Skip to content

Commit e76219d

Browse files
authored
operator kernel-module-management-hub (2.5.0)
1 parent 985ee1b commit e76219d

9 files changed

+4271
-0
lines changed

operators/kernel-module-management-hub/2.5.0/manifests/hub.kmm.sigs.x-k8s.io_managedclustermodules.yaml

Lines changed: 3075 additions & 0 deletions
Large diffs are not rendered by default.

operators/kernel-module-management-hub/2.5.0/manifests/kernel-module-management-hub.clusterserviceversion.yaml

Lines changed: 449 additions & 0 deletions
Large diffs are not rendered by default.
Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
apiVersion: v1
2+
kind: Service
3+
metadata:
4+
creationTimestamp: null
5+
labels:
6+
app.kubernetes.io/component: kmm-hub
7+
app.kubernetes.io/name: kmm-hub
8+
app.kubernetes.io/part-of: kmm
9+
control-plane: controller
10+
name: kmm-operator-hub-controller-metrics-service
11+
spec:
12+
ports:
13+
- name: https
14+
port: 8443
15+
protocol: TCP
16+
targetPort: https
17+
selector:
18+
app.kubernetes.io/component: kmm-hub
19+
app.kubernetes.io/name: kmm-hub
20+
app.kubernetes.io/part-of: kmm
21+
control-plane: controller
22+
status:
23+
loadBalancer: {}
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
creationTimestamp: null
5+
labels:
6+
app.kubernetes.io/component: kmm-hub
7+
app.kubernetes.io/name: kmm-hub
8+
app.kubernetes.io/part-of: kmm
9+
name: kmm-operator-hub-metrics-reader
10+
rules:
11+
- nonResourceURLs:
12+
- /metrics
13+
verbs:
14+
- get
Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
apiVersion: v1
2+
kind: Service
3+
metadata:
4+
creationTimestamp: null
5+
labels:
6+
app.kubernetes.io/component: kmm-hub
7+
app.kubernetes.io/created-by: kernel-module-management
8+
app.kubernetes.io/instance: webhook-service
9+
app.kubernetes.io/managed-by: kustomize
10+
app.kubernetes.io/name: kmm-hub
11+
app.kubernetes.io/part-of: kmm
12+
name: kmm-operator-hub-webhook-service
13+
spec:
14+
ports:
15+
- port: 443
16+
protocol: TCP
17+
targetPort: 9443
18+
selector:
19+
app.kubernetes.io/component: kmm-hub
20+
app.kubernetes.io/name: kmm-hub
21+
app.kubernetes.io/part-of: kmm
22+
control-plane: webhook-server
23+
status:
24+
loadBalancer: {}
Lines changed: 306 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,306 @@
1+
apiVersion: apiextensions.k8s.io/v1
2+
kind: CustomResourceDefinition
3+
metadata:
4+
annotations:
5+
controller-gen.kubebuilder.io/version: v0.16.1
6+
creationTimestamp: null
7+
labels:
8+
app.kubernetes.io/component: kmm-hub
9+
app.kubernetes.io/name: kmm-hub
10+
app.kubernetes.io/part-of: kmm
11+
name: modulebuildsignconfigs.kmm.sigs.x-k8s.io
12+
spec:
13+
group: kmm.sigs.x-k8s.io
14+
names:
15+
kind: ModuleBuildSignConfig
16+
listKind: ModuleBuildSignConfigList
17+
plural: modulebuildsignconfigs
18+
shortNames:
19+
- mbsc
20+
singular: modulebuildsignconfig
21+
scope: Namespaced
22+
versions:
23+
- name: v1beta1
24+
schema:
25+
openAPIV3Schema:
26+
description: ModuleBuildSignConfig keeps the request for images' build/sign
27+
for a KMM Module.
28+
properties:
29+
apiVersion:
30+
description: |-
31+
APIVersion defines the versioned schema of this representation of an object.
32+
Servers should convert recognized schemas to the latest internal value, and
33+
may reject unrecognized values.
34+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
35+
type: string
36+
kind:
37+
description: |-
38+
Kind is a string value representing the REST resource this object represents.
39+
Servers may infer this from the endpoint the client submits requests to.
40+
Cannot be updated.
41+
In CamelCase.
42+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
43+
type: string
44+
metadata:
45+
type: object
46+
spec:
47+
description: |-
48+
ModuleBuildSignConfigSpec describes the images that need to be built/signed
49+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
50+
properties:
51+
imageRepoSecret:
52+
description: ImageRepoSecret contains pull secret for the image's
53+
repo, if needed
54+
properties:
55+
name:
56+
default: ""
57+
description: |-
58+
Name of the referent.
59+
This field is effectively required, but due to backwards compatibility is
60+
allowed to be empty. Instances of this type with an empty value here are
61+
almost certainly wrong.
62+
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
63+
type: string
64+
type: object
65+
x-kubernetes-map-type: atomic
66+
images:
67+
items:
68+
description: ModuleBuildSignSpec describes the image whose state
69+
needs to be queried
70+
properties:
71+
action:
72+
enum:
73+
- BuildImage
74+
- SignImage
75+
type: string
76+
build:
77+
description: Build contains build instructions, in case image
78+
needs building
79+
properties:
80+
baseImageRegistryTLS:
81+
description: BaseImageRegistryTLS contains settings determining
82+
how to access registries of the base images in the build-process'
83+
Dockerfile.
84+
properties:
85+
insecure:
86+
description: If Insecure is true, the operator will
87+
be able to access a registry in an insecure (plain
88+
HTTP) protocol.
89+
type: boolean
90+
insecureSkipTLSVerify:
91+
description: If InsecureSkipTLSVerify, the operator
92+
will accept any certificate provided by the registry.
93+
type: boolean
94+
type: object
95+
buildArgs:
96+
description: BuildArgs is an array of build variables that
97+
are provided to the image building backend.
98+
items:
99+
description: BuildArg represents a build argument used
100+
when building a container image.
101+
properties:
102+
name:
103+
type: string
104+
value:
105+
type: string
106+
required:
107+
- name
108+
- value
109+
type: object
110+
type: array
111+
dockerfileConfigMap:
112+
description: ConfigMap that holds Dockerfile contents
113+
properties:
114+
name:
115+
default: ""
116+
description: |-
117+
Name of the referent.
118+
This field is effectively required, but due to backwards compatibility is
119+
allowed to be empty. Instances of this type with an empty value here are
120+
almost certainly wrong.
121+
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
122+
type: string
123+
type: object
124+
x-kubernetes-map-type: atomic
125+
kanikoParams:
126+
description: KanikoParams is used to customize the building
127+
process of the image.
128+
properties:
129+
tag:
130+
description: Kaniko image tag to use when creating the
131+
build Pod
132+
type: string
133+
type: object
134+
secrets:
135+
description: |-
136+
Secrets is an optional list of secrets to be made available to the build system.
137+
Those secrets should be used for private resources such as a private Github repo.
138+
For container registries auth use module.spec.imagePullSecret instead.
139+
items:
140+
description: |-
141+
LocalObjectReference contains enough information to let you locate the
142+
referenced object inside the same namespace.
143+
properties:
144+
name:
145+
default: ""
146+
description: |-
147+
Name of the referent.
148+
This field is effectively required, but due to backwards compatibility is
149+
allowed to be empty. Instances of this type with an empty value here are
150+
almost certainly wrong.
151+
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
152+
type: string
153+
type: object
154+
x-kubernetes-map-type: atomic
155+
type: array
156+
selector:
157+
additionalProperties:
158+
type: string
159+
description: Selector describes on which nodes will run
160+
the building process.
161+
type: object
162+
required:
163+
- dockerfileConfigMap
164+
type: object
165+
image:
166+
description: image
167+
type: string
168+
kernelVersion:
169+
description: kernel version for which this image is targeted
170+
type: string
171+
registryTLS:
172+
description: RegistryTLS set the TLS configs for accessing the
173+
registry of the image.
174+
properties:
175+
insecure:
176+
description: If Insecure is true, the operator will be able
177+
to access a registry in an insecure (plain HTTP) protocol.
178+
type: boolean
179+
insecureSkipTLSVerify:
180+
description: If InsecureSkipTLSVerify, the operator will
181+
accept any certificate provided by the registry.
182+
type: boolean
183+
type: object
184+
sign:
185+
description: Sign contains sign instructions, in case image
186+
needs signing
187+
properties:
188+
certSecret:
189+
description: a secret containing the public key used to
190+
sign kernel modules for secureboot
191+
properties:
192+
name:
193+
default: ""
194+
description: |-
195+
Name of the referent.
196+
This field is effectively required, but due to backwards compatibility is
197+
allowed to be empty. Instances of this type with an empty value here are
198+
almost certainly wrong.
199+
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
200+
type: string
201+
type: object
202+
x-kubernetes-map-type: atomic
203+
filesToSign:
204+
description: paths inside the image for the kernel modules
205+
to sign (if ommited all kmods are signed)
206+
items:
207+
type: string
208+
type: array
209+
keySecret:
210+
description: a secret containing the private key used to
211+
sign kernel modules for secureboot
212+
properties:
213+
name:
214+
default: ""
215+
description: |-
216+
Name of the referent.
217+
This field is effectively required, but due to backwards compatibility is
218+
allowed to be empty. Instances of this type with an empty value here are
219+
almost certainly wrong.
220+
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
221+
type: string
222+
type: object
223+
x-kubernetes-map-type: atomic
224+
unsignedImage:
225+
description: Image to sign, ignored if a Build is present,
226+
required otherwise
227+
type: string
228+
unsignedImageRegistryTLS:
229+
description: UnsignedImageRegistryTLS contains settings
230+
determining how to access registries of the unsigned image.
231+
properties:
232+
insecure:
233+
description: If Insecure is true, the operator will
234+
be able to access a registry in an insecure (plain
235+
HTTP) protocol.
236+
type: boolean
237+
insecureSkipTLSVerify:
238+
description: If InsecureSkipTLSVerify, the operator
239+
will accept any certificate provided by the registry.
240+
type: boolean
241+
type: object
242+
required:
243+
- certSecret
244+
- keySecret
245+
type: object
246+
skipWaitMissingImage:
247+
description: |-
248+
SkipWaitMissingImage signals to MIC to stop waiting for image to be present
249+
in case Build andSign not define, and report the image as DoesNotExist
250+
type: boolean
251+
required:
252+
- action
253+
- image
254+
- kernelVersion
255+
type: object
256+
type: array
257+
pushBuiltImage:
258+
description: |-
259+
Boolean flag that determines whether images built must also
260+
be pushed to a defined repository
261+
type: boolean
262+
required:
263+
- images
264+
type: object
265+
status:
266+
description: |-
267+
ModuleBuildSignConfigStatus describes the status of the images that needed to be built/signed
268+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
269+
properties:
270+
images:
271+
items:
272+
description: BuildSignImageState contains the status of the image
273+
that was requested to be built/signed
274+
properties:
275+
action:
276+
enum:
277+
- BuildImage
278+
- SignImage
279+
type: string
280+
image:
281+
type: string
282+
status:
283+
enum:
284+
- Success
285+
- Failure
286+
type: string
287+
required:
288+
- action
289+
- image
290+
- status
291+
type: object
292+
type: array
293+
required:
294+
- images
295+
type: object
296+
type: object
297+
served: true
298+
storage: true
299+
subresources:
300+
status: {}
301+
status:
302+
acceptedNames:
303+
kind: ""
304+
plural: ""
305+
conditions: null
306+
storedVersions: null

0 commit comments

Comments
 (0)