apiVersion: apis.kcp.io/v1alpha1
kind: APIResourceSchema
metadata:
name: v1alpha1-11.openbaoservers.socialweb.computer
labels:
contracts.socialweb.computer/vaults: v1alpha1
spec:
group: socialweb.computer
names:
kind: OpenBaoServer
listKind: OpenBaoServerList
plural: openbaoservers
singular: openbaoserver
scope: Cluster
versions:
- name: v1alpha1
served: true
storage: true
subresources:
status: {}
schema:
type: object
properties:
apiVersion:
type: string
kind:
type: string
metadata:
type: object
spec:
type: object
properties:
asset:
type: object
properties:
name:
type: string
sha256:
type: string
required:
- name
- sha256
exec:
type: string
listen:
type: string
init:
type: object
properties:
shares:
type: integer
format: int32
threshold:
type: integer
format: int32
restartPolicy:
type: string
enum:
- Never
- OnFailure
- Always
clients:
type: array
items:
type: object
properties:
name:
type: string
kvMount:
type: string
policies:
type: array
items:
type: string
tokenTTL:
type: string
tokenMaxTTL:
type: string
required:
- name
unit:
type: string
slice:
type: string
after:
type: array
items:
type: string
wants:
type: array
items:
type: string
log:
type: string
storage:
type: object
properties:
postgres:
type: object
properties:
socketDir:
type: string
user:
type: string
database:
type: string
required:
- socketDir
- user
- database
tls:
type: object
properties:
certFile:
type: string
keyFile:
type: string
caFile:
type: string
clientCertOptional:
type: boolean
required:
- certFile
- keyFile
- caFile
declared:
type: object
properties:
secretMounts:
type: array
items:
type: object
properties:
path:
type: string
type:
type: string
maxLeaseTTL:
type: string
maxVersions:
type: integer
format: int32
required:
- path
- type
authMounts:
type: array
items:
type: object
properties:
path:
type: string
type:
type: string
jwt:
type: object
properties:
discoveryURL:
type: string
boundIssuer:
type: string
required:
- discoveryURL
required:
- path
- type
policies:
type: array
items:
type: object
properties:
name:
type: string
rules:
type: array
items:
type: object
properties:
path:
type: string
capabilities:
type: array
items:
type: string
required:
- path
- capabilities
hcl:
type: string
required:
- name
certRoles:
type: array
items:
type: object
properties:
mount:
type: string
name:
type: string
commonNames:
type: array
items:
type: string
caFromPKI:
type: string
policies:
type: array
items:
type: string
tokenTTL:
type: string
tokenMaxTTL:
type: string
noDefaultPolicy:
type: boolean
required:
- mount
- name
- commonNames
- caFromPKI
- policies
jwtRoles:
type: array
items:
type: object
properties:
mount:
type: string
name:
type: string
roleType:
type: string
boundSubject:
type: string
boundAudiences:
type: array
items:
type: string
userClaim:
type: string
policies:
type: array
items:
type: string
tokenTTL:
type: string
required:
- mount
- name
- boundSubject
- boundAudiences
- userClaim
- policies
appRoles:
type: array
items:
type: object
properties:
mount:
type: string
name:
type: string
policies:
type: array
items:
type: string
tokenTTL:
type: string
tokenMaxTTL:
type: string
secretIDTTL:
type: string
required:
- name
- policies
pkiRoles:
type: array
items:
type: object
properties:
mount:
type: string
name:
type: string
allowedDomains:
type: array
items:
type: string
allowSubdomains:
type: boolean
allowBareDomains:
type: boolean
allowAnyName:
type: boolean
allowIPSANs:
type: boolean
enforceHostnames:
type: boolean
requireCN:
type: boolean
clientFlag:
type: boolean
serverFlag:
type: boolean
keyType:
type: string
keyBits:
type: integer
format: int32
keyUsage:
type: array
items:
type: string
organization:
type: array
items:
type: string
organizationalUnit:
type: array
items:
type: string
cnValidations:
type: array
items:
type: string
ttl:
type: string
maxTTL:
type: string
noStore:
type: boolean
required:
- mount
- name
kv:
type: array
items:
type: object
properties:
mount:
type: string
prefix:
type: string
keys:
type: array
items:
type: string
grace:
type: string
required:
- mount
pkiTidy:
type: array
items:
type: object
properties:
mount:
type: string
interval:
type: string
safetyBuffer:
type: string
required:
- mount
identityOIDC:
type: object
properties:
key:
type: string
algorithm:
type: string
rotationPeriod:
type: string
verificationTTL:
type: string
tokenTTL:
type: string
required:
- key
plugins:
type: array
items:
type: object
properties:
name:
type: string
type:
type: string
asset:
type: object
properties:
name:
type: string
sha256:
type: string
required:
- name
- sha256
mountPath:
type: string
atproto:
type: object
properties:
config:
type: object
properties:
clientID:
type: string
redirectURIs:
type: array
items:
type: string
clientName:
type: string
scope:
type: string
plcDirectoryURL:
type: string
trustedHosts:
type: array
items:
type: string
trustedCAPEM:
type: string
roles:
type: array
items:
type: object
properties:
name:
type: string
boundDIDs:
type: array
items:
type: string
boundHandles:
type: array
items:
type: string
policies:
type: array
items:
type: string
tokenTTL:
type: string
tokenMaxTTL:
type: string
required:
- name
required:
- name
- type
- asset
tidy:
type: object
properties:
interval:
type: string
status:
type: object
properties:
observedGeneration:
type: integer
format: int64
phase:
type: string
enum:
- Pending
- Starting
- Sealed
- Ready
- Failed
message:
type: string
address:
type: string
initialized:
type: boolean
sealed:
type: boolean
ready:
type: boolean
caBundle:
type: string
version:
type: string
hostProcess:
type: string
runtime:
type: object
properties:
backend:
type: string
ref:
type: string
instance:
type: string
pid:
type: integer
format: int64
startTime:
type: string
hostBootID:
type: string
unsealedInstance:
type: string
unsealedAt:
type: string
refs:
type: object
properties:
unsealKeys:
type: string
ca:
type: string
clientCert:
type: string
clientKey:
type: string
certAuthMount:
type: string
certAuthRole:
type: string
kvMount:
type: string
clients:
type: array
items:
type: object
properties:
name:
type: string
certAuthMount:
type: string
certAuthRole:
type: string
policy:
type: string
kvMount:
type: string
clientCert:
type: string
clientKey:
type: string
required:
- name
sync:
type: object
properties:
observedGeneration:
type: integer
format: int64
syncedAt:
type: string
lastChangeAt:
type: string
lastChange:
type: string
declared:
type: string
pending:
type: array
items:
type: string
conflicts:
type: array
items:
type: string
plugins:
type: array
items:
type: object
properties:
name:
type: string
type:
type: string
sha256:
type: string
command:
type: string
mountPath:
type: string
runningSha256:
type: string
message:
type: string
required:
- name
- type
tidy:
type: object
properties:
lastRunAt:
type: string
interval:
type: string
message:
type: string
conditions:
type: array
items:
type: object
x-kubernetes-preserve-unknown-fields: true
required:
- initialized
- sealed
additionalPrinterColumns:
- name: Phase
type: string
jsonPath: .status.phase
- name: Address
type: string
jsonPath: .status.address
- name: Initialized
type: boolean
jsonPath: .status.initialized
- name: Sealed
type: boolean
jsonPath: .status.sealed
- name: Instance
type: string
jsonPath: .status.runtime.instance
- name: Age
type: date
jsonPath: .metadata.creationTimestamp