You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: 'APIVersion defines the versioned schema of this representation
25
-
of an object. Servers should convert recognized schemas to the latest
26
-
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
24
+
description: |-
25
+
APIVersion defines the versioned schema of this representation of an object.
26
+
Servers should convert recognized schemas to the latest internal value, and
27
+
may reject unrecognized values.
28
+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
27
29
type: string
28
30
kind:
29
-
description: 'Kind is a string value representing the REST resource this
30
-
object represents. Servers may infer this from the endpoint the client
31
-
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
31
+
description: |-
32
+
Kind is a string value representing the REST resource this object represents.
33
+
Servers may infer this from the endpoint the client submits requests to.
34
+
Cannot be updated.
35
+
In CamelCase.
36
+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
32
37
type: string
33
38
metadata:
34
39
type: object
35
40
spec:
36
-
description: The GitOpsDeploymentManagedEnvironment CR describes a remote
37
-
cluster which the GitOps Service will deploy to, via Argo CD. This resource
38
-
references a Secret resource, of type managed-gitops.redhat.com/managed-environment,
39
-
that contains the cluster credentials. The Secret should contain credentials
40
-
to a ServiceAccount/User account on the target cluster. This is referred
41
-
to as the Argo CD 'ServiceAccount' below.
41
+
description: |-
42
+
The GitOpsDeploymentManagedEnvironment CR describes a remote cluster which the GitOps Service will deploy to, via Argo CD.
43
+
This resource references a Secret resource, of type managed-gitops.redhat.com/managed-environment, that contains the cluster credentials.
44
+
The Secret should contain credentials to a ServiceAccount/User account on the target cluster.
45
+
This is referred to as the Argo CD 'ServiceAccount' below.
42
46
properties:
43
47
allowInsecureSkipTLSVerify:
44
-
description: 'AllowInsecureSkipTLSVerify controls whether Argo CD
45
-
will accept a Kubernetes API URL with untrusted-TLS certificate.
46
-
Optional: If true, the GitOps Service will allow Argo CD to connect
47
-
to the specified cluster even if it is using an invalid or self-signed
48
-
TLS certificate. Defaults to false.'
48
+
description: |-
49
+
AllowInsecureSkipTLSVerify controls whether Argo CD will accept a Kubernetes API URL with untrusted-TLS certificate.
50
+
Optional: If true, the GitOps Service will allow Argo CD to connect to the specified cluster even if it is using an invalid or self-signed TLS certificate.
51
+
Defaults to false.
49
52
type: boolean
50
53
apiURL:
51
54
description: APIURL is the URL of the cluster to connect to
52
55
type: string
53
56
clusterResources:
54
-
description: "ClusterResources is used in conjuction with the Namespace
55
-
field. If the .spec.namespaces field is non-empty, this field will
56
-
be used to determine whether Argo CD should attempt to manage cluster-scoped
57
-
resources. - If .spec.namespaces field is empty, this field is ignored.
58
-
- If you are familiar with Argo CD: this field is equivalent to
59
-
the field of the same name in the Argo CD Cluster Secret. \n Optional,
60
-
default to false."
57
+
description: |-
58
+
ClusterResources is used in conjuction with the Namespace field.
59
+
If the .spec.namespaces field is non-empty, this field will be used to determine whether Argo CD should
60
+
attempt to manage cluster-scoped resources.
61
+
- If .spec.namespaces field is empty, this field is ignored.
62
+
- If you are familiar with Argo CD: this field is equivalent to the field of the same name in the Argo CD Cluster Secret.
63
+
64
+
65
+
Optional, default to false.
61
66
type: boolean
62
67
createNewServiceAccount:
63
-
description: "CreateNewServiceAccount controls whether Argo CD will
64
-
use the ServiceAccount provided by the user in the Secret, or if
65
-
a new ServiceAccount should be created. \n Optional, default to
66
-
false. \n - If true, the GitOps Service will automatically create
67
-
a ServiceAccount/ClusterRole/ClusterRoleBinding on the target cluster,
68
-
using the credentials provided by the user in the secret. - Argo
69
-
CD will then be configured to deploy with that new ServiceAccount.
70
-
\n - Default: If false, it is assumed that the credentials provided
71
-
by the user in the Secret are for a ServiceAccount on the cluster,
72
-
and Argo CD will be configred to use the ServiceAccount referenced
73
-
by the Secret of the user. No new ServiceAccount will be created.
74
-
- This should be used, for example, when the ServiceAccount Argo
75
-
CD does not have full cluster access (*/*/* at cluster scope)"
68
+
description: |-
69
+
CreateNewServiceAccount controls whether Argo CD will use the ServiceAccount provided by the user in the Secret, or if a new ServiceAccount
70
+
should be created.
71
+
72
+
73
+
Optional, default to false.
74
+
75
+
76
+
- If true, the GitOps Service will automatically create a ServiceAccount/ClusterRole/ClusterRoleBinding on the target cluster,
77
+
using the credentials provided by the user in the secret.
78
+
- Argo CD will then be configured to deploy with that new ServiceAccount.
79
+
80
+
81
+
- Default: If false, it is assumed that the credentials provided by the user in the Secret are for a ServiceAccount on the cluster, and
82
+
Argo CD will be configred to use the ServiceAccount referenced by the Secret of the user. No new ServiceAccount will be created.
83
+
- This should be used, for example, when the ServiceAccount Argo CD does not have full cluster access (*/*/* at cluster scope)
76
84
type: boolean
77
85
credentialsSecret:
78
86
description: ClusterCredentialsSecret is a reference to a Secret that
79
87
contains cluster connection details. The cluster details should
80
88
be in the form of a kubeconfig file.
81
89
type: string
82
90
namespaces:
83
-
description: "Namespaces allows one to indicate which Namespaces the
84
-
Secret's ServiceAccount has access to. \n Optional, defaults to
85
-
empty. If empty, it is assumed that the ServiceAccount has access
86
-
to all Namespaces. \n The ServiceAccount that GitOps Service/Argo
87
-
CD uses to deploy may not have access to all of the Namespaces on
88
-
a cluster. If not specified, it is assumed that the Argo CD ServiceAccount
89
-
has read/write at cluster-scope. - If you are familiar with Argo
90
-
CD: this field is equivalent to the field of the same name in the
91
-
Argo CD Cluster Secret."
91
+
description: |-
92
+
Namespaces allows one to indicate which Namespaces the Secret's ServiceAccount has access to.
93
+
94
+
95
+
Optional, defaults to empty. If empty, it is assumed that the ServiceAccount has access to all Namespaces.
96
+
97
+
98
+
The ServiceAccount that GitOps Service/Argo CD uses to deploy may not have access to all of the Namespaces on a cluster.
99
+
If not specified, it is assumed that the Argo CD ServiceAccount has read/write at cluster-scope.
100
+
- If you are familiar with Argo CD: this field is equivalent to the field of the same name in the Argo CD Cluster Secret.
92
101
items:
93
102
type: string
94
103
type: array
@@ -104,42 +113,42 @@ spec:
104
113
conditions:
105
114
items:
106
115
description: "Condition contains details for one aspect of the current
107
-
state of this API Resource. --- This struct is intended for direct
108
-
use as an array at the field path .status.conditions. For example,
109
-
\n type FooStatus struct{ // Represents the observations of a
110
-
foo's current state. // Known .status.conditions.type are: \"Available\",
111
-
\"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
0 commit comments