Documentation ¶
Overview ¶
+kubebuilder:validation:Optional +groupName=config.openshift.io Package v1alpha1 is the v1alpha1 version of the API.
Index ¶
- Constants
- Variables
- func Resource(resource string) schema.GroupResource
- type Backup
- type BackupList
- type BackupSpec
- type BackupStatus
- type ClusterImagePolicy
- type ClusterImagePolicyList
- type ClusterImagePolicySpec
- type ClusterImagePolicyStatus
- type DataPolicy
- type EtcdBackupSpec
- type FulcioCAWithRekor
- type GatherConfig
- type IdentityMatchPolicy
- type IdentityRepositoryPrefix
- type ImagePolicy
- type ImagePolicyList
- type ImagePolicySpec
- type ImagePolicyStatus
- type ImageScope
- type InsightsDataGather
- type InsightsDataGatherList
- type InsightsDataGatherSpec
- type InsightsDataGatherStatus
- type Policy
- type PolicyFulcioSubject
- type PolicyIdentity
- type PolicyMatchExactRepository
- type PolicyMatchRemapIdentity
- type PolicyRootOfTrust
- type PolicyType
- type PublicKey
- type RetentionNumberConfig
- type RetentionPolicy
- type RetentionSizeConfig
- type RetentionType
Constants ¶
const ( // ImagePolicyPending indicates that the customer resource contains a policy that cannot take effect. It is either overwritten by a global policy or the image scope is not valid. ImagePolicyPending = "Pending" // ImagePolicyApplied indicates that the policy has been applied ImagePolicyApplied = "Applied" )
Variables ¶
var ( GroupName = "config.openshift.io" GroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1alpha1"} // Install is a function which adds this version to a scheme Install = schemeBuilder.AddToScheme // SchemeGroupVersion generated code relies on this name // Deprecated SchemeGroupVersion = GroupVersion // AddToScheme exists solely to keep the old generators creating valid code // DEPRECATED AddToScheme = schemeBuilder.AddToScheme )
Functions ¶
func Resource ¶
func Resource(resource string) schema.GroupResource
Resource generated code relies on this being here, but it logically belongs to the group DEPRECATED
Types ¶
type Backup ¶
type Backup struct { metav1.TypeMeta `json:",inline"` // metadata is the standard object's metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata metav1.ObjectMeta `json:"metadata,omitempty"` // spec holds user settable values for configuration // +required Spec BackupSpec `json:"spec"` // status holds observed values from the cluster. They may not be overridden. // +optional Status BackupStatus `json:"status"` }
+genclient +genclient:nonNamespaced +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
Backup provides configuration for performing backups of the openshift cluster.
Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. +kubebuilder:object:root=true +kubebuilder:resource:path=backups,scope=Cluster +kubebuilder:subresource:status +openshift:api-approved.openshift.io=https://github.com/openshift/api/pull/1482 +openshift:file-pattern=cvoRunLevel=0000_10,operatorName=config-operator,operatorOrdering=01 +openshift:enable:FeatureGate=AutomatedEtcdBackup +openshift:compatibility-gen:level=4
func (*Backup) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Backup.
func (*Backup) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*Backup) DeepCopyObject ¶
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (Backup) SwaggerDoc ¶
type BackupList ¶
type BackupList struct { metav1.TypeMeta `json:",inline"` // metadata is the standard list's metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata metav1.ListMeta `json:"metadata"` Items []Backup `json:"items"` }
BackupList is a collection of items
Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. +openshift:compatibility-gen:level=4
func (*BackupList) DeepCopy ¶
func (in *BackupList) DeepCopy() *BackupList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new BackupList.
func (*BackupList) DeepCopyInto ¶
func (in *BackupList) DeepCopyInto(out *BackupList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*BackupList) DeepCopyObject ¶
func (in *BackupList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (BackupList) SwaggerDoc ¶
func (BackupList) SwaggerDoc() map[string]string
type BackupSpec ¶
type BackupSpec struct { // etcd specifies the configuration for periodic backups of the etcd cluster // +required EtcdBackupSpec EtcdBackupSpec `json:"etcd"` }
func (*BackupSpec) DeepCopy ¶
func (in *BackupSpec) DeepCopy() *BackupSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new BackupSpec.
func (*BackupSpec) DeepCopyInto ¶
func (in *BackupSpec) DeepCopyInto(out *BackupSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (BackupSpec) SwaggerDoc ¶
func (BackupSpec) SwaggerDoc() map[string]string
type BackupStatus ¶
type BackupStatus struct { }
func (*BackupStatus) DeepCopy ¶
func (in *BackupStatus) DeepCopy() *BackupStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new BackupStatus.
func (*BackupStatus) DeepCopyInto ¶
func (in *BackupStatus) DeepCopyInto(out *BackupStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ClusterImagePolicy ¶
type ClusterImagePolicy struct { metav1.TypeMeta `json:",inline"` // metadata is the standard object's metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata metav1.ObjectMeta `json:"metadata,omitempty"` // spec contains the configuration for the cluster image policy. // +required Spec ClusterImagePolicySpec `json:"spec"` // status contains the observed state of the resource. // +optional Status ClusterImagePolicyStatus `json:"status,omitempty"` }
ClusterImagePolicy holds cluster-wide configuration for image signature verification
Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. +kubebuilder:object:root=true +kubebuilder:resource:path=clusterimagepolicies,scope=Cluster +kubebuilder:subresource:status +openshift:api-approved.openshift.io=https://github.com/openshift/api/pull/1457 +openshift:file-pattern=cvoRunLevel=0000_10,operatorName=config-operator,operatorOrdering=01 +openshift:enable:FeatureGate=SigstoreImageVerification +openshift:compatibility-gen:level=4
func (*ClusterImagePolicy) DeepCopy ¶
func (in *ClusterImagePolicy) DeepCopy() *ClusterImagePolicy
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterImagePolicy.
func (*ClusterImagePolicy) DeepCopyInto ¶
func (in *ClusterImagePolicy) DeepCopyInto(out *ClusterImagePolicy)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ClusterImagePolicy) DeepCopyObject ¶
func (in *ClusterImagePolicy) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (ClusterImagePolicy) SwaggerDoc ¶
func (ClusterImagePolicy) SwaggerDoc() map[string]string
type ClusterImagePolicyList ¶
type ClusterImagePolicyList struct { metav1.TypeMeta `json:",inline"` // metadata is the standard list's metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata metav1.ListMeta `json:"metadata"` Items []ClusterImagePolicy `json:"items"` }
ClusterImagePolicyList is a list of ClusterImagePolicy resources
Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. +openshift:compatibility-gen:level=4
func (*ClusterImagePolicyList) DeepCopy ¶
func (in *ClusterImagePolicyList) DeepCopy() *ClusterImagePolicyList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterImagePolicyList.
func (*ClusterImagePolicyList) DeepCopyInto ¶
func (in *ClusterImagePolicyList) DeepCopyInto(out *ClusterImagePolicyList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ClusterImagePolicyList) DeepCopyObject ¶
func (in *ClusterImagePolicyList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (ClusterImagePolicyList) SwaggerDoc ¶
func (ClusterImagePolicyList) SwaggerDoc() map[string]string
type ClusterImagePolicySpec ¶
type ClusterImagePolicySpec struct { // scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the "Docker Registry HTTP API V2". // Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). // More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository // namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). // Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. // If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. // In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories // quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. // If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied. // For additional details about the format, please refer to the document explaining the docker transport field, // which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker // +required // +kubebuilder:validation:MaxItems=256 // +listType=set Scopes []ImageScope `json:"scopes"` // policy contains configuration to allow scopes to be verified, and defines how // images not matching the verification policy will be treated. // +required Policy Policy `json:"policy"` }
CLusterImagePolicySpec is the specification of the ClusterImagePolicy custom resource.
func (*ClusterImagePolicySpec) DeepCopy ¶
func (in *ClusterImagePolicySpec) DeepCopy() *ClusterImagePolicySpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterImagePolicySpec.
func (*ClusterImagePolicySpec) DeepCopyInto ¶
func (in *ClusterImagePolicySpec) DeepCopyInto(out *ClusterImagePolicySpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (ClusterImagePolicySpec) SwaggerDoc ¶
func (ClusterImagePolicySpec) SwaggerDoc() map[string]string
type ClusterImagePolicyStatus ¶
type ClusterImagePolicyStatus struct { // conditions provide details on the status of this API Resource. // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:"conditions,omitempty"` }
+k8s:deepcopy-gen=true
func (*ClusterImagePolicyStatus) DeepCopy ¶
func (in *ClusterImagePolicyStatus) DeepCopy() *ClusterImagePolicyStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterImagePolicyStatus.
func (*ClusterImagePolicyStatus) DeepCopyInto ¶
func (in *ClusterImagePolicyStatus) DeepCopyInto(out *ClusterImagePolicyStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (ClusterImagePolicyStatus) SwaggerDoc ¶
func (ClusterImagePolicyStatus) SwaggerDoc() map[string]string
type DataPolicy ¶
type DataPolicy string
dataPolicy declares valid data policy types +kubebuilder:validation:Enum="";None;ObfuscateNetworking
const ( // No data obfuscation NoPolicy DataPolicy = "None" // IP addresses and cluster domain name are obfuscated ObfuscateNetworking DataPolicy = "ObfuscateNetworking" )
type EtcdBackupSpec ¶
type EtcdBackupSpec struct { // schedule defines the recurring backup schedule in Cron format // every 2 hours: 0 */2 * * * // every day at 3am: 0 3 * * * // Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. // The current default is "no backups", but will change in the future. // +optional // +kubebuilder:validation:Pattern:=`^(@(annually|yearly|monthly|weekly|daily|hourly))|(\*|(?:\*|(?:[0-9]|(?:[1-5][0-9])))\/(?:[0-9]|(?:[1-5][0-9]))|(?:[0-9]|(?:[1-5][0-9]))(?:(?:\-[0-9]|\-(?:[1-5][0-9]))?|(?:\,(?:[0-9]|(?:[1-5][0-9])))*)) (\*|(?:\*|(?:\*|(?:[0-9]|1[0-9]|2[0-3])))\/(?:[0-9]|1[0-9]|2[0-3])|(?:[0-9]|1[0-9]|2[0-3])(?:(?:\-(?:[0-9]|1[0-9]|2[0-3]))?|(?:\,(?:[0-9]|1[0-9]|2[0-3]))*)) (\*|(?:[1-9]|(?:[12][0-9])|3[01])(?:(?:\-(?:[1-9]|(?:[12][0-9])|3[01]))?|(?:\,(?:[1-9]|(?:[12][0-9])|3[01]))*)) (\*|(?:[1-9]|1[012]|JAN|FEB|MAR|APR|MAY|JUN|JUL|AUG|SEP|OCT|NOV|DEC)(?:(?:\-(?:[1-9]|1[012]|JAN|FEB|MAR|APR|MAY|JUN|JUL|AUG|SEP|OCT|NOV|DEC))?|(?:\,(?:[1-9]|1[012]|JAN|FEB|MAR|APR|MAY|JUN|JUL|AUG|SEP|OCT|NOV|DEC))*)) (\*|(?:[0-6]|SUN|MON|TUE|WED|THU|FRI|SAT)(?:(?:\-(?:[0-6]|SUN|MON|TUE|WED|THU|FRI|SAT))?|(?:\,(?:[0-6]|SUN|MON|TUE|WED|THU|FRI|SAT))*))$` Schedule string `json:"schedule"` // The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. // If not specified, this will default to the time zone of the kube-controller-manager process. // See https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zones // +optional // +kubebuilder:validation:Pattern:=`^([A-Za-z_]+([+-]*0)*|[A-Za-z_]+(\/[A-Za-z_]+){1,2})(\/GMT[+-]\d{1,2})?$` TimeZone string `json:"timeZone"` // retentionPolicy defines the retention policy for retaining and deleting existing backups. // +optional RetentionPolicy RetentionPolicy `json:"retentionPolicy"` // pvcName specifies the name of the PersistentVolumeClaim (PVC) which binds a PersistentVolume where the // etcd backup files would be saved // The PVC itself must always be created in the "openshift-etcd" namespace // If the PVC is left unspecified "" then the platform will choose a reasonable default location to save the backup. // In the future this would be backups saved across the control-plane master nodes. // +optional PVCName string `json:"pvcName"` }
EtcdBackupSpec provides configuration for automated etcd backups to the cluster-etcd-operator
func (*EtcdBackupSpec) DeepCopy ¶
func (in *EtcdBackupSpec) DeepCopy() *EtcdBackupSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EtcdBackupSpec.
func (*EtcdBackupSpec) DeepCopyInto ¶
func (in *EtcdBackupSpec) DeepCopyInto(out *EtcdBackupSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (EtcdBackupSpec) SwaggerDoc ¶
func (EtcdBackupSpec) SwaggerDoc() map[string]string
type FulcioCAWithRekor ¶
type FulcioCAWithRekor struct { // fulcioCAData contains inline base64-encoded data for the PEM format fulcio CA. // fulcioCAData must be at most 8192 characters. // +required // +kubebuilder:validation:MaxLength=8192 FulcioCAData []byte `json:"fulcioCAData"` // rekorKeyData contains inline base64-encoded data for the PEM format from the Rekor public key. // rekorKeyData must be at most 8192 characters. // +required // +kubebuilder:validation:MaxLength=8192 RekorKeyData []byte `json:"rekorKeyData"` // fulcioSubject specifies OIDC issuer and the email of the Fulcio authentication configuration. // +required FulcioSubject PolicyFulcioSubject `json:"fulcioSubject,omitempty"` }
FulcioCAWithRekor defines the root of trust based on the Fulcio certificate and the Rekor public key.
func (*FulcioCAWithRekor) DeepCopy ¶
func (in *FulcioCAWithRekor) DeepCopy() *FulcioCAWithRekor
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FulcioCAWithRekor.
func (*FulcioCAWithRekor) DeepCopyInto ¶
func (in *FulcioCAWithRekor) DeepCopyInto(out *FulcioCAWithRekor)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (FulcioCAWithRekor) SwaggerDoc ¶
func (FulcioCAWithRekor) SwaggerDoc() map[string]string
type GatherConfig ¶
type GatherConfig struct { // dataPolicy allows user to enable additional global obfuscation of the IP addresses and base domain // in the Insights archive data. Valid values are "None" and "ObfuscateNetworking". // When set to None the data is not obfuscated. // When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. // When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. // The current default is None. // +optional DataPolicy DataPolicy `json:"dataPolicy,omitempty"` // disabledGatherers is a list of gatherers to be excluded from the gathering. All the gatherers can be disabled by providing "all" value. // If all the gatherers are disabled, the Insights operator does not gather any data. // The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. // Run the following command to get the names of last active gatherers: // "oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'" // An example of disabling gatherers looks like this: `disabledGatherers: ["clusterconfig/machine_configs", "workloads/workload_info"]` // +optional DisabledGatherers []string `json:"disabledGatherers"` }
gatherConfig provides data gathering configuration options.
func (*GatherConfig) DeepCopy ¶
func (in *GatherConfig) DeepCopy() *GatherConfig
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatherConfig.
func (*GatherConfig) DeepCopyInto ¶
func (in *GatherConfig) DeepCopyInto(out *GatherConfig)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (GatherConfig) SwaggerDoc ¶
func (GatherConfig) SwaggerDoc() map[string]string
type IdentityMatchPolicy ¶
type IdentityMatchPolicy string
IdentityMatchPolicy defines the type of matching for "matchPolicy". +kubebuilder:validation:Enum=MatchRepoDigestOrExact;MatchRepository;ExactRepository;RemapIdentity
const ( IdentityMatchPolicyMatchRepoDigestOrExact IdentityMatchPolicy = "MatchRepoDigestOrExact" IdentityMatchPolicyMatchRepository IdentityMatchPolicy = "MatchRepository" IdentityMatchPolicyExactRepository IdentityMatchPolicy = "ExactRepository" IdentityMatchPolicyRemapIdentity IdentityMatchPolicy = "RemapIdentity" )
type IdentityRepositoryPrefix ¶
type IdentityRepositoryPrefix string
+kubebuilder:validation:MaxLength=512 +kubebuilder:validation:XValidation:rule=`self.matches('.*:([\\w][\\w.-]{0,127})$')? self.matches('^(localhost:[0-9]+)$'): true`,message="invalid repository or prefix in the signedIdentity, should not include the tag or digest" +kubebuilder:validation:XValidation:rule=`self.matches('^(((?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])(?:\\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))+(?::[0-9]+)?)|(localhost(?::[0-9]+)?))(?:(?:/[a-z0-9]+(?:(?:(?:[._]|__|[-]*)[a-z0-9]+)+)?)+)?$')`,message="invalid repository or prefix in the signedIdentity"
type ImagePolicy ¶
type ImagePolicy struct { metav1.TypeMeta `json:",inline"` // metadata is the standard object's metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata metav1.ObjectMeta `json:"metadata,omitempty"` // spec holds user settable values for configuration // +required Spec ImagePolicySpec `json:"spec"` // status contains the observed state of the resource. // +optional Status ImagePolicyStatus `json:"status,omitempty"` }
ImagePolicy holds namespace-wide configuration for image signature verification
Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. +kubebuilder:object:root=true +kubebuilder:resource:path=imagepolicies,scope=Namespaced +kubebuilder:subresource:status +openshift:api-approved.openshift.io=https://github.com/openshift/api/pull/1457 +openshift:file-pattern=cvoRunLevel=0000_10,operatorName=config-operator,operatorOrdering=01 +openshift:enable:FeatureGate=SigstoreImageVerification +openshift:compatibility-gen:level=4
func (*ImagePolicy) DeepCopy ¶
func (in *ImagePolicy) DeepCopy() *ImagePolicy
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImagePolicy.
func (*ImagePolicy) DeepCopyInto ¶
func (in *ImagePolicy) DeepCopyInto(out *ImagePolicy)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ImagePolicy) DeepCopyObject ¶
func (in *ImagePolicy) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (ImagePolicy) SwaggerDoc ¶
func (ImagePolicy) SwaggerDoc() map[string]string
type ImagePolicyList ¶
type ImagePolicyList struct { metav1.TypeMeta `json:",inline"` // metadata is the standard list's metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata metav1.ListMeta `json:"metadata"` Items []ImagePolicy `json:"items"` }
ImagePolicyList is a list of ImagePolicy resources
Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. +openshift:compatibility-gen:level=4
func (*ImagePolicyList) DeepCopy ¶
func (in *ImagePolicyList) DeepCopy() *ImagePolicyList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImagePolicyList.
func (*ImagePolicyList) DeepCopyInto ¶
func (in *ImagePolicyList) DeepCopyInto(out *ImagePolicyList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ImagePolicyList) DeepCopyObject ¶
func (in *ImagePolicyList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (ImagePolicyList) SwaggerDoc ¶
func (ImagePolicyList) SwaggerDoc() map[string]string
type ImagePolicySpec ¶
type ImagePolicySpec struct { // scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the "Docker Registry HTTP API V2". // Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). // More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository // namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). // Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. // If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. // In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories // quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. // If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied. // For additional details about the format, please refer to the document explaining the docker transport field, // which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker // +required // +kubebuilder:validation:MaxItems=256 // +listType=set Scopes []ImageScope `json:"scopes"` // policy contains configuration to allow scopes to be verified, and defines how // images not matching the verification policy will be treated. // +required Policy Policy `json:"policy"` }
ImagePolicySpec is the specification of the ImagePolicy CRD.
func (*ImagePolicySpec) DeepCopy ¶
func (in *ImagePolicySpec) DeepCopy() *ImagePolicySpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImagePolicySpec.
func (*ImagePolicySpec) DeepCopyInto ¶
func (in *ImagePolicySpec) DeepCopyInto(out *ImagePolicySpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (ImagePolicySpec) SwaggerDoc ¶
func (ImagePolicySpec) SwaggerDoc() map[string]string
type ImagePolicyStatus ¶
type ImagePolicyStatus struct { // conditions provide details on the status of this API Resource. // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:"conditions,omitempty"` }
+k8s:deepcopy-gen=true
func (*ImagePolicyStatus) DeepCopy ¶
func (in *ImagePolicyStatus) DeepCopy() *ImagePolicyStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImagePolicyStatus.
func (*ImagePolicyStatus) DeepCopyInto ¶
func (in *ImagePolicyStatus) DeepCopyInto(out *ImagePolicyStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (ImagePolicyStatus) SwaggerDoc ¶
func (ImagePolicyStatus) SwaggerDoc() map[string]string
type ImageScope ¶
type ImageScope string
+kubebuilder:validation:XValidation:rule="size(self.split('/')[0].split('.')) == 1 ? self.split('/')[0].split('.')[0].split(':')[0] == 'localhost' : true",message="invalid image scope format, scope must contain a fully qualified domain name or 'localhost'" +kubebuilder:validation:XValidation:rule=`self.contains('*') ? self.matches('^\\*(?:\\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))+$') : true`,message="invalid image scope with wildcard, a wildcard can only be at the start of the domain and is only supported for subdomain matching, not path matching" +kubebuilder:validation:XValidation:rule=`!self.contains('*') ? self.matches('^((((?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])(?:\\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))+(?::[0-9]+)?)|(localhost(?::[0-9]+)?))(?:(?:/[a-z0-9]+(?:(?:(?:[._]|__|[-]*)[a-z0-9]+)+)?)+)?)(?::([\\w][\\w.-]{0,127}))?(?:@([A-Za-z][A-Za-z0-9]*(?:[-_+.][A-Za-z][A-Za-z0-9]*)*[:][[:xdigit:]]{32,}))?$') : true`,message="invalid repository namespace or image specification in the image scope" +kubebuilder:validation:MaxLength=512
type InsightsDataGather ¶
type InsightsDataGather struct { metav1.TypeMeta `json:",inline"` // metadata is the standard object's metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata metav1.ObjectMeta `json:"metadata,omitempty"` // spec holds user settable values for configuration // +required Spec InsightsDataGatherSpec `json:"spec"` // status holds observed values from the cluster. They may not be overridden. // +optional Status InsightsDataGatherStatus `json:"status"` }
+genclient +genclient:nonNamespaced +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
InsightsDataGather provides data gather configuration options for the the Insights Operator.
Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. +kubebuilder:object:root=true +kubebuilder:resource:path=insightsdatagathers,scope=Cluster +kubebuilder:subresource:status +openshift:api-approved.openshift.io=https://github.com/openshift/api/pull/1245 +openshift:file-pattern=cvoRunLevel=0000_10,operatorName=config-operator,operatorOrdering=01 +openshift:enable:FeatureGate=InsightsConfig +openshift:compatibility-gen:level=4
func (*InsightsDataGather) DeepCopy ¶
func (in *InsightsDataGather) DeepCopy() *InsightsDataGather
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new InsightsDataGather.
func (*InsightsDataGather) DeepCopyInto ¶
func (in *InsightsDataGather) DeepCopyInto(out *InsightsDataGather)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*InsightsDataGather) DeepCopyObject ¶
func (in *InsightsDataGather) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (InsightsDataGather) SwaggerDoc ¶
func (InsightsDataGather) SwaggerDoc() map[string]string
type InsightsDataGatherList ¶
type InsightsDataGatherList struct { metav1.TypeMeta `json:",inline"` // metadata is the standard list's metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata metav1.ListMeta `json:"metadata"` Items []InsightsDataGather `json:"items"` }
InsightsDataGatherList is a collection of items
Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. +openshift:compatibility-gen:level=4
func (*InsightsDataGatherList) DeepCopy ¶
func (in *InsightsDataGatherList) DeepCopy() *InsightsDataGatherList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new InsightsDataGatherList.
func (*InsightsDataGatherList) DeepCopyInto ¶
func (in *InsightsDataGatherList) DeepCopyInto(out *InsightsDataGatherList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*InsightsDataGatherList) DeepCopyObject ¶
func (in *InsightsDataGatherList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (InsightsDataGatherList) SwaggerDoc ¶
func (InsightsDataGatherList) SwaggerDoc() map[string]string
type InsightsDataGatherSpec ¶
type InsightsDataGatherSpec struct { // gatherConfig spec attribute includes all the configuration options related to // gathering of the Insights data and its uploading to the ingress. // +optional GatherConfig GatherConfig `json:"gatherConfig,omitempty"` }
func (*InsightsDataGatherSpec) DeepCopy ¶
func (in *InsightsDataGatherSpec) DeepCopy() *InsightsDataGatherSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new InsightsDataGatherSpec.
func (*InsightsDataGatherSpec) DeepCopyInto ¶
func (in *InsightsDataGatherSpec) DeepCopyInto(out *InsightsDataGatherSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (InsightsDataGatherSpec) SwaggerDoc ¶
func (InsightsDataGatherSpec) SwaggerDoc() map[string]string
type InsightsDataGatherStatus ¶
type InsightsDataGatherStatus struct { }
func (*InsightsDataGatherStatus) DeepCopy ¶
func (in *InsightsDataGatherStatus) DeepCopy() *InsightsDataGatherStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new InsightsDataGatherStatus.
func (*InsightsDataGatherStatus) DeepCopyInto ¶
func (in *InsightsDataGatherStatus) DeepCopyInto(out *InsightsDataGatherStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type Policy ¶
type Policy struct { // rootOfTrust specifies the root of trust for the policy. // +required RootOfTrust PolicyRootOfTrust `json:"rootOfTrust"` // signedIdentity specifies what image identity the signature claims about the image. The required matchPolicy field specifies the approach used in the verification process to verify the identity in the signature and the actual image identity, the default matchPolicy is "MatchRepoDigestOrExact". // +optional SignedIdentity PolicyIdentity `json:"signedIdentity,omitempty"` }
Policy defines the verification policy for the items in the scopes list.
func (*Policy) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Policy.
func (*Policy) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (Policy) SwaggerDoc ¶
type PolicyFulcioSubject ¶
type PolicyFulcioSubject struct { // oidcIssuer contains the expected OIDC issuer. It will be verified that the Fulcio-issued certificate contains a (Fulcio-defined) certificate extension pointing at this OIDC issuer URL. When Fulcio issues certificates, it includes a value based on an URL inside the client-provided ID token. // Example: "https://expected.OIDC.issuer/" // +required // +kubebuilder:validation:XValidation:rule="isURL(self)",message="oidcIssuer must be a valid URL" OIDCIssuer string `json:"oidcIssuer"` // signedEmail holds the email address the the Fulcio certificate is issued for. // Example: "expected-signing-user@example.com" // +required // +kubebuilder:validation:XValidation:rule=`self.matches('^\\S+@\\S+$')`,message="invalid email address" SignedEmail string `json:"signedEmail"` }
PolicyFulcioSubject defines the OIDC issuer and the email of the Fulcio authentication configuration.
func (*PolicyFulcioSubject) DeepCopy ¶
func (in *PolicyFulcioSubject) DeepCopy() *PolicyFulcioSubject
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyFulcioSubject.
func (*PolicyFulcioSubject) DeepCopyInto ¶
func (in *PolicyFulcioSubject) DeepCopyInto(out *PolicyFulcioSubject)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (PolicyFulcioSubject) SwaggerDoc ¶
func (PolicyFulcioSubject) SwaggerDoc() map[string]string
type PolicyIdentity ¶
type PolicyIdentity struct { // matchPolicy sets the type of matching to be used. // Valid values are "MatchRepoDigestOrExact", "MatchRepository", "ExactRepository", "RemapIdentity". When omitted, the default value is "MatchRepoDigestOrExact". // If set matchPolicy to ExactRepository, then the exactRepository must be specified. // If set matchPolicy to RemapIdentity, then the remapIdentity must be specified. // "MatchRepoDigestOrExact" means that the identity in the signature must be in the same repository as the image identity if the image identity is referenced by a digest. Otherwise, the identity in the signature must be the same as the image identity. // "MatchRepository" means that the identity in the signature must be in the same repository as the image identity. // "ExactRepository" means that the identity in the signature must be in the same repository as a specific identity specified by "repository". // "RemapIdentity" means that the signature must be in the same as the remapped image identity. Remapped image identity is obtained by replacing the "prefix" with the specified “signedPrefix” if the the image identity matches the specified remapPrefix. // +unionDiscriminator // +required MatchPolicy IdentityMatchPolicy `json:"matchPolicy"` // exactRepository is required if matchPolicy is set to "ExactRepository". // +optional PolicyMatchExactRepository *PolicyMatchExactRepository `json:"exactRepository,omitempty"` // remapIdentity is required if matchPolicy is set to "RemapIdentity". // +optional PolicyMatchRemapIdentity *PolicyMatchRemapIdentity `json:"remapIdentity,omitempty"` }
PolicyIdentity defines image identity the signature claims about the image. When omitted, the default matchPolicy is "MatchRepoDigestOrExact". +kubebuilder:validation:XValidation:rule="(has(self.matchPolicy) && self.matchPolicy == 'ExactRepository') ? has(self.exactRepository) : !has(self.exactRepository)",message="exactRepository is required when matchPolicy is ExactRepository, and forbidden otherwise" +kubebuilder:validation:XValidation:rule="(has(self.matchPolicy) && self.matchPolicy == 'RemapIdentity') ? has(self.remapIdentity) : !has(self.remapIdentity)",message="remapIdentity is required when matchPolicy is RemapIdentity, and forbidden otherwise" +union
func (*PolicyIdentity) DeepCopy ¶
func (in *PolicyIdentity) DeepCopy() *PolicyIdentity
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyIdentity.
func (*PolicyIdentity) DeepCopyInto ¶
func (in *PolicyIdentity) DeepCopyInto(out *PolicyIdentity)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (PolicyIdentity) SwaggerDoc ¶
func (PolicyIdentity) SwaggerDoc() map[string]string
type PolicyMatchExactRepository ¶
type PolicyMatchExactRepository struct { // repository is the reference of the image identity to be matched. // The value should be a repository name (by omitting the tag or digest) in a registry implementing the "Docker Registry HTTP API V2". For example, docker.io/library/busybox // +required Repository IdentityRepositoryPrefix `json:"repository"` }
func (*PolicyMatchExactRepository) DeepCopy ¶
func (in *PolicyMatchExactRepository) DeepCopy() *PolicyMatchExactRepository
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyMatchExactRepository.
func (*PolicyMatchExactRepository) DeepCopyInto ¶
func (in *PolicyMatchExactRepository) DeepCopyInto(out *PolicyMatchExactRepository)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (PolicyMatchExactRepository) SwaggerDoc ¶
func (PolicyMatchExactRepository) SwaggerDoc() map[string]string
type PolicyMatchRemapIdentity ¶
type PolicyMatchRemapIdentity struct { // prefix is the prefix of the image identity to be matched. // If the image identity matches the specified prefix, that prefix is replaced by the specified “signedPrefix” (otherwise it is used as unchanged and no remapping takes place). // This useful when verifying signatures for a mirror of some other repository namespace that preserves the vendor’s repository structure. // The prefix and signedPrefix values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, // or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. // For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox. // +required Prefix IdentityRepositoryPrefix `json:"prefix"` // signedPrefix is the prefix of the image identity to be matched in the signature. The format is the same as "prefix". The values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, // or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. // For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox. // +required SignedPrefix IdentityRepositoryPrefix `json:"signedPrefix"` }
func (*PolicyMatchRemapIdentity) DeepCopy ¶
func (in *PolicyMatchRemapIdentity) DeepCopy() *PolicyMatchRemapIdentity
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyMatchRemapIdentity.
func (*PolicyMatchRemapIdentity) DeepCopyInto ¶
func (in *PolicyMatchRemapIdentity) DeepCopyInto(out *PolicyMatchRemapIdentity)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (PolicyMatchRemapIdentity) SwaggerDoc ¶
func (PolicyMatchRemapIdentity) SwaggerDoc() map[string]string
type PolicyRootOfTrust ¶
type PolicyRootOfTrust struct { // policyType serves as the union's discriminator. Users are required to assign a value to this field, choosing one of the policy types that define the root of trust. // "PublicKey" indicates that the policy relies on a sigstore publicKey and may optionally use a Rekor verification. // "FulcioCAWithRekor" indicates that the policy is based on the Fulcio certification and incorporates a Rekor verification. // +unionDiscriminator // +required PolicyType PolicyType `json:"policyType"` // publicKey defines the root of trust based on a sigstore public key. // +optional PublicKey *PublicKey `json:"publicKey,omitempty"` // fulcioCAWithRekor defines the root of trust based on the Fulcio certificate and the Rekor public key. // For more information about Fulcio and Rekor, please refer to the document at: // https://github.com/sigstore/fulcio and https://github.com/sigstore/rekor // +optional FulcioCAWithRekor *FulcioCAWithRekor `json:"fulcioCAWithRekor,omitempty"` }
PolicyRootOfTrust defines the root of trust based on the selected policyType. +union +kubebuilder:validation:XValidation:rule="has(self.policyType) && self.policyType == 'PublicKey' ? has(self.publicKey) : !has(self.publicKey)",message="publicKey is required when policyType is PublicKey, and forbidden otherwise" +kubebuilder:validation:XValidation:rule="has(self.policyType) && self.policyType == 'FulcioCAWithRekor' ? has(self.fulcioCAWithRekor) : !has(self.fulcioCAWithRekor)",message="fulcioCAWithRekor is required when policyType is FulcioCAWithRekor, and forbidden otherwise"
func (*PolicyRootOfTrust) DeepCopy ¶
func (in *PolicyRootOfTrust) DeepCopy() *PolicyRootOfTrust
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRootOfTrust.
func (*PolicyRootOfTrust) DeepCopyInto ¶
func (in *PolicyRootOfTrust) DeepCopyInto(out *PolicyRootOfTrust)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (PolicyRootOfTrust) SwaggerDoc ¶
func (PolicyRootOfTrust) SwaggerDoc() map[string]string
type PolicyType ¶
type PolicyType string
+kubebuilder:validation:Enum=PublicKey;FulcioCAWithRekor
const ( PublicKeyRootOfTrust PolicyType = "PublicKey" FulcioCAWithRekorRootOfTrust PolicyType = "FulcioCAWithRekor" )
type PublicKey ¶
type PublicKey struct { // keyData contains inline base64-encoded data for the PEM format public key. // KeyData must be at most 8192 characters. // +required // +kubebuilder:validation:MaxLength=8192 KeyData []byte `json:"keyData"` // rekorKeyData contains inline base64-encoded data for the PEM format from the Rekor public key. // rekorKeyData must be at most 8192 characters. // +optional // +kubebuilder:validation:MaxLength=8192 RekorKeyData []byte `json:"rekorKeyData,omitempty"` }
PublicKey defines the root of trust based on a sigstore public key.
func (*PublicKey) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PublicKey.
func (*PublicKey) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (PublicKey) SwaggerDoc ¶
type RetentionNumberConfig ¶
type RetentionNumberConfig struct { // maxNumberOfBackups defines the maximum number of backups to retain. // If the existing number of backups saved is equal to MaxNumberOfBackups then // the oldest backup will be removed before a new backup is initiated. // +kubebuilder:validation:Minimum=1 // +required MaxNumberOfBackups int `json:"maxNumberOfBackups,omitempty"` }
RetentionNumberConfig specifies the configuration of the retention policy on the number of backups
func (*RetentionNumberConfig) DeepCopy ¶
func (in *RetentionNumberConfig) DeepCopy() *RetentionNumberConfig
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RetentionNumberConfig.
func (*RetentionNumberConfig) DeepCopyInto ¶
func (in *RetentionNumberConfig) DeepCopyInto(out *RetentionNumberConfig)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (RetentionNumberConfig) SwaggerDoc ¶
func (RetentionNumberConfig) SwaggerDoc() map[string]string
type RetentionPolicy ¶
type RetentionPolicy struct { // retentionType sets the type of retention policy. // Currently, the only valid policies are retention by number of backups (RetentionNumber), by the size of backups (RetentionSize). More policies or types may be added in the future. // Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. // The current default is RetentionNumber with 15 backups kept. // +unionDiscriminator // +required // +kubebuilder:validation:Enum:="";"RetentionNumber";"RetentionSize" RetentionType RetentionType `json:"retentionType"` // retentionNumber configures the retention policy based on the number of backups // +optional RetentionNumber *RetentionNumberConfig `json:"retentionNumber,omitempty"` // retentionSize configures the retention policy based on the size of backups // +optional RetentionSize *RetentionSizeConfig `json:"retentionSize,omitempty"` }
RetentionPolicy defines the retention policy for retaining and deleting existing backups. This struct is a discriminated union that allows users to select the type of retention policy from the supported types. +union
func (*RetentionPolicy) DeepCopy ¶
func (in *RetentionPolicy) DeepCopy() *RetentionPolicy
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RetentionPolicy.
func (*RetentionPolicy) DeepCopyInto ¶
func (in *RetentionPolicy) DeepCopyInto(out *RetentionPolicy)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (RetentionPolicy) SwaggerDoc ¶
func (RetentionPolicy) SwaggerDoc() map[string]string
type RetentionSizeConfig ¶
type RetentionSizeConfig struct { // maxSizeOfBackupsGb defines the total size in GB of backups to retain. // If the current total size backups exceeds MaxSizeOfBackupsGb then // the oldest backup will be removed before a new backup is initiated. // +kubebuilder:validation:Minimum=1 // +required MaxSizeOfBackupsGb int `json:"maxSizeOfBackupsGb,omitempty"` }
RetentionSizeConfig specifies the configuration of the retention policy on the total size of backups
func (*RetentionSizeConfig) DeepCopy ¶
func (in *RetentionSizeConfig) DeepCopy() *RetentionSizeConfig
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RetentionSizeConfig.
func (*RetentionSizeConfig) DeepCopyInto ¶
func (in *RetentionSizeConfig) DeepCopyInto(out *RetentionSizeConfig)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (RetentionSizeConfig) SwaggerDoc ¶
func (RetentionSizeConfig) SwaggerDoc() map[string]string
type RetentionType ¶
type RetentionType string
RetentionType is the enumeration of valid retention policy types +enum +kubebuilder:validation:Enum:="RetentionNumber";"RetentionSize"
const ( // RetentionTypeNumber sets the retention policy based on the number of backup files saved RetentionTypeNumber RetentionType = "RetentionNumber" // RetentionTypeSize sets the retention policy based on the total size of the backup files saved RetentionTypeSize RetentionType = "RetentionSize" )