|
1 | 1 | {
|
2 |
| - "description": "ACRAccessToken returns a Azure Container Registry token\nthat can be used for pushing/pulling images.\nNote: by default it will return an ACR Refresh Token with full access\n(depending on the identity).\nThis can be scoped down to the repository level using .spec.scope.\nIn case scope is defined it will return an ACR Access Token.\n\n\nSee docs: https://github.com/Azure/acr/blob/main/docs/AAD-OAuth.md", |
| 2 | + "description": "ACRAccessToken returns an Azure Container Registry token\nthat can be used for pushing/pulling images.\nNote: by default it will return an ACR Refresh Token with full access\n(depending on the identity).\nThis can be scoped down to the repository level using .spec.scope.\nIn case scope is defined it will return an ACR Access Token.\n\nSee docs: https://github.com/Azure/acr/blob/main/docs/AAD-OAuth.md", |
3 | 3 | "properties": {
|
4 | 4 | "apiVersion": {
|
5 | 5 | "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
|
|
38 | 38 | "description": "The Azure clientId of the service principle used for authentication.",
|
39 | 39 | "properties": {
|
40 | 40 | "key": {
|
41 |
| - "description": "The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be\ndefaulted, in others it may be required.", |
| 41 | + "description": "A key in the referenced Secret.\nSome instances of this field may be defaulted, in others it may be required.", |
| 42 | + "maxLength": 253, |
| 43 | + "minLength": 1, |
| 44 | + "pattern": "^[-._a-zA-Z0-9]+$", |
42 | 45 | "type": "string"
|
43 | 46 | },
|
44 | 47 | "name": {
|
45 | 48 | "description": "The name of the Secret resource being referred to.",
|
| 49 | + "maxLength": 253, |
| 50 | + "minLength": 1, |
| 51 | + "pattern": "^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$", |
46 | 52 | "type": "string"
|
47 | 53 | },
|
48 | 54 | "namespace": {
|
49 |
| - "description": "Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaults\nto the namespace of the referent.", |
| 55 | + "description": "The namespace of the Secret resource being referred to.\nIgnored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.", |
| 56 | + "maxLength": 63, |
| 57 | + "minLength": 1, |
| 58 | + "pattern": "^[a-z0-9]([-a-z0-9]*[a-z0-9])?$", |
50 | 59 | "type": "string"
|
51 | 60 | }
|
52 | 61 | },
|
|
57 | 66 | "description": "The Azure ClientSecret of the service principle used for authentication.",
|
58 | 67 | "properties": {
|
59 | 68 | "key": {
|
60 |
| - "description": "The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be\ndefaulted, in others it may be required.", |
| 69 | + "description": "A key in the referenced Secret.\nSome instances of this field may be defaulted, in others it may be required.", |
| 70 | + "maxLength": 253, |
| 71 | + "minLength": 1, |
| 72 | + "pattern": "^[-._a-zA-Z0-9]+$", |
61 | 73 | "type": "string"
|
62 | 74 | },
|
63 | 75 | "name": {
|
64 | 76 | "description": "The name of the Secret resource being referred to.",
|
| 77 | + "maxLength": 253, |
| 78 | + "minLength": 1, |
| 79 | + "pattern": "^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$", |
65 | 80 | "type": "string"
|
66 | 81 | },
|
67 | 82 | "namespace": {
|
68 |
| - "description": "Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaults\nto the namespace of the referent.", |
| 83 | + "description": "The namespace of the Secret resource being referred to.\nIgnored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.", |
| 84 | + "maxLength": 63, |
| 85 | + "minLength": 1, |
| 86 | + "pattern": "^[a-z0-9]([-a-z0-9]*[a-z0-9])?$", |
69 | 87 | "type": "string"
|
70 | 88 | }
|
71 | 89 | },
|
|
98 | 116 | },
|
99 | 117 | "name": {
|
100 | 118 | "description": "The name of the ServiceAccount resource being referred to.",
|
| 119 | + "maxLength": 253, |
| 120 | + "minLength": 1, |
| 121 | + "pattern": "^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$", |
101 | 122 | "type": "string"
|
102 | 123 | },
|
103 | 124 | "namespace": {
|
104 |
| - "description": "Namespace of the resource being referred to. Ignored if referent is not cluster-scoped. cluster-scoped defaults\nto the namespace of the referent.", |
| 125 | + "description": "Namespace of the resource being referred to.\nIgnored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.", |
| 126 | + "maxLength": 63, |
| 127 | + "minLength": 1, |
| 128 | + "pattern": "^[a-z0-9]([-a-z0-9]*[a-z0-9])?$", |
105 | 129 | "type": "string"
|
106 | 130 | }
|
107 | 131 | },
|
|
135 | 159 | "type": "string"
|
136 | 160 | },
|
137 | 161 | "scope": {
|
138 |
| - "description": "Define the scope for the access token, e.g. pull/push access for a repository.\nif not provided it will return a refresh token that has full scope.\nNote: you need to pin it down to the repository level, there is no wildcard available.\n\n\nexamples:\nrepository:my-repository:pull,push\nrepository:my-repository:pull\n\n\nsee docs for details: https://docs.docker.com/registry/spec/auth/scope/", |
| 162 | + "description": "Define the scope for the access token, e.g. pull/push access for a repository.\nif not provided it will return a refresh token that has full scope.\nNote: you need to pin it down to the repository level, there is no wildcard available.\n\nexamples:\nrepository:my-repository:pull,push\nrepository:my-repository:pull\n\nsee docs for details: https://docs.docker.com/registry/spec/auth/scope/", |
139 | 163 | "type": "string"
|
140 | 164 | },
|
141 | 165 | "tenantId": {
|
|
0 commit comments