unkin/argocd-apps
2
0
Fork 0
Code Issues 2 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Compare commits

base: unkin/argocd-apps:06c3c59ea2b1448f41704ffcbfb94b2b34073a62
Branches Tags
unkin/argocd-apps:main unkin/argocd-apps:benvin/kubeconform-crd-schemas unkin/argocd-apps:fix-kanidm-replication-config unkin/argocd-apps:issue-155-open-webui-litellm unkin/argocd-apps:benvin/opa_policies unkin/argocd-apps:benvin/postfix unkin/argocd-apps:benvin/stalwart unkin/argocd-apps:benvin/externaldns-debug-logging unkin/argocd-apps:benvin/fix-externaldns-crashing unkin/argocd-apps:benvin/argocd-image-updater-deploy unkin/argocd-apps:benvin/helm_virtual unkin/argocd-apps:benvin/artifactkeeper
..
compare: unkin/argocd-apps:main
Branches Tags
unkin/argocd-apps:main unkin/argocd-apps:benvin/kubeconform-crd-schemas unkin/argocd-apps:fix-kanidm-replication-config unkin/argocd-apps:issue-155-open-webui-litellm unkin/argocd-apps:benvin/opa_policies unkin/argocd-apps:benvin/postfix unkin/argocd-apps:benvin/stalwart unkin/argocd-apps:benvin/externaldns-debug-logging unkin/argocd-apps:benvin/fix-externaldns-crashing unkin/argocd-apps:benvin/argocd-image-updater-deploy unkin/argocd-apps:benvin/helm_virtual unkin/argocd-apps:benvin/artifactkeeper

4 Commits
06c3c59ea2 .. main

Author SHA1 Message Date
unkinben bbb9acba36 feat: add woodpecker service accounts for media terraform repos (#214) 
Add Kubernetes ServiceAccounts in the woodpecker namespace for terraform-sonarr, terraform-radarr, and terraform-prowlarr CI pipelines.

Reviewed-on: #214
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>
 2026-06-28 22:04:33 +10:00
benvin 48f32a044d fix: update TLSRoute to v1 (#213) 
TLSRoutes are now in standard, no longer experimental

---------

Co-authored-by: Ben Vincent <ben@unkin.net>
Reviewed-on: #213
 2026-06-28 17:50:27 +10:00
unkinben 7f1444fb38 Add Authentik identity provider deployment (#211) 
## Summary
- Deploy Authentik (identity.unkin.net) via Helm chart 2026.5.3
- CNPG PostgreSQL cluster (3 instances) with separate rw/ro poolers (2 instances each)
- Redis with 5Gi persistent storage
- Gateway API for HTTPS (identity.unkin.net) and LDAPS (ldap.k8s.syd1.au.unkin.net, ldap.main.unkin.net)
- TLSRoute for LDAPS passthrough, HTTPRoute for external-dns record creation
- Vault secrets for postgres credentials, authentik secret key, and S3 storage credentials
- S3 storage via RadosGW (bucket: authentik)
- 3 server replicas, 2 worker replicas
- Woodpecker ServiceAccount for terraform-authentik CI
- Platform applicationset and project updated

## Dependencies
- terraform-git #15 (merged) — repo definition
- terraform-vault #78 (merged) — auth roles and Consul ACL

## Vault secrets needed before deploy
Write to `kv/kubernetes/namespace/authentik/default/`:
- `postgres-credentials`: username + password
- `authentik-credentials`: AUTHENTIK_SECRET_KEY
- `s3-credentials`: S3 access key + secret key

Reviewed-on: #211
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>
 2026-06-28 17:42:49 +10:00
unkinben 784c3b5de1 Add JSON schema generation for kubeconform CRD validation (#212) 
## Summary
- New `ci/generate-schemas.sh` script that generates JSON schemas from three sources:
  1. Live cluster CRDs via `kubectl get crds`
  2. Offline CRD manifests (ArgoCD v3.3.2, Gateway API v1.5.1)
  3. Kubernetes v1.33.7 swagger spec for native types
- Schemas follow Datree catalog convention (`<group>/<Kind>_<version>.json`)
- `validate-apps.sh` and `validate-clusters.sh` check local schemas first, falling back to remote
- Fixes TLSRoute (and other CRD) schema validation failures in kubeconform

## Sources
- ArgoCD: `artifactapi.../argoproj/argo-cd/refs/tags/v3.3.2/manifests/ha/install.yaml`
- Gateway API: `artifactapi.../kubernetes-sigs/gateway-api/releases/download/v1.5.1/standard-install.yaml`
- Kubernetes: `artifactapi.../kubernetes/kubernetes/refs/tags/v1.33.7/api/openapi-spec/swagger.json`

Reviewed-on: #212
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>
 2026-06-28 17:26:08 +10:00
328 changed files with 738 additions and 7590 deletions
Expand all files Collapse all files
Makefile
+1 -1
View File
@@ -1,4 +1,4 @@
.PHONY: build clean
.PHONY: build clean schemas
# Build a kustomization path to manifests directory
# Usage: make build clusters/au-syd1/bootstrap
apps/base/authentik/cnpg_cluster.yaml
+91
View File
@@ -0,0 +1,91 @@
---
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
name: postgres
namespace: authentik
spec:
affinity:
podAntiAffinityType: preferred
bootstrap:
initdb:
database: authentik
encoding: UTF8
localeCType: C
localeCollate: C
owner: authentik
secret:
name: postgres-credentials
enablePDB: true
enableSuperuserAccess: false
failoverDelay: 0
imageName: ghcr.io/cloudnative-pg/postgresql:18.1-system-trixie
instances: 3
logLevel: info
maxSyncReplicas: 0
minSyncReplicas: 0
monitoring:
customQueriesConfigMap:
- key: queries
name: cnpg-default-monitoring
disableDefaultQueries: false
enablePodMonitor: false
postgresql:
parameters:
archive_mode: "on"
archive_timeout: 5min
dynamic_shared_memory_type: posix
effective_cache_size: 256MB
full_page_writes: "on"
log_destination: csvlog
log_directory: /controller/log
log_filename: postgres
log_rotation_age: "0"
log_rotation_size: "0"
log_truncate_on_rotation: "false"
logging_collector: "on"
max_connections: "200"
max_parallel_workers: "16"
max_replication_slots: "16"
max_worker_processes: "16"
shared_buffers: 128MB
shared_memory_type: mmap
ssl_max_protocol_version: TLSv1.3
ssl_min_protocol_version: TLSv1.3
wal_keep_size: 256MB
wal_level: logical
wal_log_hints: "on"
wal_receiver_timeout: 5s
wal_sender_timeout: 5s
syncReplicaElectionConstraint:
enabled: false
primaryUpdateMethod: restart
primaryUpdateStrategy: unsupervised
probes:
liveness:
isolationCheck:
connectionTimeout: 1000
enabled: true
requestTimeout: 1000
replicationSlots:
highAvailability:
enabled: true
slotPrefix: _cnpg_
synchronizeReplicas:
enabled: true
updateInterval: 30
resources:
limits:
cpu: 500m
memory: 512Mi
requests:
cpu: 250m
memory: 256Mi
smartShutdownTimeout: 180
startDelay: 3600
stopDelay: 1800
storage:
resizeInUseVolumes: true
size: 20Gi
storageClass: cephrbd-fast-delete
switchoverDelay: 3600
apps/base/authentik/cnpg_pooler.yaml
+66
View File
@@ -0,0 +1,66 @@
---
apiVersion: postgresql.cnpg.io/v1
kind: Pooler
metadata:
name: postgres-pooler-rw
namespace: authentik
spec:
cluster:
name: postgres
instances: 2
pgbouncer:
parameters:
default_pool_size: "100"
max_client_conn: "400"
paused: false
poolMode: session
template:
metadata:
labels:
app: pooler-rw
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: app
operator: In
values:
- pooler-rw
topologyKey: kubernetes.io/hostname
containers: []
type: rw
---
apiVersion: postgresql.cnpg.io/v1
kind: Pooler
metadata:
name: postgres-pooler-ro
namespace: authentik
spec:
cluster:
name: postgres
instances: 2
pgbouncer:
parameters:
default_pool_size: "100"
max_client_conn: "400"
paused: false
poolMode: session
template:
metadata:
labels:
app: pooler-ro
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: app
operator: In
values:
- pooler-ro
topologyKey: kubernetes.io/hostname
containers: []
type: ro
apps/base/authentik/gateway.yaml
+57
View File
@@ -0,0 +1,57 @@
---
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
labels:
traefik.io/instance: internal
annotations:
cert-manager.io/cluster-issuer: vault-issuer
cert-manager.io/common-name: identity.unkin.net
cert-manager.io/private-key-size: "4096"
external-dns.alpha.kubernetes.io/hostname: identity.unkin.net,identity.k8s.syd1.au.unkin.net
external-dns.alpha.kubernetes.io/target: 198.18.200.4
name: authentik
namespace: authentik
spec:
gatewayClassName: traefik-internal
listeners:
- allowedRoutes:
namespaces:
from: Same
hostname: identity.unkin.net
name: http
port: 80
protocol: HTTP
- allowedRoutes:
namespaces:
from: Same
hostname: identity.unkin.net
name: https
port: 443
protocol: HTTPS
tls:
certificateRefs:
- group: ""
kind: Secret
name: authentik-tls
mode: Terminate
- allowedRoutes:
namespaces:
from: Same
hostname: identity.k8s.syd1.au.unkin.net
name: http-internal
port: 80
protocol: HTTP
- allowedRoutes:
namespaces:
from: Same
hostname: identity.k8s.syd1.au.unkin.net
name: https-internal
port: 443
protocol: HTTPS
tls:
certificateRefs:
- group: ""
kind: Secret
name: authentik-tls
mode: Terminate
apps/base/authentik/httproute.yaml
+59
View File
@@ -0,0 +1,59 @@
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: authentik-http-redirect
namespace: authentik
spec:
hostnames:
- identity.unkin.net
- identity.k8s.syd1.au.unkin.net
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: authentik
sectionName: http
- group: gateway.networking.k8s.io
kind: Gateway
name: authentik
sectionName: http-internal
rules:
- filters:
- type: RequestRedirect
requestRedirect:
scheme: https
statusCode: 301
matches:
- path:
type: PathPrefix
value: /
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: authentik
namespace: authentik
spec:
hostnames:
- identity.unkin.net
- identity.k8s.syd1.au.unkin.net
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: authentik
sectionName: https
- group: gateway.networking.k8s.io
kind: Gateway
name: authentik
sectionName: https-internal
rules:
- backendRefs:
- group: ""
kind: Service
name: authentik-server
port: 80
weight: 1
matches:
- path:
type: PathPrefix
value: /
apps/base/authentik/kustomization.yaml
+19
View File
@@ -0,0 +1,19 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- cnpg_cluster.yaml
- cnpg_pooler.yaml
- gateway.yaml
- httproute.yaml
- ldap-gateway.yaml
- ldap-httproute.yaml
- ldap-service.yaml
- ldap-tlsroute.yaml
- namespace.yaml
- redis-deployment.yaml
- redis-pvc.yaml
- redis-service.yaml
- vaultauth.yaml
- vaultstaticsecret.yaml
apps/base/authentik/ldap-gateway.yaml
+47
View File
@@ -0,0 +1,47 @@
---
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
labels:
traefik.io/instance: internal
annotations:
cert-manager.io/cluster-issuer: vault-issuer
cert-manager.io/common-name: ldap.k8s.syd1.au.unkin.net
cert-manager.io/private-key-size: "4096"
name: authentik-ldap
namespace: authentik
spec:
gatewayClassName: traefik-internal
listeners:
- allowedRoutes:
namespaces:
from: Same
hostname: ldap.k8s.syd1.au.unkin.net
name: ldaps-internal
port: 636
protocol: TLS
tls:
mode: Passthrough
- allowedRoutes:
namespaces:
from: Same
hostname: ldap.main.unkin.net
name: ldaps-main
port: 636
protocol: TLS
tls:
mode: Passthrough
- allowedRoutes:
namespaces:
from: Same
hostname: ldap.k8s.syd1.au.unkin.net
name: http-dns
port: 80
protocol: HTTP
- allowedRoutes:
namespaces:
from: Same
hostname: ldap.main.unkin.net
name: http-dns-main
port: 80
protocol: HTTP
apps/base/authentik/ldap-httproute.yaml
+32
View File
@@ -0,0 +1,32 @@
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: authentik-ldap-dns
namespace: authentik
annotations:
external-dns.alpha.kubernetes.io/hostname: ldap.k8s.syd1.au.unkin.net,ldap.main.unkin.net
external-dns.alpha.kubernetes.io/target: 198.18.200.4
spec:
hostnames:
- ldap.k8s.syd1.au.unkin.net
- ldap.main.unkin.net
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: authentik-ldap
sectionName: http-dns
- group: gateway.networking.k8s.io
kind: Gateway
name: authentik-ldap
sectionName: http-dns-main
rules:
- filters:
- type: RequestRedirect
requestRedirect:
scheme: https
statusCode: 301
matches:
- path:
type: PathPrefix
value: /
apps/base/authentik/ldap-service.yaml
+18
View File
@@ -0,0 +1,18 @@
---
apiVersion: v1
kind: Service
metadata:
name: authentik-ldap
namespace: authentik
spec:
internalTrafficPolicy: Cluster
ports:
- name: ldaps
port: 6636
protocol: TCP
targetPort: 6636
selector:
app.kubernetes.io/name: authentik
app.kubernetes.io/component: ldap
sessionAffinity: None
type: ClusterIP
apps/base/authentik/ldap-tlsroute.yaml
+26
View File
@@ -0,0 +1,26 @@
---
apiVersion: gateway.networking.k8s.io/v1
kind: TLSRoute
metadata:
name: authentik-ldaps
namespace: authentik
spec:
hostnames:
- ldap.k8s.syd1.au.unkin.net
- ldap.main.unkin.net
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: authentik-ldap
sectionName: ldaps-internal
- group: gateway.networking.k8s.io
kind: Gateway
name: authentik-ldap
sectionName: ldaps-main
rules:
- backendRefs:
- group: ""
kind: Service
name: authentik-ldap
port: 6636
weight: 1
apps/base/authentik/namespace.yaml
+5
View File
@@ -0,0 +1,5 @@
---
apiVersion: v1
kind: Namespace
metadata:
name: authentik
apps/base/authentik/redis-deployment.yaml
+58
View File
@@ -0,0 +1,58 @@
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: redis
namespace: authentik
spec:
replicas: 1
strategy:
type: Recreate
selector:
matchLabels:
app: redis
template:
metadata:
labels:
app: redis
spec:
containers:
- name: redis
image: redis:7-alpine
imagePullPolicy: IfNotPresent
args:
- --save
- "20"
- "1"
ports:
- containerPort: 6379
name: redis
protocol: TCP
livenessProbe:
exec:
command:
- redis-cli
- ping
initialDelaySeconds: 5
periodSeconds: 10
readinessProbe:
exec:
command:
- redis-cli
- ping
initialDelaySeconds: 5
periodSeconds: 10
resources:
limits:
cpu: 500m
memory: 512Mi
requests:
cpu: 50m
memory: 128Mi
volumeMounts:
- mountPath: /data
name: redis-data
volumes:
- name: redis-data
persistentVolumeClaim:
claimName: redis-data
apps/base/authentik/redis-pvc.yaml
+13
View File
@@ -0,0 +1,13 @@
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: redis-data
namespace: authentik
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 5Gi
storageClassName: cephrbd-fast-delete
apps/base/authentik/redis-service.yaml
+17
View File
@@ -0,0 +1,17 @@
---
apiVersion: v1
kind: Service
metadata:
name: redis
namespace: authentik
spec:
internalTrafficPolicy: Cluster
ports:
- name: redis
port: 6379
protocol: TCP
targetPort: redis
selector:
app: redis
sessionAffinity: None
type: ClusterIP
apps/base/authentik/vaultauth.yaml
+18
View File
@@ -0,0 +1,18 @@
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuth
metadata:
name: default
namespace: authentik
spec:
allowedNamespaces:
- authentik
kubernetes:
audiences:
- vault
role: default
serviceAccount: default
tokenExpirationSeconds: 600
method: kubernetes
mount: k8s/au/syd1
vaultConnectionRef: vso-system/default
apps/base/authentik/vaultstaticsecret.yaml
+51
View File
@@ -0,0 +1,51 @@
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
name: postgres-credentials
namespace: authentik
spec:
destination:
create: true
name: postgres-credentials
overwrite: true
hmacSecretData: true
mount: kv
path: kubernetes/namespace/authentik/default/postgres-credentials
refreshAfter: 5m
type: kv-v2
vaultAuthRef: default
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
name: authentik-credentials
namespace: authentik
spec:
destination:
create: true
name: authentik-credentials
overwrite: true
hmacSecretData: true
mount: kv
path: kubernetes/namespace/authentik/default/authentik-credentials
refreshAfter: 5m
type: kv-v2
vaultAuthRef: default
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
name: s3-credentials
namespace: authentik
spec:
destination:
create: true
name: s3-credentials
overwrite: true
hmacSecretData: true
mount: kv
path: kubernetes/namespace/authentik/default/s3-credentials
refreshAfter: 5m
type: kv-v2
vaultAuthRef: default
apps/base/woodpecker/kustomization.yaml
+4
View File
@@ -7,7 +7,11 @@ resources:
- cnpg_cluster.yaml
- cnpg_pooler.yaml
- serviceaccount_terraform_artifactapi.yaml
- serviceaccount_terraform_authentik.yaml
- serviceaccount_terraform_git.yaml
- serviceaccount_terraform_prowlarr.yaml
- serviceaccount_terraform_radarr.yaml
- serviceaccount_terraform_sonarr.yaml
- serviceaccount_terraform_vault.yaml
- vaultauth.yaml
- vaultstaticsecret.yaml
apps/base/woodpecker/serviceaccount_terraform_authentik.yaml
+6
View File
@@ -0,0 +1,6 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: terraform-authentik
namespace: woodpecker
apps/base/woodpecker/serviceaccount_terraform_prowlarr.yaml
+6
View File
@@ -0,0 +1,6 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: terraform-prowlarr
namespace: woodpecker
apps/base/woodpecker/serviceaccount_terraform_radarr.yaml
+6
View File
@@ -0,0 +1,6 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: terraform-radarr
namespace: woodpecker
apps/base/woodpecker/serviceaccount_terraform_sonarr.yaml
+6
View File
@@ -0,0 +1,6 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: terraform-sonarr
namespace: woodpecker
apps/overlays/au-syd1/authentik/kustomization.yaml
+14
View File
@@ -0,0 +1,14 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../../base/authentik
helmCharts:
- name: authentik
repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
version: "2026.5.3"
releaseName: authentik
namespace: authentik
valuesFile: values.yaml
apps/overlays/au-syd1/authentik/values.yaml
+105
View File
@@ -0,0 +1,105 @@
global:
env:
# PostgreSQL primary (via pooler)
- name: AUTHENTIK_POSTGRESQL__HOST
value: postgres-pooler-rw
- name: AUTHENTIK_POSTGRESQL__PORT
value: "5432"
- name: AUTHENTIK_POSTGRESQL__NAME
value: authentik
- name: AUTHENTIK_POSTGRESQL__USER
valueFrom:
secretKeyRef:
name: postgres-credentials
key: username
- name: AUTHENTIK_POSTGRESQL__PASSWORD
valueFrom:
secretKeyRef:
name: postgres-credentials
key: password
# PostgreSQL read replica (via pooler)
- name: AUTHENTIK_POSTGRESQL__READ_REPLICAS__0__HOST
value: postgres-pooler-ro
- name: AUTHENTIK_POSTGRESQL__READ_REPLICAS__0__PORT
value: "5432"
- name: AUTHENTIK_POSTGRESQL__READ_REPLICAS__0__NAME
value: authentik
- name: AUTHENTIK_POSTGRESQL__READ_REPLICAS__0__USER
valueFrom:
secretKeyRef:
name: postgres-credentials
key: username
- name: AUTHENTIK_POSTGRESQL__READ_REPLICAS__0__PASSWORD
valueFrom:
secretKeyRef:
name: postgres-credentials
key: password
# PostgreSQL pooler settings
- name: AUTHENTIK_POSTGRESQL__DISABLE_SERVER_SIDE_CURSORS
value: "true"
- name: AUTHENTIK_POSTGRESQL__CONN_MAX_AGE
value: "0"
- name: AUTHENTIK_POSTGRESQL__CONN_HEALTH_CHECKS
value: "true"
# Redis
- name: AUTHENTIK_REDIS__HOST
value: redis
- name: AUTHENTIK_REDIS__PORT
value: "6379"
# S3 storage
- name: AUTHENTIK_STORAGE__BACKEND
value: s3
- name: AUTHENTIK_STORAGE__S3__ENDPOINT
value: https://radosgw.service.consul/
- name: AUTHENTIK_STORAGE__S3__BUCKET_NAME
value: authentik
- name: AUTHENTIK_STORAGE__S3__ADDRESSING_STYLE
value: path
- name: AUTHENTIK_STORAGE__S3__ACCESS_KEY
valueFrom:
secretKeyRef:
name: s3-credentials
key: AUTHENTIK_STORAGE__S3__ACCESS_KEY
- name: AUTHENTIK_STORAGE__S3__SECRET_KEY
valueFrom:
secretKeyRef:
name: s3-credentials
key: AUTHENTIK_STORAGE__S3__SECRET_KEY
# Secret key
- name: AUTHENTIK_SECRET_KEY
valueFrom:
secretKeyRef:
name: authentik-credentials
key: AUTHENTIK_SECRET_KEY
server:
replicas: 3
annotations:
reloader.stakater.com/auto: "true"
ingress:
enabled: false
resources:
limits:
cpu: "2"
memory: 2Gi
requests:
cpu: 250m
memory: 512Mi
worker:
replicas: 2
annotations:
reloader.stakater.com/auto: "true"
resources:
limits:
cpu: "2"
memory: 2Gi
requests:
cpu: 250m
memory: 512Mi
postgresql:
enabled: false
redis:
enabled: false
argocd/applicationsets/platform.yaml
+1
View File
@@ -10,6 +10,7 @@ spec:
repoURL: https://git.unkin.net/unkin/argocd-apps
revision: HEAD
directories:
- path: apps/overlays/*/authentik
- path: apps/overlays/*/artifactapi
- path: apps/overlays/*/age-api
- path: apps/overlays/*/cattle-system
argocd/projects/platform.yaml
+2
View File
@@ -19,6 +19,8 @@ spec:
server: https://kubernetes.default.svc
- namespace: 'age-api'
server: https://kubernetes.default.svc
- namespace: 'authentik'
server: https://kubernetes.default.svc
- namespace: 'cert-manager'
server: https://kubernetes.default.svc
- namespace: 'certificates'
ci/generate-schemas.sh
+9 -86
View File
@@ -5,40 +5,26 @@ SCHEMA_DIR="${1:-schemas}"
rm -rf "$SCHEMA_DIR"
mkdir -p "$SCHEMA_DIR"
CRD_URLS=(
"https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github_user/argoproj/argo-cd/refs/tags/v3.3.2/manifests/ha/install.yaml"
"https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/kubernetes-sigs/gateway-api/releases/download/v1.5.1/standard-install.yaml"
)
SWAGGER_URL="https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github_user/kubernetes/kubernetes/refs/tags/v1.33.7/api/openapi-spec/swagger.json"
write_schema='
import json, os
echo "==> Fetching CRDs from cluster..." >&2
kubectl get crds -o json | python3 -c "
import sys, json, os
def write_schema(schema, schema_dir, group, kind, version):
"""Strip descriptions and write compact JSON with trailing newline."""
def strip_descriptions(obj):
if isinstance(obj, dict):
return {k: strip_descriptions(v) for k, v in obj.items() if k != "description"}
return {k: strip_descriptions(v) for k, v in obj.items() if k != 'description'}
if isinstance(obj, list):
return [strip_descriptions(i) for i in obj]
return obj
schema = strip_descriptions(schema)
group_dir = os.path.join(schema_dir, group) if group else schema_dir
group_dir = os.path.join(schema_dir, group)
os.makedirs(group_dir, exist_ok=True)
fname = f"{kind}_{version}.json".lower()
with open(os.path.join(group_dir, fname), "w") as f:
fname = f'{kind}_{version}.json'.lower()
with open(os.path.join(group_dir, fname), 'w') as f:
json.dump(schema, f, indent=2, sort_keys=True)
f.write("\n")
print(f" Generated: {group}/{fname}" if group else f" Generated: {fname}", file=__import__("sys").stderr)
'
if command -v kubectl &>/dev/null && kubectl cluster-info &>/dev/null 2>&1; then
echo "==> Fetching CRDs from cluster..." >&2
kubectl get crds -o json | python3 -c "
import sys, json, os
$write_schema
f.write('\n')
print(f' Generated: {group}/{fname}', file=sys.stderr)
data = json.load(sys.stdin)
for crd in data.get('items', []):
@@ -59,69 +45,6 @@ for crd in data.get('items', []):
schema['properties'].setdefault('metadata', {'type': 'object'})
write_schema(schema, '$SCHEMA_DIR', group, kind, version)
"
else
echo "==> kubectl not available, skipping cluster CRDs" >&2
fi
echo "==> Downloading CRD manifests..." >&2
for url in "${CRD_URLS[@]}"; do
echo " Fetching: $url" >&2
curl -sSfL "$url"
done | python3 -c "
import sys, json, yaml, os
$write_schema
for doc in yaml.safe_load_all(sys.stdin):
if doc is None or doc.get('kind') != 'CustomResourceDefinition':
continue
spec = doc.get('spec', {})
group = spec.get('group', '')
kind = spec.get('names', {}).get('kind', '')
for ver in spec.get('versions', []):
version = ver.get('name', '')
openapi = ver.get('schema', {}).get('openAPIV3Schema', {})
if not openapi:
continue
group_dir = os.path.join('$SCHEMA_DIR', group)
fname = f'{kind}_{version}.json'.lower()
if os.path.exists(os.path.join(group_dir, fname)):
continue
schema = dict(openapi)
schema['\$schema'] = 'http://json-schema.org/draft-07/schema#'
schema['type'] = 'object'
schema.setdefault('properties', {})
schema['properties'].setdefault('apiVersion', {'type': 'string'})
schema['properties'].setdefault('kind', {'type': 'string'})
schema['properties'].setdefault('metadata', {'type': 'object'})
write_schema(schema, '$SCHEMA_DIR', group, kind, version)
"
echo "==> Downloading Kubernetes swagger spec..." >&2
curl -sSfL "$SWAGGER_URL" | python3 -c "
import sys, json, os
$write_schema
swagger = json.load(sys.stdin)
definitions = swagger.get('definitions', {})
for defn_name, defn in definitions.items():
for gvk in defn.get('x-kubernetes-group-version-kind', []):
group = gvk.get('group', '')
version = gvk.get('version', '')
kind = gvk.get('kind', '')
schema = {
'\$schema': 'http://json-schema.org/draft-07/schema#',
'type': 'object',
'properties': {},
'additionalProperties': True,
}
for prop_name, prop_val in defn.get('properties', {}).items():
prop_copy = {k: v for k, v in prop_val.items() if k != '\$ref'}
if not prop_copy.get('type') and len(prop_copy) > 0:
prop_copy['type'] = 'object'
prop_copy['additionalProperties'] = True
schema['properties'][prop_name] = prop_copy
write_schema(schema, '$SCHEMA_DIR', group, kind, version)
"
total=$(find "$SCHEMA_DIR" -name '*.json' | wc -l)
echo "==> Schema generation complete: $total schemas in $SCHEMA_DIR" >&2
ci/validate-apps.sh
+1 -1
View File
@@ -21,6 +21,6 @@ while IFS= read -r -d "" k; do
-summary \
-output pretty \
-verbose \
-skip CustomResourceDefinition,GpuDevicePlugin,LBNodeAgent,ServiceGroup \
-skip CustomResourceDefinition \
"${schema_args[@]}"
done < <(find apps/overlays -name kustomization.yaml -print0)
schemas/admission.k8s.io/deleteoptions_v1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/admission.k8s.io/deleteoptions_v1beta1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/admission.k8s.io/watchevent_v1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/admission.k8s.io/watchevent_v1beta1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/deleteoptions_v1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/deleteoptions_v1alpha1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/deleteoptions_v1beta1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/mutatingadmissionpolicy_v1alpha1.json
-21
View File
@@ -1,21 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/mutatingadmissionpolicybinding_v1alpha1.json
-21
View File
@@ -1,21 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/mutatingadmissionpolicybindinglist_v1alpha1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.MutatingAdmissionPolicyBinding"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/mutatingadmissionpolicylist_v1alpha1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.MutatingAdmissionPolicy"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/mutatingwebhookconfiguration_v1.json
-29
View File
@@ -1,29 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"webhooks": {
"items": {
"$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhook"
},
"type": "array",
"x-kubernetes-list-map-keys": [
"name"
],
"x-kubernetes-list-type": "map",
"x-kubernetes-patch-merge-key": "name",
"x-kubernetes-patch-strategy": "merge"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/mutatingwebhookconfigurationlist_v1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/validatingadmissionpolicy_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/validatingadmissionpolicy_v1beta1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/validatingadmissionpolicybinding_v1.json
-21
View File
@@ -1,21 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/validatingadmissionpolicybinding_v1beta1.json
-21
View File
@@ -1,21 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/validatingadmissionpolicybindinglist_v1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyBinding"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/validatingadmissionpolicybindinglist_v1beta1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBinding"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/validatingadmissionpolicylist_v1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicy"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/validatingadmissionpolicylist_v1beta1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicy"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/validatingwebhookconfiguration_v1.json
-29
View File
@@ -1,29 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"webhooks": {
"items": {
"$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhook"
},
"type": "array",
"x-kubernetes-list-map-keys": [
"name"
],
"x-kubernetes-list-type": "map",
"x-kubernetes-patch-merge-key": "name",
"x-kubernetes-patch-strategy": "merge"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/validatingwebhookconfigurationlist_v1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/watchevent_v1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/watchevent_v1alpha1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/admissionregistration.k8s.io/watchevent_v1beta1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/apiextensions.k8s.io/customresourcedefinition_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apiextensions.k8s.io/customresourcedefinitionlist_v1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apiextensions.k8s.io/deleteoptions_v1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/apiextensions.k8s.io/deleteoptions_v1beta1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/apiextensions.k8s.io/watchevent_v1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/apiextensions.k8s.io/watchevent_v1beta1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/apigroup_v1.json
-34
View File
@@ -1,34 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"name": {
"type": "string"
},
"preferredVersion": {
"additionalProperties": true,
"type": "object"
},
"serverAddressByClientCIDRs": {
"items": {
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDR"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"versions": {
"items": {
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
}
},
"type": "object"
}
schemas/apigrouplist_v1.json
-20
View File
@@ -1,20 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"groups": {
"items": {
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"kind": {
"type": "string"
}
},
"type": "object"
}
schemas/apiregistration.k8s.io/apiservice_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apiregistration.k8s.io/apiservicelist_v1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apiregistration.k8s.io/deleteoptions_v1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/apiregistration.k8s.io/deleteoptions_v1beta1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/apiregistration.k8s.io/watchevent_v1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/apiregistration.k8s.io/watchevent_v1beta1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/apiresourcelist_v1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"groupVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"resources": {
"items": {
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResource"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
}
},
"type": "object"
}
schemas/apiversions_v1.json
-27
View File
@@ -1,27 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"serverAddressByClientCIDRs": {
"items": {
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDR"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"versions": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
}
},
"type": "object"
}
schemas/apps/controllerrevision_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"data": {
"additionalProperties": true,
"type": "object"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"revision": {
"format": "int64",
"type": "integer"
}
},
"type": "object"
}
schemas/apps/controllerrevisionlist_v1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apps/daemonset_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apps/daemonsetlist_v1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apps/deleteoptions_v1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/apps/deleteoptions_v1beta1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/apps/deleteoptions_v1beta2.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/apps/deployment_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apps/deploymentlist_v1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.apps.v1.Deployment"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apps/replicaset_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apps/replicasetlist_v1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apps/statefulset_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apps/statefulsetlist_v1.json
-23
View File
@@ -1,23 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"items": {
"items": {
"$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet"
},
"type": "array"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/apps/watchevent_v1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/apps/watchevent_v1beta1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/apps/watchevent_v1beta2.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/authentication.k8s.io/deleteoptions_v1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/authentication.k8s.io/deleteoptions_v1alpha1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/authentication.k8s.io/deleteoptions_v1beta1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/authentication.k8s.io/selfsubjectreview_v1.json
-21
View File
@@ -1,21 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/authentication.k8s.io/tokenrequest_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/authentication.k8s.io/tokenreview_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/authentication.k8s.io/watchevent_v1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/authentication.k8s.io/watchevent_v1alpha1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/authentication.k8s.io/watchevent_v1beta1.json
-14
View File
@@ -1,14 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"object": {
"additionalProperties": true,
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
schemas/authorization.k8s.io/deleteoptions_v1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/authorization.k8s.io/deleteoptions_v1beta1.json
-37
View File
@@ -1,37 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"dryRun": {
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"gracePeriodSeconds": {
"format": "int64",
"type": "integer"
},
"ignoreStoreReadErrorWithClusterBreakingPotential": {
"type": "boolean"
},
"kind": {
"type": "string"
},
"orphanDependents": {
"type": "boolean"
},
"preconditions": {
"additionalProperties": true,
"type": "object"
},
"propagationPolicy": {
"type": "string"
}
},
"type": "object"
}
schemas/authorization.k8s.io/localsubjectaccessreview_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/authorization.k8s.io/selfsubjectaccessreview_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/authorization.k8s.io/selfsubjectrulesreview_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}
schemas/authorization.k8s.io/subjectaccessreview_v1.json
-25
View File
@@ -1,25 +0,0 @@
{
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": true,
"properties": {
"apiVersion": {
"type": "string"
},
"kind": {
"type": "string"
},
"metadata": {
"additionalProperties": true,
"type": "object"
},
"spec": {
"additionalProperties": true,
"type": "object"
},
"status": {
"additionalProperties": true,
"type": "object"
}
},
"type": "object"
}

Some files were not shown because too many files have changed in this diff Show More