-
Notifications
You must be signed in to change notification settings - Fork 142
Expand file tree
/
Copy pathsecrets.hashicorp.com_vaultconnections.yaml
More file actions
166 lines (165 loc) · 7.2 KB
/
Copy pathsecrets.hashicorp.com_vaultconnections.yaml
File metadata and controls
166 lines (165 loc) · 7.2 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
# Copyright IBM Corp. 2022, 2026
# SPDX-License-Identifier: BUSL-1.1
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
annotations:
controller-gen.kubebuilder.io/version: v0.19.0
name: vaultconnections.secrets.hashicorp.com
spec:
group: secrets.hashicorp.com
names:
kind: VaultConnection
listKind: VaultConnectionList
plural: vaultconnections
singular: vaultconnection
scope: Namespaced
versions:
- additionalPrinterColumns:
- description: health status
jsonPath: .status.conditions[?(@.type == "Healthy")].status
name: Healthy
type: string
- description: resource ready
jsonPath: .status.conditions[?(@.type == "Ready")].status
name: Ready
type: string
- description: resource age
jsonPath: .metadata.creationTimestamp
name: Age
type: date
name: v1beta1
schema:
openAPIV3Schema:
description: VaultConnection is the Schema for the vaultconnections API
properties:
apiVersion:
description: |-
APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
description: |-
Kind is a string value representing the REST resource this object represents.
Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
spec:
description: VaultConnectionSpec defines the desired state of VaultConnection
properties:
address:
description: Address of the Vault server
type: string
caCertPath:
description: |-
CACertPath is the path to a trusted PEM-encoded CA certificate file on the filesystem that can be used to validate
the certificate presented by the Vault server.
CACertPath and CACertSecretRef are mutually exclusive, and only one should be specified.
type: string
caCertSecretRef:
description: |-
CACertSecretRef is the name of a Kubernetes secret containing the trusted PEM encoded CA certificate chain as `ca.crt`.
CACertPath and CACertSecretRef are mutually exclusive, and only one should be specified.
type: string
headers:
additionalProperties:
type: string
description: Headers to be included in all Vault requests.
type: object
skipTLSVerify:
default: false
description: SkipTLSVerify for TLS connections.
type: boolean
timeout:
description: |-
Timeout applied to all Vault requests for this connection. If not set, the
default timeout from the Vault API client config is used.
pattern: ^([0-9]+(\.[0-9]+)?(s|m|h))$
type: string
tlsServerName:
description: TLSServerName to use as the SNI host for TLS connections.
type: string
required:
- address
- skipTLSVerify
type: object
status:
description: VaultConnectionStatus defines the observed state of VaultConnection
properties:
conditions:
description: |-
Conditions hold information that can be used by other apps to determine the
health of the resource instance.
items:
description: Condition contains details for one aspect of the current
state of this API Resource.
properties:
lastTransitionTime:
description: |-
lastTransitionTime is the last time the condition transitioned from one status to another.
This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
description: |-
message is a human readable message indicating details about the transition.
This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
description: |-
observedGeneration represents the .metadata.generation that the condition was set based upon.
For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
description: |-
reason contains a programmatic identifier indicating the reason for the condition's last transition.
Producers of specific condition types may define expected values and meanings for this field,
and whether the values are considered a guaranteed API.
The value should be a CamelCase string.
This field may not be empty.
maxLength: 1024
minLength: 1
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
type: string
status:
description: status of the condition, one of True, False, Unknown.
enum:
- "True"
- "False"
- Unknown
type: string
type:
description: type of condition in CamelCase or in foo.example.com/CamelCase.
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
required:
- lastTransitionTime
- message
- reason
- status
- type
type: object
type: array
valid:
description: Valid auth mechanism.
type: boolean
required:
- valid
type: object
type: object
served: true
storage: true
subresources:
status: {}