olb042/kubeconform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add keda

Browse Source
This commit is contained in:
Nick Gorse
2026-07-02 15:44:18 +01:00
parent 3a8c946438
commit 717d09d1f3
14 changed files with 1404 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crdSchemas/cloudeventsource_v1alpha1.json
+4
View File
@@ -20,6 +20,10 @@
"properties": {
"kind": {
"description": "Kind of the resource being referred to. Defaults to TriggerAuthentication.",
"enum": [
"TriggerAuthentication",
"ClusterTriggerAuthentication"
],
"type": "string"
},
"name": {
crdSchemas/clustercloudeventsource_v1alpha1.json
+4
View File
@@ -19,6 +19,10 @@
"properties": {
"kind": {
"description": "Kind of the resource being referred to. Defaults to TriggerAuthentication.",
"enum": [
"TriggerAuthentication",
"ClusterTriggerAuthentication"
],
"type": "string"
},
"name": {
crdSchemas/clustertriggerauthentication_v1alpha1.json
+100
View File
@@ -133,6 +133,10 @@
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
@@ -203,6 +207,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -287,6 +292,10 @@
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
@@ -348,6 +357,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
},
"vaultUri": {
@@ -479,6 +489,10 @@
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
@@ -540,6 +554,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -557,6 +572,10 @@
},
"authentication": {
"description": "VaultAuthentication contains the list of Hashicorp Vault authentication methods",
"enum": [
"token",
"kubernetes"
],
"type": "string"
},
"credential": {
@@ -626,6 +645,12 @@
},
"type": {
"description": "VaultSecretType defines the type of vault secret",
"enum": [
"",
"secretV2",
"secret",
"pki"
],
"type": "string"
}
},
@@ -637,6 +662,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -648,9 +674,83 @@
"type": "object",
"additionalProperties": false
},
"oauth2": {
"properties": {
"clientId": {
"type": "string"
},
"clientSecret": {
"properties": {
"valueFrom": {
"properties": {
"secretKeyRef": {
"properties": {
"key": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"key",
"name"
],
"type": "object",
"additionalProperties": false
}
},
"required": [
"secretKeyRef"
],
"type": "object",
"additionalProperties": false
}
},
"required": [
"valueFrom"
],
"type": "object",
"additionalProperties": false
},
"scopes": {
"items": {
"type": "string"
},
"type": "array"
},
"tokenUrl": {
"type": "string"
},
"tokenUrlParams": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"type": {
"default": "clientCredentials",
"enum": [
"clientCredentials"
],
"type": "string"
}
},
"required": [
"clientId",
"tokenUrl",
"type"
],
"type": "object",
"additionalProperties": false
},
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
crdSchemas/interceptorroute_v1beta1.json
+391
View File
@@ -0,0 +1,391 @@
{
"description": "InterceptorRoute configures request routing and autoscaling for a target service.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"description": "InterceptorRouteSpec defines the desired state of InterceptorRoute.",
"properties": {
"coldStart": {
"description": "Cold start behavior when scaling from zero.",
"properties": {
"fallback": {
"description": "Fallback target to route to when the primary backend does not become\nready within the readiness timeout.",
"properties": {
"service": {
"description": "Kubernetes Service to use as the fallback target.",
"properties": {
"name": {
"description": "Name of the Kubernetes Service.",
"minLength": 1,
"type": "string"
},
"port": {
"description": "Port number on the Service. Mutually exclusive with portName.",
"format": "int32",
"maximum": 65535,
"minimum": 1,
"type": "integer"
},
"portName": {
"description": "Named port on the Service. Mutually exclusive with port.",
"minLength": 1,
"type": "string"
}
},
"required": [
"name"
],
"type": "object",
"x-kubernetes-validations": [
{
"message": "exactly one of 'port' or 'portName' must be set",
"rule": "has(self.port) != has(self.portName)"
}
],
"additionalProperties": false
}
},
"required": [
"service"
],
"type": "object",
"additionalProperties": false
},
"placeholder": {
"description": "Placeholder response to serve while the target has no ready endpoints.",
"properties": {
"response": {
"description": "Static response to return immediately when the backend has no ready endpoints.",
"properties": {
"body": {
"description": "Inline response body.",
"maxLength": 32768,
"type": "string"
},
"bodyFromConfigMap": {
"description": "Response body from a ConfigMap in the same namespace. The ConfigMap must\ncarry the label \"http.keda.sh/response-body: true\". A missing ConfigMap\nor a missing explicit key returns HTTP 500.",
"properties": {
"key": {
"description": "Key within the ConfigMap. When omitted, the key is the request path\nwithout the leading \"/\" (defaulting to \"index.html\" for \"/\").\nThe Content-Type header is auto-detected from the key's file extension\nunless explicitly set in headers.",
"type": "string"
},
"name": {
"description": "Name of the ConfigMap.",
"minLength": 1,
"type": "string"
}
},
"required": [
"name"
],
"type": "object",
"additionalProperties": false
},
"headers": {
"additionalProperties": {
"type": "string"
},
"description": "HTTP response headers.",
"type": "object"
},
"statusCode": {
"default": 503,
"description": "HTTP status code.",
"format": "int32",
"maximum": 599,
"minimum": 100,
"type": "integer"
}
},
"type": "object",
"x-kubernetes-validations": [
{
"message": "at most one of 'body' or 'bodyFromConfigMap' may be set",
"rule": "!(has(self.body) && has(self.bodyFromConfigMap))"
}
],
"additionalProperties": false
}
},
"required": [
"response"
],
"type": "object",
"additionalProperties": false
}
},
"type": "object",
"x-kubernetes-validations": [
{
"message": "at least one of 'fallback' or 'placeholder' must be set",
"rule": "has(self.fallback) || has(self.placeholder)"
}
],
"additionalProperties": false
},
"rules": {
"description": "Routing rules that define how requests are matched to this target.",
"items": {
"description": "RoutingRule defines a set of matching criteria for routing requests.",
"properties": {
"headers": {
"description": "All listed headers must match the request (AND semantics).\nIf a header's Value is omitted, the header must be present but any\nvalue is accepted.",
"items": {
"description": "HeaderMatch defines a header matching rule.",
"properties": {
"name": {
"description": "Name of the HTTP header.",
"minLength": 1,
"type": "string"
},
"value": {
"description": "Value to match against (exact match). If omitted, matches any value for given header name.",
"type": "string"
}
},
"required": [
"name"
],
"type": "object",
"additionalProperties": false
},
"type": "array",
"x-kubernetes-list-map-keys": [
"name"
],
"x-kubernetes-list-type": "map"
},
"hosts": {
"description": "Match any of these hostnames. Wildcard patterns (e.g. \"*.example.com\")\nare supported. A single \"*\" acts as a catch-all. Exact matches take\npriority over wildcards; more specific wildcards (e.g. \"*.bar.example.com\")\ntake priority over less specific ones.",
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "set"
},
"paths": {
"description": "Match any of these path prefixes. When multiple paths match,\nthe longest prefix wins.",
"items": {
"description": "PathMatch defines a path matching rule.",
"properties": {
"value": {
"description": "Path prefix to match against. The longest matching prefix wins.",
"minLength": 1,
"type": "string"
}
},
"required": [
"value"
],
"type": "object",
"additionalProperties": false
},
"type": "array",
"x-kubernetes-list-type": "atomic"
}
},
"type": "object",
"additionalProperties": false
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"scalingMetric": {
"description": "Metric configuration for autoscaling.",
"properties": {
"concurrency": {
"description": "Scale based on concurrent request count.",
"properties": {
"targetValue": {
"description": "Target concurrent request count per replica.",
"format": "int32",
"minimum": 1,
"type": "integer"
}
},
"required": [
"targetValue"
],
"type": "object",
"additionalProperties": false
},
"requestRate": {
"description": "Scale based on request rate.",
"properties": {
"granularity": {
"default": "1s",
"description": "Bucket size for rate calculation within the window.",
"type": "string"
},
"targetValue": {
"description": "Target request rate per replica.",
"format": "int32",
"minimum": 1,
"type": "integer"
},
"window": {
"default": "1m",
"description": "Sliding time window over which the request rate is calculated.",
"type": "string"
}
},
"required": [
"targetValue"
],
"type": "object",
"additionalProperties": false
}
},
"type": "object",
"x-kubernetes-validations": [
{
"message": "at least one of 'concurrency' or 'requestRate' must be set",
"rule": "has(self.concurrency) || has(self.requestRate)"
}
],
"additionalProperties": false
},
"target": {
"description": "Backend service to route traffic to.",
"properties": {
"port": {
"description": "Port number on the Service. Mutually exclusive with portName.",
"format": "int32",
"maximum": 65535,
"minimum": 1,
"type": "integer"
},
"portName": {
"description": "Named port on the Service. Mutually exclusive with port.",
"minLength": 1,
"type": "string"
},
"service": {
"description": "Name of the Kubernetes Service.",
"minLength": 1,
"type": "string"
}
},
"required": [
"service"
],
"type": "object",
"x-kubernetes-validations": [
{
"message": "exactly one of 'port' or 'portName' must be set",
"rule": "has(self.port) != has(self.portName)"
}
],
"additionalProperties": false
},
"timeouts": {
"description": "Timeout configuration for request handling.",
"properties": {
"readiness": {
"description": "Time to wait for the backend to become ready (e.g. scale-from-zero).\nUnset: uses the global KEDA_HTTP_READINESS_TIMEOUT (default: disabled).\nSet to \"0s\" to disable the dedicated readiness deadline so the full\nrequest budget is available for cold starts. When a fallback service\nis configured and this is \"0s\", a 30s default is applied.",
"type": "string"
},
"request": {
"description": "Total time allowed for the entire request lifecycle.\nUnset: uses the global KEDA_HTTP_REQUEST_TIMEOUT (default: disabled).\nSet to \"0s\" to disable the request deadline.",
"type": "string"
},
"responseHeader": {
"description": "Max time to wait for the response headers from the backend after the\nrequest has been fully sent. Does not include cold-start wait time.\nUnset: uses the global KEDA_HTTP_RESPONSE_HEADER_TIMEOUT (default: 300s).\nSet to \"0s\" to disable the response header deadline.",
"type": "string"
}
},
"type": "object",
"additionalProperties": false
}
},
"required": [
"scalingMetric",
"target"
],
"type": "object",
"additionalProperties": false
},
"status": {
"description": "InterceptorRouteStatus defines the observed state of InterceptorRoute.",
"properties": {
"conditions": {
"description": "Conditions of the InterceptorRoute.",
"items": {
"description": "Condition contains details for one aspect of the current state of this API Resource.",
"properties": {
"lastTransitionTime": {
"description": "lastTransitionTime is the last time the condition transitioned from one status to another.\nThis should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.",
"format": "date-time",
"type": "string"
},
"message": {
"description": "message is a human readable message indicating details about the transition.\nThis may be an empty string.",
"maxLength": 32768,
"type": "string"
},
"observedGeneration": {
"description": "observedGeneration represents the .metadata.generation that the condition was set based upon.\nFor instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date\nwith respect to the current state of the instance.",
"format": "int64",
"minimum": 0,
"type": "integer"
},
"reason": {
"description": "reason contains a programmatic identifier indicating the reason for the condition's last transition.\nProducers of specific condition types may define expected values and meanings for this field,\nand whether the values are considered a guaranteed API.\nThe value should be a CamelCase string.\nThis field may not be empty.",
"maxLength": 1024,
"minLength": 1,
"pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
"type": "string"
},
"status": {
"description": "status of the condition, one of True, False, Unknown.",
"enum": [
"True",
"False",
"Unknown"
],
"type": "string"
},
"type": {
"description": "type of condition in CamelCase or in foo.example.com/CamelCase.",
"maxLength": 316,
"pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
"type": "string"
}
},
"required": [
"lastTransitionTime",
"message",
"reason",
"status",
"type"
],
"type": "object",
"additionalProperties": false
},
"type": "array",
"x-kubernetes-list-map-keys": [
"type"
],
"x-kubernetes-list-type": "map"
}
},
"type": "object",
"additionalProperties": false
}
},
"required": [
"metadata",
"spec"
],
"type": "object"
}
crdSchemas/master-standalone/cloudeventsource-stable-v1alpha1.json
+4
View File
@@ -20,6 +20,10 @@
"properties": {
"kind": {
"description": "Kind of the resource being referred to. Defaults to TriggerAuthentication.",
"enum": [
"TriggerAuthentication",
"ClusterTriggerAuthentication"
],
"type": "string"
},
"name": {
crdSchemas/master-standalone/clustercloudeventsource-stable-v1alpha1.json
+4
View File
@@ -19,6 +19,10 @@
"properties": {
"kind": {
"description": "Kind of the resource being referred to. Defaults to TriggerAuthentication.",
"enum": [
"TriggerAuthentication",
"ClusterTriggerAuthentication"
],
"type": "string"
},
"name": {
crdSchemas/master-standalone/clustertriggerauthentication-stable-v1alpha1.json
+100
View File
@@ -133,6 +133,10 @@
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
@@ -203,6 +207,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -287,6 +292,10 @@
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
@@ -348,6 +357,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
},
"vaultUri": {
@@ -479,6 +489,10 @@
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
@@ -540,6 +554,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -557,6 +572,10 @@
},
"authentication": {
"description": "VaultAuthentication contains the list of Hashicorp Vault authentication methods",
"enum": [
"token",
"kubernetes"
],
"type": "string"
},
"credential": {
@@ -626,6 +645,12 @@
},
"type": {
"description": "VaultSecretType defines the type of vault secret",
"enum": [
"",
"secretV2",
"secret",
"pki"
],
"type": "string"
}
},
@@ -637,6 +662,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -648,9 +674,83 @@
"type": "object",
"additionalProperties": false
},
"oauth2": {
"properties": {
"clientId": {
"type": "string"
},
"clientSecret": {
"properties": {
"valueFrom": {
"properties": {
"secretKeyRef": {
"properties": {
"key": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"key",
"name"
],
"type": "object",
"additionalProperties": false
}
},
"required": [
"secretKeyRef"
],
"type": "object",
"additionalProperties": false
}
},
"required": [
"valueFrom"
],
"type": "object",
"additionalProperties": false
},
"scopes": {
"items": {
"type": "string"
},
"type": "array"
},
"tokenUrl": {
"type": "string"
},
"tokenUrlParams": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"type": {
"default": "clientCredentials",
"enum": [
"clientCredentials"
],
"type": "string"
}
},
"required": [
"clientId",
"tokenUrl",
"type"
],
"type": "object",
"additionalProperties": false
},
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
crdSchemas/master-standalone/interceptorroute-stable-v1beta1.json
+391
View File
@@ -0,0 +1,391 @@
{
"description": "InterceptorRoute configures request routing and autoscaling for a target service.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
"type": "object"
},
"spec": {
"description": "InterceptorRouteSpec defines the desired state of InterceptorRoute.",
"properties": {
"coldStart": {
"description": "Cold start behavior when scaling from zero.",
"properties": {
"fallback": {
"description": "Fallback target to route to when the primary backend does not become\nready within the readiness timeout.",
"properties": {
"service": {
"description": "Kubernetes Service to use as the fallback target.",
"properties": {
"name": {
"description": "Name of the Kubernetes Service.",
"minLength": 1,
"type": "string"
},
"port": {
"description": "Port number on the Service. Mutually exclusive with portName.",
"format": "int32",
"maximum": 65535,
"minimum": 1,
"type": "integer"
},
"portName": {
"description": "Named port on the Service. Mutually exclusive with port.",
"minLength": 1,
"type": "string"
}
},
"required": [
"name"
],
"type": "object",
"x-kubernetes-validations": [
{
"message": "exactly one of 'port' or 'portName' must be set",
"rule": "has(self.port) != has(self.portName)"
}
],
"additionalProperties": false
}
},
"required": [
"service"
],
"type": "object",
"additionalProperties": false
},
"placeholder": {
"description": "Placeholder response to serve while the target has no ready endpoints.",
"properties": {
"response": {
"description": "Static response to return immediately when the backend has no ready endpoints.",
"properties": {
"body": {
"description": "Inline response body.",
"maxLength": 32768,
"type": "string"
},
"bodyFromConfigMap": {
"description": "Response body from a ConfigMap in the same namespace. The ConfigMap must\ncarry the label \"http.keda.sh/response-body: true\". A missing ConfigMap\nor a missing explicit key returns HTTP 500.",
"properties": {
"key": {
"description": "Key within the ConfigMap. When omitted, the key is the request path\nwithout the leading \"/\" (defaulting to \"index.html\" for \"/\").\nThe Content-Type header is auto-detected from the key's file extension\nunless explicitly set in headers.",
"type": "string"
},
"name": {
"description": "Name of the ConfigMap.",
"minLength": 1,
"type": "string"
}
},
"required": [
"name"
],
"type": "object",
"additionalProperties": false
},
"headers": {
"additionalProperties": {
"type": "string"
},
"description": "HTTP response headers.",
"type": "object"
},
"statusCode": {
"default": 503,
"description": "HTTP status code.",
"format": "int32",
"maximum": 599,
"minimum": 100,
"type": "integer"
}
},
"type": "object",
"x-kubernetes-validations": [
{
"message": "at most one of 'body' or 'bodyFromConfigMap' may be set",
"rule": "!(has(self.body) && has(self.bodyFromConfigMap))"
}
],
"additionalProperties": false
}
},
"required": [
"response"
],
"type": "object",
"additionalProperties": false
}
},
"type": "object",
"x-kubernetes-validations": [
{
"message": "at least one of 'fallback' or 'placeholder' must be set",
"rule": "has(self.fallback) || has(self.placeholder)"
}
],
"additionalProperties": false
},
"rules": {
"description": "Routing rules that define how requests are matched to this target.",
"items": {
"description": "RoutingRule defines a set of matching criteria for routing requests.",
"properties": {
"headers": {
"description": "All listed headers must match the request (AND semantics).\nIf a header's Value is omitted, the header must be present but any\nvalue is accepted.",
"items": {
"description": "HeaderMatch defines a header matching rule.",
"properties": {
"name": {
"description": "Name of the HTTP header.",
"minLength": 1,
"type": "string"
},
"value": {
"description": "Value to match against (exact match). If omitted, matches any value for given header name.",
"type": "string"
}
},
"required": [
"name"
],
"type": "object",
"additionalProperties": false
},
"type": "array",
"x-kubernetes-list-map-keys": [
"name"
],
"x-kubernetes-list-type": "map"
},
"hosts": {
"description": "Match any of these hostnames. Wildcard patterns (e.g. \"*.example.com\")\nare supported. A single \"*\" acts as a catch-all. Exact matches take\npriority over wildcards; more specific wildcards (e.g. \"*.bar.example.com\")\ntake priority over less specific ones.",
"items": {
"type": "string"
},
"type": "array",
"x-kubernetes-list-type": "set"
},
"paths": {
"description": "Match any of these path prefixes. When multiple paths match,\nthe longest prefix wins.",
"items": {
"description": "PathMatch defines a path matching rule.",
"properties": {
"value": {
"description": "Path prefix to match against. The longest matching prefix wins.",
"minLength": 1,
"type": "string"
}
},
"required": [
"value"
],
"type": "object",
"additionalProperties": false
},
"type": "array",
"x-kubernetes-list-type": "atomic"
}
},
"type": "object",
"additionalProperties": false
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"scalingMetric": {
"description": "Metric configuration for autoscaling.",
"properties": {
"concurrency": {
"description": "Scale based on concurrent request count.",
"properties": {
"targetValue": {
"description": "Target concurrent request count per replica.",
"format": "int32",
"minimum": 1,
"type": "integer"
}
},
"required": [
"targetValue"
],
"type": "object",
"additionalProperties": false
},
"requestRate": {
"description": "Scale based on request rate.",
"properties": {
"granularity": {
"default": "1s",
"description": "Bucket size for rate calculation within the window.",
"type": "string"
},
"targetValue": {
"description": "Target request rate per replica.",
"format": "int32",
"minimum": 1,
"type": "integer"
},
"window": {
"default": "1m",
"description": "Sliding time window over which the request rate is calculated.",
"type": "string"
}
},
"required": [
"targetValue"
],
"type": "object",
"additionalProperties": false
}
},
"type": "object",
"x-kubernetes-validations": [
{
"message": "at least one of 'concurrency' or 'requestRate' must be set",
"rule": "has(self.concurrency) || has(self.requestRate)"
}
],
"additionalProperties": false
},
"target": {
"description": "Backend service to route traffic to.",
"properties": {
"port": {
"description": "Port number on the Service. Mutually exclusive with portName.",
"format": "int32",
"maximum": 65535,
"minimum": 1,
"type": "integer"
},
"portName": {
"description": "Named port on the Service. Mutually exclusive with port.",
"minLength": 1,
"type": "string"
},
"service": {
"description": "Name of the Kubernetes Service.",
"minLength": 1,
"type": "string"
}
},
"required": [
"service"
],
"type": "object",
"x-kubernetes-validations": [
{
"message": "exactly one of 'port' or 'portName' must be set",
"rule": "has(self.port) != has(self.portName)"
}
],
"additionalProperties": false
},
"timeouts": {
"description": "Timeout configuration for request handling.",
"properties": {
"readiness": {
"description": "Time to wait for the backend to become ready (e.g. scale-from-zero).\nUnset: uses the global KEDA_HTTP_READINESS_TIMEOUT (default: disabled).\nSet to \"0s\" to disable the dedicated readiness deadline so the full\nrequest budget is available for cold starts. When a fallback service\nis configured and this is \"0s\", a 30s default is applied.",
"type": "string"
},
"request": {
"description": "Total time allowed for the entire request lifecycle.\nUnset: uses the global KEDA_HTTP_REQUEST_TIMEOUT (default: disabled).\nSet to \"0s\" to disable the request deadline.",
"type": "string"
},
"responseHeader": {
"description": "Max time to wait for the response headers from the backend after the\nrequest has been fully sent. Does not include cold-start wait time.\nUnset: uses the global KEDA_HTTP_RESPONSE_HEADER_TIMEOUT (default: 300s).\nSet to \"0s\" to disable the response header deadline.",
"type": "string"
}
},
"type": "object",
"additionalProperties": false
}
},
"required": [
"scalingMetric",
"target"
],
"type": "object",
"additionalProperties": false
},
"status": {
"description": "InterceptorRouteStatus defines the observed state of InterceptorRoute.",
"properties": {
"conditions": {
"description": "Conditions of the InterceptorRoute.",
"items": {
"description": "Condition contains details for one aspect of the current state of this API Resource.",
"properties": {
"lastTransitionTime": {
"description": "lastTransitionTime is the last time the condition transitioned from one status to another.\nThis should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.",
"format": "date-time",
"type": "string"
},
"message": {
"description": "message is a human readable message indicating details about the transition.\nThis may be an empty string.",
"maxLength": 32768,
"type": "string"
},
"observedGeneration": {
"description": "observedGeneration represents the .metadata.generation that the condition was set based upon.\nFor instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date\nwith respect to the current state of the instance.",
"format": "int64",
"minimum": 0,
"type": "integer"
},
"reason": {
"description": "reason contains a programmatic identifier indicating the reason for the condition's last transition.\nProducers of specific condition types may define expected values and meanings for this field,\nand whether the values are considered a guaranteed API.\nThe value should be a CamelCase string.\nThis field may not be empty.",
"maxLength": 1024,
"minLength": 1,
"pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
"type": "string"
},
"status": {
"description": "status of the condition, one of True, False, Unknown.",
"enum": [
"True",
"False",
"Unknown"
],
"type": "string"
},
"type": {
"description": "type of condition in CamelCase or in foo.example.com/CamelCase.",
"maxLength": 316,
"pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
"type": "string"
}
},
"required": [
"lastTransitionTime",
"message",
"reason",
"status",
"type"
],
"type": "object",
"additionalProperties": false
},
"type": "array",
"x-kubernetes-list-map-keys": [
"type"
],
"x-kubernetes-list-type": "map"
}
},
"type": "object",
"additionalProperties": false
}
},
"required": [
"metadata",
"spec"
],
"type": "object"
}
crdSchemas/master-standalone/scaledjob-stable-v1alpha1.json
+78 -14
View File
@@ -20,6 +20,7 @@
},
"failedJobsHistoryLimit": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"jobTargetRef": {
@@ -50,7 +51,7 @@
"type": "integer"
},
"managedBy": {
"description": "ManagedBy field indicates the controller that manages a Job. The k8s Job\ncontroller reconciles jobs which don't have this field at all or the field\nvalue is the reserved string `kubernetes.io/job-controller`, but skips\nreconciling Jobs with a custom value for this field.\nThe value must be a valid domain-prefixed path (e.g. acme.io/foo) -\nall characters before the first \"/\" must be a valid subdomain as defined\nby RFC 1123. All characters trailing the first \"/\" must be valid HTTP Path\ncharacters as defined by RFC 3986. The value cannot exceed 63 characters.\nThis field is immutable.\n\nThis field is beta-level. The job controller accepts setting the field\nwhen the feature gate JobManagedBy is enabled (enabled by default).",
"description": "ManagedBy field indicates the controller that manages a Job. The k8s Job\ncontroller reconciles jobs which don't have this field at all or the field\nvalue is the reserved string `kubernetes.io/job-controller`, but skips\nreconciling Jobs with a custom value for this field.\nThe value must be a valid domain-prefixed path (e.g. acme.io/foo) -\nall characters before the first \"/\" must be a valid subdomain as defined\nby RFC 1123. All characters trailing the first \"/\" must be valid HTTP Path\ncharacters as defined by RFC 3986. The value cannot exceed 63 characters.\nThis field is immutable.",
"type": "string"
},
"manualSelector": {
@@ -122,7 +123,6 @@
}
},
"required": [
"status",
"type"
],
"type": "object",
@@ -266,7 +266,6 @@
}
},
"type": "object",
"x-kubernetes-preserve-unknown-fields": true,
"additionalProperties": false
},
"spec": {
@@ -1754,8 +1753,7 @@
}
},
"required": [
"containerPort",
"protocol"
"containerPort"
],
"type": "object",
"additionalProperties": false
@@ -1924,7 +1922,7 @@
"additionalProperties": false
},
"resizePolicy": {
"description": "Resources resize policy for the container.",
"description": "Resources resize policy for the container.\nThis field cannot be set on ephemeral containers.",
"items": {
"description": "ContainerResizePolicy represents resource resize policy for the container.",
"properties": {
@@ -3204,8 +3202,7 @@
}
},
"required": [
"containerPort",
"protocol"
"containerPort"
],
"type": "object",
"additionalProperties": false
@@ -4682,8 +4679,7 @@
}
},
"required": [
"containerPort",
"protocol"
"containerPort"
],
"type": "object",
"additionalProperties": false
@@ -4852,7 +4848,7 @@
"additionalProperties": false
},
"resizePolicy": {
"description": "Resources resize policy for the container.",
"description": "Resources resize policy for the container.\nThis field cannot be set on ephemeral containers.",
"items": {
"description": "ContainerResizePolicy represents resource resize policy for the container.",
"properties": {
@@ -5472,7 +5468,7 @@
"x-kubernetes-list-type": "atomic"
},
"resourceClaims": {
"description": "ResourceClaims defines which ResourceClaims must be allocated\nand reserved before the Pod is allowed to start. The resources\nwill be made available to those containers which consume them\nby name.\n\nThis is an alpha field and requires enabling the\nDynamicResourceAllocation feature gate.\n\nThis field is immutable.",
"description": "ResourceClaims defines which ResourceClaims must be allocated\nand reserved before the Pod is allowed to start. The resources\nwill be made available to those containers which consume them\nby name.\n\nThis is a stable field but requires that the\nDynamicResourceAllocation feature gate is enabled.\n\nThis field is immutable.",
"items": {
"description": "PodResourceClaim references exactly one ResourceClaim, either directly\nor by naming a ResourceClaimTemplate which is then turned into a ResourceClaim\nfor the pod.\n\nIt adds a name to it that uniquely identifies the ResourceClaim inside the Pod.\nContainers that need access to the ResourceClaim reference it with this name.",
"properties": {
@@ -5792,7 +5788,7 @@
"type": "string"
},
"operator": {
"description": "Operator represents a key's relationship to the value.\nValid operators are Exists and Equal. Defaults to Equal.\nExists is equivalent to wildcard for value, so that a pod can\ntolerate all taints of a particular category.",
"description": "Operator represents a key's relationship to the value.\nValid operators are Exists, Equal, Lt, and Gt. Defaults to Equal.\nExists is equivalent to wildcard for value, so that a pod can\ntolerate all taints of a particular category.\nLt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators).",
"type": "string"
},
"tolerationSeconds": {
@@ -6391,7 +6387,7 @@
"additionalProperties": false
},
"resources": {
"description": "resources represents the minimum resources the volume should have.\nIf RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements\nthat are lower than previous value but must still be higher than capacity recorded in the\nstatus field of the claim.\nMore info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
"description": "resources represents the minimum resources the volume should have.\nUsers are allowed to specify resource requirements\nthat are lower than previous value but must still be higher than capacity recorded in the\nstatus field of the claim.\nMore info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
"properties": {
"limits": {
"additionalProperties": {
@@ -7102,6 +7098,13 @@
"signerName": {
"description": "Kubelet's generated CSRs will be addressed to this signer.",
"type": "string"
},
"userAnnotations": {
"additionalProperties": {
"type": "string"
},
"description": "userAnnotations allow pod authors to pass additional information to\nthe signer implementation. Kubernetes does not restrict or validate this\nmetadata in any way.\n\nThese values are copied verbatim into the `spec.unverifiedUserAnnotations` field of\nthe PodCertificateRequest objects that Kubelet creates.\n\nEntries are subject to the same validation as object metadata annotations,\nwith the addition that all keys must be domain-prefixed. No restrictions\nare placed on values, except an overall size limitation on the entire field.\n\nSigners should document the keys and values they support. Signers should\ndeny requests that contain keys they do not recognize.",
"type": "object"
}
},
"required": [
@@ -7471,6 +7474,29 @@
"name"
],
"x-kubernetes-list-type": "map"
},
"workloadRef": {
"description": "WorkloadRef provides a reference to the Workload object that this Pod belongs to.\nThis field is used by the scheduler to identify the PodGroup and apply the\ncorrect group scheduling policies. The Workload object referenced\nby this field may not exist at the time the Pod is created.\nThis field is immutable, but a Workload object with the same name\nmay be recreated with different policies. Doing this during pod scheduling\nmay result in the placement not conforming to the expected policies.",
"properties": {
"name": {
"description": "Name defines the name of the Workload object this Pod belongs to.\nWorkload must be in the same namespace as the Pod.\nIf it doesn't match any existing Workload, the Pod will remain unschedulable\nuntil a Workload object is created and observed by the kube-scheduler.\nIt must be a DNS subdomain.",
"type": "string"
},
"podGroup": {
"description": "PodGroup is the name of the PodGroup within the Workload that this Pod\nbelongs to. If it doesn't match any existing PodGroup within the Workload,\nthe Pod will remain unschedulable until the Workload object is recreated\nand observed by the kube-scheduler. It must be a DNS label.",
"type": "string"
},
"podGroupReplicaKey": {
"description": "PodGroupReplicaKey specifies the replica key of the PodGroup to which this\nPod belongs. It is used to distinguish pods belonging to different replicas\nof the same pod group. The pod group policy is applied separately to each replica.\nWhen set, it must be a DNS label.",
"type": "string"
}
},
"required": [
"name",
"podGroup"
],
"type": "object",
"additionalProperties": false
}
},
"required": [
@@ -7497,23 +7523,34 @@
},
"maxReplicaCount": {
"format": "int32",
"minimum": 1,
"type": "integer"
},
"minReplicaCount": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"pollingInterval": {
"format": "int32",
"minimum": 1,
"type": "integer"
},
"rollout": {
"description": "Rollout defines the strategy for job rollouts",
"properties": {
"propagationPolicy": {
"enum": [
"foreground",
"background"
],
"type": "string"
},
"strategy": {
"enum": [
"gradual",
"immediate"
],
"type": "string"
}
},
@@ -7521,6 +7558,11 @@
"additionalProperties": false
},
"rolloutStrategy": {
"description": "Deprecated: Use Rollout.Strategy instead (see https://github.com/kedacore/keda/issues/3596).",
"enum": [
"gradual",
"immediate"
],
"type": "string"
},
"scalingStrategy": {
@@ -7534,6 +7576,12 @@
"type": "string"
},
"multipleScalersCalculation": {
"enum": [
"min",
"avg",
"sum",
"max"
],
"type": "string"
},
"pendingPodConditions": {
@@ -7543,6 +7591,11 @@
"type": "array"
},
"strategy": {
"enum": [
"custom",
"accurate",
"eager"
],
"type": "string"
}
},
@@ -7551,6 +7604,7 @@
},
"successfulJobsHistoryLimit": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"triggers": {
@@ -7562,6 +7616,10 @@
"properties": {
"kind": {
"description": "Kind of the resource being referred to. Defaults to TriggerAuthentication.",
"enum": [
"TriggerAuthentication",
"ClusterTriggerAuthentication"
],
"type": "string"
},
"name": {
@@ -7580,10 +7638,15 @@
},
"type": "object"
},
"metricType": {
"description": "MetricTargetType specifies the type of metric being targeted, and should be either\n\"Value\", \"AverageValue\", or \"Utilization\"",
"type": "string"
},
"name": {
"type": "string"
},
"type": {
"minLength": 1,
"type": "string"
},
"useCachedMetrics": {
@@ -7597,6 +7660,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
crdSchemas/master-standalone/scaledobject-stable-v1alpha1.json
+25 -7
View File
@@ -65,8 +65,6 @@
"stabilizationWindowSeconds": {
"description": "stabilizationWindowSeconds is the number of seconds for which past recommendations should be\nconsidered while scaling up or scaling down.\nStabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour).\nIf not set, use the default values:\n- For scale up: 0 (i.e. no stabilization is done).\n- For scale down: 300 (i.e. the stabilization window is 300 seconds long).",
"format": "int32",
"maximum": 3600,
"minimum": 0,
"type": "integer"
},
"tolerance": {
@@ -78,7 +76,7 @@
"type": "string"
}
],
"description": "tolerance is the tolerance on the ratio between the current and desired\nmetric value under which no updates are made to the desired number of\nreplicas (e.g. 0.01 for 1%). Must be greater than or equal to zero. If not\nset, the default cluster-wide tolerance is applied (by default 10%).\n\nFor example, if autoscaling is configured with a memory consumption target of 100Mi,\nand scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be\ntriggered when the actual consumption falls below 95Mi or exceeds 101Mi.\n\nThis is an alpha field and requires enabling the HPAConfigurableTolerance\nfeature gate.",
"description": "tolerance is the tolerance on the ratio between the current and desired\nmetric value under which no updates are made to the desired number of\nreplicas (e.g. 0.01 for 1%). Must be greater than or equal to zero. If not\nset, the default cluster-wide tolerance is applied (by default 10%).\n\nFor example, if autoscaling is configured with a memory consumption target of 100Mi,\nand scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be\ntriggered when the actual consumption falls below 95Mi or exceeds 101Mi.\n\nThis is an beta field and requires the HPAConfigurableTolerance feature\ngate to be enabled.",
"pattern": "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$",
"x-kubernetes-int-or-string": true
}
@@ -127,8 +125,6 @@
"stabilizationWindowSeconds": {
"description": "stabilizationWindowSeconds is the number of seconds for which past recommendations should be\nconsidered while scaling up or scaling down.\nStabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour).\nIf not set, use the default values:\n- For scale up: 0 (i.e. no stabilization is done).\n- For scale down: 300 (i.e. the stabilization window is 300 seconds long).",
"format": "int32",
"maximum": 3600,
"minimum": 0,
"type": "integer"
},
"tolerance": {
@@ -140,7 +136,7 @@
"type": "string"
}
],
"description": "tolerance is the tolerance on the ratio between the current and desired\nmetric value under which no updates are made to the desired number of\nreplicas (e.g. 0.01 for 1%). Must be greater than or equal to zero. If not\nset, the default cluster-wide tolerance is applied (by default 10%).\n\nFor example, if autoscaling is configured with a memory consumption target of 100Mi,\nand scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be\ntriggered when the actual consumption falls below 95Mi or exceeds 101Mi.\n\nThis is an alpha field and requires enabling the HPAConfigurableTolerance\nfeature gate.",
"description": "tolerance is the tolerance on the ratio between the current and desired\nmetric value under which no updates are made to the desired number of\nreplicas (e.g. 0.01 for 1%). Must be greater than or equal to zero. If not\nset, the default cluster-wide tolerance is applied (by default 10%).\n\nFor example, if autoscaling is configured with a memory consumption target of 100Mi,\nand scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be\ntriggered when the actual consumption falls below 95Mi or exceeds 101Mi.\n\nThis is an beta field and requires the HPAConfigurableTolerance feature\ngate to be enabled.",
"pattern": "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$",
"x-kubernetes-int-or-string": true
}
@@ -192,6 +188,7 @@
},
"cooldownPeriod": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"fallback": {
@@ -203,16 +200,19 @@
"static",
"currentReplicas",
"currentReplicasIfHigher",
"currentReplicasIfLower"
"currentReplicasIfLower",
"scalingModifiers"
],
"type": "string"
},
"failureThreshold": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"replicas": {
"format": "int32",
"minimum": 0,
"type": "integer"
}
},
@@ -225,22 +225,27 @@
},
"idleReplicaCount": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"initialCooldownPeriod": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"maxReplicaCount": {
"format": "int32",
"minimum": 1,
"type": "integer"
},
"minReplicaCount": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"pollingInterval": {
"format": "int32",
"minimum": 1,
"type": "integer"
},
"scaleTargetRef": {
@@ -256,6 +261,7 @@
"type": "string"
},
"name": {
"minLength": 1,
"type": "string"
}
},
@@ -274,6 +280,10 @@
"properties": {
"kind": {
"description": "Kind of the resource being referred to. Defaults to TriggerAuthentication.",
"enum": [
"TriggerAuthentication",
"ClusterTriggerAuthentication"
],
"type": "string"
},
"name": {
@@ -300,6 +310,7 @@
"type": "string"
},
"type": {
"minLength": 1,
"type": "string"
},
"useCachedMetrics": {
@@ -313,6 +324,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -321,6 +333,12 @@
"triggers"
],
"type": "object",
"x-kubernetes-validations": [
{
"message": "minReplicaCount must be less than or equal to maxReplicaCount",
"rule": "!has(self.minReplicaCount) || self.minReplicaCount <= (has(self.maxReplicaCount) ? self.maxReplicaCount : 100)"
}
],
"additionalProperties": false
},
"status": {
crdSchemas/master-standalone/triggerauthentication-stable-v1alpha1.json
+100
View File
@@ -133,6 +133,10 @@
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
@@ -203,6 +207,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -287,6 +292,10 @@
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
@@ -348,6 +357,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
},
"vaultUri": {
@@ -479,6 +489,10 @@
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
@@ -540,6 +554,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -557,6 +572,10 @@
},
"authentication": {
"description": "VaultAuthentication contains the list of Hashicorp Vault authentication methods",
"enum": [
"token",
"kubernetes"
],
"type": "string"
},
"credential": {
@@ -626,6 +645,12 @@
},
"type": {
"description": "VaultSecretType defines the type of vault secret",
"enum": [
"",
"secretV2",
"secret",
"pki"
],
"type": "string"
}
},
@@ -637,6 +662,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -648,9 +674,83 @@
"type": "object",
"additionalProperties": false
},
"oauth2": {
"properties": {
"clientId": {
"type": "string"
},
"clientSecret": {
"properties": {
"valueFrom": {
"properties": {
"secretKeyRef": {
"properties": {
"key": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"key",
"name"
],
"type": "object",
"additionalProperties": false
}
},
"required": [
"secretKeyRef"
],
"type": "object",
"additionalProperties": false
}
},
"required": [
"valueFrom"
],
"type": "object",
"additionalProperties": false
},
"scopes": {
"items": {
"type": "string"
},
"type": "array"
},
"tokenUrl": {
"type": "string"
},
"tokenUrlParams": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"type": {
"default": "clientCredentials",
"enum": [
"clientCredentials"
],
"type": "string"
}
},
"required": [
"clientId",
"tokenUrl",
"type"
],
"type": "object",
"additionalProperties": false
},
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
crdSchemas/scaledjob_v1alpha1.json
+78 -14
View File
@@ -20,6 +20,7 @@
},
"failedJobsHistoryLimit": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"jobTargetRef": {
@@ -50,7 +51,7 @@
"type": "integer"
},
"managedBy": {
"description": "ManagedBy field indicates the controller that manages a Job. The k8s Job\ncontroller reconciles jobs which don't have this field at all or the field\nvalue is the reserved string `kubernetes.io/job-controller`, but skips\nreconciling Jobs with a custom value for this field.\nThe value must be a valid domain-prefixed path (e.g. acme.io/foo) -\nall characters before the first \"/\" must be a valid subdomain as defined\nby RFC 1123. All characters trailing the first \"/\" must be valid HTTP Path\ncharacters as defined by RFC 3986. The value cannot exceed 63 characters.\nThis field is immutable.\n\nThis field is beta-level. The job controller accepts setting the field\nwhen the feature gate JobManagedBy is enabled (enabled by default).",
"description": "ManagedBy field indicates the controller that manages a Job. The k8s Job\ncontroller reconciles jobs which don't have this field at all or the field\nvalue is the reserved string `kubernetes.io/job-controller`, but skips\nreconciling Jobs with a custom value for this field.\nThe value must be a valid domain-prefixed path (e.g. acme.io/foo) -\nall characters before the first \"/\" must be a valid subdomain as defined\nby RFC 1123. All characters trailing the first \"/\" must be valid HTTP Path\ncharacters as defined by RFC 3986. The value cannot exceed 63 characters.\nThis field is immutable.",
"type": "string"
},
"manualSelector": {
@@ -122,7 +123,6 @@
}
},
"required": [
"status",
"type"
],
"type": "object",
@@ -266,7 +266,6 @@
}
},
"type": "object",
"x-kubernetes-preserve-unknown-fields": true,
"additionalProperties": false
},
"spec": {
@@ -1754,8 +1753,7 @@
}
},
"required": [
"containerPort",
"protocol"
"containerPort"
],
"type": "object",
"additionalProperties": false
@@ -1924,7 +1922,7 @@
"additionalProperties": false
},
"resizePolicy": {
"description": "Resources resize policy for the container.",
"description": "Resources resize policy for the container.\nThis field cannot be set on ephemeral containers.",
"items": {
"description": "ContainerResizePolicy represents resource resize policy for the container.",
"properties": {
@@ -3204,8 +3202,7 @@
}
},
"required": [
"containerPort",
"protocol"
"containerPort"
],
"type": "object",
"additionalProperties": false
@@ -4682,8 +4679,7 @@
}
},
"required": [
"containerPort",
"protocol"
"containerPort"
],
"type": "object",
"additionalProperties": false
@@ -4852,7 +4848,7 @@
"additionalProperties": false
},
"resizePolicy": {
"description": "Resources resize policy for the container.",
"description": "Resources resize policy for the container.\nThis field cannot be set on ephemeral containers.",
"items": {
"description": "ContainerResizePolicy represents resource resize policy for the container.",
"properties": {
@@ -5472,7 +5468,7 @@
"x-kubernetes-list-type": "atomic"
},
"resourceClaims": {
"description": "ResourceClaims defines which ResourceClaims must be allocated\nand reserved before the Pod is allowed to start. The resources\nwill be made available to those containers which consume them\nby name.\n\nThis is an alpha field and requires enabling the\nDynamicResourceAllocation feature gate.\n\nThis field is immutable.",
"description": "ResourceClaims defines which ResourceClaims must be allocated\nand reserved before the Pod is allowed to start. The resources\nwill be made available to those containers which consume them\nby name.\n\nThis is a stable field but requires that the\nDynamicResourceAllocation feature gate is enabled.\n\nThis field is immutable.",
"items": {
"description": "PodResourceClaim references exactly one ResourceClaim, either directly\nor by naming a ResourceClaimTemplate which is then turned into a ResourceClaim\nfor the pod.\n\nIt adds a name to it that uniquely identifies the ResourceClaim inside the Pod.\nContainers that need access to the ResourceClaim reference it with this name.",
"properties": {
@@ -5792,7 +5788,7 @@
"type": "string"
},
"operator": {
"description": "Operator represents a key's relationship to the value.\nValid operators are Exists and Equal. Defaults to Equal.\nExists is equivalent to wildcard for value, so that a pod can\ntolerate all taints of a particular category.",
"description": "Operator represents a key's relationship to the value.\nValid operators are Exists, Equal, Lt, and Gt. Defaults to Equal.\nExists is equivalent to wildcard for value, so that a pod can\ntolerate all taints of a particular category.\nLt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators).",
"type": "string"
},
"tolerationSeconds": {
@@ -6391,7 +6387,7 @@
"additionalProperties": false
},
"resources": {
"description": "resources represents the minimum resources the volume should have.\nIf RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements\nthat are lower than previous value but must still be higher than capacity recorded in the\nstatus field of the claim.\nMore info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
"description": "resources represents the minimum resources the volume should have.\nUsers are allowed to specify resource requirements\nthat are lower than previous value but must still be higher than capacity recorded in the\nstatus field of the claim.\nMore info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources",
"properties": {
"limits": {
"additionalProperties": {
@@ -7102,6 +7098,13 @@
"signerName": {
"description": "Kubelet's generated CSRs will be addressed to this signer.",
"type": "string"
},
"userAnnotations": {
"additionalProperties": {
"type": "string"
},
"description": "userAnnotations allow pod authors to pass additional information to\nthe signer implementation. Kubernetes does not restrict or validate this\nmetadata in any way.\n\nThese values are copied verbatim into the `spec.unverifiedUserAnnotations` field of\nthe PodCertificateRequest objects that Kubelet creates.\n\nEntries are subject to the same validation as object metadata annotations,\nwith the addition that all keys must be domain-prefixed. No restrictions\nare placed on values, except an overall size limitation on the entire field.\n\nSigners should document the keys and values they support. Signers should\ndeny requests that contain keys they do not recognize.",
"type": "object"
}
},
"required": [
@@ -7471,6 +7474,29 @@
"name"
],
"x-kubernetes-list-type": "map"
},
"workloadRef": {
"description": "WorkloadRef provides a reference to the Workload object that this Pod belongs to.\nThis field is used by the scheduler to identify the PodGroup and apply the\ncorrect group scheduling policies. The Workload object referenced\nby this field may not exist at the time the Pod is created.\nThis field is immutable, but a Workload object with the same name\nmay be recreated with different policies. Doing this during pod scheduling\nmay result in the placement not conforming to the expected policies.",
"properties": {
"name": {
"description": "Name defines the name of the Workload object this Pod belongs to.\nWorkload must be in the same namespace as the Pod.\nIf it doesn't match any existing Workload, the Pod will remain unschedulable\nuntil a Workload object is created and observed by the kube-scheduler.\nIt must be a DNS subdomain.",
"type": "string"
},
"podGroup": {
"description": "PodGroup is the name of the PodGroup within the Workload that this Pod\nbelongs to. If it doesn't match any existing PodGroup within the Workload,\nthe Pod will remain unschedulable until the Workload object is recreated\nand observed by the kube-scheduler. It must be a DNS label.",
"type": "string"
},
"podGroupReplicaKey": {
"description": "PodGroupReplicaKey specifies the replica key of the PodGroup to which this\nPod belongs. It is used to distinguish pods belonging to different replicas\nof the same pod group. The pod group policy is applied separately to each replica.\nWhen set, it must be a DNS label.",
"type": "string"
}
},
"required": [
"name",
"podGroup"
],
"type": "object",
"additionalProperties": false
}
},
"required": [
@@ -7497,23 +7523,34 @@
},
"maxReplicaCount": {
"format": "int32",
"minimum": 1,
"type": "integer"
},
"minReplicaCount": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"pollingInterval": {
"format": "int32",
"minimum": 1,
"type": "integer"
},
"rollout": {
"description": "Rollout defines the strategy for job rollouts",
"properties": {
"propagationPolicy": {
"enum": [
"foreground",
"background"
],
"type": "string"
},
"strategy": {
"enum": [
"gradual",
"immediate"
],
"type": "string"
}
},
@@ -7521,6 +7558,11 @@
"additionalProperties": false
},
"rolloutStrategy": {
"description": "Deprecated: Use Rollout.Strategy instead (see https://github.com/kedacore/keda/issues/3596).",
"enum": [
"gradual",
"immediate"
],
"type": "string"
},
"scalingStrategy": {
@@ -7534,6 +7576,12 @@
"type": "string"
},
"multipleScalersCalculation": {
"enum": [
"min",
"avg",
"sum",
"max"
],
"type": "string"
},
"pendingPodConditions": {
@@ -7543,6 +7591,11 @@
"type": "array"
},
"strategy": {
"enum": [
"custom",
"accurate",
"eager"
],
"type": "string"
}
},
@@ -7551,6 +7604,7 @@
},
"successfulJobsHistoryLimit": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"triggers": {
@@ -7562,6 +7616,10 @@
"properties": {
"kind": {
"description": "Kind of the resource being referred to. Defaults to TriggerAuthentication.",
"enum": [
"TriggerAuthentication",
"ClusterTriggerAuthentication"
],
"type": "string"
},
"name": {
@@ -7580,10 +7638,15 @@
},
"type": "object"
},
"metricType": {
"description": "MetricTargetType specifies the type of metric being targeted, and should be either\n\"Value\", \"AverageValue\", or \"Utilization\"",
"type": "string"
},
"name": {
"type": "string"
},
"type": {
"minLength": 1,
"type": "string"
},
"useCachedMetrics": {
@@ -7597,6 +7660,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
crdSchemas/scaledobject_v1alpha1.json
+25 -7
View File
@@ -65,8 +65,6 @@
"stabilizationWindowSeconds": {
"description": "stabilizationWindowSeconds is the number of seconds for which past recommendations should be\nconsidered while scaling up or scaling down.\nStabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour).\nIf not set, use the default values:\n- For scale up: 0 (i.e. no stabilization is done).\n- For scale down: 300 (i.e. the stabilization window is 300 seconds long).",
"format": "int32",
"maximum": 3600,
"minimum": 0,
"type": "integer"
},
"tolerance": {
@@ -78,7 +76,7 @@
"type": "string"
}
],
"description": "tolerance is the tolerance on the ratio between the current and desired\nmetric value under which no updates are made to the desired number of\nreplicas (e.g. 0.01 for 1%). Must be greater than or equal to zero. If not\nset, the default cluster-wide tolerance is applied (by default 10%).\n\nFor example, if autoscaling is configured with a memory consumption target of 100Mi,\nand scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be\ntriggered when the actual consumption falls below 95Mi or exceeds 101Mi.\n\nThis is an alpha field and requires enabling the HPAConfigurableTolerance\nfeature gate.",
"description": "tolerance is the tolerance on the ratio between the current and desired\nmetric value under which no updates are made to the desired number of\nreplicas (e.g. 0.01 for 1%). Must be greater than or equal to zero. If not\nset, the default cluster-wide tolerance is applied (by default 10%).\n\nFor example, if autoscaling is configured with a memory consumption target of 100Mi,\nand scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be\ntriggered when the actual consumption falls below 95Mi or exceeds 101Mi.\n\nThis is an beta field and requires the HPAConfigurableTolerance feature\ngate to be enabled.",
"pattern": "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$",
"x-kubernetes-int-or-string": true
}
@@ -127,8 +125,6 @@
"stabilizationWindowSeconds": {
"description": "stabilizationWindowSeconds is the number of seconds for which past recommendations should be\nconsidered while scaling up or scaling down.\nStabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour).\nIf not set, use the default values:\n- For scale up: 0 (i.e. no stabilization is done).\n- For scale down: 300 (i.e. the stabilization window is 300 seconds long).",
"format": "int32",
"maximum": 3600,
"minimum": 0,
"type": "integer"
},
"tolerance": {
@@ -140,7 +136,7 @@
"type": "string"
}
],
"description": "tolerance is the tolerance on the ratio between the current and desired\nmetric value under which no updates are made to the desired number of\nreplicas (e.g. 0.01 for 1%). Must be greater than or equal to zero. If not\nset, the default cluster-wide tolerance is applied (by default 10%).\n\nFor example, if autoscaling is configured with a memory consumption target of 100Mi,\nand scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be\ntriggered when the actual consumption falls below 95Mi or exceeds 101Mi.\n\nThis is an alpha field and requires enabling the HPAConfigurableTolerance\nfeature gate.",
"description": "tolerance is the tolerance on the ratio between the current and desired\nmetric value under which no updates are made to the desired number of\nreplicas (e.g. 0.01 for 1%). Must be greater than or equal to zero. If not\nset, the default cluster-wide tolerance is applied (by default 10%).\n\nFor example, if autoscaling is configured with a memory consumption target of 100Mi,\nand scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be\ntriggered when the actual consumption falls below 95Mi or exceeds 101Mi.\n\nThis is an beta field and requires the HPAConfigurableTolerance feature\ngate to be enabled.",
"pattern": "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$",
"x-kubernetes-int-or-string": true
}
@@ -192,6 +188,7 @@
},
"cooldownPeriod": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"fallback": {
@@ -203,16 +200,19 @@
"static",
"currentReplicas",
"currentReplicasIfHigher",
"currentReplicasIfLower"
"currentReplicasIfLower",
"scalingModifiers"
],
"type": "string"
},
"failureThreshold": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"replicas": {
"format": "int32",
"minimum": 0,
"type": "integer"
}
},
@@ -225,22 +225,27 @@
},
"idleReplicaCount": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"initialCooldownPeriod": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"maxReplicaCount": {
"format": "int32",
"minimum": 1,
"type": "integer"
},
"minReplicaCount": {
"format": "int32",
"minimum": 0,
"type": "integer"
},
"pollingInterval": {
"format": "int32",
"minimum": 1,
"type": "integer"
},
"scaleTargetRef": {
@@ -256,6 +261,7 @@
"type": "string"
},
"name": {
"minLength": 1,
"type": "string"
}
},
@@ -274,6 +280,10 @@
"properties": {
"kind": {
"description": "Kind of the resource being referred to. Defaults to TriggerAuthentication.",
"enum": [
"TriggerAuthentication",
"ClusterTriggerAuthentication"
],
"type": "string"
},
"name": {
@@ -300,6 +310,7 @@
"type": "string"
},
"type": {
"minLength": 1,
"type": "string"
},
"useCachedMetrics": {
@@ -313,6 +324,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -321,6 +333,12 @@
"triggers"
],
"type": "object",
"x-kubernetes-validations": [
{
"message": "minReplicaCount must be less than or equal to maxReplicaCount",
"rule": "!has(self.minReplicaCount) || self.minReplicaCount <= (has(self.maxReplicaCount) ? self.maxReplicaCount : 100)"
}
],
"additionalProperties": false
},
"status": {
crdSchemas/triggerauthentication_v1alpha1.json
+100
View File
@@ -133,6 +133,10 @@
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
@@ -203,6 +207,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -287,6 +292,10 @@
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
@@ -348,6 +357,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
},
"vaultUri": {
@@ -479,6 +489,10 @@
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"
@@ -540,6 +554,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -557,6 +572,10 @@
},
"authentication": {
"description": "VaultAuthentication contains the list of Hashicorp Vault authentication methods",
"enum": [
"token",
"kubernetes"
],
"type": "string"
},
"credential": {
@@ -626,6 +645,12 @@
},
"type": {
"description": "VaultSecretType defines the type of vault secret",
"enum": [
"",
"secretV2",
"secret",
"pki"
],
"type": "string"
}
},
@@ -637,6 +662,7 @@
"type": "object",
"additionalProperties": false
},
"minItems": 1,
"type": "array"
}
},
@@ -648,9 +674,83 @@
"type": "object",
"additionalProperties": false
},
"oauth2": {
"properties": {
"clientId": {
"type": "string"
},
"clientSecret": {
"properties": {
"valueFrom": {
"properties": {
"secretKeyRef": {
"properties": {
"key": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"key",
"name"
],
"type": "object",
"additionalProperties": false
}
},
"required": [
"secretKeyRef"
],
"type": "object",
"additionalProperties": false
}
},
"required": [
"valueFrom"
],
"type": "object",
"additionalProperties": false
},
"scopes": {
"items": {
"type": "string"
},
"type": "array"
},
"tokenUrl": {
"type": "string"
},
"tokenUrlParams": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"type": {
"default": "clientCredentials",
"enum": [
"clientCredentials"
],
"type": "string"
}
},
"required": [
"clientId",
"tokenUrl",
"type"
],
"type": "object",
"additionalProperties": false
},
"podIdentity": {
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
"properties": {
"externalID": {
"description": "ExternalID sets the External ID to be used when assuming an identity. This is only applicable when using AWS pod identity with a RoleArn.",
"type": "string"
},
"identityAuthorityHost": {
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
"type": "string"