apiVersion: apis.kcp.io/v1alpha1 kind: APIResourceSchema metadata: name: v1alpha1-11.openbaoservers.socialweb.computer labels: contracts.socialweb.computer/vaults: v1alpha1 spec: group: socialweb.computer names: kind: OpenBaoServer listKind: OpenBaoServerList plural: openbaoservers singular: openbaoserver scope: Cluster versions: - name: v1alpha1 served: true storage: true subresources: status: {} schema: type: object properties: apiVersion: type: string kind: type: string metadata: type: object spec: type: object properties: asset: type: object properties: name: type: string sha256: type: string required: - name - sha256 exec: type: string listen: type: string init: type: object properties: shares: type: integer format: int32 threshold: type: integer format: int32 restartPolicy: type: string enum: - Never - OnFailure - Always clients: type: array items: type: object properties: name: type: string kvMount: type: string policies: type: array items: type: string tokenTTL: type: string tokenMaxTTL: type: string required: - name unit: type: string slice: type: string after: type: array items: type: string wants: type: array items: type: string log: type: string storage: type: object properties: postgres: type: object properties: socketDir: type: string user: type: string database: type: string required: - socketDir - user - database tls: type: object properties: certFile: type: string keyFile: type: string caFile: type: string clientCertOptional: type: boolean required: - certFile - keyFile - caFile declared: type: object properties: secretMounts: type: array items: type: object properties: path: type: string type: type: string maxLeaseTTL: type: string maxVersions: type: integer format: int32 required: - path - type authMounts: type: array items: type: object properties: path: type: string type: type: string jwt: type: object properties: discoveryURL: type: string boundIssuer: type: string required: - discoveryURL required: - path - type policies: type: array items: type: object properties: name: type: string rules: type: array items: type: object properties: path: type: string capabilities: type: array items: type: string required: - path - capabilities hcl: type: string required: - name certRoles: type: array items: type: object properties: mount: type: string name: type: string commonNames: type: array items: type: string caFromPKI: type: string policies: type: array items: type: string tokenTTL: type: string tokenMaxTTL: type: string noDefaultPolicy: type: boolean required: - mount - name - commonNames - caFromPKI - policies jwtRoles: type: array items: type: object properties: mount: type: string name: type: string roleType: type: string boundSubject: type: string boundAudiences: type: array items: type: string userClaim: type: string policies: type: array items: type: string tokenTTL: type: string required: - mount - name - boundSubject - boundAudiences - userClaim - policies appRoles: type: array items: type: object properties: mount: type: string name: type: string policies: type: array items: type: string tokenTTL: type: string tokenMaxTTL: type: string secretIDTTL: type: string required: - name - policies pkiRoles: type: array items: type: object properties: mount: type: string name: type: string allowedDomains: type: array items: type: string allowSubdomains: type: boolean allowBareDomains: type: boolean allowAnyName: type: boolean allowIPSANs: type: boolean enforceHostnames: type: boolean requireCN: type: boolean clientFlag: type: boolean serverFlag: type: boolean keyType: type: string keyBits: type: integer format: int32 keyUsage: type: array items: type: string organization: type: array items: type: string organizationalUnit: type: array items: type: string cnValidations: type: array items: type: string ttl: type: string maxTTL: type: string noStore: type: boolean required: - mount - name kv: type: array items: type: object properties: mount: type: string prefix: type: string keys: type: array items: type: string grace: type: string required: - mount pkiTidy: type: array items: type: object properties: mount: type: string interval: type: string safetyBuffer: type: string required: - mount identityOIDC: type: object properties: key: type: string algorithm: type: string rotationPeriod: type: string verificationTTL: type: string tokenTTL: type: string required: - key plugins: type: array items: type: object properties: name: type: string type: type: string asset: type: object properties: name: type: string sha256: type: string required: - name - sha256 mountPath: type: string atproto: type: object properties: config: type: object properties: clientID: type: string redirectURIs: type: array items: type: string clientName: type: string scope: type: string plcDirectoryURL: type: string trustedHosts: type: array items: type: string trustedCAPEM: type: string roles: type: array items: type: object properties: name: type: string boundDIDs: type: array items: type: string boundHandles: type: array items: type: string policies: type: array items: type: string tokenTTL: type: string tokenMaxTTL: type: string required: - name required: - name - type - asset tidy: type: object properties: interval: type: string status: type: object properties: observedGeneration: type: integer format: int64 phase: type: string enum: - Pending - Starting - Sealed - Ready - Failed message: type: string address: type: string initialized: type: boolean sealed: type: boolean ready: type: boolean caBundle: type: string version: type: string hostProcess: type: string runtime: type: object properties: backend: type: string ref: type: string instance: type: string pid: type: integer format: int64 startTime: type: string hostBootID: type: string unsealedInstance: type: string unsealedAt: type: string refs: type: object properties: unsealKeys: type: string ca: type: string clientCert: type: string clientKey: type: string certAuthMount: type: string certAuthRole: type: string kvMount: type: string clients: type: array items: type: object properties: name: type: string certAuthMount: type: string certAuthRole: type: string policy: type: string kvMount: type: string clientCert: type: string clientKey: type: string required: - name sync: type: object properties: observedGeneration: type: integer format: int64 syncedAt: type: string lastChangeAt: type: string lastChange: type: string declared: type: string pending: type: array items: type: string conflicts: type: array items: type: string plugins: type: array items: type: object properties: name: type: string type: type: string sha256: type: string command: type: string mountPath: type: string runningSha256: type: string message: type: string required: - name - type tidy: type: object properties: lastRunAt: type: string interval: type: string message: type: string conditions: type: array items: type: object x-kubernetes-preserve-unknown-fields: true required: - initialized - sealed additionalPrinterColumns: - name: Phase type: string jsonPath: .status.phase - name: Address type: string jsonPath: .status.address - name: Initialized type: boolean jsonPath: .status.initialized - name: Sealed type: boolean jsonPath: .status.sealed - name: Instance type: string jsonPath: .status.runtime.instance - name: Age type: date jsonPath: .metadata.creationTimestamp