feat(CRDs): update Traefik Hub to v1.29.0

traefik-crds/crds-files/hub/hub.traefik.io_apiauths.yaml

@@ -41,8 +41,33 @@ spec:
             properties:
               apiKey:
                 description: APIKey configures API key authentication.
+                properties:
+                  keySource:
+                    description: |-
+                      KeySource defines where to extract the API key from requests.
+                      When not specified, defaults to "Authorization" header with "Bearer" scheme and "api_key" query parameter.
+                      When specified, it completely overrides defaults - fields left empty will disable that extraction method.
+                    minProperties: 1
+                    properties:
+                      header:
+                        description: Header is the name of the header containing the
+                          API key.
+                        type: string
+                      headerAuthScheme:
+                        description: |-
+                          HeaderAuthScheme is the authentication scheme prefix in the header value.
+                          The scheme is used to parse headers in the format "<scheme> <token>".
+                          Only applies when header is "Authorization".
+                        type: string
+                      query:
+                        description: Query is the name of the query parameter containing
+                          the API key.
+                        type: string
+                    type: object
+                    x-kubernetes-validations:
+                    - message: headerAuthScheme can only be used when header is 'Authorization'
+                      rule: '!has(self.headerAuthScheme) || self.header == ''Authorization'''
                 type: object
-                x-kubernetes-preserve-unknown-fields: true
               isDefault:
                 description: |-
                   IsDefault specifies if this APIAuth should be used as the default API authentication method for the namespace.
@@ -71,6 +96,7 @@ spec:
                     description: |-
                       JWKSURL is the URL to fetch the JWKS for JWT verification.
                       Mutually exclusive with SigningSecretName, PublicKey, JWKSFile, and TrustedIssuers.
+
                       Deprecated: Use TrustedIssuers instead for more flexible JWKS configuration with issuer validation.
                     type: string
                     x-kubernetes-validations:

traefik-crds/crds-files/hub/hub.traefik.io_apis.yaml

@@ -203,6 +203,11 @@ spec:
                     x-kubernetes-validations:
                     - message: must be a valid URL
                       rule: isURL(self)
+                  validateRequestBodySchema:
+                    description: |-
+                      ValidateRequestBodySchema validates the request body against the OpenAPI specification.
+                      This option overrides the default behavior configured in the static configuration.
+                    type: boolean
                   validateRequestMethodAndPath:
                     description: |-
                       ValidateRequestMethodAndPath validates that the path and method matches an operation defined in the OpenAPI specification.

traefik-crds/crds-files/hub/hub.traefik.io_apiversions.yaml

@@ -207,6 +207,11 @@ spec:
                     x-kubernetes-validations:
                     - message: must be a valid URL
                       rule: isURL(self)
+                  validateRequestBodySchema:
+                    description: |-
+                      ValidateRequestBodySchema validates the request body against the OpenAPI specification.
+                      This option overrides the default behavior configured in the static configuration.
+                    type: boolean
                   validateRequestMethodAndPath:
                     description: |-
                       ValidateRequestMethodAndPath validates that the path and method matches an operation defined in the OpenAPI specification.

traefik-crds/crds-files/hub/hub.traefik.io_contentitems.yaml

@@ -0,0 +1,169 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.17.1
+  name: contentitems.hub.traefik.io
+spec:
+  group: hub.traefik.io
+  names:
+    kind: ContentItem
+    listKind: ContentItemList
+    plural: contentitems
+    singular: contentitem
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: ContentItem defines additional documentation for given resource.
+        properties:
+          apiVersion:
+            description: |-
+              APIVersion defines the versioned schema of this representation of an object.
+              Servers should convert recognized schemas to the latest internal value, and
+              may reject unrecognized values.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+            type: string
+          kind:
+            description: |-
+              Kind is a string value representing the REST resource this object represents.
+              Servers may infer this from the endpoint the client submits requests to.
+              Cannot be updated.
+              In CamelCase.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: Defines the documentation to attach to the referenced resource.
+            properties:
+              content:
+                description: Content is the valid markdown content.
+                maxLength: 1500000
+                type: string
+              link:
+                description: Link is the link to the content.
+                properties:
+                  href:
+                    description: Href is the public URL of the content.
+                    type: string
+                    x-kubernetes-validations:
+                    - message: must be a valid URL
+                      rule: isURL(self)
+                required:
+                - href
+                type: object
+              order:
+                description: Order defines the order of the content in the UI.
+                format: int32
+                minimum: 0
+                type: integer
+              parentRef:
+                description: ParentRef is the reference to the resource that this
+                  content belongs to.
+                properties:
+                  kind:
+                    description: Kind is the kind of the resource that this content
+                      belongs to.
+                    enum:
+                    - APIPortal
+                    - API
+                    - APIBundle
+                    type: string
+                  name:
+                    description: Name is the name of the resource that this content
+                      belongs to.
+                    maxLength: 253
+                    type: string
+                required:
+                - kind
+                - name
+                type: object
+              title:
+                description: Title is the public-facing name of the ContentItem.
+                maxLength: 253
+                minLength: 1
+                type: string
+            required:
+            - order
+            - parentRef
+            - title
+            type: object
+            x-kubernetes-validations:
+            - message: exactly one of content or link must be specified
+              rule: '[has(self.content), has(self.link)].filter(x, x).size() == 1'
+          status:
+            description: The current status of this ContentItem.
+            properties:
+              conditions:
+                items:
+                  description: Condition contains details for one aspect of the current
+                    state of this API Resource.
+                  properties:
+                    lastTransitionTime:
+                      description: |-
+                        lastTransitionTime is the last time the condition transitioned from one status to another.
+                        This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+                      format: date-time
+                      type: string
+                    message:
+                      description: |-
+                        message is a human readable message indicating details about the transition.
+                        This may be an empty string.
+                      maxLength: 32768
+                      type: string
+                    observedGeneration:
+                      description: |-
+                        observedGeneration represents the .metadata.generation that the condition was set based upon.
+                        For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+                        with respect to the current state of the instance.
+                      format: int64
+                      minimum: 0
+                      type: integer
+                    reason:
+                      description: |-
+                        reason contains a programmatic identifier indicating the reason for the condition's last transition.
+                        Producers of specific condition types may define expected values and meanings for this field,
+                        and whether the values are considered a guaranteed API.
+                        The value should be a CamelCase string.
+                        This field may not be empty.
+                      maxLength: 1024
+                      minLength: 1
+                      pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                      type: string
+                    status:
+                      description: status of the condition, one of True, False, Unknown.
+                      enum:
+                      - "True"
+                      - "False"
+                      - Unknown
+                      type: string
+                    type:
+                      description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                      maxLength: 316
+                      pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                      type: string
+                  required:
+                  - lastTransitionTime
+                  - message
+                  - reason
+                  - status
+                  - type
+                  type: object
+                type: array
+              hash:
+                description: Hash is a hash representing the ContentItem.
+                type: string
+              syncedAt:
+                format: date-time
+                type: string
+              version:
+                type: string
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}

traefik-crds/crds-files/hub/hub.traefik.io_managedsubscriptions.yaml

@@ -144,6 +144,7 @@ spec:
                 description: |-
                   Applications references the Applications that will gain access to the specified APIs.
                   Multiple ManagedSubscriptions can select the same AppID.
+
                   Deprecated: Use ManagedApplications instead.
                 items:
                   description: ApplicationReference references an Application.