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
stringspec.repo.volumes.azureFile.secretName
Required value
secretName is the name of secret that contains Azure Storage Account Name and Key -
string
Required value
shareName is the azure share Name
-
-
objectspec.repo.volumes.cephfscephFS represents a Ceph FS mount on the host that shares a pod’s lifetime. Deprecated: CephFS is deprecated and the in-tree cephfs type is no longer supported.
-
array of stringsspec.repo.volumes.cephfs.monitors
Required value
monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it -
stringspec.repo.volumes.cephfs.pathpath is Optional: Used as the mounted root, rather than the full Ceph tree, default is /
-
booleanspec.repo.volumes.cephfs.readOnlyreadOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
stringspec.repo.volumes.cephfs.secretFilesecretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
objectspec.repo.volumes.cephfs.secretRefsecretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
stringspec.repo.volumes.cephfs.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.repo.volumes.cephfs.useruser is optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
-
-
objectspec.repo.volumes.cindercinder represents a cinder volume attached and mounted on kubelets host machine. Deprecated: Cinder is deprecated. All operations for the in-tree cinder type are redirected to the cinder.csi.openstack.org CSI driver. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
stringspec.repo.volumes.cinder.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
booleanspec.repo.volumes.cinder.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
objectspec.repo.volumes.cinder.secretRefsecretRef is optional: points to a secret object containing parameters used to connect to OpenStack.
-
stringspec.repo.volumes.cinder.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.repo.volumes.cinder.volumeID
Required value
volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
-
-
objectspec.repo.volumes.configMapconfigMap represents a configMap that should populate this volume
-
integerspec.repo.volumes.configMap.defaultModedefaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.repo.volumes.configMap.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.repo.volumes.configMap.items.keykey is the key to project.
-
integerspec.repo.volumes.configMap.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.volumes.configMap.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.repo.volumes.configMap.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.volumes.configMap.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
objectspec.repo.volumes.csicsi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers.
-
stringspec.repo.volumes.csi.driver
Required value
driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster. -
stringspec.repo.volumes.csi.fsTypefsType to mount. Ex. “ext4”, “xfs”, “ntfs”. If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
-
objectspec.repo.volumes.csi.nodePublishSecretRefnodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.
-
stringspec.repo.volumes.csi.nodePublishSecretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
booleanspec.repo.volumes.csi.readOnlyreadOnly specifies a read-only configuration for the volume. Defaults to false (read/write).
-
objectspec.repo.volumes.csi.volumeAttributesvolumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver’s documentation for supported values.
-
-
objectspec.repo.volumes.downwardAPIdownwardAPI represents downward API about the pod that should populate this volume
-
integerspec.repo.volumes.downwardAPI.defaultModeOptional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.repo.volumes.downwardAPI.itemsItems is a list of downward API volume file
-
objectspec.repo.volumes.downwardAPI.items.fieldRefRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
-
stringspec.repo.volumes.downwardAPI.items.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.repo.volumes.downwardAPI.items.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
integerspec.repo.volumes.downwardAPI.items.modeOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.volumes.downwardAPI.items.pathRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the ‘..’ path. Must be utf-8 encoded. The first item of the relative path must not start with ‘..’
-
objectspec.repo.volumes.downwardAPI.items.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
stringspec.repo.volumes.downwardAPI.items.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.repo.volumes.downwardAPI.items.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.repo.volumes.downwardAPI.items.resourceFieldRef.resource
Required value
Required: resource to select
-
-
-
-
objectspec.repo.volumes.emptyDiremptyDir represents a temporary directory that shares a pod’s lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
stringspec.repo.volumes.emptyDir.mediummedium represents what type of storage medium should back this directory. The default is "" which means to use the node’s default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
-
integer or stringspec.repo.volumes.emptyDir.sizeLimitsizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-
-
objectspec.repo.volumes.ephemeral
ephemeral represents a volume that is handled by a cluster storage driver. The volume’s lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.
Use this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity tracking are needed, c) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource for more information on the connection between this volume type and PersistentVolumeClaim).
Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod.
Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.
A pod can use both types of ephemeral volumes and persistent volumes at the same time.
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate
Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be
<pod name>-<volume name>where<volume name>is the name from thePodSpec.Volumesarray entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long).An existing PVC with that name that is not owned by the pod will not be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster.
This field is read-only and no changes will be made by Kubernetes to the PVC after it has been created.
Required, must not be nil.
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.metadataMay contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec
Required value
The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.-
array of stringsspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.accessModesaccessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSource
dataSource field can be used to specify either:
- An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
- An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.kind
Required value
Kind is the type of resource being referenced -
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSource.name
Required value
Name is the name of resource being referenced
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef
dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn’t specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn’t set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef:
- While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.
- While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.
- While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.kind
Required value
Kind is the type of resource being referenced -
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.name
Required value
Name is the name of resource being referenced -
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.dataSourceRef.namespaceNamespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace’s owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.resourcesresources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.selectorselector is a label query over volumes to consider for binding.
-
array of objectsspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.selector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.storageClassNamestorageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.volumeAttributesClassNamevolumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string or nil value indicates that no VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state, this field can be reset to its previous value (including nil) to cancel the modification. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.volumeModevolumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.
-
stringspec.repo.volumes.ephemeral.volumeClaimTemplate.spec.volumeNamevolumeName is the binding reference to the PersistentVolume backing this claim.
-
-
-
-
objectspec.repo.volumes.fcfc represents a Fibre Channel resource that is attached to a kubelet’s host machine and then exposed to the pod.
-
stringspec.repo.volumes.fc.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
integerspec.repo.volumes.fc.lunlun is Optional: FC target lun number
-
booleanspec.repo.volumes.fc.readOnlyreadOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
array of stringsspec.repo.volumes.fc.targetWWNstargetWWNs is Optional: FC target worldwide names (WWNs)
-
array of stringsspec.repo.volumes.fc.wwidswwids Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
-
-
objectspec.repo.volumes.flexVolumeflexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. Deprecated: FlexVolume is deprecated. Consider using a CSIDriver instead.
-
stringspec.repo.volumes.flexVolume.driver
Required value
driver is the name of the driver to use for this volume. -
stringspec.repo.volumes.flexVolume.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. The default filesystem depends on FlexVolume script.
-
objectspec.repo.volumes.flexVolume.optionsoptions is Optional: this field holds extra command options if any.
-
booleanspec.repo.volumes.flexVolume.readOnlyreadOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.repo.volumes.flexVolume.secretRefsecretRef is Optional: secretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.
-
stringspec.repo.volumes.flexVolume.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
-
objectspec.repo.volumes.flockerflocker represents a Flocker volume attached to a kubelet’s host machine. This depends on the Flocker control service being running. Deprecated: Flocker is deprecated and the in-tree flocker type is no longer supported.
-
stringspec.repo.volumes.flocker.datasetNamedatasetName is Name of the dataset stored as metadata -> name on the dataset for Flocker should be considered as deprecated
-
stringspec.repo.volumes.flocker.datasetUUIDdatasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset
-
-
objectspec.repo.volumes.gcePersistentDiskgcePersistentDisk represents a GCE Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. Deprecated: GCEPersistentDisk is deprecated. All operations for the in-tree gcePersistentDisk type are redirected to the pd.csi.storage.gke.io CSI driver. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
stringspec.repo.volumes.gcePersistentDisk.fsTypefsType is filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
integerspec.repo.volumes.gcePersistentDisk.partitionpartition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as “1”. Similarly, the volume partition for /dev/sda is “0” (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
stringspec.repo.volumes.gcePersistentDisk.pdName
Required value
pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk -
booleanspec.repo.volumes.gcePersistentDisk.readOnlyreadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-
-
objectspec.repo.volumes.gitRepogitRepo represents a git repository at a particular revision. Deprecated: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod’s container.
-
stringspec.repo.volumes.gitRepo.directorydirectory is the target directory name. Must not contain or start with ‘..’. If ‘.’ is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.
-
stringspec.repo.volumes.gitRepo.repository
Required value
repository is the URL -
stringspec.repo.volumes.gitRepo.revisionrevision is the commit hash for the specified revision.
-
-
objectspec.repo.volumes.glusterfsglusterfs represents a Glusterfs mount on the host that shares a pod’s lifetime. Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
-
stringspec.repo.volumes.glusterfs.endpoints
Required value
endpoints is the endpoint name that details Glusterfs topology. -
stringspec.repo.volumes.glusterfs.path
Required value
path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod -
booleanspec.repo.volumes.glusterfs.readOnlyreadOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
-
-
objectspec.repo.volumes.hostPathhostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
stringspec.repo.volumes.hostPath.path
Required value
path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath -
stringspec.repo.volumes.hostPath.typetype for HostPath Volume Defaults to "" More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-
-
objectspec.repo.volumes.image
image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet’s host machine. The volume is resolved at pod startup depending on which PullPolicy value is provided:
- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.
- Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn’t present.
- IfNotPresent: the kubelet pulls if the reference isn’t already present on disk. Container creation will fail if the reference isn’t present and the pull fails.
The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro) and non-executable files (noexec). Sub path mounts for containers are not supported (spec.containers[].volumeMounts.subpath) before 1.33. The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
-
stringspec.repo.volumes.image.pullPolicyPolicy for pulling OCI objects. Possible values are: Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn’t present. IfNotPresent: the kubelet pulls if the reference isn’t already present on disk. Container creation will fail if the reference isn’t present and the pull fails. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
-
stringspec.repo.volumes.image.referenceRequired: Image or artifact reference to be used. Behaves in the same way as pod.spec.containers[*].image. Pull secrets will be assembled in the same way as for the container image by looking up node credentials, SA image pull secrets, and pod spec image pull secrets. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
objectspec.repo.volumes.iscsiiscsi represents an ISCSI Disk resource that is attached to a kubelet’s host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes/#iscsi
-
booleanspec.repo.volumes.iscsi.chapAuthDiscoverychapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication
-
booleanspec.repo.volumes.iscsi.chapAuthSessionchapAuthSession defines whether support iSCSI Session CHAP authentication
-
stringspec.repo.volumes.iscsi.fsTypefsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
-
stringspec.repo.volumes.iscsi.initiatorNameinitiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface
: will be created for the connection. -
stringspec.repo.volumes.iscsi.iqn
Required value
iqn is the target iSCSI Qualified Name. -
stringspec.repo.volumes.iscsi.iscsiInterfaceiscsiInterface is the interface Name that uses an iSCSI transport. Defaults to ‘default’ (tcp).
Default:
default -
integerspec.repo.volumes.iscsi.lun
Required value
lun represents iSCSI Target Lun number. -
array of stringsspec.repo.volumes.iscsi.portalsportals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-
booleanspec.repo.volumes.iscsi.readOnlyreadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.
-
objectspec.repo.volumes.iscsi.secretRefsecretRef is the CHAP Secret for iSCSI target and initiator authentication
-
stringspec.repo.volumes.iscsi.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.repo.volumes.iscsi.targetPortal
Required value
targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
-
-
stringspec.repo.volumes.namename of the volume. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
objectspec.repo.volumes.nfsnfs represents an NFS mount on the host that shares a pod’s lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
stringspec.repo.volumes.nfs.path
Required value
path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs -
booleanspec.repo.volumes.nfs.readOnlyreadOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
stringspec.repo.volumes.nfs.server
Required value
server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
-
-
objectspec.repo.volumes.persistentVolumeClaimpersistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
-
stringspec.repo.volumes.persistentVolumeClaim.claimName
Required value
claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims -
booleanspec.repo.volumes.persistentVolumeClaim.readOnlyreadOnly Will force the ReadOnly setting in VolumeMounts. Default false.
-
-
objectspec.repo.volumes.photonPersistentDiskphotonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine. Deprecated: PhotonPersistentDisk is deprecated and the in-tree photonPersistentDisk type is no longer supported.
-
stringspec.repo.volumes.photonPersistentDisk.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
stringspec.repo.volumes.photonPersistentDisk.pdID
Required value
pdID is the ID that identifies Photon Controller persistent disk
-
-
objectspec.repo.volumes.portworxVolumeportworxVolume represents a portworx volume attached and mounted on kubelets host machine. Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate is on.
-
stringspec.repo.volumes.portworxVolume.fsTypefSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”. Implicitly inferred to be “ext4” if unspecified.
-
booleanspec.repo.volumes.portworxVolume.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
stringspec.repo.volumes.portworxVolume.volumeID
Required value
volumeID uniquely identifies a Portworx volume
-
-
objectspec.repo.volumes.projectedprojected items for all in one resources secrets, configmaps, and downward API
-
integerspec.repo.volumes.projected.defaultModedefaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.repo.volumes.projected.sourcessources is the list of volume projections. Each entry in this list handles one source.
-
objectspec.repo.volumes.projected.sources.clusterTrustBundle
ClusterTrustBundle allows a pod to access the
.spec.trustBundlefield of ClusterTrustBundle objects in an auto-updating file.Alpha, gated by the ClusterTrustBundleProjection feature gate.
ClusterTrustBundle objects can either be selected by name, or by the combination of signer name and a label selector.
Kubelet performs aggressive normalization of the PEM contents written into the pod filesystem. Esoteric PEM features such as inter-block comments and block headers are stripped. Certificates are deduplicated. The ordering of certificates within the file is arbitrary, and Kubelet may change the order over time.
-
objectspec.repo.volumes.projected.sources.clusterTrustBundle.labelSelectorSelect all ClusterTrustBundles that match this label selector. Only has effect if signerName is set. Mutually-exclusive with name. If unset, interpreted as “match nothing”. If set but empty, interpreted as “match everything”.
-
array of objectsspec.repo.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.repo.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.repo.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.repo.volumes.projected.sources.clusterTrustBundle.labelSelector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.repo.volumes.projected.sources.clusterTrustBundle.labelSelector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.repo.volumes.projected.sources.clusterTrustBundle.nameSelect a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.
-
booleanspec.repo.volumes.projected.sources.clusterTrustBundle.optionalIf true, don’t block pod startup if the referenced ClusterTrustBundle(s) aren’t available. If using name, then the named ClusterTrustBundle is allowed not to exist. If using signerName, then the combination of signerName and labelSelector is allowed to match zero ClusterTrustBundles.
-
stringspec.repo.volumes.projected.sources.clusterTrustBundle.path
Required value
Relative path from the volume root to write the bundle. -
stringspec.repo.volumes.projected.sources.clusterTrustBundle.signerNameSelect all ClusterTrustBundles that match this signer name. Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated.
-
-
objectspec.repo.volumes.projected.sources.configMapconfigMap information about the configMap data to project
-
array of objectsspec.repo.volumes.projected.sources.configMap.itemsitems if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.repo.volumes.projected.sources.configMap.items.keykey is the key to project.
-
integerspec.repo.volumes.projected.sources.configMap.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.volumes.projected.sources.configMap.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.repo.volumes.projected.sources.configMap.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.volumes.projected.sources.configMap.optionaloptional specify whether the ConfigMap or its keys must be defined
-
-
objectspec.repo.volumes.projected.sources.downwardAPIdownwardAPI information about the downwardAPI data to project
-
array of objectsspec.repo.volumes.projected.sources.downwardAPI.itemsItems is a list of DownwardAPIVolume file
-
objectspec.repo.volumes.projected.sources.downwardAPI.items.fieldRefRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
-
stringspec.repo.volumes.projected.sources.downwardAPI.items.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.repo.volumes.projected.sources.downwardAPI.items.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
integerspec.repo.volumes.projected.sources.downwardAPI.items.modeOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.volumes.projected.sources.downwardAPI.items.pathRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the ‘..’ path. Must be utf-8 encoded. The first item of the relative path must not start with ‘..’
-
objectspec.repo.volumes.projected.sources.downwardAPI.items.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
stringspec.repo.volumes.projected.sources.downwardAPI.items.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.repo.volumes.projected.sources.downwardAPI.items.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.repo.volumes.projected.sources.downwardAPI.items.resourceFieldRef.resource
Required value
Required: resource to select
-
-
-
-
objectspec.repo.volumes.projected.sources.podCertificate
Projects an auto-rotating credential bundle (private key and certificate chain) that the pod can use either as a TLS client or server.
Kubelet generates a private key and uses it to send a PodCertificateRequest to the named signer. Once the signer approves the request and issues a certificate chain, Kubelet writes the key and certificate chain to the pod filesystem. The pod does not start until certificates have been issued for each podCertificate projected volume source in its spec.
Kubelet will begin trying to rotate the certificate at the time indicated by the signer using the PodCertificateRequest.Status.BeginRefreshAt timestamp.
Kubelet can write a single file, indicated by the credentialBundlePath field, or separate files, indicated by the keyPath and certificateChainPath fields.
The credential bundle is a single file in PEM format. The first PEM entry is the private key (in PKCS#8 format), and the remaining PEM entries are the certificate chain issued by the signer (typically, signers will return their certificate chain in leaf-to-root order).
Prefer using the credential bundle format, since your application code can read it atomically. If you use keyPath and certificateChainPath, your application must make two separate file reads. If these coincide with a certificate rotation, it is possible that the private key and leaf certificate you read may not correspond to each other. Your application will need to check for this condition, and re-read until they are consistent.
The named signer controls chooses the format of the certificate it issues; consult the signer implementation’s documentation to learn how to use the certificates it issues.
-
stringspec.repo.volumes.projected.sources.podCertificate.certificateChainPath
Write the certificate chain at this path in the projected volume.
Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.
-
stringspec.repo.volumes.projected.sources.podCertificate.credentialBundlePath
Write the credential bundle at this path in the projected volume.
The credential bundle is a single file that contains multiple PEM blocks. The first PEM block is a PRIVATE KEY block, containing a PKCS#8 private key.
The remaining blocks are CERTIFICATE blocks, containing the issued certificate chain from the signer (leaf and any intermediates).
Using credentialBundlePath lets your Pod’s application code make a single atomic read that retrieves a consistent key and certificate chain. If you project them to separate files, your application code will need to additionally check that the leaf certificate was issued to the key.
-
stringspec.repo.volumes.projected.sources.podCertificate.keyPath
Write the key at this path in the projected volume.
Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.
-
stringspec.repo.volumes.projected.sources.podCertificate.keyType
Required value
The type of keypair Kubelet will generate for the pod.
Valid values are “RSA3072”, “RSA4096”, “ECDSAP256”, “ECDSAP384”, “ECDSAP521”, and “ED25519”.
-
integerspec.repo.volumes.projected.sources.podCertificate.maxExpirationSeconds
maxExpirationSeconds is the maximum lifetime permitted for the certificate.
Kubelet copies this value verbatim into the PodCertificateRequests it generates for this projection.
If omitted, kube-apiserver will set it to 86400(24 hours). kube-apiserver will reject values shorter than 3600 (1 hour). The maximum allowable value is 7862400 (91 days).
The signer implementation is then free to issue a certificate with any lifetime shorter than MaxExpirationSeconds, but no shorter than 3600 seconds (1 hour). This constraint is enforced by kube-apiserver.
kubernetes.iosigners will never issue certificates with a lifetime longer than 24 hours. -
stringspec.repo.volumes.projected.sources.podCertificate.signerName
Required value
Kubelet’s generated CSRs will be addressed to this signer.
-
-
objectspec.repo.volumes.projected.sources.secretsecret information about the secret data to project
-
array of objectsspec.repo.volumes.projected.sources.secret.itemsitems if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.repo.volumes.projected.sources.secret.items.keykey is the key to project.
-
integerspec.repo.volumes.projected.sources.secret.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.volumes.projected.sources.secret.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
stringspec.repo.volumes.projected.sources.secret.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.repo.volumes.projected.sources.secret.optionaloptional field specify whether the Secret or its key must be defined
-
-
objectspec.repo.volumes.projected.sources.serviceAccountTokenserviceAccountToken is information about the serviceAccountToken data to project
-
stringspec.repo.volumes.projected.sources.serviceAccountToken.audienceaudience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
-
integerspec.repo.volumes.projected.sources.serviceAccountToken.expirationSecondsexpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
-
stringspec.repo.volumes.projected.sources.serviceAccountToken.path
Required value
path is the path relative to the mount point of the file to project the token into.
-
-
-
-
objectspec.repo.volumes.quobytequobyte represents a Quobyte mount on the host that shares a pod’s lifetime. Deprecated: Quobyte is deprecated and the in-tree quobyte type is no longer supported.
-
stringspec.repo.volumes.quobyte.groupgroup to map volume access to Default is no group
-
booleanspec.repo.volumes.quobyte.readOnlyreadOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.
-
stringspec.repo.volumes.quobyte.registry
Required value
registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes -
stringspec.repo.volumes.quobyte.tenanttenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin
-
stringspec.repo.volumes.quobyte.useruser to map volume access to Defaults to serivceaccount user
-
stringspec.repo.volumes.quobyte.volume
Required value
volume is a string that references an already created Quobyte volume by name.
-
-
objectspec.repo.volumes.scaleIOscaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. Deprecated: ScaleIO is deprecated and the in-tree scaleIO type is no longer supported.
-
stringspec.repo.volumes.scaleIO.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Default is “xfs”.
Default:
xfs -
stringspec.repo.volumes.scaleIO.gateway
Required value
gateway is the host address of the ScaleIO API Gateway. -
stringspec.repo.volumes.scaleIO.protectionDomainprotectionDomain is the name of the ScaleIO Protection Domain for the configured storage.
-
booleanspec.repo.volumes.scaleIO.readOnlyreadOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.repo.volumes.scaleIO.secretRef
Required value
secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail.-
stringspec.repo.volumes.scaleIO.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
booleanspec.repo.volumes.scaleIO.sslEnabledsslEnabled Flag enable/disable SSL communication with Gateway, default false
-
stringspec.repo.volumes.scaleIO.storageModestorageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.
Default:
ThinProvisioned -
stringspec.repo.volumes.scaleIO.storagePoolstoragePool is the ScaleIO Storage Pool associated with the protection domain.
-
stringspec.repo.volumes.scaleIO.system
Required value
system is the name of the storage system as configured in ScaleIO. -
stringspec.repo.volumes.scaleIO.volumeNamevolumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.
-
-
objectspec.repo.volumes.secretsecret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
integerspec.repo.volumes.secret.defaultModedefaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
array of objectsspec.repo.volumes.secret.itemsitems If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the ‘..’ path or start with ‘..’.
-
stringspec.repo.volumes.secret.items.keykey is the key to project.
-
integerspec.repo.volumes.secret.items.modemode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
stringspec.repo.volumes.secret.items.pathpath is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element ‘..’. May not start with the string ‘..’.
-
-
booleanspec.repo.volumes.secret.optionaloptional field specify whether the Secret or its keys must be defined
-
stringspec.repo.volumes.secret.secretNamesecretName is the name of the secret in the pod’s namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
-
-
objectspec.repo.volumes.storageosstorageOS represents a StorageOS volume attached and mounted on Kubernetes nodes. Deprecated: StorageOS is deprecated and the in-tree storageos type is no longer supported.
-
stringspec.repo.volumes.storageos.fsTypefsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
booleanspec.repo.volumes.storageos.readOnlyreadOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
-
objectspec.repo.volumes.storageos.secretRefsecretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted.
-
stringspec.repo.volumes.storageos.secretRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’
-
-
stringspec.repo.volumes.storageos.volumeNamevolumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.
-
stringspec.repo.volumes.storageos.volumeNamespacevolumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod’s namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to “default” if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.
-
-
objectspec.repo.volumes.vsphereVolumevsphereVolume represents a vSphere volume attached and mounted on kubelets host machine. Deprecated: VsphereVolume is deprecated. All operations for the in-tree vsphereVolume type are redirected to the csi.vsphere.vmware.com CSI driver.
-
stringspec.repo.volumes.vsphereVolume.fsTypefsType is filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. “ext4”, “xfs”, “ntfs”. Implicitly inferred to be “ext4” if unspecified.
-
stringspec.repo.volumes.vsphereVolume.storagePolicyIDstoragePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.
-
stringspec.repo.volumes.vsphereVolume.storagePolicyNamestoragePolicyName is the storage Policy Based Management (SPBM) profile name.
-
stringspec.repo.volumes.vsphereVolume.volumePath
Required value
volumePath is the path that identifies vSphere volume vmdk
-
-
-
-
stringspec.repositoryCredentialsRepositoryCredentials are the Git pull credentials to configure Argo CD with upon creation of the cluster.
-
array of objectsspec.resourceActionsResourceActions customizes resource action behavior.
-
stringspec.resourceActions.action
-
stringspec.resourceActions.group
-
stringspec.resourceActions.kind
-
-
stringspec.resourceCustomizationsDeprecated field. Support dropped in v1beta1 version. ResourceCustomizations customizes resource behavior. Keys are in the form: group/Kind. Please note that this is being deprecated in favor of ResourceHealthChecks, ResourceIgnoreDifferences, and ResourceActions.
-
stringspec.resourceExclusionsResourceExclusions is used to completely ignore entire classes of resource group/kinds.
-
array of objectsspec.resourceHealthChecksResourceHealthChecks customizes resource health check behavior.
-
stringspec.resourceHealthChecks.check
-
stringspec.resourceHealthChecks.group
-
stringspec.resourceHealthChecks.kind
-
-
objectspec.resourceIgnoreDifferencesResourceIgnoreDifferences customizes resource ignore difference behavior.
-
objectspec.resourceIgnoreDifferences.all
-
array of stringsspec.resourceIgnoreDifferences.all.jqPathExpressions
-
array of stringsspec.resourceIgnoreDifferences.all.jsonPointers
-
array of stringsspec.resourceIgnoreDifferences.all.managedFieldsManagers
-
-
array of objectsspec.resourceIgnoreDifferences.resourceIdentifiers
-
objectspec.resourceIgnoreDifferences.resourceIdentifiers.customization
-
array of stringsspec.resourceIgnoreDifferences.resourceIdentifiers.customization.jqPathExpressions
-
array of stringsspec.resourceIgnoreDifferences.resourceIdentifiers.customization.jsonPointers
-
array of stringsspec.resourceIgnoreDifferences.resourceIdentifiers.customization.managedFieldsManagers
-
-
stringspec.resourceIgnoreDifferences.resourceIdentifiers.group
-
stringspec.resourceIgnoreDifferences.resourceIdentifiers.kind
-
-
-
stringspec.resourceInclusionsResourceInclusions is used to only include specific group/kinds in the reconciliation process.
-
stringspec.resourceTrackingMethodResourceTrackingMethod defines how Argo CD should track resources that it manages
-
objectspec.serverServer defines the options for the ArgoCD Server component.
-
objectspec.server.autoscaleAutoscale defines the autoscale options for the Argo CD Server component.
-
booleanspec.server.autoscale.enabled
Required value
Enabled will toggle autoscaling support for the Argo CD Server component. -
objectspec.server.autoscale.hpaHPA defines the HorizontalPodAutoscaler options for the Argo CD Server component.
-
integerspec.server.autoscale.hpa.maxReplicas
Required value
maxReplicas is the upper limit for the number of pods that can be set by the autoscaler; cannot be smaller than MinReplicas. -
integerspec.server.autoscale.hpa.minReplicasminReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.
-
objectspec.server.autoscale.hpa.scaleTargetRef
Required value
reference to scaled resource; horizontal pod autoscaler will learn the current resource consumption and will set the desired number of pods by using its Scale subresource.-
stringspec.server.autoscale.hpa.scaleTargetRef.apiVersionapiVersion is the API version of the referent
-
stringspec.server.autoscale.hpa.scaleTargetRef.kind
Required value
kind is the kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds -
stringspec.server.autoscale.hpa.scaleTargetRef.name
Required value
name is the name of the referent; More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-
integerspec.server.autoscale.hpa.targetCPUUtilizationPercentagetargetCPUUtilizationPercentage is the target average CPU utilization (represented as a percentage of requested CPU) over all the pods; if not specified the default autoscaling policy will be used.
-
-
-
booleanspec.server.enableRolloutsUIEnableRolloutsUI will add the Argo Rollouts UI extension in ArgoCD Dashboard.
-
array of objectsspec.server.envEnv lets you specify environment for API server pods
-
stringspec.server.env.nameName of the environment variable. May consist of any printable ASCII characters except ‘=’.
-
stringspec.server.env.valueVariable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. “$$(VAR_NAME)” will produce the string literal “$(VAR_NAME)”. Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to “”.
-
objectspec.server.env.valueFromSource for the environment variable’s value. Cannot be used if value is not empty.
-
objectspec.server.env.valueFrom.configMapKeyRefSelects a key of a ConfigMap.
-
stringspec.server.env.valueFrom.configMapKeyRef.key
Required value
The key to select. -
stringspec.server.env.valueFrom.configMapKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.env.valueFrom.configMapKeyRef.optionalSpecify whether the ConfigMap or its key must be defined
-
-
objectspec.server.env.valueFrom.fieldRefSelects a field of the pod: supports metadata.name, metadata.namespace,
metadata.labels['<KEY>'],metadata.annotations['<KEY>'], spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.-
stringspec.server.env.valueFrom.fieldRef.apiVersionVersion of the schema the FieldPath is written in terms of, defaults to “v1”.
-
stringspec.server.env.valueFrom.fieldRef.fieldPath
Required value
Path of the field to select in the specified API version.
-
-
objectspec.server.env.valueFrom.fileKeyRefFileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled.
-
stringspec.server.env.valueFrom.fileKeyRef.key
Required value
The key within the env file. An invalid key will prevent the pod from starting. The keys defined within a source may consist of any printable ASCII characters except ‘=’. During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. -
booleanspec.server.env.valueFrom.fileKeyRef.optional
Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod’s containers.
If optional is set to false and the specified key does not exist, an error will be returned during Pod creation.
Default:
false -
stringspec.server.env.valueFrom.fileKeyRef.path
Required value
The path within the volume from which to select the file. Must be relative and may not contain the ‘..’ path or start with ‘..’. -
stringspec.server.env.valueFrom.fileKeyRef.volumeName
Required value
The name of the volume mount containing the env file.
-
-
objectspec.server.env.valueFrom.resourceFieldRefSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
stringspec.server.env.valueFrom.resourceFieldRef.containerNameContainer name: required for volumes, optional for env vars
-
integer or stringspec.server.env.valueFrom.resourceFieldRef.divisorSpecifies the output format of the exposed resources, defaults to “1”
Pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ -
stringspec.server.env.valueFrom.resourceFieldRef.resource
Required value
Required: resource to select
-
-
objectspec.server.env.valueFrom.secretKeyRefSelects a key of a secret in the pod’s namespace
-
stringspec.server.env.valueFrom.secretKeyRef.key
Required value
The key of the secret to select from. Must be a valid secret key. -
stringspec.server.env.valueFrom.secretKeyRef.nameName of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
Default:
‘’ -
booleanspec.server.env.valueFrom.secretKeyRef.optionalSpecify whether the Secret or its key must be defined
-
-
-
-
array of stringsspec.server.extraCommandArgsExtra Command arguments that would append to the Argo CD server command. ExtraCommandArgs will not be added, if one of these commands is already part of the server command with same or different value.
-
objectspec.server.grpcGRPC defines the state for the Argo CD Server GRPC options.
-
stringspec.server.grpc.hostHost is the hostname to use for Ingress/Route resources.
-
objectspec.server.grpc.ingressIngress defines the desired state for the Argo CD Server GRPC Ingress.
-
objectspec.server.grpc.ingress.annotationsAnnotations is the map of annotations to apply to the Ingress.
-
booleanspec.server.grpc.ingress.enabled
Required value
Enabled will toggle the creation of the Ingress. -
stringspec.server.grpc.ingress.ingressClassNameIngressClassName for the Ingress resource.
-
stringspec.server.grpc.ingress.pathPath used for the Ingress resource.
-
array of objectsspec.server.grpc.ingress.tlsTLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.
-
array of stringsspec.server.grpc.ingress.tls.hostshosts is a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.
-
stringspec.server.grpc.ingress.tls.secretNamesecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the “Host” header field used by an IngressRule, the SNI host is used for termination and value of the “Host” header is used for routing.
-
-
-
-
stringspec.server.hostHost is the hostname to use for Ingress/Route resources.
-
objectspec.server.ingressIngress defines the desired state for an Ingress for the Argo CD Server component.
-
objectspec.server.ingress.annotationsAnnotations is the map of annotations to apply to the Ingress.
-
booleanspec.server.ingress.enabled
Required value
Enabled will toggle the creation of the Ingress. -
stringspec.server.ingress.ingressClassNameIngressClassName for the Ingress resource.
-
stringspec.server.ingress.pathPath used for the Ingress resource.
-
array of objectsspec.server.ingress.tlsTLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.
-
array of stringsspec.server.ingress.tls.hostshosts is a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.
-
stringspec.server.ingress.tls.secretNamesecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the “Host” header field used by an IngressRule, the SNI host is used for termination and value of the “Host” header is used for routing.
-
-
-
booleanspec.server.insecureInsecure toggles the insecure flag.
-
stringspec.server.logFormatLogFormat refers to the log level to be used by the ArgoCD Server component. Defaults to ArgoCDDefaultLogFormat if not configured. Valid options are text or json.
-
stringspec.server.logLevelLogLevel refers to the log level to be used by the ArgoCD Server component. Defaults to ArgoCDDefaultLogLevel if not set. Valid options are debug, info, error, and warn.
-
integerspec.server.replicasReplicas defines the number of replicas for argocd-server. Default is nil. Value should be greater than or equal to 0. Value will be ignored if Autoscaler is enabled.
-
objectspec.server.resourcesResources defines the Compute Resources required by the container for the Argo CD server component.
-
array of objectsspec.server.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.server.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.server.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.server.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.server.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
objectspec.server.serviceService defines the options for the Service backing the ArgoCD Server component.
-
stringspec.server.service.type
Required value
Type is the ServiceType to use for the Service resource.
-
-
-
array of stringsspec.sourceNamespacesSourceNamespaces defines the namespaces application resources are allowed to be created in
-
objectspec.ssoSSO defines the Single Sign-on configuration for Argo CD
-
objectspec.sso.dexDex contains the configuration for Argo CD dex authentication
-
stringspec.sso.dex.configConfig is the dex connector configuration.
-
array of stringsspec.sso.dex.groupsOptional list of required groups a user must be a member of
-
objectspec.sso.dex.resourcesResources defines the Compute Resources required by the container for Dex.
-
array of objectsspec.sso.dex.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.sso.dex.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.sso.dex.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.sso.dex.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.sso.dex.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
-
stringspec.sso.providerProvider installs and configures the given SSO Provider with Argo CD.
-
objectspec.sso.resourcesDeprecated field. Support dropped in v1beta1 version. Resources defines the Compute Resources required by the container for SSO.
-
array of objectsspec.sso.resources.claims
Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
This field depends on the DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
-
stringspec.sso.resources.claims.nameName must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
-
stringspec.sso.resources.claims.requestRequest is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.
-
-
objectspec.sso.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.sso.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
booleanspec.sso.verifyTLSDeprecated field. Support dropped in v1beta1 version. VerifyTLS set to false disables strict TLS validation.
-
-
booleanspec.statusBadgeEnabledStatusBadgeEnabled toggles application status badge feature.
-
objectspec.tlsTLS defines the TLS options for ArgoCD.
-
objectspec.tls.caCA defines the CA options.
-
stringspec.tls.ca.configMapNameConfigMapName is the name of the ConfigMap containing the CA Certificate.
-
stringspec.tls.ca.secretNameSecretName is the name of the Secret containing the CA Certificate and Key.
-
-
objectspec.tls.initialCertsInitialCerts defines custom TLS certificates upon creation of the cluster for connecting Git repositories via HTTPS.
-
-
booleanspec.usersAnonymousEnabledUsersAnonymousEnabled toggles anonymous user access. The anonymous users get default role permissions specified argocd-rbac-cm.
-
-
objectstatusArgoCDStatus defines the observed state of ArgoCD
-
stringstatus.applicationControllerApplicationController is a simple, high-level summary of where the Argo CD application controller component is in its lifecycle. There are four possible ApplicationController values: Pending: The Argo CD application controller component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD application controller component are in a Ready state. Failed: At least one of the Argo CD application controller component Pods had a failure. Unknown: The state of the Argo CD application controller component could not be obtained.
-
stringstatus.applicationSetControllerApplicationSetController is a simple, high-level summary of where the Argo CD applicationSet controller component is in its lifecycle. There are four possible ApplicationSetController values: Pending: The Argo CD applicationSet controller component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD applicationSet controller component are in a Ready state. Failed: At least one of the Argo CD applicationSet controller component Pods had a failure. Unknown: The state of the Argo CD applicationSet controller component could not be obtained.
-
array of objectsstatus.conditionsConditions is an array of the ArgoCD’s status conditions
-
stringstatus.conditions.lastTransitionTimelastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
-
stringstatus.conditions.messagemessage is a human readable message indicating details about the transition. This may be an empty string.
Maximum length:
32768 -
integerstatus.conditions.observedGenerationobservedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
Allowed values:
0 <= X -
stringstatus.conditions.reasonreason contains a programmatic identifier indicating the reason for the condition’s last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
Length:
1..1024Pattern:
^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ -
stringstatus.conditions.statusstatus of the condition, one of True, False, Unknown.
Allowed values:
True,False,Unknown -
stringstatus.conditions.typetype of condition in CamelCase or in foo.example.com/CamelCase.
Maximum length:
316Pattern:
^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
-
-
stringstatus.hostHost is the hostname of the Ingress.
-
stringstatus.notificationsControllerNotificationsController is a simple, high-level summary of where the Argo CD notifications controller component is in its lifecycle. There are four possible NotificationsController values: Pending: The Argo CD notifications controller component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD notifications controller component are in a Ready state. Failed: At least one of the Argo CD notifications controller component Pods had a failure. Unknown: The state of the Argo CD notifications controller component could not be obtained.
-
stringstatus.phasePhase is a simple, high-level summary of where the ArgoCD is in its lifecycle. There are four possible phase values: Pending: The ArgoCD has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Available: All of the resources for the ArgoCD are ready. Failed: At least one resource has experienced a failure. Unknown: The state of the ArgoCD phase could not be obtained.
-
stringstatus.redisRedis is a simple, high-level summary of where the Argo CD Redis component is in its lifecycle. There are four possible redis values: Pending: The Argo CD Redis component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD Redis component are in a Ready state. Failed: At least one of the Argo CD Redis component Pods had a failure. Unknown: The state of the Argo CD Redis component could not be obtained.
-
stringstatus.redisTLSChecksumRedisTLSChecksum contains the SHA256 checksum of the latest known state of tls.crt and tls.key in the argocd-operator-redis-tls secret.
-
stringstatus.repoRepo is a simple, high-level summary of where the Argo CD Repo component is in its lifecycle. There are four possible repo values: Pending: The Argo CD Repo component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD Repo component are in a Ready state. Failed: At least one of the Argo CD Repo component Pods had a failure. Unknown: The state of the Argo CD Repo component could not be obtained.
-
stringstatus.repoTLSChecksumRepoTLSChecksum contains the SHA256 checksum of the latest known state of tls.crt and tls.key in the argocd-repo-server-tls secret.
-
stringstatus.serverServer is a simple, high-level summary of where the Argo CD server component is in its lifecycle. There are four possible server values: Pending: The Argo CD server component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD server component are in a Ready state. Failed: At least one of the Argo CD server component Pods had a failure. Unknown: The state of the Argo CD server component could not be obtained.
-
stringstatus.ssoSSO is a simple, high-level summary of where the Argo CD SSO(Dex/Keycloak) component is in its lifecycle. There are four possible sso values: Pending: The Argo CD SSO component has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the required Pods for the Argo CD SSO component are in a Ready state. Failed: At least one of the Argo CD SSO component Pods had a failure. Unknown: The state of the Argo CD SSO component could not be obtained.
-
ArgoCDExport
Scope: Namespaced
Version: v1alpha1
-
stringapiVersionAPIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-
stringkindKind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-
objectmetadata
-
objectspecArgoCDExportSpec defines the desired state of ArgoCDExport
-
stringspec.argocd
Required value
Argocd is the name of the ArgoCD instance to export. -
stringspec.imageImage is the container image to use for the export Job.
-
objectspec.storageStorage defines the storage configuration options.
-
stringspec.storage.backendBackend defines the storage backend to use, must be “local” (the default), “aws”, “azure” or “gcp”.
-
objectspec.storage.pvcPVC is the desired characteristics for a PersistentVolumeClaim.
-
array of stringsspec.storage.pvc.accessModesaccessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
-
objectspec.storage.pvc.dataSource
dataSource field can be used to specify either:
- An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
- An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource.
-
stringspec.storage.pvc.dataSource.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.storage.pvc.dataSource.kind
Required value
Kind is the type of resource being referenced -
stringspec.storage.pvc.dataSource.name
Required value
Name is the name of resource being referenced
-
objectspec.storage.pvc.dataSourceRef
dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn’t specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn’t set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef:
- While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects.
- While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified.
- While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
stringspec.storage.pvc.dataSourceRef.apiGroupAPIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
stringspec.storage.pvc.dataSourceRef.kind
Required value
Kind is the type of resource being referenced -
stringspec.storage.pvc.dataSourceRef.name
Required value
Name is the name of resource being referenced -
stringspec.storage.pvc.dataSourceRef.namespaceNamespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace’s owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
-
objectspec.storage.pvc.resourcesresources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
-
objectspec.storage.pvc.resources.limitsLimits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
objectspec.storage.pvc.resources.requestsRequests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-
objectspec.storage.pvc.selectorselector is a label query over volumes to consider for binding.
-
array of objectsspec.storage.pvc.selector.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.storage.pvc.selector.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.storage.pvc.selector.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.storage.pvc.selector.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.storage.pvc.selector.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.storage.pvc.storageClassNamestorageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
-
stringspec.storage.pvc.volumeAttributesClassNamevolumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass will be applied to the claim but it’s not allowed to reset this field to empty string once it is set. If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass will be set by the persistentvolume controller if it exists. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/ (Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).
-
stringspec.storage.pvc.volumeModevolumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.
-
stringspec.storage.pvc.volumeNamevolumeName is the binding reference to the PersistentVolume backing this claim.
-
-
stringspec.storage.secretNameSecretName is the name of a Secret with encryption key, credentials, etc.
-
-
stringspec.versionVersion is the tag/digest to use for the export Job container image.
-
-
objectstatusArgoCDExportStatus defines the observed state of ArgoCDExport
-
stringstatus.phase
Required value
Phase is a simple, high-level summary of where the ArgoCDExport is in its lifecycle. There are five possible phase values: Pending: The ArgoCDExport has been accepted by the Kubernetes system, but one or more of the required resources have not been created. Running: All of the containers for the ArgoCDExport are still running, or in the process of starting or restarting. Succeeded: All containers for the ArgoCDExport have terminated in success, and will not be restarted. Failed: At least one container has terminated in failure, either exited with non-zero status or was terminated by the system. Unknown: For some reason the state of the ArgoCDExport could not be obtained.
-
ImageUpdater
Scope: Namespaced
Version: v1alpha1
-
stringapiVersionAPIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-
stringkindKind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-
objectmetadata
-
objectspecImageUpdaterSpec defines the desired state of ImageUpdater It specifies which applications to target, default update strategies, and a list of images to manage.
-
array of objectsspec.applicationRefs
Required value
ApplicationRefs indicates the set of applications to be managed. ApplicationRefs is a list of rules to select Argo CD Applications within the ImageUpdater CR’s namespace. Each reference can also provide specific overrides for the global settings defined above.-
objectspec.applicationRefs.commonUpdateSettingsCommonUpdateSettings overrides the global CommonUpdateSettings for applications matched by this selector. This field is ignored when UseAnnotations is true.
-
stringspec.applicationRefs.commonUpdateSettings.allowTagsAllowTags is a regex pattern for tags to allow. This acts as the default if not overridden.
-
booleanspec.applicationRefs.commonUpdateSettings.forceUpdateForceUpdate specifies whether updates should be forced. This acts as the default if not overridden.
Default:
false -
array of stringsspec.applicationRefs.commonUpdateSettings.ignoreTagsIgnoreTags is a list of glob-like patterns of tags to ignore. This acts as the default and can be overridden at more specific levels.
-
array of stringsspec.applicationRefs.commonUpdateSettings.platformsPlatforms specifies a list of target platforms (e.g., “linux/amd64”, “linux/arm64”). If specified, the image updater will consider these platforms when checking for new versions or digests.
-
stringspec.applicationRefs.commonUpdateSettings.pullSecretPullSecret is the pull secret to use for images. This acts as the default if not overridden.
-
stringspec.applicationRefs.commonUpdateSettings.updateStrategyUpdateStrategy defines the update strategy to apply. Examples: “semver”, “latest”, “digest”, “name”. This acts as the default if not overridden at a more specific level.
Default:
semver
-
-
array of objectsspec.applicationRefs.imagesImages contains a list of configurations that how images should be updated. These rules apply to applications selected by namePattern in ApplicationRefs, and each image can override global/ApplicationRef settings. This field is ignored when UseAnnotations is true.
-
stringspec.applicationRefs.images.aliasAlias is a short, user-defined name for this image configuration. It MUST be unique within a single ApplicationRef’s list of images. This field is mandatory.
Pattern:
^[a-zA-Z0-9][a-zA-Z0-9-._]*$ -
objectspec.applicationRefs.images.commonUpdateSettingsCommonUpdateSettings overrides the effective default CommonUpdateSettings for this specific image.
-
stringspec.applicationRefs.images.commonUpdateSettings.allowTagsAllowTags is a regex pattern for tags to allow. This acts as the default if not overridden.
-
booleanspec.applicationRefs.images.commonUpdateSettings.forceUpdateForceUpdate specifies whether updates should be forced. This acts as the default if not overridden.
Default:
false -
array of stringsspec.applicationRefs.images.commonUpdateSettings.ignoreTagsIgnoreTags is a list of glob-like patterns of tags to ignore. This acts as the default and can be overridden at more specific levels.
-
array of stringsspec.applicationRefs.images.commonUpdateSettings.platformsPlatforms specifies a list of target platforms (e.g., “linux/amd64”, “linux/arm64”). If specified, the image updater will consider these platforms when checking for new versions or digests.
-
stringspec.applicationRefs.images.commonUpdateSettings.pullSecretPullSecret is the pull secret to use for images. This acts as the default if not overridden.
-
stringspec.applicationRefs.images.commonUpdateSettings.updateStrategyUpdateStrategy defines the update strategy to apply. Examples: “semver”, “latest”, “digest”, “name”. This acts as the default if not overridden at a more specific level.
Default:
semver
-
-
stringspec.applicationRefs.images.imageNameImageName is the full identifier of the image to be tracked, including the registry (if not Docker Hub), the image name, and an initial/current tag or version. This is the string used to query the container registry and also as a base for finding updates. Example: “docker.io/library/nginx:1.17.10”, “quay.io/prometheus/node-exporter:v1.5.0”. This field is mandatory.
-
objectspec.applicationRefs.images.manifestTargetsManifestTarget defines how and where to update this image in Kubernetes manifests. Only one of Helm or Kustomize should be specified within this block. This whole block is optional if the image update isn’t written to a manifest in a structured way.
-
objectspec.applicationRefs.images.manifestTargets.helmHelm specifies update parameters if the target manifest is managed by Helm and updates are to be made to Helm values files.
-
stringspec.applicationRefs.images.manifestTargets.helm.nameName is the dot-separated path to the Helm key for the image repository/name part. Example: “image.repository”, “frontend.deployment.image.name”. If neither spec nor name/tag are set, defaults to “image.name”. If spec is set, this field is ignored.
-
stringspec.applicationRefs.images.manifestTargets.helm.specSpec is the dot-separated path to a Helm key where the full image string (e.g., “image/name:1.0”) should be written. Use this if your Helm chart expects the entire image reference in a single field, rather than separate name/tag fields. If this is set, name and tag will be ignored.
-
stringspec.applicationRefs.images.manifestTargets.helm.tagTag is the dot-separated path to the Helm key for the image tag part. Example: “image.tag”, “frontend.deployment.image.version”. If neither spec nor name/tag are set, defaults to “image.tag”. If spec is set, this field is ignored.
-
-
objectspec.applicationRefs.images.manifestTargets.kustomizeKustomize specifies update parameters if the target manifest is managed by Kustomize and updates involve changing image tags in Kustomize configurations.
-
stringspec.applicationRefs.images.manifestTargets.kustomize.name
Required value
Name is the image name (which can include the registry and an initial tag) as it appears in theimageslist of a kustomization.yaml file that needs to be updated. The updater will typically change the tag or add a digest to this entry. Example: “docker.io/library/nginx”. This field is required if the Kustomize target is used.
-
-
-
-
objectspec.applicationRefs.labelSelectorsLabelSelectors indicates the label selectors to apply for application selection
-
array of objectsspec.applicationRefs.labelSelectors.matchExpressionsmatchExpressions is a list of label selector requirements. The requirements are ANDed.
-
stringspec.applicationRefs.labelSelectors.matchExpressions.keykey is the label key that the selector applies to.
-
stringspec.applicationRefs.labelSelectors.matchExpressions.operatoroperator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
-
array of stringsspec.applicationRefs.labelSelectors.matchExpressions.valuesvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
-
-
objectspec.applicationRefs.labelSelectors.matchLabelsmatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.
-
-
stringspec.applicationRefs.namePatternNamePattern indicates the glob pattern for application name
-
booleanspec.applicationRefs.useAnnotationsUseAnnotations When true, read image configuration from Application’s argocd-image-updater.argoproj.io/* annotations instead of requiring explicit Images[] configuration in this CR. When this field is set to true, only namePattern and labelSelectors are used for application selection. All other fields (CommonUpdateSettings, WriteBackConfig, Images) are ignored.
Default:
false -
objectspec.applicationRefs.writeBackConfigWriteBackConfig overrides the global WriteBackConfig settings for applications matched by this selector. This field is ignored when UseAnnotations is true.
-
objectspec.applicationRefs.writeBackConfig.gitConfigGitConfig provides Git configuration settings if the write-back method involves Git. This can only be used when method is “git” or starts with “git:”.
-
stringspec.applicationRefs.writeBackConfig.gitConfig.branchBranch to commit updates to. Required if write-back method is Git and this is not specified at the spec level.
-
objectspec.applicationRefs.writeBackConfig.gitConfig.pullRequestPullRequest configures creation of pull requests when writing back image updates to Git. When set, the controller opens a PR instead of pushing to the branch. If not specified write back config method is
git.-
objectspec.applicationRefs.writeBackConfig.gitConfig.pullRequest.githubGitHub configures PR creation via the GitHub API.
-
objectspec.applicationRefs.writeBackConfig.gitConfig.pullRequest.gitlabGitLab configures MR creation via the GitLab API.
-
-
stringspec.applicationRefs.writeBackConfig.gitConfig.repositoryRepository URL to commit changes to. If not specified here or at the spec level, the controller MUST infer it from the Argo CD Application’s
spec.source.repoURL. This field allows overriding that. -
stringspec.applicationRefs.writeBackConfig.gitConfig.writeBackTargetWriteBackTarget defines the path and type of file to update in the Git repository. Examples: “helmvalues:./helm/values.yaml”, “kustomization:./kustomize/overlays/production”. For ApplicationSet usage,
{{ .app.path.path }}should be resolved by ApplicationSet before this CR is generated, resulting in a concrete path here. Required if write-back method is Git and this is not specified at the spec level.
-
-
stringspec.applicationRefs.writeBackConfig.method
Required value
Method defines the method for writing back updated image versions. This acts as the default if not overridden. If not specified, defaults to “argocd”.Default:
argocdPattern:
^(argocd|git|git:[a-zA-Z0-9][a-zA-Z0-9-._/:]*)$
-
-
-
objectspec.commonUpdateSettingsCommonUpdateSettings provides global default settings for update strategies, tag filtering, pull secrets, etc., for all applications matched by this CR. These can be overridden at the ApplicationRef or ImageConfig level.
-
stringspec.commonUpdateSettings.allowTagsAllowTags is a regex pattern for tags to allow. This acts as the default if not overridden.
-
booleanspec.commonUpdateSettings.forceUpdateForceUpdate specifies whether updates should be forced. This acts as the default if not overridden.
Default:
false -
array of stringsspec.commonUpdateSettings.ignoreTagsIgnoreTags is a list of glob-like patterns of tags to ignore. This acts as the default and can be overridden at more specific levels.
-
array of stringsspec.commonUpdateSettings.platformsPlatforms specifies a list of target platforms (e.g., “linux/amd64”, “linux/arm64”). If specified, the image updater will consider these platforms when checking for new versions or digests.
-
stringspec.commonUpdateSettings.pullSecretPullSecret is the pull secret to use for images. This acts as the default if not overridden.
-
stringspec.commonUpdateSettings.updateStrategyUpdateStrategy defines the update strategy to apply. Examples: “semver”, “latest”, “digest”, “name”. This acts as the default if not overridden at a more specific level.
Default:
semver
-
-
objectspec.writeBackConfigWriteBackConfig provides global default settings for how and where to write back image updates. This can be overridden at the ApplicationRef level.
-
objectspec.writeBackConfig.gitConfigGitConfig provides Git configuration settings if the write-back method involves Git. This can only be used when method is “git” or starts with “git:”.
-
stringspec.writeBackConfig.gitConfig.branchBranch to commit updates to. Required if write-back method is Git and this is not specified at the spec level.
-
objectspec.writeBackConfig.gitConfig.pullRequestPullRequest configures creation of pull requests when writing back image updates to Git. When set, the controller opens a PR instead of pushing to the branch. If not specified write back config method is
git.-
objectspec.writeBackConfig.gitConfig.pullRequest.githubGitHub configures PR creation via the GitHub API.
-
objectspec.writeBackConfig.gitConfig.pullRequest.gitlabGitLab configures MR creation via the GitLab API.
-
-
stringspec.writeBackConfig.gitConfig.repositoryRepository URL to commit changes to. If not specified here or at the spec level, the controller MUST infer it from the Argo CD Application’s
spec.source.repoURL. This field allows overriding that. -
stringspec.writeBackConfig.gitConfig.writeBackTargetWriteBackTarget defines the path and type of file to update in the Git repository. Examples: “helmvalues:./helm/values.yaml”, “kustomization:./kustomize/overlays/production”. For ApplicationSet usage,
{{ .app.path.path }}should be resolved by ApplicationSet before this CR is generated, resulting in a concrete path here. Required if write-back method is Git and this is not specified at the spec level.
-
-
stringspec.writeBackConfig.method
Required value
Method defines the method for writing back updated image versions. This acts as the default if not overridden. If not specified, defaults to “argocd”.Default:
argocdPattern:
^(argocd|git|git:[a-zA-Z0-9][a-zA-Z0-9-._/:]*)$
-
-
-
objectstatusImageUpdaterStatus defines the observed state of ImageUpdater
-
integerstatus.applicationsMatchedApplicationsMatched is the number of Argo CD applications matched by this CR’s selectors.
Allowed values:
0 <= X -
array of objectsstatus.conditionsConditions represent the latest available observations of the resource’s state.
-
stringstatus.conditions.lastTransitionTimelastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
-
stringstatus.conditions.messagemessage is a human readable message indicating details about the transition. This may be an empty string.
Maximum length:
32768 -
integerstatus.conditions.observedGenerationobservedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
Allowed values:
0 <= X -
stringstatus.conditions.reasonreason contains a programmatic identifier indicating the reason for the condition’s last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
Length:
1..1024Pattern:
^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ -
stringstatus.conditions.statusstatus of the condition, one of True, False, Unknown.
Allowed values:
True,False,Unknown -
stringstatus.conditions.typetype of condition in CamelCase or in foo.example.com/CamelCase.
Maximum length:
316Pattern:
^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
-
-
integerstatus.imagesManagedImagesManaged is the number of images that were eligible for update checking.
Allowed values:
0 <= X -
stringstatus.lastCheckedAtLastCheckedAt indicates when the controller last checked for image updates.
-
stringstatus.lastUpdatedAtLastUpdatedAt indicates when the controller last performed an image update.
-
integerstatus.observedGenerationObservedGeneration is the most recent generation observed by the controller.
Allowed values:
0 <= X -
array of objectsstatus.recentUpdatesRecentUpdates contains the list of image updates performed during the last update cycle.
-
stringstatus.recentUpdates.aliasAlias is the alias of the image configuration that was updated.
-
integerstatus.recentUpdates.applicationsUpdatedApplicationsUpdated is the number of applications in which this image was updated.
Allowed values:
0 <= X -
stringstatus.recentUpdates.imageImage is the full image reference.
-
stringstatus.recentUpdates.messageMessage provides a human-readable description of the update action.
-
stringstatus.recentUpdates.newVersionNewVersion is the new tag or digest the image was updated to.
-
stringstatus.recentUpdates.updatedAtUpdatedAt is the timestamp when the update was applied.
-
-
NamespaceManagement
Scope: Namespaced
Version: v1beta1
-
stringapiVersionAPIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-
stringkindKind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-
objectmetadata
-
objectspecNamespaceManagementSpec defines the desired state of NamespaceManagement
-
stringspec.managedBy
Required value
-
-
objectstatusNamespaceManagementStatus defines the observed state of NamespaceManagement
-
array of objectsstatus.conditionsConditions is an array of the NamespaceManagement’s status conditions
-
stringstatus.conditions.lastTransitionTimelastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
-
stringstatus.conditions.messagemessage is a human readable message indicating details about the transition. This may be an empty string.
Maximum length:
32768 -
integerstatus.conditions.observedGenerationobservedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
Allowed values:
0 <= X -
stringstatus.conditions.reasonreason contains a programmatic identifier indicating the reason for the condition’s last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
Length:
1..1024Pattern:
^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ -
stringstatus.conditions.statusstatus of the condition, one of True, False, Unknown.
Allowed values:
True,False,Unknown -
stringstatus.conditions.typetype of condition in CamelCase or in foo.example.com/CamelCase.
Maximum length:
316Pattern:
^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
-
-
NotificationsConfiguration
Scope: Namespaced
Version: v1alpha1
-
stringapiVersionAPIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-
stringkindKind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-
objectmetadata
-
objectspecNotificationsConfigurationSpec allows users to define the triggers, templates, services, context and subscriptions for the notifications
-
objectspec.contextContext is used to define some shared context between all notification templates
-
objectspec.servicesServices are used to deliver message
-
objectspec.subscriptionsSubscriptions contain centrally managed global application subscriptions
-
objectspec.templatesTemplates are used to generate the notification template message
-
objectspec.triggersTriggers define the condition when the notification should be sent and list of templates required to generate the message Recipients can subscribe to the trigger and specify the required message template and destination notification service.
-