Skip to content

Commit 726565c

Browse files
HumairAKHumairAK
committed
Copy full apps repo cluster-scope dir.
1 parent 4ffd77c commit 726565c

File tree

1,649 files changed

+70978
-28
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

1,649 files changed

+70978
-28
lines changed

‎cluster-scope/base/admissionregistration.k8s.io/mutatingwebhookconfigurations/cosigned.sigstore.dev/kustomization.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
apiVersion: kustomize.config.k8s.io/v1beta1
3+
kind: Kustomization
4+
resources:
5+
- mutatingwebhookconfiguration.yaml

‎cluster-scope/base/admissionregistration.k8s.io/mutatingwebhookconfigurations/cosigned.sigstore.dev/mutatingwebhookconfiguration.yaml

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
---
2+
apiVersion: admissionregistration.k8s.io/v1
3+
kind: MutatingWebhookConfiguration
4+
metadata:
5+
name: cosigned.sigstore.dev
6+
webhooks:
7+
- name: cosigned.sigstore.dev
8+
namespaceSelector:
9+
# The webhook should only apply to things that opt-in
10+
matchExpressions:
11+
- key: cosigned.sigstore.dev/include
12+
operator: In
13+
values: ["true"]
14+
admissionReviewVersions: [v1]
15+
clientConfig:
16+
service:
17+
name: webhook
18+
namespace: cosign-system
19+
failurePolicy: Fail
20+
sideEffects: None

‎cluster-scope/base/admissionregistration.k8s.io/validatingwebhookconfigurations/cosigned.sigstore.dev/kustomization.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
apiVersion: kustomize.config.k8s.io/v1beta1
3+
kind: Kustomization
4+
resources:
5+
- validatingwebhookconfiguration.yaml

‎cluster-scope/base/admissionregistration.k8s.io/validatingwebhookconfigurations/cosigned.sigstore.dev/validatingwebhookconfiguration.yaml

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
---
2+
apiVersion: admissionregistration.k8s.io/v1
3+
kind: ValidatingWebhookConfiguration
4+
metadata:
5+
name: cosigned.sigstore.dev
6+
webhooks:
7+
- name: cosigned.sigstore.dev
8+
namespaceSelector:
9+
# The webhook should only apply to things that opt-in
10+
matchExpressions:
11+
- key: cosigned.sigstore.dev/include
12+
operator: In
13+
values: ["true"]
14+
admissionReviewVersions: [v1]
15+
clientConfig:
16+
service:
17+
name: webhook
18+
namespace: cosign-system
19+
failurePolicy: Fail
20+
sideEffects: None

‎cluster-scope/base/apiextensions.k8s.io/customresourcedefinitions/applications.argoproj.io/customresourcedefinition.yaml

Lines changed: 2218 additions & 0 deletions
Large diffs are not rendered by default.

‎cluster-scope/base/apiextensions.k8s.io/customresourcedefinitions/applications.argoproj.io/kustomization.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
apiVersion: kustomize.config.k8s.io/v1beta1
2+
kind: Kustomization
3+
resources:
4+
- customresourcedefinition.yaml

‎cluster-scope/base/apiextensions.k8s.io/customresourcedefinitions/applicationsets.argoproj.io/customresourcedefinition.yaml

Lines changed: 6375 additions & 0 deletions
Large diffs are not rendered by default.

‎cluster-scope/base/apiextensions.k8s.io/customresourcedefinitions/applicationsets.argoproj.io/kustomization.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
apiVersion: kustomize.config.k8s.io/v1beta1
2+
kind: Kustomization
3+
resources:
4+
- customresourcedefinition.yaml

‎cluster-scope/base/apiextensions.k8s.io/customresourcedefinitions/appprojects.argoproj.io/customresourcedefinition.yaml

Lines changed: 308 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,308 @@
1+
apiVersion: apiextensions.k8s.io/v1
2+
kind: CustomResourceDefinition
3+
metadata:
4+
labels:
5+
app.kubernetes.io/name: appprojects.argoproj.io
6+
app.kubernetes.io/part-of: argocd
7+
name: appprojects.argoproj.io
8+
spec:
9+
group: argoproj.io
10+
names:
11+
kind: AppProject
12+
listKind: AppProjectList
13+
plural: appprojects
14+
shortNames:
15+
- appproj
16+
- appprojs
17+
singular: appproject
18+
scope: Namespaced
19+
versions:
20+
- name: v1alpha1
21+
schema:
22+
openAPIV3Schema:
23+
description: 'AppProject provides a logical grouping of applications, providing
24+
controls for: * where the apps may deploy to (cluster whitelist) * what
25+
may be deployed (repository whitelist, resource whitelist/blacklist) * who
26+
can access these applications (roles, OIDC group claims bindings) * and
27+
what they can do (RBAC policies) * automation access to these roles (JWT
28+
tokens)'
29+
properties:
30+
apiVersion:
31+
description: 'APIVersion defines the versioned schema of this representation
32+
of an object. Servers should convert recognized schemas to the latest
33+
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
34+
type: string
35+
kind:
36+
description: 'Kind is a string value representing the REST resource this
37+
object represents. Servers may infer this from the endpoint the client
38+
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
39+
type: string
40+
metadata:
41+
type: object
42+
spec:
43+
description: AppProjectSpec is the specification of an AppProject
44+
properties:
45+
clusterResourceBlacklist:
46+
description: ClusterResourceBlacklist contains list of blacklisted
47+
cluster level resources
48+
items:
49+
description: GroupKind specifies a Group and a Kind, but does not
50+
force a version. This is useful for identifying concepts during
51+
lookup stages without having partially valid types
52+
properties:
53+
group:
54+
type: string
55+
kind:
56+
type: string
57+
required:
58+
- group
59+
- kind
60+
type: object
61+
type: array
62+
clusterResourceWhitelist:
63+
description: ClusterResourceWhitelist contains list of whitelisted
64+
cluster level resources
65+
items:
66+
description: GroupKind specifies a Group and a Kind, but does not
67+
force a version. This is useful for identifying concepts during
68+
lookup stages without having partially valid types
69+
properties:
70+
group:
71+
type: string
72+
kind:
73+
type: string
74+
required:
75+
- group
76+
- kind
77+
type: object
78+
type: array
79+
description:
80+
description: Description contains optional project description
81+
type: string
82+
destinations:
83+
description: Destinations contains list of destinations available
84+
for deployment
85+
items:
86+
description: ApplicationDestination holds information about the
87+
application's destination
88+
properties:
89+
name:
90+
description: Name is an alternate way of specifying the target
91+
cluster by its symbolic name
92+
type: string
93+
namespace:
94+
description: Namespace specifies the target namespace for the
95+
application's resources. The namespace will only be set for
96+
namespace-scoped resources that have not set a value for .metadata.namespace
97+
type: string
98+
server:
99+
description: Server specifies the URL of the target cluster
100+
and must be set to the Kubernetes control plane API
101+
type: string
102+
type: object
103+
type: array
104+
namespaceResourceBlacklist:
105+
description: NamespaceResourceBlacklist contains list of blacklisted
106+
namespace level resources
107+
items:
108+
description: GroupKind specifies a Group and a Kind, but does not
109+
force a version. This is useful for identifying concepts during
110+
lookup stages without having partially valid types
111+
properties:
112+
group:
113+
type: string
114+
kind:
115+
type: string
116+
required:
117+
- group
118+
- kind
119+
type: object
120+
type: array
121+
namespaceResourceWhitelist:
122+
description: NamespaceResourceWhitelist contains list of whitelisted
123+
namespace level resources
124+
items:
125+
description: GroupKind specifies a Group and a Kind, but does not
126+
force a version. This is useful for identifying concepts during
127+
lookup stages without having partially valid types
128+
properties:
129+
group:
130+
type: string
131+
kind:
132+
type: string
133+
required:
134+
- group
135+
- kind
136+
type: object
137+
type: array
138+
orphanedResources:
139+
description: OrphanedResources specifies if controller should monitor
140+
orphaned resources of apps in this project
141+
properties:
142+
ignore:
143+
description: Ignore contains a list of resources that are to be
144+
excluded from orphaned resources monitoring
145+
items:
146+
description: OrphanedResourceKey is a reference to a resource
147+
to be ignored from
148+
properties:
149+
group:
150+
type: string
151+
kind:
152+
type: string
153+
name:
154+
type: string
155+
type: object
156+
type: array
157+
warn:
158+
description: Warn indicates if warning condition should be created
159+
for apps which have orphaned resources
160+
type: boolean
161+
type: object
162+
roles:
163+
description: Roles are user defined RBAC roles associated with this
164+
project
165+
items:
166+
description: ProjectRole represents a role that has access to a
167+
project
168+
properties:
169+
description:
170+
description: Description is a description of the role
171+
type: string
172+
groups:
173+
description: Groups are a list of OIDC group claims bound to
174+
this role
175+
items:
176+
type: string
177+
type: array
178+
jwtTokens:
179+
description: JWTTokens are a list of generated JWT tokens bound
180+
to this role
181+
items:
182+
description: JWTToken holds the issuedAt and expiresAt values
183+
of a token
184+
properties:
185+
exp:
186+
format: int64
187+
type: integer
188+
iat:
189+
format: int64
190+
type: integer
191+
id:
192+
type: string
193+
required:
194+
- iat
195+
type: object
196+
type: array
197+
name:
198+
description: Name is a name for this role
199+
type: string
200+
policies:
201+
description: Policies Stores a list of casbin formatted strings
202+
that define access policies for the role in the project
203+
items:
204+
type: string
205+
type: array
206+
required:
207+
- name
208+
type: object
209+
type: array
210+
signatureKeys:
211+
description: SignatureKeys contains a list of PGP key IDs that commits
212+
in Git must be signed with in order to be allowed for sync
213+
items:
214+
description: SignatureKey is the specification of a key required
215+
to verify commit signatures with
216+
properties:
217+
keyID:
218+
description: The ID of the key in hexadecimal notation
219+
type: string
220+
required:
221+
- keyID
222+
type: object
223+
type: array
224+
sourceRepos:
225+
description: SourceRepos contains list of repository URLs which can
226+
be used for deployment
227+
items:
228+
type: string
229+
type: array
230+
syncWindows:
231+
description: SyncWindows controls when syncs can be run for apps in
232+
this project
233+
items:
234+
description: SyncWindow contains the kind, time, duration and attributes
235+
that are used to assign the syncWindows to apps
236+
properties:
237+
applications:
238+
description: Applications contains a list of applications that
239+
the window will apply to
240+
items:
241+
type: string
242+
type: array
243+
clusters:
244+
description: Clusters contains a list of clusters that the window
245+
will apply to
246+
items:
247+
type: string
248+
type: array
249+
duration:
250+
description: Duration is the amount of time the sync window
251+
will be open
252+
type: string
253+
kind:
254+
description: Kind defines if the window allows or blocks syncs
255+
type: string
256+
manualSync:
257+
description: ManualSync enables manual syncs when they would
258+
otherwise be blocked
259+
type: boolean
260+
namespaces:
261+
description: Namespaces contains a list of namespaces that the
262+
window will apply to
263+
items:
264+
type: string
265+
type: array
266+
schedule:
267+
description: Schedule is the time the window will begin, specified
268+
in cron format
269+
type: string
270+
type: object
271+
type: array
272+
type: object
273+
status:
274+
description: AppProjectStatus contains status information for AppProject
275+
CRs
276+
properties:
277+
jwtTokensByRole:
278+
additionalProperties:
279+
description: JWTTokens represents a list of JWT tokens
280+
properties:
281+
items:
282+
items:
283+
description: JWTToken holds the issuedAt and expiresAt values
284+
of a token
285+
properties:
286+
exp:
287+
format: int64
288+
type: integer
289+
iat:
290+
format: int64
291+
type: integer
292+
id:
293+
type: string
294+
required:
295+
- iat
296+
type: object
297+
type: array
298+
type: object
299+
description: JWTTokensByRole contains a list of JWT tokens issued
300+
for a given role
301+
type: object
302+
type: object
303+
required:
304+
- metadata
305+
- spec
306+
type: object
307+
served: true
308+
storage: true

‎cluster-scope/base/apiextensions.k8s.io/customresourcedefinitions/appprojects.argoproj.io/kustomization.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
apiVersion: kustomize.config.k8s.io/v1beta1
2+
kind: Kustomization
3+
resources:
4+
- customresourcedefinition.yaml

0 commit comments

Comments
 (0)