toolchain.dev.openshift.com_toolchainconfigs.yaml

---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.17.3
  name: toolchainconfigs.toolchain.dev.openshift.com
spec:
  group: toolchain.dev.openshift.com
  names:
    kind: ToolchainConfig
    listKind: ToolchainConfigList
    plural: toolchainconfigs
    singular: toolchainconfig
  scope: Namespaced
  versions:
  - additionalPrinterColumns:
    - jsonPath: .spec.host.automaticApproval.enabled
      name: AutomaticApproval
      type: boolean
    name: v1alpha1
    schema:
      openAPIV3Schema:
        description: ToolchainConfig keeps all configuration parameters needed for
          host and member operators
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          spec:
            description: ToolchainConfigSpec contains all configuration for host and
              member operators
            properties:
              host:
                description: Contains all host operator configuration
                properties:
                  automaticApproval:
                    description: Keeps parameters necessary for automatic approval
                    properties:
                      domains:
                        description: |-
                          Comma-separated email domains to consider for auto-approval.
                          For example: "domain.com,anotherdomain.org"
                          If domains is not set and enabled is true, it will default to auto approving all authenticated emails.
                          If domains is set and enabled is true, it will allow auto approving only for authenticated emails under
                          the domains entered. If enabled is false domains will be ignored.
                        type: string
                      enabled:
                        description: Defines if the automatic approval is enabled
                          or not
                        type: boolean
                    type: object
                  deactivation:
                    description: Keeps parameters concerned with user deactivation
                    properties:
                      deactivatingNotificationDays:
                        description: |-
                          DeactivatingNotificationDays is the number of days after a pre-deactivating notification is sent that actual
                          deactivation occurs.  If this parameter is set to zero, then there will be no delay
                        type: integer
                      deactivationDomainsExcluded:
                        description: |-
                          DeactivationDomainsExcluded is a string of comma-separated domains that should be excluded from automatic user deactivation
                          For example: "@redhat.com,@ibm.com"
                        type: string
                      userSignupDeactivatedRetentionDays:
                        description: |-
                          UserSignupDeactivatedRetentionDays is used to configure how many days we should keep deactivated UserSignup
                          resources before deleting them.  This parameter value should reflect an extended period of time sufficient for
                          gathering user metrics before removing the resources from the cluster.
                        type: integer
                      userSignupUnverifiedRetentionDays:
                        description: |-
                          UserSignupUnverifiedRetentionDays is used to configure how many days we should keep unverified (i.e. the user
                          hasn't completed the user verification process via the registration service) UserSignup resources before deleting
                          them.  It is intended for this parameter to define an aggressive cleanup schedule for unverified user signups,
                          and the default configuration value for this parameter reflects this.
                        type: integer
                    type: object
                  environment:
                    description: Environment specifies the host-operator environment
                      such as prod, stage, unit-tests, e2e-tests, dev, etc
                    type: string
                  metrics:
                    description: Keeps parameters concerned with metrics
                    properties:
                      forceSynchronization:
                        description: |-
                          ForceSynchronization is a flag used to trigger synchronization of the metrics
                          based on the resources rather than on the content of `ToolchainStatus.status.metrics`
                        type: boolean
                    type: object
                  notifications:
                    description: Keeps parameters concerned with notifications
                    properties:
                      adminEmail:
                        description: The administrator email address for system notifications
                        type: string
                      durationBeforeNotificationDeletion:
                        description: DurationBeforeNotificationDeletion is notification
                          delivery service to use for notifications
                        type: string
                      notificationDeliveryService:
                        description: NotificationDeliveryService is notification delivery
                          service to use for notifications
                        type: string
                      secret:
                        description: Defines all secrets related to notification configuration
                        properties:
                          mailgunAPIKey:
                            description: The key for the host operator mailgun api
                              key used for creating an instance of mailgun
                            type: string
                          mailgunDomain:
                            description: The key for the host operator mailgun domain
                              used for creating an instance of mailgun
                            type: string
                          mailgunReplyToEmail:
                            description: The key for the reply-to email address that
                              will be set in sent notifications
                            type: string
                          mailgunSenderEmail:
                            description: The key for the host operator mailgun senders
                              email
                            type: string
                          ref:
                            description: Reference is the name of the secret resource
                              to look up
                            type: string
                        type: object
                      templateSetName:
                        description: TemplateSetName defines the set of notification
                          templates. Different Sandbox instances can use different
                          notification templates. For example Dev Sandbox and AppStudio
                          instances use different templates. By default, the "sandbox"
                          template set name is used.
                        type: string
                    type: object
                  publicViewerConfig:
                    description: |-
                      Contains the PublicViewer configuration.
                      IMPORTANT: To provide a consistent User-Experience, each user
                      the space has been directly shared with should have at least
                      the same permissions the kubesaw-authenticated user has.
                    properties:
                      enabled:
                        default: false
                        description: Defines whether the PublicViewer support should
                          be enabled or not
                        type: boolean
                    required:
                    - enabled
                    type: object
                  registrationService:
                    description: Keeps parameters necessary for the registration service
                    properties:
                      analytics:
                        description: Keeps parameters necessary for the registration
                          service analytics config
                        properties:
                          devSpaces:
                            description: DevSpaces contains the analytics configuration
                              parameters for devspaces
                            properties:
                              segmentWriteKey:
                                description: SegmentWriteKey specifies the segment
                                  write key
                                type: string
                            type: object
                          segmentWriteKey:
                            description: SegmentWriteKey specifies the segment write
                              key for sandbox
                            type: string
                        type: object
                      auth:
                        description: Keeps parameters necessary for the registration
                          service authentication config
                        properties:
                          authClientConfigContentType:
                            description: AuthClientConfigContentType specifies the
                              auth config content type
                            type: string
                          authClientConfigRaw:
                            description: AuthClientConfigRaw specifies the URL used
                              to access the registration service
                            type: string
                          authClientLibraryURL:
                            description: AuthClientLibraryURL specifies the auth library
                              location
                            type: string
                          authClientPublicKeysURL:
                            description: AuthClientPublicKeysURL specifies the public
                              keys URL
                            type: string
                          ssoBaseURL:
                            description: SSOBaseURL specifies the SSO base URL such
                              as https://sso.redhat.com
                            type: string
                          ssoRealm:
                            description: SSORealm specifies the SSO realm name
                            type: string
                        type: object
                      environment:
                        description: Environment specifies the environment such as
                          prod, stage, unit-tests, e2e-tests, dev, etc
                        type: string
                      logLevel:
                        description: LogLevel specifies the logging level
                        type: string
                      namespace:
                        description: |-
                          Namespace specifies the namespace in which the registration service and host operator is running
                          Consumed by host operator and set as env var on registration-service deployment
                        type: string
                      registrationServiceURL:
                        description: RegistrationServiceURL is the URL used to a ccess
                          the registration service
                        type: string
                      replicas:
                        description: Replicas specifies the number of replicas to
                          use for the registration service deployment
                        format: int32
                        type: integer
                      uiCanaryDeploymentWeight:
                        description: |-
                          UICanaryDeploymentWeight specifies the threshold of users that will be using the new UI.
                          This configuration option is just a temporary solution for rolling out our new RHDH based UI using canary deployment strategy.
                          Once we switch all our users to the new UI this will be removed.
                          How this works:
                          - backend returns a weight
                          - old UI assigns a sticky random number for each user
                          - if the user has a number within the weight returned from the backend than user get's redirect to new UI
                          - if the user has a number above the weight they keep using the current UI
                        maximum: 100
                        minimum: 0
                        type: integer
                      verification:
                        description: Keeps parameters necessary for the registration
                          service verification config
                        properties:
                          attemptsAllowed:
                            description: |-
                              VerificationAttemptsAllowed specifies the number of times a user may attempt to correctly enter a verification code,
                              if they fail then they must request another code
                            type: integer
                          awsRegion:
                            description: AWSRegion to use when sending notification
                              SMS
                            type: string
                          awsSMSType:
                            description: |-
                              AWSSMSType is the type of SMS message to send, either `Promotional` or `Transactional`
                              See https://docs.aws.amazon.com/sns/latest/dg/sms_publish-to-phone.html for details
                            type: string
                          awsSenderID:
                            description: AWSSenderID the Alphanumeric Sender ID to
                              use, e.g. "DevSandbox"
                            type: string
                          captcha:
                            description: Captcha defines any configuration related
                              to captcha verification
                            properties:
                              allowLowScoreReactivation:
                                description: AllowLowScoreReactivation specifies whether
                                  the reactivation for users with low captcha score
                                  (below the RequiredScore) is enabled without the
                                  need for manual approval.
                                type: boolean
                              enabled:
                                description: Enabled specifies whether the captcha
                                  verification feature is enabled or not
                                type: boolean
                              projectID:
                                description: ProjectID defines the GCP project ID
                                  that has the recaptcha service enabled.
                                type: string
                              requiredScore:
                                description: |-
                                  RequiredScore defines the lowest captcha score, below this score the user cannot proceed with the signup process at all.
                                  Users with captcha score lower than the required one can still be approved manually.
                                type: string
                              scoreThreshold:
                                description: |-
                                  ScoreThreshold defines the captcha assessment score threshold. A score equal to or above the threshold means the user is most likely human and
                                  can proceed signing up but a score below the threshold means the score is suspicious and further verification may be required.
                                type: string
                              siteKey:
                                description: SiteKey defines the recaptcha site key
                                  to use when making recaptcha requests. There can
                                  be different ones for different environments. eg.
                                  dev, stage, prod
                                type: string
                            type: object
                          codeExpiresInMin:
                            description: |-
                              VerificationCodeExpiresInMin specifies an int representing the number of minutes before a verification code should
                              be expired
                            type: integer
                          dailyLimit:
                            description: |-
                              VerificationDailyLimit specifies the number of times a user may initiate a phone verification request within a
                              24 hour period
                            type: integer
                          enabled:
                            description: |-
                              VerificationEnabled specifies whether verification is enabled or not
                              Verification enablement works in the following way:
                                1. verification.enabled == false
                                   No verification during the signup process at all. (no phone, no captcha)
                                2. verification.enabled == true && verification.captcha.enabled == true
                                   Captcha is enabled and will bypass phone verification if the score is above the threshold but if the score is
                                   below the threshold then phone verification kicks in.
                                3. verification.enabled == true && verification.captcha.enabled == false
                                   Only phone verification is effect.
                            type: boolean
                          excludedEmailDomains:
                            description: |-
                              VerificationExcludedEmailDomains specifies the list of email address domains for which phone verification
                              is not required
                            type: string
                          messageTemplate:
                            description: |-
                              VerificationMessageTemplate specifies the message template used to generate the content sent to users via SMS for
                              phone verification
                            type: string
                          notificationSender:
                            description: |-
                              NotificationSender is used to specify which service should be used to send verification notifications. Allowed
                              values are "twilio", "aws".  If not specified, the Twilio sender will be used.
                            type: string
                          secret:
                            description: Defines all secrets related to the registration
                              service verification configuration
                            properties:
                              awsAccessKeyID:
                                description: AWSAccessKeyId is the AWS Access Key
                                  used to authenticate in order to access AWS services
                                type: string
                              awsSecretAccessKey:
                                description: AWSSecretAccessKey is the AWS credential
                                  used to authenticate in order to access AWS services
                                type: string
                              recaptchaServiceAccountFile:
                                description: |-
                                  RecaptchaServiceAccountFile is the GCP service account file contents encoded in base64, it is
                                  to be used with the recaptcha client for authentication
                                type: string
                              ref:
                                description: Reference is the name of the secret resource
                                  to look up
                                type: string
                              twilioAccountSID:
                                description: TwilioAccountSID specifies the Twilio
                                  account identifier, used for sending phone verification
                                  messages
                                type: string
                              twilioAuthToken:
                                description: TwilioAuthToken specifies the Twilio
                                  authentication token, used for sending phone verification
                                  messages
                                type: string
                              twilioFromNumber:
                                description: TwilioFromNumber specifies the phone
                                  number or alphanumeric "Sender ID" for sending phone
                                  verification messages
                                type: string
                            type: object
                          twilioSenderConfigs:
                            description: TwilioSenderConfigs is an array of TwilioSenderConfig
                              objects
                            items:
                              description: |-
                                TwilioSenderConfig is used to associate a particular sender ID (a sender ID is a text value that appears instead of
                                a phone number when receiving an SMS message), for example "RED HAT", with an array of country
                                code values for which the Sender ID value will be set via the Twilio API when sending a verification code to a user in
                                any of the country codes specified.

                                Since some countries are starting to block long form phone numbers (i.e. SMS messages from international phone numbers)
                                the Sender ID may be an acceptable alternative to requiring the verification message to be sent from a local phone number.
                              properties:
                                countryCodes:
                                  description: CountryCodes
                                  items:
                                    type: string
                                  type: array
                                  x-kubernetes-list-type: set
                                senderID:
                                  description: SenderID
                                  type: string
                              required:
                              - senderID
                              type: object
                            type: array
                            x-kubernetes-list-type: atomic
                        type: object
                    type: object
                  spaceConfig:
                    description: Keeps parameters necessary for configuring Space
                      provisioning functionality
                    properties:
                      spaceBindingRequestEnabled:
                        description: |-
                          SpaceBindingRequestEnabled specifies whether the SpaceBindingRequest controller should start or not.
                          This is specifically useful in order to enable/disable this functionality from configuration (e.g. disabled by default in Sandbox and enabled only for AppStudio stage/prod ...).
                        type: boolean
                      spaceRequestEnabled:
                        description: |-
                          SpaceRequestEnabled specifies whether the SpaceRequest controller should start or not.
                          This is specifically useful in order to enable/disable this functionality from configuration (e.g. disabled by default in Sandbox and enabled only for AppStudio stage/prod ...).
                        type: boolean
                    type: object
                  tiers:
                    description: Keeps parameters concerned with tiers
                    properties:
                      defaultSpaceTier:
                        description: DefaultSpaceTier specifies the default tier to
                          assign for new spaces
                        type: string
                      defaultUserTier:
                        description: DefaultUserTier specifies the default tier to
                          assign for new users
                        type: string
                      durationBeforeChangeTierRequestDeletion:
                        description: DurationBeforeChangeTierRequestDeletion specifies
                          the duration before a ChangeTierRequest resource is deleted
                        type: string
                      featureToggles:
                        description: FeatureToggles specifies the list of feature
                          toggles/flags
                        items:
                          description: |-
                            FeatureToggle defines a feature toggle/flag. Each feature is supposed to have a unique name.
                            Features are represented by kube object manifests in space and user templates.
                            Such manifests must have an annotation which refers to the corresponding feature name.
                            For example a manifest for a RoleBinding object in a space tier template with the following annotation:
                            "toolchain.dev.openshift.com/feature: os-lightspeed" would refer to a feature with "os-lightspeed" name.
                            When that template is applied for a new space then that RoleBinding object would be applied conditionally,
                            according to its weight.
                          properties:
                            name:
                              description: A unique name of the feature
                              type: string
                            weight:
                              default: 100
                              description: |-
                                Rollout weight of the feature. An integer between 0-100.
                                If not set then 100 is used by default.
                                0 means the corresponding feature should not be enabled at all, which means
                                that corresponding template objects should not be applied at all.
                                100 means the feature should be always enabled (the template is always applied).
                                The features are weighted independently of each other.
                                For example if there are two features:
                                - feature1, weight=5
                                - feature2, weight=90
                                And tiers (one or many) contain the following object manifests:
                                - RoleBinding with "toolchain.dev.openshift.com/feature: feature1" annotation
                                - ConfigMap with "toolchain.dev.openshift.com/feature: feature2" annotation
                                Then the RoleBinding will be created for the corresponding tiers with probability of 0.05 (around 5 out of every 100 spaces would have it)
                                And the ConfigMap will be created with probability of 0.9 (around 90 out of every 100 spaces would have it)
                              maximum: 100
                              minimum: 0
                              type: integer
                          required:
                          - name
                          type: object
                        type: array
                        x-kubernetes-list-map-keys:
                        - name
                        x-kubernetes-list-type: map
                      templateUpdateRequestMaxPoolSize:
                        description: |-
                          TemplateUpdateRequestMaxPoolSize specifies the maximum number of concurrent TemplateUpdateRequests
                          when updating MasterUserRecords
                        type: integer
                    type: object
                  toolchainStatus:
                    description: Keeps parameters concerned with the toolchainstatus
                    properties:
                      gitHubSecret:
                        description: Defines all secrets related to GitHub authentication/integration
                        properties:
                          accessTokenKey:
                            description: The key for the GitHub Access token in the
                              secret values map
                            type: string
                          ref:
                            description: Reference is the name of the secret resource
                              to look up
                            type: string
                        type: object
                      toolchainStatusRefreshTime:
                        description: ToolchainStatusRefreshTime specifies how often
                          the ToolchainStatus should load and refresh the current
                          hosted-toolchain status
                        type: string
                    type: object
                  users:
                    description: Keeps parameters concerned with user management
                    properties:
                      forbiddenUsernamePrefixes:
                        description: |-
                          ForbiddenUsernamePrefixes is a comma-separated string that defines the prefixes that a username may not have when signing up.
                          If a username has a forbidden prefix, then the username compliance prefix is added to the username
                        type: string
                      forbiddenUsernameSuffixes:
                        description: |-
                          ForbiddenUsernameSuffixes is a comma-separated string that defines the suffixes that a username may not have when signing up.  If a
                          username has a forbidden suffix, then the username compliance suffix is added to the username
                        type: string
                      masterUserRecordUpdateFailureThreshold:
                        description: MasterUserRecordUpdateFailureThreshold specifies
                          the number of allowed failures before stopping attempts
                          to update a MasterUserRecord
                        type: integer
                    type: object
                type: object
              members:
                description: Contains all member operator configurations for all member
                  clusters
                properties:
                  default:
                    description: Defines default configuration to be applied to all
                      member clusters
                    properties:
                      auth:
                        description: Keeps parameters concerned with authentication
                        properties:
                          idp:
                            description: Represents the configured identity provider
                            type: string
                        type: object
                      autoscaler:
                        description: Keeps parameters concerned with the autoscaler
                        properties:
                          bufferCPU:
                            description: Represents how much CPU should be required
                              by the autoscaler buffer
                            type: string
                          bufferMemory:
                            description: Represents how much memory should be required
                              by the autoscaler buffer
                            type: string
                          bufferReplicas:
                            description: Represents the number of autoscaler buffer
                              replicas to request
                            type: integer
                          deploy:
                            description: Defines the flag that determines whether
                              to deploy the autoscaler buffer
                            type: boolean
                        type: object
                      console:
                        description: Keeps parameters concerned with the console
                        properties:
                          namespace:
                            description: Defines the console route namespace
                            type: string
                          routeName:
                            description: Defines the console route name
                            type: string
                        type: object
                      environment:
                        description: Environment specifies the member-operator environment
                          such as prod, stage, unit-tests, e2e-tests, dev, etc
                        type: string
                      memberStatus:
                        description: Keeps parameters concerned with member status
                        properties:
                          gitHubSecret:
                            description: Defines all secrets related to GitHub authentication/integration
                            properties:
                              accessTokenKey:
                                description: The key for the GitHub Access token in
                                  the secret values map
                                type: string
                              ref:
                                description: Reference is the name of the secret resource
                                  to look up
                                type: string
                            type: object
                          refreshPeriod:
                            description: Defines the period between refreshes of the
                              member status
                            type: string
                        type: object
                      skipUserCreation:
                        description: Defines the flag that determines whether User
                          and Identity resources should be created for a UserAccount
                        type: boolean
                      toolchainCluster:
                        description: Keeps parameters concerned with the toolchaincluster
                        properties:
                          healthCheckPeriod:
                            description: Defines the period in between health checks
                            type: string
                          healthCheckTimeout:
                            description: Defines the timeout for each health check
                            type: string
                        type: object
                      webhook:
                        description: Keeps parameters concerned with the webhook
                        properties:
                          deploy:
                            description: |-
                              Defines the flag that determines whether to deploy the Webhook.
                              If the deploy flag is set to False and the Webhook was deployed previously it will be deleted by the memberoperatorconfig controller.
                            type: boolean
                          secret:
                            description: Defines all secrets related to webhook configuration
                            properties:
                              ref:
                                description: Reference is the name of the secret resource
                                  to look up
                                type: string
                              virtualMachineAccessKey:
                                description: The key in the secret values map that
                                  contains a comma-separated list of SSH keys
                                type: string
                            type: object
                        type: object
                    type: object
                  specificPerMemberCluster:
                    additionalProperties:
                      description: MemberOperatorConfigSpec contains all configuration
                        parameters of the member operator
                      properties:
                        auth:
                          description: Keeps parameters concerned with authentication
                          properties:
                            idp:
                              description: Represents the configured identity provider
                              type: string
                          type: object
                        autoscaler:
                          description: Keeps parameters concerned with the autoscaler
                          properties:
                            bufferCPU:
                              description: Represents how much CPU should be required
                                by the autoscaler buffer
                              type: string
                            bufferMemory:
                              description: Represents how much memory should be required
                                by the autoscaler buffer
                              type: string
                            bufferReplicas:
                              description: Represents the number of autoscaler buffer
                                replicas to request
                              type: integer
                            deploy:
                              description: Defines the flag that determines whether
                                to deploy the autoscaler buffer
                              type: boolean
                          type: object
                        console:
                          description: Keeps parameters concerned with the console
                          properties:
                            namespace:
                              description: Defines the console route namespace
                              type: string
                            routeName:
                              description: Defines the console route name
                              type: string
                          type: object
                        environment:
                          description: Environment specifies the member-operator environment
                            such as prod, stage, unit-tests, e2e-tests, dev, etc
                          type: string
                        memberStatus:
                          description: Keeps parameters concerned with member status
                          properties:
                            gitHubSecret:
                              description: Defines all secrets related to GitHub authentication/integration
                              properties:
                                accessTokenKey:
                                  description: The key for the GitHub Access token
                                    in the secret values map
                                  type: string
                                ref:
                                  description: Reference is the name of the secret
                                    resource to look up
                                  type: string
                              type: object
                            refreshPeriod:
                              description: Defines the period between refreshes of
                                the member status
                              type: string
                          type: object
                        skipUserCreation:
                          description: Defines the flag that determines whether User
                            and Identity resources should be created for a UserAccount
                          type: boolean
                        toolchainCluster:
                          description: Keeps parameters concerned with the toolchaincluster
                          properties:
                            healthCheckPeriod:
                              description: Defines the period in between health checks
                              type: string
                            healthCheckTimeout:
                              description: Defines the timeout for each health check
                              type: string
                          type: object
                        webhook:
                          description: Keeps parameters concerned with the webhook
                          properties:
                            deploy:
                              description: |-
                                Defines the flag that determines whether to deploy the Webhook.
                                If the deploy flag is set to False and the Webhook was deployed previously it will be deleted by the memberoperatorconfig controller.
                              type: boolean
                            secret:
                              description: Defines all secrets related to webhook
                                configuration
                              properties:
                                ref:
                                  description: Reference is the name of the secret
                                    resource to look up
                                  type: string
                                virtualMachineAccessKey:
                                  description: The key in the secret values map that
                                    contains a comma-separated list of SSH keys
                                  type: string
                              type: object
                          type: object
                      type: object
                    description: A map of cluster-specific member operator configurations
                      indexed by member toolchaincluster name
                    type: object
                    x-kubernetes-map-type: atomic
                type: object
            type: object
          status:
            description: ToolchainConfigStatus defines the observed state of ToolchainConfig
            properties:
              conditions:
                description: |-
                  Conditions is an array of the current ToolchainConfig conditions
                  Supported condition types: ConditionReady
                items:
                  properties:
                    lastTransitionTime:
                      description: Last time the condition transit from one status
                        to another.
                      format: date-time
                      type: string
                    lastUpdatedTime:
                      description: Last time the condition was updated
                      format: date-time
                      type: string
                    message:
                      description: Human readable message indicating details about
                        last transition.
                      type: string
                    reason:
                      description: (brief) reason for the condition's last transition.
                      type: string
                    status:
                      description: Status of the condition, one of True, False, Unknown.
                      type: string
                    type:
                      description: Type of condition
                      type: string
                  required:
                  - status
                  - type
                  type: object
                type: array
                x-kubernetes-list-map-keys:
                - type
                x-kubernetes-list-type: map
              syncErrors:
                additionalProperties:
                  type: string
                description: |-
                  SyncErrors is a map of sync errors indexed by toolchaincluster name that indicates whether
                  an attempt to sync configuration to a member cluster failed
                type: object
                x-kubernetes-map-type: atomic
            type: object
        type: object
        x-kubernetes-preserve-unknown-fields: true
    served: true
    storage: true
    subresources:
      status: {}