Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

✨ Sync GRC manifests for v0.15.0 #452

Merged
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -33,16 +33,8 @@ spec:
fieldPath: metadata.name
- name: CONFIG_POLICY_CONTROLLER_IMAGE
value: quay.io/open-cluster-management/config-policy-controller:{{ .BundleVersion.PolicyAddon }}
- name: GOVERNANCE_POLICY_SPEC_SYNC_IMAGE
value: quay.io/open-cluster-management/governance-policy-spec-sync:{{ .BundleVersion.PolicyAddon }}
- name: GOVERNANCE_POLICY_STATUS_SYNC_IMAGE
value: quay.io/open-cluster-management/governance-policy-status-sync:{{ .BundleVersion.PolicyAddon }}
- name: GOVERNANCE_POLICY_TEMPLATE_SYNC_IMAGE
value: quay.io/open-cluster-management/governance-policy-template-sync:{{ .BundleVersion.PolicyAddon }}
- name: GOVERNANCE_POLICY_FRAMEWORK_ADDON_IMAGE
value: quay.io/open-cluster-management/governance-policy-framework-addon:{{ .BundleVersion.PolicyAddon }}
- name: KUBE_RBAC_PROXY_IMAGE
value: registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.10
image: quay.io/open-cluster-management/governance-policy-addon-controller:{{ .BundleVersion.PolicyAddon }}
imagePullPolicy: IfNotPresent
name: manager
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
annotations:
controller-gen.kubebuilder.io/version: v0.14.0
controller-gen.kubebuilder.io/version: v0.16.3
name: placementbindings.policy.open-cluster-management.io
spec:
group: policy.open-cluster-management.io
Expand All @@ -19,28 +19,31 @@ spec:
- name: v1
schema:
openAPIV3Schema:
description: PlacementBinding is the Schema for the placementbindings API
description: >-
PlacementBinding is the schema for the placementbindings API. A PlacementBinding resource binds a
managed cluster placement resource to a policy or policy set, along with configurable overrides.
properties:
apiVersion:
description: |-
description: >-
APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
bindingOverrides:
description: BindingOverrides defines the overrides to the Subjects
description: BindingOverrides defines the overrides for the subjects.
properties:
remediationAction:
description: This field overrides the policy remediationAction on
target clusters
description: >-
RemediationAction overrides the policy remediationAction on target clusters. This parameter is
optional. If you set it, you must set it to "enforce".
enum:
- Enforce
- enforce
type: string
type: object
kind:
description: |-
description: >-
Kind is a string value representing the REST resource this object represents.
Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
Expand All @@ -50,22 +53,31 @@ spec:
metadata:
type: object
placementRef:
description: PlacementSubject defines the resource that can be used as
PlacementBinding placementRef
description: >-
PlacementSubject defines the placement resource that is being bound to the subjects defined in
the placement binding.
properties:
apiGroup:
description: >-
APIGroup is the API group to which the kind belongs. Must be set to
"cluster.open-cluster-management.io" for Placement or "apps.open-cluster-management.io" for
PlacementRule (deprecated).
enum:
- apps.open-cluster-management.io
- cluster.open-cluster-management.io
minLength: 1
type: string
kind:
description: >-
Kind is the kind of the placement resource. Must be set to either "Placement" or
"PlacementRule" (deprecated).
enum:
- PlacementRule
- Placement
minLength: 1
type: string
name:
description: Name is the name of the placement resource being bound.
minLength: 1
type: string
required:
Expand All @@ -74,31 +86,42 @@ spec:
- name
type: object
status:
description: PlacementBindingStatus defines the observed state of PlacementBinding
description: PlacementBindingStatus defines the observed state of the
PlacementBinding resource.
type: object
subFilter:
description: This field provides the ability to select a subset of bound
clusters
description: >-
SubFilter provides the ability to apply overrides to a subset of bound clusters when multiple
placement bindings are used to bind a policy to placements. When set, only the overrides will be
applied to the clusters bound by this placement binding but it will not be considered for placing
the policy. This parameter is optional. If you set it, you must set it to "restricted".
enum:
- restricted
type: string
subjects:
items:
description: Subject defines the resource that can be used as PlacementBinding
subject
description: Subject defines the resource to bind to the placement resource.
properties:
apiGroup:
description: >-
APIGroup is the API group to which the kind belongs. Must be set to
"policy.open-cluster-management.io".
enum:
- policy.open-cluster-management.io
minLength: 1
type: string
kind:
description: >-
Kind is the kind of the object to bind to the placement resource. Must be set to either
"Policy" or "PolicySet".
enum:
- Policy
- PolicySet
minLength: 1
type: string
name:
description: Name is the name of the policy or policy set to bind
to the placement resource.
minLength: 1
type: string
required:
Expand Down
Loading
Loading