From 28d0911b73e84dc815e050edbd5d830a24618b54 Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Sat, 20 Dec 2025 00:46:48 +0000 Subject: [PATCH] chore: Update manifests after change --- .../traefik/ClusterRole-traefik-traefik.yaml | 2 +- .../ClusterRoleBinding-traefik-traefik.yaml | 2 +- ...rceDefinition-apiauths.hub.traefik.io.yaml | 109 ++++++++++++++++-- ...eDefinition-apibundles.hub.traefik.io.yaml | 82 +++++++++++++ ...nition-apicatalogitems.hub.traefik.io.yaml | 84 ++++++++++++++ ...rceDefinition-apiplans.hub.traefik.io.yaml | 67 ++++++++++- ...inition-apiportalauths.hub.traefik.io.yaml | 57 +++++++++ ...eDefinition-apiportals.hub.traefik.io.yaml | 57 +++++++++ ...esourceDefinition-apis.hub.traefik.io.yaml | 57 +++++++++ ...Definition-apiversions.hub.traefik.io.yaml | 58 +++++++++- ...on-managedapplications.hub.traefik.io.yaml | 58 ++++++++++ ...n-managedsubscriptions.hub.traefik.io.yaml | 82 +++++++++++++ .../manifests/traefik/DaemonSet-traefik.yaml | 6 +- .../traefik/Gateway-traefik-gateway.yaml | 2 +- .../traefik/GatewayClass-traefik.yaml | 2 +- .../IngressRoute-traefik-dashboard.yaml | 2 +- .../traefik/Service-traefik-metrics.yaml | 2 +- .../manifests/traefik/Service-traefik.yaml | 2 +- .../traefik/ServiceAccount-traefik.yaml | 2 +- .../traefik/ServiceMonitor-traefik.yaml | 2 +- 20 files changed, 712 insertions(+), 23 deletions(-) diff --git a/clusters/cl01tl/manifests/traefik/ClusterRole-traefik-traefik.yaml b/clusters/cl01tl/manifests/traefik/ClusterRole-traefik-traefik.yaml index 739602bb7..d56b32f3f 100644 --- a/clusters/cl01tl/manifests/traefik/ClusterRole-traefik-traefik.yaml +++ b/clusters/cl01tl/manifests/traefik/ClusterRole-traefik-traefik.yaml @@ -5,7 +5,7 @@ metadata: labels: app.kubernetes.io/name: traefik app.kubernetes.io/instance: traefik-traefik - helm.sh/chart: traefik-37.4.0 + helm.sh/chart: traefik-38.0.1 app.kubernetes.io/managed-by: Helm rules: - apiGroups: diff --git a/clusters/cl01tl/manifests/traefik/ClusterRoleBinding-traefik-traefik.yaml b/clusters/cl01tl/manifests/traefik/ClusterRoleBinding-traefik-traefik.yaml index 94c896254..f5af0309b 100644 --- a/clusters/cl01tl/manifests/traefik/ClusterRoleBinding-traefik-traefik.yaml +++ b/clusters/cl01tl/manifests/traefik/ClusterRoleBinding-traefik-traefik.yaml @@ -5,7 +5,7 @@ metadata: labels: app.kubernetes.io/name: traefik app.kubernetes.io/instance: traefik-traefik - helm.sh/chart: traefik-37.4.0 + helm.sh/chart: traefik-38.0.1 app.kubernetes.io/managed-by: Helm roleRef: apiGroup: rbac.authorization.k8s.io diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiauths.hub.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiauths.hub.traefik.io.yaml index fcded8599..26e7988c0 100644 --- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiauths.hub.traefik.io.yaml +++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiauths.hub.traefik.io.yaml @@ -61,21 +61,29 @@ spec: description: ForwardHeaders specifies additional headers to forward with the request. type: object jwksFile: - description: JWKSFile contains the JWKS file content for JWT verification. + description: |- + JWKSFile contains the JWKS file content for JWT verification. + Mutually exclusive with SigningSecretName, PublicKey, JWKSURL, and TrustedIssuers. type: string jwksUrl: - description: JWKSURL is the URL to fetch the JWKS for JWT verification. + description: |- + JWKSURL is the URL to fetch the JWKS for JWT verification. + Mutually exclusive with SigningSecretName, PublicKey, JWKSFile, and TrustedIssuers. + Deprecated: Use TrustedIssuers instead for more flexible JWKS configuration with issuer validation. type: string x-kubernetes-validations: - - message: must be a valid URL - rule: isURL(self) + - message: must be a valid HTTPS URL + rule: isURL(self) && self.startsWith('https://') publicKey: - description: PublicKey is the PEM-encoded public key for JWT verification. + description: |- + PublicKey is the PEM-encoded public key for JWT verification. + Mutually exclusive with SigningSecretName, JWKSFile, JWKSURL, and TrustedIssuers. type: string signingSecretName: description: |- SigningSecretName is the name of the Kubernetes Secret containing the signing secret. The secret must be of type Opaque and contain a key named 'value'. + Mutually exclusive with PublicKey, JWKSFile, JWKSURL, and TrustedIssuers. maxLength: 253 type: string stripAuthorizationHeader: @@ -89,12 +97,42 @@ spec: tokenQueryKey: description: TokenQueryKey specifies the query parameter name for the JWT token. type: string + trustedIssuers: + description: |- + TrustedIssuers defines multiple JWKS providers with optional issuer validation. + Mutually exclusive with SigningSecretName, PublicKey, JWKSFile, and JWKSURL. + items: + description: TrustedIssuer represents a trusted JWT issuer with its associated JWKS endpoint for token verification. + properties: + issuer: + description: |- + Issuer is the expected value of the "iss" claim. + If specified, tokens must have this exact issuer to be validated against this JWKS. + The issuer value must match exactly, including trailing slashes and URL encoding. + If omitted, this JWKS acts as a fallback for any issuer. + type: string + jwksUrl: + description: JWKSURL is the URL to fetch the JWKS from. + type: string + x-kubernetes-validations: + - message: must be a valid HTTPS URL + rule: isURL(self) && self.startsWith('https://') + required: + - jwksUrl + type: object + maxItems: 100 + minItems: 1 + type: array required: - appIdClaim type: object x-kubernetes-validations: - - message: exactly one of signingSecretName, publicKey, jwksFile, or jwksUrl must be specified - rule: '[has(self.signingSecretName), has(self.publicKey), has(self.jwksFile), has(self.jwksUrl)].filter(x, x).size() == 1' + - message: exactly one of signingSecretName, publicKey, jwksFile, jwksUrl, or trustedIssuers must be specified + rule: '[has(self.signingSecretName), has(self.publicKey), has(self.jwksFile), has(self.jwksUrl), has(self.trustedIssuers)].filter(x, x).size() == 1' + - message: trustedIssuers must not be empty when specified + rule: '!has(self.trustedIssuers) || size(self.trustedIssuers) > 0' + - message: only one entry in trustedIssuers may omit the issuer field + rule: '!has(self.trustedIssuers) || self.trustedIssuers.filter(x, !has(x.issuer) || x.issuer == "").size() <= 1' ldap: description: LDAP configures LDAP authentication. properties: @@ -154,6 +192,61 @@ spec: status: description: The current status of this APIAuth. properties: + conditions: + items: + description: Condition contains details for one aspect of the current state of this API Resource. + properties: + lastTransitionTime: + description: |- + lastTransitionTime is the last time the condition transitioned from one status to another. + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. + format: date-time + type: string + message: + description: |- + message is a human readable message indicating details about the transition. + This may be an empty string. + maxLength: 32768 + type: string + observedGeneration: + description: |- + observedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + format: int64 + minimum: 0 + type: integer + reason: + description: |- + reason contains a programmatic identifier indicating the reason for the condition's last transition. + Producers of specific condition types may define expected values and meanings for this field, + and whether the values are considered a guaranteed API. + The value should be a CamelCase string. + This field may not be empty. + maxLength: 1024 + minLength: 1 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ + type: string + status: + description: status of the condition, one of True, False, Unknown. + enum: + - "True" + - "False" + - Unknown + type: string + type: + description: type of condition in CamelCase or in foo.example.com/CamelCase. + maxLength: 316 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ + type: string + required: + - lastTransitionTime + - message + - reason + - status + - type + type: object + type: array hash: description: Hash is a hash representing the APIAuth. type: string @@ -166,3 +259,5 @@ spec: type: object served: true storage: true + subresources: + status: {} diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apibundles.hub.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apibundles.hub.traefik.io.yaml index 69ee91207..cc524f3bc 100644 --- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apibundles.hub.traefik.io.yaml +++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apibundles.hub.traefik.io.yaml @@ -114,15 +114,97 @@ spec: status: description: The current status of this APIBundle. properties: + conditions: + description: Conditions is the list of status conditions. + items: + description: Condition contains details for one aspect of the current state of this API Resource. + properties: + lastTransitionTime: + description: |- + lastTransitionTime is the last time the condition transitioned from one status to another. + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. + format: date-time + type: string + message: + description: |- + message is a human readable message indicating details about the transition. + This may be an empty string. + maxLength: 32768 + type: string + observedGeneration: + description: |- + observedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + format: int64 + minimum: 0 + type: integer + reason: + description: |- + reason contains a programmatic identifier indicating the reason for the condition's last transition. + Producers of specific condition types may define expected values and meanings for this field, + and whether the values are considered a guaranteed API. + The value should be a CamelCase string. + This field may not be empty. + maxLength: 1024 + minLength: 1 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ + type: string + status: + description: status of the condition, one of True, False, Unknown. + enum: + - "True" + - "False" + - Unknown + type: string + type: + description: type of condition in CamelCase or in foo.example.com/CamelCase. + maxLength: 316 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ + type: string + required: + - lastTransitionTime + - message + - reason + - status + - type + type: object + type: array hash: description: Hash is a hash representing the APIBundle. type: string + resolvedApis: + description: ResolvedAPIs is the list of APIs that were successfully resolved. + items: + description: ResolvedAPIReference references a resolved API. + properties: + name: + description: Name of the API. + type: string + required: + - name + type: object + type: array syncedAt: format: date-time type: string + unresolvedApis: + description: UnresolvedAPIs is the list of APIs that could not be resolved. + items: + description: ResolvedAPIReference references a resolved API. + properties: + name: + description: Name of the API. + type: string + required: + - name + type: object + type: array version: type: string type: object type: object served: true storage: true + subresources: + status: {} diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apicatalogitems.hub.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apicatalogitems.hub.traefik.io.yaml index 6654ca10b..166dcacdf 100644 --- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apicatalogitems.hub.traefik.io.yaml +++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apicatalogitems.hub.traefik.io.yaml @@ -163,18 +163,102 @@ spec: x-kubernetes-validations: - message: groups and everyone are mutually exclusive rule: '(has(self.everyone) && has(self.groups)) ? !(self.everyone && self.groups.size() > 0) : true' + - message: groups is required when everyone is false + rule: (has(self.everyone) && self.everyone) || (has(self.groups) && self.groups.size() > 0) status: description: The current status of this APICatalogItem. properties: + conditions: + description: Conditions is the list of status conditions. + items: + description: Condition contains details for one aspect of the current state of this API Resource. + properties: + lastTransitionTime: + description: |- + lastTransitionTime is the last time the condition transitioned from one status to another. + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. + format: date-time + type: string + message: + description: |- + message is a human readable message indicating details about the transition. + This may be an empty string. + maxLength: 32768 + type: string + observedGeneration: + description: |- + observedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + format: int64 + minimum: 0 + type: integer + reason: + description: |- + reason contains a programmatic identifier indicating the reason for the condition's last transition. + Producers of specific condition types may define expected values and meanings for this field, + and whether the values are considered a guaranteed API. + The value should be a CamelCase string. + This field may not be empty. + maxLength: 1024 + minLength: 1 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ + type: string + status: + description: status of the condition, one of True, False, Unknown. + enum: + - "True" + - "False" + - Unknown + type: string + type: + description: type of condition in CamelCase or in foo.example.com/CamelCase. + maxLength: 316 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ + type: string + required: + - lastTransitionTime + - message + - reason + - status + - type + type: object + type: array hash: description: Hash is a hash representing the APICatalogItem. type: string + resolvedApis: + description: ResolvedAPIs is the list of APIs that were successfully resolved. + items: + description: ResolvedAPIReference references a resolved API. + properties: + name: + description: Name of the API. + type: string + required: + - name + type: object + type: array syncedAt: format: date-time type: string + unresolvedApis: + description: UnresolvedAPIs is the list of APIs that could not be resolved. + items: + description: ResolvedAPIReference references a resolved API. + properties: + name: + description: Name of the API. + type: string + required: + - name + type: object + type: array version: type: string type: object type: object served: true storage: true + subresources: + status: {} diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiplans.hub.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiplans.hub.traefik.io.yaml index 5aaf79bfb..575259b03 100644 --- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiplans.hub.traefik.io.yaml +++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiplans.hub.traefik.io.yaml @@ -53,7 +53,7 @@ spec: - application type: string limit: - description: Limit is the maximum number of token in the bucket. + description: Limit is the maximum number of requests per sliding Period. type: integer x-kubernetes-validations: - message: must be a positive number @@ -80,13 +80,17 @@ spec: - application type: string limit: - description: Limit is the maximum number of token in the bucket. + description: |- + Limit is the number of requests per Period used to calculate the regeneration rate. + Traffic will converge to this rate over time by delaying requests when possible, and dropping them when throttling alone is not enough. type: integer x-kubernetes-validations: - message: must be a positive number rule: self >= 0 period: - description: Period is the unit of time for the Limit. + description: |- + Period is the time unit used to express the rate. + Combined with Limit, it defines the rate at which request capacity regenerates (Limit รท Period). format: duration type: string x-kubernetes-validations: @@ -104,6 +108,61 @@ spec: status: description: The current status of this APIPlan. properties: + conditions: + items: + description: Condition contains details for one aspect of the current state of this API Resource. + properties: + lastTransitionTime: + description: |- + lastTransitionTime is the last time the condition transitioned from one status to another. + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. + format: date-time + type: string + message: + description: |- + message is a human readable message indicating details about the transition. + This may be an empty string. + maxLength: 32768 + type: string + observedGeneration: + description: |- + observedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + format: int64 + minimum: 0 + type: integer + reason: + description: |- + reason contains a programmatic identifier indicating the reason for the condition's last transition. + Producers of specific condition types may define expected values and meanings for this field, + and whether the values are considered a guaranteed API. + The value should be a CamelCase string. + This field may not be empty. + maxLength: 1024 + minLength: 1 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ + type: string + status: + description: status of the condition, one of True, False, Unknown. + enum: + - "True" + - "False" + - Unknown + type: string + type: + description: type of condition in CamelCase or in foo.example.com/CamelCase. + maxLength: 316 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ + type: string + required: + - lastTransitionTime + - message + - reason + - status + - type + type: object + type: array hash: description: Hash is a hash representing the APIPlan. type: string @@ -116,3 +175,5 @@ spec: type: object served: true storage: true + subresources: + status: {} diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiportalauths.hub.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiportalauths.hub.traefik.io.yaml index 33761d116..c0a9332c0 100644 --- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiportalauths.hub.traefik.io.yaml +++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiportalauths.hub.traefik.io.yaml @@ -195,6 +195,61 @@ spec: status: description: The current status of this APIPortalAuth. properties: + conditions: + items: + description: Condition contains details for one aspect of the current state of this API Resource. + properties: + lastTransitionTime: + description: |- + lastTransitionTime is the last time the condition transitioned from one status to another. + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. + format: date-time + type: string + message: + description: |- + message is a human readable message indicating details about the transition. + This may be an empty string. + maxLength: 32768 + type: string + observedGeneration: + description: |- + observedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + format: int64 + minimum: 0 + type: integer + reason: + description: |- + reason contains a programmatic identifier indicating the reason for the condition's last transition. + Producers of specific condition types may define expected values and meanings for this field, + and whether the values are considered a guaranteed API. + The value should be a CamelCase string. + This field may not be empty. + maxLength: 1024 + minLength: 1 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ + type: string + status: + description: status of the condition, one of True, False, Unknown. + enum: + - "True" + - "False" + - Unknown + type: string + type: + description: type of condition in CamelCase or in foo.example.com/CamelCase. + maxLength: 316 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ + type: string + required: + - lastTransitionTime + - message + - reason + - status + - type + type: object + type: array hash: description: Hash is a hash representing the APIPortalAuth. type: string @@ -207,3 +262,5 @@ spec: type: object served: true storage: true + subresources: + status: {} diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiportals.hub.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiportals.hub.traefik.io.yaml index 226c1fcd9..079388fb6 100644 --- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiportals.hub.traefik.io.yaml +++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiportals.hub.traefik.io.yaml @@ -77,6 +77,61 @@ spec: status: description: The current status of this APIPortal. properties: + conditions: + items: + description: Condition contains details for one aspect of the current state of this API Resource. + properties: + lastTransitionTime: + description: |- + lastTransitionTime is the last time the condition transitioned from one status to another. + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. + format: date-time + type: string + message: + description: |- + message is a human readable message indicating details about the transition. + This may be an empty string. + maxLength: 32768 + type: string + observedGeneration: + description: |- + observedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + format: int64 + minimum: 0 + type: integer + reason: + description: |- + reason contains a programmatic identifier indicating the reason for the condition's last transition. + Producers of specific condition types may define expected values and meanings for this field, + and whether the values are considered a guaranteed API. + The value should be a CamelCase string. + This field may not be empty. + maxLength: 1024 + minLength: 1 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ + type: string + status: + description: status of the condition, one of True, False, Unknown. + enum: + - "True" + - "False" + - Unknown + type: string + type: + description: type of condition in CamelCase or in foo.example.com/CamelCase. + maxLength: 316 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ + type: string + required: + - lastTransitionTime + - message + - reason + - status + - type + type: object + type: array hash: description: Hash is a hash representing the APIPortal. type: string @@ -131,3 +186,5 @@ spec: type: object served: true storage: true + subresources: + status: {} diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apis.hub.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apis.hub.traefik.io.yaml index f112eb2ae..4cd6c2065 100644 --- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apis.hub.traefik.io.yaml +++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apis.hub.traefik.io.yaml @@ -216,6 +216,61 @@ spec: status: description: The current status of this API. properties: + conditions: + items: + description: Condition contains details for one aspect of the current state of this API Resource. + properties: + lastTransitionTime: + description: |- + lastTransitionTime is the last time the condition transitioned from one status to another. + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. + format: date-time + type: string + message: + description: |- + message is a human readable message indicating details about the transition. + This may be an empty string. + maxLength: 32768 + type: string + observedGeneration: + description: |- + observedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + format: int64 + minimum: 0 + type: integer + reason: + description: |- + reason contains a programmatic identifier indicating the reason for the condition's last transition. + Producers of specific condition types may define expected values and meanings for this field, + and whether the values are considered a guaranteed API. + The value should be a CamelCase string. + This field may not be empty. + maxLength: 1024 + minLength: 1 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ + type: string + status: + description: status of the condition, one of True, False, Unknown. + enum: + - "True" + - "False" + - Unknown + type: string + type: + description: type of condition in CamelCase or in foo.example.com/CamelCase. + maxLength: 316 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ + type: string + required: + - lastTransitionTime + - message + - reason + - status + - type + type: object + type: array hash: description: Hash is a hash representing the API. type: string @@ -228,3 +283,5 @@ spec: type: object served: true storage: true + subresources: + status: {} diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiversions.hub.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiversions.hub.traefik.io.yaml index f08fb23a0..0aae488c7 100644 --- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiversions.hub.traefik.io.yaml +++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-apiversions.hub.traefik.io.yaml @@ -215,6 +215,61 @@ spec: status: description: The current status of this APIVersion. properties: + conditions: + items: + description: Condition contains details for one aspect of the current state of this API Resource. + properties: + lastTransitionTime: + description: |- + lastTransitionTime is the last time the condition transitioned from one status to another. + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. + format: date-time + type: string + message: + description: |- + message is a human readable message indicating details about the transition. + This may be an empty string. + maxLength: 32768 + type: string + observedGeneration: + description: |- + observedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + format: int64 + minimum: 0 + type: integer + reason: + description: |- + reason contains a programmatic identifier indicating the reason for the condition's last transition. + Producers of specific condition types may define expected values and meanings for this field, + and whether the values are considered a guaranteed API. + The value should be a CamelCase string. + This field may not be empty. + maxLength: 1024 + minLength: 1 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ + type: string + status: + description: status of the condition, one of True, False, Unknown. + enum: + - "True" + - "False" + - Unknown + type: string + type: + description: type of condition in CamelCase or in foo.example.com/CamelCase. + maxLength: 316 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ + type: string + required: + - lastTransitionTime + - message + - reason + - status + - type + type: object + type: array hash: description: Hash is a hash representing the APIVersion. type: string @@ -227,4 +282,5 @@ spec: type: object served: true storage: true - subresources: {} + subresources: + status: {} diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-managedapplications.hub.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-managedapplications.hub.traefik.io.yaml index 8ad8edfa7..275394793 100644 --- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-managedapplications.hub.traefik.io.yaml +++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-managedapplications.hub.traefik.io.yaml @@ -41,6 +41,7 @@ spec: apiKeys: description: APIKeys references the API keys used to authenticate the application when calling APIs. items: + description: APIKey describes an API key used to authenticate the application when calling APIs. properties: secretName: description: SecretName references the name of the secret containing the API key. @@ -88,6 +89,61 @@ spec: additionalProperties: type: string type: object + conditions: + items: + description: Condition contains details for one aspect of the current state of this API Resource. + properties: + lastTransitionTime: + description: |- + lastTransitionTime is the last time the condition transitioned from one status to another. + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. + format: date-time + type: string + message: + description: |- + message is a human readable message indicating details about the transition. + This may be an empty string. + maxLength: 32768 + type: string + observedGeneration: + description: |- + observedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + format: int64 + minimum: 0 + type: integer + reason: + description: |- + reason contains a programmatic identifier indicating the reason for the condition's last transition. + Producers of specific condition types may define expected values and meanings for this field, + and whether the values are considered a guaranteed API. + The value should be a CamelCase string. + This field may not be empty. + maxLength: 1024 + minLength: 1 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ + type: string + status: + description: status of the condition, one of True, False, Unknown. + enum: + - "True" + - "False" + - Unknown + type: string + type: + description: type of condition in CamelCase or in foo.example.com/CamelCase. + maxLength: 316 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ + type: string + required: + - lastTransitionTime + - message + - reason + - status + - type + type: object + type: array hash: description: Hash is a hash representing the ManagedApplication. type: string @@ -100,3 +156,5 @@ spec: type: object served: true storage: true + subresources: + status: {} diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-managedsubscriptions.hub.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-managedsubscriptions.hub.traefik.io.yaml index 808cc3397..a4646f410 100644 --- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-managedsubscriptions.hub.traefik.io.yaml +++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-managedsubscriptions.hub.traefik.io.yaml @@ -206,15 +206,97 @@ spec: status: description: The current status of this ManagedSubscription. properties: + conditions: + description: Conditions is the list of status conditions. + items: + description: Condition contains details for one aspect of the current state of this API Resource. + properties: + lastTransitionTime: + description: |- + lastTransitionTime is the last time the condition transitioned from one status to another. + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. + format: date-time + type: string + message: + description: |- + message is a human readable message indicating details about the transition. + This may be an empty string. + maxLength: 32768 + type: string + observedGeneration: + description: |- + observedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + format: int64 + minimum: 0 + type: integer + reason: + description: |- + reason contains a programmatic identifier indicating the reason for the condition's last transition. + Producers of specific condition types may define expected values and meanings for this field, + and whether the values are considered a guaranteed API. + The value should be a CamelCase string. + This field may not be empty. + maxLength: 1024 + minLength: 1 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ + type: string + status: + description: status of the condition, one of True, False, Unknown. + enum: + - "True" + - "False" + - Unknown + type: string + type: + description: type of condition in CamelCase or in foo.example.com/CamelCase. + maxLength: 316 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ + type: string + required: + - lastTransitionTime + - message + - reason + - status + - type + type: object + type: array hash: description: Hash is a hash representing the ManagedSubscription. type: string + resolvedApis: + description: ResolvedAPIs is the list of APIs that were successfully resolved. + items: + description: ResolvedAPIReference references a resolved API. + properties: + name: + description: Name of the API. + type: string + required: + - name + type: object + type: array syncedAt: format: date-time type: string + unresolvedApis: + description: UnresolvedAPIs is the list of APIs that could not be resolved. + items: + description: ResolvedAPIReference references a resolved API. + properties: + name: + description: Name of the API. + type: string + required: + - name + type: object + type: array version: type: string type: object type: object served: true storage: true + subresources: + status: {} diff --git a/clusters/cl01tl/manifests/traefik/DaemonSet-traefik.yaml b/clusters/cl01tl/manifests/traefik/DaemonSet-traefik.yaml index 545e7f82c..7182865c2 100644 --- a/clusters/cl01tl/manifests/traefik/DaemonSet-traefik.yaml +++ b/clusters/cl01tl/manifests/traefik/DaemonSet-traefik.yaml @@ -6,7 +6,7 @@ metadata: labels: app.kubernetes.io/name: traefik app.kubernetes.io/instance: traefik-traefik - helm.sh/chart: traefik-37.4.0 + helm.sh/chart: traefik-38.0.1 app.kubernetes.io/managed-by: Helm annotations: spec: @@ -26,7 +26,7 @@ spec: labels: app.kubernetes.io/name: traefik app.kubernetes.io/instance: traefik-traefik - helm.sh/chart: traefik-37.4.0 + helm.sh/chart: traefik-38.0.1 app.kubernetes.io/managed-by: Helm spec: serviceAccountName: traefik @@ -34,7 +34,7 @@ spec: terminationGracePeriodSeconds: 60 hostNetwork: false containers: - - image: docker.io/traefik:v3.6.2 + - image: docker.io/traefik:v3.6.5 imagePullPolicy: IfNotPresent name: traefik resources: diff --git a/clusters/cl01tl/manifests/traefik/Gateway-traefik-gateway.yaml b/clusters/cl01tl/manifests/traefik/Gateway-traefik-gateway.yaml index 752d6a5b9..f0f322e7c 100644 --- a/clusters/cl01tl/manifests/traefik/Gateway-traefik-gateway.yaml +++ b/clusters/cl01tl/manifests/traefik/Gateway-traefik-gateway.yaml @@ -6,7 +6,7 @@ metadata: labels: app.kubernetes.io/name: traefik app.kubernetes.io/instance: traefik-traefik - helm.sh/chart: traefik-37.4.0 + helm.sh/chart: traefik-38.0.1 app.kubernetes.io/managed-by: Helm annotations: cert-manager.io/cluster-issuer: letsencrypt-issuer diff --git a/clusters/cl01tl/manifests/traefik/GatewayClass-traefik.yaml b/clusters/cl01tl/manifests/traefik/GatewayClass-traefik.yaml index 395bad0d0..7347cd3a1 100644 --- a/clusters/cl01tl/manifests/traefik/GatewayClass-traefik.yaml +++ b/clusters/cl01tl/manifests/traefik/GatewayClass-traefik.yaml @@ -5,7 +5,7 @@ metadata: labels: app.kubernetes.io/name: traefik app.kubernetes.io/instance: traefik-traefik - helm.sh/chart: traefik-37.4.0 + helm.sh/chart: traefik-38.0.1 app.kubernetes.io/managed-by: Helm spec: controllerName: traefik.io/gateway-controller diff --git a/clusters/cl01tl/manifests/traefik/IngressRoute-traefik-dashboard.yaml b/clusters/cl01tl/manifests/traefik/IngressRoute-traefik-dashboard.yaml index 70ff5b5b3..5248ac547 100644 --- a/clusters/cl01tl/manifests/traefik/IngressRoute-traefik-dashboard.yaml +++ b/clusters/cl01tl/manifests/traefik/IngressRoute-traefik-dashboard.yaml @@ -6,7 +6,7 @@ metadata: labels: app.kubernetes.io/name: traefik app.kubernetes.io/instance: traefik-traefik - helm.sh/chart: traefik-37.4.0 + helm.sh/chart: traefik-38.0.1 app.kubernetes.io/managed-by: Helm spec: entryPoints: diff --git a/clusters/cl01tl/manifests/traefik/Service-traefik-metrics.yaml b/clusters/cl01tl/manifests/traefik/Service-traefik-metrics.yaml index 0834a4fed..8e6dd7224 100644 --- a/clusters/cl01tl/manifests/traefik/Service-traefik-metrics.yaml +++ b/clusters/cl01tl/manifests/traefik/Service-traefik-metrics.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/name: traefik app.kubernetes.io/instance: traefik-traefik app.kubernetes.io/component: metrics - helm.sh/chart: traefik-37.4.0 + helm.sh/chart: traefik-38.0.1 app.kubernetes.io/managed-by: Helm annotations: spec: diff --git a/clusters/cl01tl/manifests/traefik/Service-traefik.yaml b/clusters/cl01tl/manifests/traefik/Service-traefik.yaml index 561b90ea1..343dbef95 100644 --- a/clusters/cl01tl/manifests/traefik/Service-traefik.yaml +++ b/clusters/cl01tl/manifests/traefik/Service-traefik.yaml @@ -6,7 +6,7 @@ metadata: labels: app.kubernetes.io/name: traefik app.kubernetes.io/instance: traefik-traefik - helm.sh/chart: traefik-37.4.0 + helm.sh/chart: traefik-38.0.1 app.kubernetes.io/managed-by: Helm annotations: spec: diff --git a/clusters/cl01tl/manifests/traefik/ServiceAccount-traefik.yaml b/clusters/cl01tl/manifests/traefik/ServiceAccount-traefik.yaml index 478463b96..628d20b94 100644 --- a/clusters/cl01tl/manifests/traefik/ServiceAccount-traefik.yaml +++ b/clusters/cl01tl/manifests/traefik/ServiceAccount-traefik.yaml @@ -6,7 +6,7 @@ metadata: labels: app.kubernetes.io/name: traefik app.kubernetes.io/instance: traefik-traefik - helm.sh/chart: traefik-37.4.0 + helm.sh/chart: traefik-38.0.1 app.kubernetes.io/managed-by: Helm annotations: automountServiceAccountToken: false diff --git a/clusters/cl01tl/manifests/traefik/ServiceMonitor-traefik.yaml b/clusters/cl01tl/manifests/traefik/ServiceMonitor-traefik.yaml index b781baf40..28a3877c2 100644 --- a/clusters/cl01tl/manifests/traefik/ServiceMonitor-traefik.yaml +++ b/clusters/cl01tl/manifests/traefik/ServiceMonitor-traefik.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/name: traefik app.kubernetes.io/instance: traefik-traefik app.kubernetes.io/component: metrics - helm.sh/chart: traefik-37.4.0 + helm.sh/chart: traefik-38.0.1 app.kubernetes.io/managed-by: Helm spec: jobLabel: traefik -- 2.49.1