Add JSON schema generation for kubeconform CRD validation (#212)

## Summary
- New `ci/generate-schemas.sh` script that generates JSON schemas from three sources:
  1. Live cluster CRDs via `kubectl get crds`
  2. Offline CRD manifests (ArgoCD v3.3.2, Gateway API v1.5.1)
  3. Kubernetes v1.33.7 swagger spec for native types
- Schemas follow Datree catalog convention (`<group>/<Kind>_<version>.json`)
- `validate-apps.sh` and `validate-clusters.sh` check local schemas first, falling back to remote
- Fixes TLSRoute (and other CRD) schema validation failures in kubeconform

## Sources
- ArgoCD: `artifactapi.../argoproj/argo-cd/refs/tags/v3.3.2/manifests/ha/install.yaml`
- Gateway API: `artifactapi.../kubernetes-sigs/gateway-api/releases/download/v1.5.1/standard-install.yaml`
- Kubernetes: `artifactapi.../kubernetes/kubernetes/refs/tags/v1.33.7/api/openapi-spec/swagger.json`

Reviewed-on: #212
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>
This commit was merged in pull request #212.
This commit is contained in:
2026-06-28 17:26:08 +10:00
committed by BenVincent
parent cfca1e5278
commit 784c3b5de1
264 changed files with 142907 additions and 2 deletions
@@ -0,0 +1,468 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"properties": {
"accessControl": {
"properties": {
"matchPolicy": {
"default": "all",
"enum": [
"any",
"all"
],
"type": "string"
},
"namespacePatterns": {
"items": {
"type": "string"
},
"type": "array"
},
"podLabels": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"podNamePatterns": {
"items": {
"type": "string"
},
"type": "array"
},
"serviceAccountPattern": {
"type": "string"
}
},
"required": [
"serviceAccountPattern"
],
"type": "object"
},
"namespace": {
"type": "string"
},
"secrets": {
"properties": {
"transformation": {
"properties": {
"excludeRaw": {
"type": "boolean"
},
"excludes": {
"items": {
"type": "string"
},
"type": "array"
},
"includes": {
"items": {
"type": "string"
},
"type": "array"
},
"templates": {
"additionalProperties": {
"properties": {
"name": {
"type": "string"
},
"text": {
"type": "string"
}
},
"required": [
"text"
],
"type": "object"
},
"type": "object"
},
"transformationRefs": {
"items": {
"properties": {
"ignoreExcludes": {
"type": "boolean"
},
"ignoreIncludes": {
"type": "boolean"
},
"name": {
"type": "string"
},
"namespace": {
"type": "string"
},
"templateRefs": {
"items": {
"properties": {
"keyOverride": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"type": "object"
},
"vaultAppRoleSecretIDs": {
"items": {
"properties": {
"cidrList": {
"items": {
"type": "string"
},
"type": "array"
},
"metadata": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"mount": {
"type": "string"
},
"numUses": {
"type": "integer"
},
"role": {
"type": "string"
},
"syncRoleID": {
"type": "boolean"
},
"tokenBoundCIDRs": {
"items": {
"type": "string"
},
"type": "array"
},
"transformation": {
"properties": {
"excludeRaw": {
"type": "boolean"
},
"excludes": {
"items": {
"type": "string"
},
"type": "array"
},
"includes": {
"items": {
"type": "string"
},
"type": "array"
},
"templates": {
"additionalProperties": {
"properties": {
"name": {
"type": "string"
},
"text": {
"type": "string"
}
},
"required": [
"text"
],
"type": "object"
},
"type": "object"
},
"transformationRefs": {
"items": {
"properties": {
"ignoreExcludes": {
"type": "boolean"
},
"ignoreIncludes": {
"type": "boolean"
},
"name": {
"type": "string"
},
"namespace": {
"type": "string"
},
"templateRefs": {
"items": {
"properties": {
"keyOverride": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"type": "object"
},
"ttl": {
"pattern": "^([0-9]+(\\.[0-9]+)?(s|m|h))$",
"type": "string"
},
"wrapTTL": {
"pattern": "^([0-9]+(\\.[0-9]+)?(s|m|h))$",
"type": "string"
}
},
"required": [
"mount",
"role"
],
"type": "object"
},
"type": "array"
},
"vaultStaticSecrets": {
"items": {
"properties": {
"mount": {
"type": "string"
},
"path": {
"type": "string"
},
"transformation": {
"properties": {
"excludeRaw": {
"type": "boolean"
},
"excludes": {
"items": {
"type": "string"
},
"type": "array"
},
"includes": {
"items": {
"type": "string"
},
"type": "array"
},
"templates": {
"additionalProperties": {
"properties": {
"name": {
"type": "string"
},
"text": {
"type": "string"
}
},
"required": [
"text"
],
"type": "object"
},
"type": "object"
},
"transformationRefs": {
"items": {
"properties": {
"ignoreExcludes": {
"type": "boolean"
},
"ignoreIncludes": {
"type": "boolean"
},
"name": {
"type": "string"
},
"namespace": {
"type": "string"
},
"templateRefs": {
"items": {
"properties": {
"keyOverride": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"type": "object"
},
"type": {
"enum": [
"kv-v1",
"kv-v2"
],
"type": "string"
},
"version": {
"minimum": 0,
"type": "integer"
}
},
"required": [
"mount",
"path",
"type"
],
"type": "object"
},
"type": "array"
}
},
"type": "object"
},
"syncConfig": {
"properties": {
"containerState": {
"properties": {
"imagePattern": {
"type": "string"
},
"namePattern": {
"type": "string"
}
},
"type": "object"
}
},
"required": [
"containerState"
],
"type": "object"
},
"vaultAuthRef": {
"properties": {
"name": {
"type": "string"
},
"namespace": {
"type": "string"
},
"trustNamespace": {
"type": "boolean"
}
},
"required": [
"name"
],
"type": "object"
}
},
"required": [
"accessControl",
"secrets"
],
"type": "object"
},
"status": {
"properties": {
"conditions": {
"items": {
"properties": {
"lastTransitionTime": {
"format": "date-time",
"type": "string"
},
"message": {
"maxLength": 32768,
"type": "string"
},
"observedGeneration": {
"format": "int64",
"minimum": 0,
"type": "integer"
},
"reason": {
"maxLength": 1024,
"minLength": 1,
"pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
"type": "string"
},
"status": {
"enum": [
"True",
"False",
"Unknown"
],
"type": "string"
},
"type": {
"maxLength": 316,
"pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
"type": "string"
}
},
"required": [
"lastTransitionTime",
"message",
"reason",
"status",
"type"
],
"type": "object"
},
"type": "array"
}
},
"type": "object"
}
},
"type": "object"
}
@@ -0,0 +1,116 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"properties": {
"allowedNamespaces": {
"items": {
"type": "string"
},
"type": "array"
},
"method": {
"default": "servicePrincipal",
"enum": [
"servicePrincipal"
],
"type": "string"
},
"organizationID": {
"type": "string"
},
"projectID": {
"type": "string"
},
"servicePrincipal": {
"properties": {
"secretRef": {
"type": "string"
}
},
"required": [
"secretRef"
],
"type": "object"
}
},
"required": [
"organizationID",
"projectID"
],
"type": "object"
},
"status": {
"properties": {
"conditions": {
"items": {
"properties": {
"lastTransitionTime": {
"format": "date-time",
"type": "string"
},
"message": {
"maxLength": 32768,
"type": "string"
},
"observedGeneration": {
"format": "int64",
"minimum": 0,
"type": "integer"
},
"reason": {
"maxLength": 1024,
"minLength": 1,
"pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
"type": "string"
},
"status": {
"enum": [
"True",
"False",
"Unknown"
],
"type": "string"
},
"type": {
"maxLength": 316,
"pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
"type": "string"
}
},
"required": [
"lastTransitionTime",
"message",
"reason",
"status",
"type"
],
"type": "object"
},
"type": "array"
},
"error": {
"type": "string"
},
"valid": {
"type": "boolean"
}
},
"required": [
"error",
"valid"
],
"type": "object"
}
},
"type": "object"
}
@@ -0,0 +1,268 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"properties": {
"appName": {
"type": "string"
},
"destination": {
"properties": {
"annotations": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"create": {
"default": false,
"type": "boolean"
},
"labels": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"name": {
"type": "string"
},
"overwrite": {
"default": false,
"type": "boolean"
},
"transformation": {
"properties": {
"excludeRaw": {
"type": "boolean"
},
"excludes": {
"items": {
"type": "string"
},
"type": "array"
},
"includes": {
"items": {
"type": "string"
},
"type": "array"
},
"templates": {
"additionalProperties": {
"properties": {
"name": {
"type": "string"
},
"text": {
"type": "string"
}
},
"required": [
"text"
],
"type": "object"
},
"type": "object"
},
"transformationRefs": {
"items": {
"properties": {
"ignoreExcludes": {
"type": "boolean"
},
"ignoreIncludes": {
"type": "boolean"
},
"name": {
"type": "string"
},
"namespace": {
"type": "string"
},
"templateRefs": {
"items": {
"properties": {
"keyOverride": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"hcpAuthRef": {
"type": "string"
},
"refreshAfter": {
"default": "600s",
"pattern": "^([0-9]+(\\.[0-9]+)?(s|m|h))$",
"type": "string"
},
"rolloutRestartTargets": {
"items": {
"properties": {
"kind": {
"enum": [
"Deployment",
"DaemonSet",
"StatefulSet",
"argo.Rollout"
],
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"kind",
"name"
],
"type": "object"
},
"type": "array"
},
"syncConfig": {
"properties": {
"dynamic": {
"properties": {
"renewalPercent": {
"default": 67,
"maximum": 90,
"minimum": 0,
"type": "integer"
}
},
"type": "object"
}
},
"type": "object"
}
},
"required": [
"appName",
"destination"
],
"type": "object"
},
"status": {
"properties": {
"conditions": {
"items": {
"properties": {
"lastTransitionTime": {
"format": "date-time",
"type": "string"
},
"message": {
"maxLength": 32768,
"type": "string"
},
"observedGeneration": {
"format": "int64",
"minimum": 0,
"type": "integer"
},
"reason": {
"maxLength": 1024,
"minLength": 1,
"pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
"type": "string"
},
"status": {
"enum": [
"True",
"False",
"Unknown"
],
"type": "string"
},
"type": {
"maxLength": 316,
"pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
"type": "string"
}
},
"required": [
"lastTransitionTime",
"message",
"reason",
"status",
"type"
],
"type": "object"
},
"type": "array"
},
"dynamicSecrets": {
"items": {
"properties": {
"createdAt": {
"type": "string"
},
"expiresAt": {
"type": "string"
},
"name": {
"type": "string"
},
"ttl": {
"type": "string"
}
},
"type": "object"
},
"type": "array"
},
"lastGeneration": {
"format": "int64",
"type": "integer"
},
"secretMAC": {
"type": "string"
}
},
"required": [
"lastGeneration"
],
"type": "object"
}
},
"type": "object"
}
@@ -0,0 +1,128 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"properties": {
"excludes": {
"items": {
"type": "string"
},
"type": "array"
},
"includes": {
"items": {
"type": "string"
},
"type": "array"
},
"sourceTemplates": {
"items": {
"properties": {
"name": {
"type": "string"
},
"text": {
"type": "string"
}
},
"required": [
"text"
],
"type": "object"
},
"type": "array"
},
"templates": {
"additionalProperties": {
"properties": {
"name": {
"type": "string"
},
"text": {
"type": "string"
}
},
"required": [
"text"
],
"type": "object"
},
"type": "object"
}
},
"type": "object"
},
"status": {
"properties": {
"conditions": {
"items": {
"properties": {
"lastTransitionTime": {
"format": "date-time",
"type": "string"
},
"message": {
"maxLength": 32768,
"type": "string"
},
"observedGeneration": {
"format": "int64",
"minimum": 0,
"type": "integer"
},
"reason": {
"maxLength": 1024,
"minLength": 1,
"pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
"type": "string"
},
"status": {
"enum": [
"True",
"False",
"Unknown"
],
"type": "string"
},
"type": {
"maxLength": 316,
"pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
"type": "string"
}
},
"required": [
"lastTransitionTime",
"message",
"reason",
"status",
"type"
],
"type": "object"
},
"type": "array"
},
"error": {
"type": "string"
},
"valid": {
"type": "boolean"
}
},
"required": [
"error",
"valid"
],
"type": "object"
}
},
"type": "object"
}
@@ -0,0 +1,282 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"properties": {
"allowedNamespaces": {
"items": {
"type": "string"
},
"type": "array"
},
"appRole": {
"properties": {
"roleId": {
"type": "string"
},
"secretIDPath": {
"type": "string"
},
"secretRef": {
"type": "string"
}
},
"type": "object"
},
"aws": {
"properties": {
"headerValue": {
"type": "string"
},
"iamEndpoint": {
"type": "string"
},
"irsaServiceAccount": {
"type": "string"
},
"region": {
"type": "string"
},
"role": {
"type": "string"
},
"secretRef": {
"type": "string"
},
"sessionName": {
"type": "string"
},
"stsEndpoint": {
"type": "string"
}
},
"type": "object"
},
"gcp": {
"properties": {
"clusterName": {
"type": "string"
},
"projectID": {
"type": "string"
},
"region": {
"type": "string"
},
"role": {
"type": "string"
},
"workloadIdentityServiceAccount": {
"type": "string"
}
},
"type": "object"
},
"headers": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"jwt": {
"properties": {
"audiences": {
"items": {
"type": "string"
},
"type": "array"
},
"role": {
"type": "string"
},
"secretRef": {
"type": "string"
},
"serviceAccount": {
"type": "string"
},
"tokenExpirationSeconds": {
"default": 600,
"format": "int64",
"minimum": 600,
"type": "integer"
}
},
"type": "object"
},
"kubernetes": {
"properties": {
"audiences": {
"items": {
"type": "string"
},
"type": "array"
},
"role": {
"type": "string"
},
"serviceAccount": {
"type": "string"
},
"tokenExpirationSeconds": {
"default": 600,
"format": "int64",
"minimum": 600,
"type": "integer"
}
},
"type": "object"
},
"method": {
"enum": [
"kubernetes",
"jwt",
"appRole",
"aws",
"gcp"
],
"type": "string"
},
"mount": {
"type": "string"
},
"namespace": {
"type": "string"
},
"params": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"storageEncryption": {
"properties": {
"keyName": {
"type": "string"
},
"mount": {
"type": "string"
}
},
"required": [
"keyName",
"mount"
],
"type": "object"
},
"vaultAuthGlobalRef": {
"properties": {
"allowDefault": {
"type": "boolean"
},
"mergeStrategy": {
"properties": {
"headers": {
"enum": [
"union",
"replace",
"none"
],
"type": "string"
},
"params": {
"enum": [
"union",
"replace",
"none"
],
"type": "string"
}
},
"type": "object"
},
"name": {
"pattern": "^([a-z0-9.-]{1,253})$",
"type": "string"
},
"namespace": {
"pattern": "^([a-z0-9-]{1,63})$",
"type": "string"
}
},
"type": "object"
},
"vaultConnectionRef": {
"type": "string"
}
},
"type": "object"
},
"status": {
"properties": {
"conditions": {
"items": {
"properties": {
"lastTransitionTime": {
"format": "date-time",
"type": "string"
},
"message": {
"maxLength": 32768,
"type": "string"
},
"observedGeneration": {
"format": "int64",
"minimum": 0,
"type": "integer"
},
"reason": {
"maxLength": 1024,
"minLength": 1,
"pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
"type": "string"
},
"status": {
"enum": [
"True",
"False",
"Unknown"
],
"type": "string"
},
"type": {
"maxLength": 316,
"pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
"type": "string"
}
},
"required": [
"lastTransitionTime",
"message",
"reason",
"status",
"type"
],
"type": "object"
},
"type": "array"
},
"error": {
"type": "string"
},
"specHash": {
"type": "string"
},
"valid": {
"type": "boolean"
}
},
"type": "object"
}
},
"type": "object"
}
@@ -0,0 +1,274 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"properties": {
"allowedNamespaces": {
"items": {
"type": "string"
},
"type": "array"
},
"appRole": {
"properties": {
"headers": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"mount": {
"type": "string"
},
"namespace": {
"type": "string"
},
"params": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"roleId": {
"type": "string"
},
"secretIDPath": {
"type": "string"
},
"secretRef": {
"type": "string"
}
},
"type": "object"
},
"aws": {
"properties": {
"headerValue": {
"type": "string"
},
"headers": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"iamEndpoint": {
"type": "string"
},
"irsaServiceAccount": {
"type": "string"
},
"mount": {
"type": "string"
},
"namespace": {
"type": "string"
},
"params": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"region": {
"type": "string"
},
"role": {
"type": "string"
},
"secretRef": {
"type": "string"
},
"sessionName": {
"type": "string"
},
"stsEndpoint": {
"type": "string"
}
},
"type": "object"
},
"defaultAuthMethod": {
"enum": [
"kubernetes",
"jwt",
"appRole",
"aws",
"gcp"
],
"type": "string"
},
"defaultMount": {
"type": "string"
},
"defaultVaultNamespace": {
"type": "string"
},
"gcp": {
"properties": {
"clusterName": {
"type": "string"
},
"headers": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"mount": {
"type": "string"
},
"namespace": {
"type": "string"
},
"params": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"projectID": {
"type": "string"
},
"region": {
"type": "string"
},
"role": {
"type": "string"
},
"workloadIdentityServiceAccount": {
"type": "string"
}
},
"type": "object"
},
"headers": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"jwt": {
"properties": {
"audiences": {
"items": {
"type": "string"
},
"type": "array"
},
"headers": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"mount": {
"type": "string"
},
"namespace": {
"type": "string"
},
"params": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"role": {
"type": "string"
},
"secretRef": {
"type": "string"
},
"serviceAccount": {
"type": "string"
},
"tokenExpirationSeconds": {
"default": 600,
"format": "int64",
"minimum": 600,
"type": "integer"
}
},
"type": "object"
},
"kubernetes": {
"properties": {
"audiences": {
"items": {
"type": "string"
},
"type": "array"
},
"headers": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"mount": {
"type": "string"
},
"namespace": {
"type": "string"
},
"params": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"role": {
"type": "string"
},
"serviceAccount": {
"type": "string"
},
"tokenExpirationSeconds": {
"default": 600,
"format": "int64",
"minimum": 600,
"type": "integer"
}
},
"type": "object"
},
"params": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"vaultConnectionRef": {
"type": "string"
}
},
"type": "object"
},
"status": {
"properties": {
"error": {
"type": "string"
},
"valid": {
"type": "boolean"
}
},
"required": [
"error",
"valid"
],
"type": "object"
}
},
"type": "object"
}
@@ -0,0 +1,108 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"properties": {
"address": {
"type": "string"
},
"caCertPath": {
"type": "string"
},
"caCertSecretRef": {
"type": "string"
},
"headers": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"skipTLSVerify": {
"default": false,
"type": "boolean"
},
"timeout": {
"pattern": "^([0-9]+(\\.[0-9]+)?(s|m|h))$",
"type": "string"
},
"tlsServerName": {
"type": "string"
}
},
"required": [
"address",
"skipTLSVerify"
],
"type": "object"
},
"status": {
"properties": {
"conditions": {
"items": {
"properties": {
"lastTransitionTime": {
"format": "date-time",
"type": "string"
},
"message": {
"maxLength": 32768,
"type": "string"
},
"observedGeneration": {
"format": "int64",
"minimum": 0,
"type": "integer"
},
"reason": {
"maxLength": 1024,
"minLength": 1,
"pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
"type": "string"
},
"status": {
"enum": [
"True",
"False",
"Unknown"
],
"type": "string"
},
"type": {
"maxLength": 316,
"pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
"type": "string"
}
},
"required": [
"lastTransitionTime",
"message",
"reason",
"status",
"type"
],
"type": "object"
},
"type": "array"
},
"valid": {
"type": "boolean"
}
},
"required": [
"valid"
],
"type": "object"
}
},
"type": "object"
}
@@ -0,0 +1,332 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"properties": {
"allowStaticCreds": {
"type": "boolean"
},
"destination": {
"properties": {
"annotations": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"create": {
"default": false,
"type": "boolean"
},
"labels": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"name": {
"type": "string"
},
"overwrite": {
"default": false,
"type": "boolean"
},
"transformation": {
"properties": {
"excludeRaw": {
"type": "boolean"
},
"excludes": {
"items": {
"type": "string"
},
"type": "array"
},
"includes": {
"items": {
"type": "string"
},
"type": "array"
},
"templates": {
"additionalProperties": {
"properties": {
"name": {
"type": "string"
},
"text": {
"type": "string"
}
},
"required": [
"text"
],
"type": "object"
},
"type": "object"
},
"transformationRefs": {
"items": {
"properties": {
"ignoreExcludes": {
"type": "boolean"
},
"ignoreIncludes": {
"type": "boolean"
},
"name": {
"type": "string"
},
"namespace": {
"type": "string"
},
"templateRefs": {
"items": {
"properties": {
"keyOverride": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"mount": {
"type": "string"
},
"namespace": {
"type": "string"
},
"params": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"path": {
"type": "string"
},
"refreshAfter": {
"pattern": "^([0-9]+(\\.[0-9]+)?(s|m|h))$",
"type": "string"
},
"renewalPercent": {
"default": 67,
"maximum": 90,
"minimum": 0,
"type": "integer"
},
"requestHTTPMethod": {
"enum": [
"GET",
"POST",
"PUT"
],
"type": "string"
},
"revoke": {
"type": "boolean"
},
"rolloutRestartTargets": {
"items": {
"properties": {
"kind": {
"enum": [
"Deployment",
"DaemonSet",
"StatefulSet",
"argo.Rollout"
],
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"kind",
"name"
],
"type": "object"
},
"type": "array"
},
"vaultAuthRef": {
"type": "string"
}
},
"required": [
"destination",
"mount",
"path"
],
"type": "object"
},
"status": {
"properties": {
"conditions": {
"items": {
"properties": {
"lastTransitionTime": {
"format": "date-time",
"type": "string"
},
"message": {
"maxLength": 32768,
"type": "string"
},
"observedGeneration": {
"format": "int64",
"minimum": 0,
"type": "integer"
},
"reason": {
"maxLength": 1024,
"minLength": 1,
"pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
"type": "string"
},
"status": {
"enum": [
"True",
"False",
"Unknown"
],
"type": "string"
},
"type": {
"maxLength": 316,
"pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
"type": "string"
}
},
"required": [
"lastTransitionTime",
"message",
"reason",
"status",
"type"
],
"type": "object"
},
"type": "array"
},
"lastGeneration": {
"format": "int64",
"type": "integer"
},
"lastRenewalTime": {
"format": "int64",
"type": "integer"
},
"lastRuntimePodUID": {
"type": "string"
},
"secretLease": {
"properties": {
"duration": {
"type": "integer"
},
"id": {
"type": "string"
},
"renewable": {
"type": "boolean"
},
"requestID": {
"type": "string"
}
},
"required": [
"duration",
"id",
"renewable",
"requestID"
],
"type": "object"
},
"secretMAC": {
"type": "string"
},
"staticCredsMetaData": {
"properties": {
"lastVaultRotation": {
"format": "int64",
"type": "integer"
},
"rotationPeriod": {
"format": "int64",
"type": "integer"
},
"rotationSchedule": {
"type": "string"
},
"ttl": {
"format": "int64",
"type": "integer"
}
},
"required": [
"lastVaultRotation",
"rotationPeriod",
"ttl"
],
"type": "object"
},
"vaultClientMeta": {
"properties": {
"cacheKey": {
"type": "string"
},
"id": {
"type": "string"
}
},
"type": "object"
}
},
"required": [
"lastGeneration",
"lastRenewalTime",
"secretLease"
],
"type": "object"
}
},
"type": "object"
}
@@ -0,0 +1,316 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"properties": {
"altNames": {
"items": {
"type": "string"
},
"type": "array"
},
"clear": {
"type": "boolean"
},
"commonName": {
"type": "string"
},
"destination": {
"properties": {
"annotations": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"create": {
"default": false,
"type": "boolean"
},
"labels": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"name": {
"type": "string"
},
"overwrite": {
"default": false,
"type": "boolean"
},
"transformation": {
"properties": {
"excludeRaw": {
"type": "boolean"
},
"excludes": {
"items": {
"type": "string"
},
"type": "array"
},
"includes": {
"items": {
"type": "string"
},
"type": "array"
},
"templates": {
"additionalProperties": {
"properties": {
"name": {
"type": "string"
},
"text": {
"type": "string"
}
},
"required": [
"text"
],
"type": "object"
},
"type": "object"
},
"transformationRefs": {
"items": {
"properties": {
"ignoreExcludes": {
"type": "boolean"
},
"ignoreIncludes": {
"type": "boolean"
},
"name": {
"type": "string"
},
"namespace": {
"type": "string"
},
"templateRefs": {
"items": {
"properties": {
"keyOverride": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"excludeCNFromSans": {
"type": "boolean"
},
"expiryOffset": {
"pattern": "^([0-9]+(\\.[0-9]+)?(s|m|h))$",
"type": "string"
},
"format": {
"type": "string"
},
"ipSans": {
"items": {
"type": "string"
},
"type": "array"
},
"issuerRef": {
"type": "string"
},
"mount": {
"type": "string"
},
"namespace": {
"type": "string"
},
"notAfter": {
"type": "string"
},
"otherSans": {
"items": {
"type": "string"
},
"type": "array"
},
"privateKeyFormat": {
"type": "string"
},
"revoke": {
"type": "boolean"
},
"role": {
"type": "string"
},
"rolloutRestartTargets": {
"items": {
"properties": {
"kind": {
"enum": [
"Deployment",
"DaemonSet",
"StatefulSet",
"argo.Rollout"
],
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"kind",
"name"
],
"type": "object"
},
"type": "array"
},
"ttl": {
"pattern": "^([0-9]+(\\.[0-9]+)?(s|m|h|d))$",
"type": "string"
},
"uriSans": {
"items": {
"type": "string"
},
"type": "array"
},
"userIDs": {
"items": {
"type": "string"
},
"type": "array"
},
"vaultAuthRef": {
"type": "string"
}
},
"required": [
"destination",
"mount",
"role"
],
"type": "object"
},
"status": {
"properties": {
"conditions": {
"items": {
"properties": {
"lastTransitionTime": {
"format": "date-time",
"type": "string"
},
"message": {
"maxLength": 32768,
"type": "string"
},
"observedGeneration": {
"format": "int64",
"minimum": 0,
"type": "integer"
},
"reason": {
"maxLength": 1024,
"minLength": 1,
"pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
"type": "string"
},
"status": {
"enum": [
"True",
"False",
"Unknown"
],
"type": "string"
},
"type": {
"maxLength": 316,
"pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
"type": "string"
}
},
"required": [
"lastTransitionTime",
"message",
"reason",
"status",
"type"
],
"type": "object"
},
"type": "array"
},
"error": {
"type": "string"
},
"expiration": {
"format": "int64",
"type": "integer"
},
"lastGeneration": {
"format": "int64",
"type": "integer"
},
"lastRotation": {
"format": "int64",
"type": "integer"
},
"secretMAC": {
"type": "string"
},
"serialNumber": {
"type": "string"
},
"valid": {
"type": "boolean"
}
},
"required": [
"error",
"lastGeneration",
"lastRotation",
"valid"
],
"type": "object"
}
},
"type": "object"
}
@@ -0,0 +1,262 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"properties": {
"destination": {
"properties": {
"annotations": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"create": {
"default": false,
"type": "boolean"
},
"labels": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"name": {
"type": "string"
},
"overwrite": {
"default": false,
"type": "boolean"
},
"transformation": {
"properties": {
"excludeRaw": {
"type": "boolean"
},
"excludes": {
"items": {
"type": "string"
},
"type": "array"
},
"includes": {
"items": {
"type": "string"
},
"type": "array"
},
"templates": {
"additionalProperties": {
"properties": {
"name": {
"type": "string"
},
"text": {
"type": "string"
}
},
"required": [
"text"
],
"type": "object"
},
"type": "object"
},
"transformationRefs": {
"items": {
"properties": {
"ignoreExcludes": {
"type": "boolean"
},
"ignoreIncludes": {
"type": "boolean"
},
"name": {
"type": "string"
},
"namespace": {
"type": "string"
},
"templateRefs": {
"items": {
"properties": {
"keyOverride": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"hmacSecretData": {
"default": true,
"type": "boolean"
},
"mount": {
"type": "string"
},
"namespace": {
"type": "string"
},
"path": {
"type": "string"
},
"refreshAfter": {
"pattern": "^([0-9]+(\\.[0-9]+)?(s|m|h))$",
"type": "string"
},
"rolloutRestartTargets": {
"items": {
"properties": {
"kind": {
"enum": [
"Deployment",
"DaemonSet",
"StatefulSet",
"argo.Rollout"
],
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"kind",
"name"
],
"type": "object"
},
"type": "array"
},
"syncConfig": {
"properties": {
"instantUpdates": {
"type": "boolean"
}
},
"type": "object"
},
"type": {
"enum": [
"kv-v1",
"kv-v2"
],
"type": "string"
},
"vaultAuthRef": {
"type": "string"
},
"version": {
"minimum": 0,
"type": "integer"
}
},
"required": [
"destination",
"mount",
"path",
"type"
],
"type": "object"
},
"status": {
"properties": {
"conditions": {
"items": {
"properties": {
"lastTransitionTime": {
"format": "date-time",
"type": "string"
},
"message": {
"maxLength": 32768,
"type": "string"
},
"observedGeneration": {
"format": "int64",
"minimum": 0,
"type": "integer"
},
"reason": {
"maxLength": 1024,
"minLength": 1,
"pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
"type": "string"
},
"status": {
"enum": [
"True",
"False",
"Unknown"
],
"type": "string"
},
"type": {
"maxLength": 316,
"pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
"type": "string"
}
},
"required": [
"lastTransitionTime",
"message",
"reason",
"status",
"type"
],
"type": "object"
},
"type": "array"
},
"lastGeneration": {
"format": "int64",
"type": "integer"
},
"secretMAC": {
"type": "string"
}
},
"required": [
"lastGeneration"
],
"type": "object"
}
},
"type": "object"
}