sigs.k8s.io/cluster-api-provider-azure@v1.14.3/config/crd/bases/infrastructure.cluster.x-k8s.io_azuresystemassignedidentites.yaml (about) 1 2 --- 3 apiVersion: apiextensions.k8s.io/v1 4 kind: CustomResourceDefinition 5 metadata: 6 annotations: 7 controller-gen.kubebuilder.io/version: v0.3.0 8 creationTimestamp: null 9 name: azuresystemassignedidentites.infrastructure.cluster.x-k8s.io 10 spec: 11 group: infrastructure.cluster.x-k8s.io 12 names: 13 categories: 14 - cluster-api 15 kind: AzureSystemAssignedIdentity 16 listKind: AzureSystemAssignedIdentityList 17 plural: azuresystemassignedidentites 18 singular: azuresystemassignedidentity 19 scope: Namespaced 20 versions: 21 - name: v1alpha3 22 schema: 23 openAPIV3Schema: 24 description: AzureSystemAssignedIdentity represents a reference to an Azure 25 access key ID and secret access key, stored in a secret. 26 properties: 27 apiVersion: 28 description: 'APIVersion defines the versioned schema of this representation 29 of an object. Servers should convert recognized schemas to the latest 30 internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' 31 type: string 32 kind: 33 description: 'Kind is a string value representing the REST resource this 34 object represents. Servers may infer this from the endpoint the client 35 submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' 36 type: string 37 metadata: 38 type: object 39 spec: 40 description: Spec for this AzureSystemAssignedIdentitySpec. 41 properties: 42 allowedNamespaces: 43 description: "AllowedNamespaces is a selector of namespaces that AzureClusters 44 can use this ClusterPrincipal from. This is a standard Kubernetes 45 LabelSelector, a label query over a set of resources. The result 46 of matchLabels and matchExpressions are ANDed. Controllers must 47 not support AzureClusters in namespaces outside this selector. \n 48 An empty selector (default) indicates that AzureClusters can use 49 this AzureSystemAssignedIdentity from any namespace. This field 50 is intentionally not a pointer because the nil behavior (no namespaces) 51 is undesirable here." 52 properties: 53 matchExpressions: 54 description: matchExpressions is a list of label selector requirements. 55 The requirements are ANDed. 56 items: 57 description: A label selector requirement is a selector that 58 contains values, a key, and an operator that relates the key 59 and values. 60 properties: 61 key: 62 description: key is the label key that the selector applies 63 to. 64 type: string 65 operator: 66 description: operator represents a key's relationship to 67 a set of values. Valid operators are In, NotIn, Exists 68 and DoesNotExist. 69 type: string 70 values: 71 description: values is an array of string values. If the 72 operator is In or NotIn, the values array must be non-empty. 73 If the operator is Exists or DoesNotExist, the values 74 array must be empty. This array is replaced during a strategic 75 merge patch. 76 items: 77 type: string 78 type: array 79 required: 80 - key 81 - operator 82 type: object 83 type: array 84 matchLabels: 85 additionalProperties: 86 type: string 87 description: matchLabels is a map of {key,value} pairs. A single 88 {key,value} in the matchLabels map is equivalent to an element 89 of matchExpressions, whose key field is "key", the operator 90 is "In", and the values array contains only "value". The requirements 91 are ANDed. 92 type: object 93 type: object 94 name: 95 type: string 96 secretRef: 97 description: 'Reference to a secret containing the credentials. The 98 secret should contain the following data keys: tenantID' 99 properties: 100 name: 101 description: Name is unique within a namespace to reference a 102 secret resource. 103 type: string 104 namespace: 105 description: Namespace defines the space within which the secret 106 name must be unique. 107 type: string 108 type: object 109 required: 110 - name 111 - secretRef 112 type: object 113 type: object 114 served: true 115 storage: true 116 status: 117 acceptedNames: 118 kind: "" 119 plural: "" 120 conditions: [] 121 storedVersions: []