You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: AzureIdentity is the specification of the identity data structure.
22
+
properties:
23
+
apiVersion:
24
+
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
25
+
type: string
26
+
kind:
27
+
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
28
+
type: string
29
+
metadata:
30
+
type: object
31
+
spec:
32
+
description: AzureIdentitySpec describes the credential specifications of an identity on Azure.
33
+
properties:
34
+
adEndpoint:
35
+
type: string
36
+
adResourceID:
37
+
description: For service principal. Option param for specifying the AD details.
38
+
type: string
39
+
auxiliaryTenantIDs:
40
+
description: Service principal auxiliary tenant ids
41
+
items:
42
+
type: string
43
+
nullable: true
44
+
type: array
45
+
clientID:
46
+
description: Both User Assigned MSI and SP can use this field.
47
+
type: string
48
+
clientPassword:
49
+
description: Used for service principal
50
+
properties:
51
+
name:
52
+
description: Name is unique within a namespace to reference a secret resource.
53
+
type: string
54
+
namespace:
55
+
description: Namespace defines the space within which the secret name must be unique.
56
+
type: string
57
+
type: object
58
+
metadata:
59
+
type: object
60
+
replicas:
61
+
format: int32
62
+
nullable: true
63
+
type: integer
64
+
resourceID:
65
+
description: User assigned MSI resource id.
66
+
type: string
67
+
tenantID:
68
+
description: Service principal primary tenant id.
69
+
type: string
70
+
type:
71
+
description: UserAssignedMSI or Service Principal
72
+
type: integer
73
+
type: object
74
+
status:
75
+
description: AzureIdentityStatus contains the replica status of the resource.
76
+
properties:
77
+
availableReplicas:
78
+
format: int32
79
+
type: integer
80
+
metadata:
81
+
type: object
82
+
type: object
83
+
type: object
84
+
served: true
85
+
storage: true
86
+
status:
87
+
acceptedNames:
88
+
kind: ""
89
+
plural: ""
90
+
conditions: []
91
+
storedVersions: []
13
92
---
14
-
apiVersion: apiextensions.k8s.io/v1beta1
93
+
apiVersion: apiextensions.k8s.io/v1
15
94
kind: CustomResourceDefinition
16
95
metadata:
17
-
name: azureidentities.aadpodidentity.k8s.io
96
+
annotations:
97
+
api-approved.kubernetes.io: unapproved
98
+
controller-gen.kubebuilder.io/version: v0.5.0
99
+
name: azureidentitybindings.aadpodidentity.k8s.io
18
100
spec:
19
101
group: aadpodidentity.k8s.io
20
-
version: v1
21
102
names:
22
-
kind: AzureIdentity
23
-
singular: azureidentity
24
-
plural: azureidentities
103
+
kind: AzureIdentityBinding
104
+
listKind: AzureIdentityBindingList
105
+
plural: azureidentitybindings
106
+
singular: azureidentitybinding
25
107
scope: Namespaced
108
+
versions:
109
+
- name: v1
110
+
schema:
111
+
openAPIV3Schema:
112
+
description: AzureIdentityBinding brings together the spec of matching pods and the identity which they can use.
113
+
properties:
114
+
apiVersion:
115
+
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
116
+
type: string
117
+
kind:
118
+
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
119
+
type: string
120
+
metadata:
121
+
type: object
122
+
spec:
123
+
description: AzureIdentityBindingSpec matches the pod with the Identity. Used to indicate the potential matches to look for between the pod/deployment and the identities present.
124
+
properties:
125
+
azureIdentity:
126
+
type: string
127
+
metadata:
128
+
type: object
129
+
selector:
130
+
type: string
131
+
weight:
132
+
description: Weight is used to figure out which of the matching identities would be selected.
133
+
type: integer
134
+
type: object
135
+
status:
136
+
description: AzureIdentityBindingStatus contains the status of an AzureIdentityBinding.
description: AzurePodIdentityException contains the pod selectors for all pods that don't require NMI to process and request token on their behalf.
174
+
properties:
175
+
apiVersion:
176
+
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
177
+
type: string
178
+
kind:
179
+
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
180
+
type: string
181
+
metadata:
182
+
type: object
183
+
spec:
184
+
description: AzurePodIdentityExceptionSpec matches pods with the selector defined. If request originates from a pod that matches the selector, nmi will proxy the request and send response back without any validation.
185
+
properties:
186
+
metadata:
187
+
type: object
188
+
podLabels:
189
+
additionalProperties:
190
+
type: string
191
+
type: object
192
+
type: object
193
+
status:
194
+
description: AzurePodIdentityExceptionStatus contains the status of an AzurePodIdentityException.
0 commit comments