first commit
This commit is contained in:
@@ -0,0 +1,741 @@
|
||||
{
|
||||
"description": "ClusterTriggerAuthentication defines how a trigger can authenticate globally",
|
||||
"properties": {
|
||||
"apiVersion": {
|
||||
"description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
|
||||
"type": "string"
|
||||
},
|
||||
"kind": {
|
||||
"description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
|
||||
"type": "string"
|
||||
},
|
||||
"metadata": {
|
||||
"type": "object"
|
||||
},
|
||||
"spec": {
|
||||
"description": "TriggerAuthenticationSpec defines the various ways to authenticate",
|
||||
"properties": {
|
||||
"awsSecretManager": {
|
||||
"description": "AwsSecretManager is used to authenticate using AwsSecretManager",
|
||||
"properties": {
|
||||
"credentials": {
|
||||
"properties": {
|
||||
"accessKey": {
|
||||
"properties": {
|
||||
"valueFrom": {
|
||||
"properties": {
|
||||
"secretKeyRef": {
|
||||
"properties": {
|
||||
"key": {
|
||||
"type": "string"
|
||||
},
|
||||
"name": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"key",
|
||||
"name"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"secretKeyRef"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"valueFrom"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"accessSecretKey": {
|
||||
"properties": {
|
||||
"valueFrom": {
|
||||
"properties": {
|
||||
"secretKeyRef": {
|
||||
"properties": {
|
||||
"key": {
|
||||
"type": "string"
|
||||
},
|
||||
"name": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"key",
|
||||
"name"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"secretKeyRef"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"valueFrom"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"accessToken": {
|
||||
"properties": {
|
||||
"valueFrom": {
|
||||
"properties": {
|
||||
"secretKeyRef": {
|
||||
"properties": {
|
||||
"key": {
|
||||
"type": "string"
|
||||
},
|
||||
"name": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"key",
|
||||
"name"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"secretKeyRef"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"valueFrom"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"accessKey",
|
||||
"accessSecretKey"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"podIdentity": {
|
||||
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
|
||||
"properties": {
|
||||
"identityAuthorityHost": {
|
||||
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
|
||||
"type": "string"
|
||||
},
|
||||
"identityId": {
|
||||
"type": "string"
|
||||
},
|
||||
"identityOwner": {
|
||||
"description": "IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn",
|
||||
"enum": [
|
||||
"keda",
|
||||
"workload"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"identityTenantId": {
|
||||
"description": "Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set",
|
||||
"type": "string"
|
||||
},
|
||||
"provider": {
|
||||
"description": "PodIdentityProvider contains the list of providers",
|
||||
"enum": [
|
||||
"azure-workload",
|
||||
"gcp",
|
||||
"aws",
|
||||
"aws-eks",
|
||||
"none"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"roleArn": {
|
||||
"description": "RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"provider"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"region": {
|
||||
"type": "string"
|
||||
},
|
||||
"secrets": {
|
||||
"items": {
|
||||
"properties": {
|
||||
"name": {
|
||||
"type": "string"
|
||||
},
|
||||
"parameter": {
|
||||
"type": "string"
|
||||
},
|
||||
"secretKey": {
|
||||
"type": "string"
|
||||
},
|
||||
"versionId": {
|
||||
"type": "string"
|
||||
},
|
||||
"versionStage": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"name",
|
||||
"parameter"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": "array"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"secrets"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"azureKeyVault": {
|
||||
"description": "AzureKeyVault is used to authenticate using Azure Key Vault",
|
||||
"properties": {
|
||||
"cloud": {
|
||||
"properties": {
|
||||
"activeDirectoryEndpoint": {
|
||||
"type": "string"
|
||||
},
|
||||
"keyVaultResourceURL": {
|
||||
"type": "string"
|
||||
},
|
||||
"type": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"credentials": {
|
||||
"properties": {
|
||||
"clientId": {
|
||||
"type": "string"
|
||||
},
|
||||
"clientSecret": {
|
||||
"properties": {
|
||||
"valueFrom": {
|
||||
"properties": {
|
||||
"secretKeyRef": {
|
||||
"properties": {
|
||||
"key": {
|
||||
"type": "string"
|
||||
},
|
||||
"name": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"key",
|
||||
"name"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"secretKeyRef"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"valueFrom"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"tenantId": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"clientId",
|
||||
"clientSecret",
|
||||
"tenantId"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"podIdentity": {
|
||||
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
|
||||
"properties": {
|
||||
"identityAuthorityHost": {
|
||||
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
|
||||
"type": "string"
|
||||
},
|
||||
"identityId": {
|
||||
"type": "string"
|
||||
},
|
||||
"identityOwner": {
|
||||
"description": "IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn",
|
||||
"enum": [
|
||||
"keda",
|
||||
"workload"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"identityTenantId": {
|
||||
"description": "Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set",
|
||||
"type": "string"
|
||||
},
|
||||
"provider": {
|
||||
"description": "PodIdentityProvider contains the list of providers",
|
||||
"enum": [
|
||||
"azure-workload",
|
||||
"gcp",
|
||||
"aws",
|
||||
"aws-eks",
|
||||
"none"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"roleArn": {
|
||||
"description": "RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"provider"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"secrets": {
|
||||
"items": {
|
||||
"properties": {
|
||||
"name": {
|
||||
"type": "string"
|
||||
},
|
||||
"parameter": {
|
||||
"type": "string"
|
||||
},
|
||||
"version": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"name",
|
||||
"parameter"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"vaultUri": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"secrets",
|
||||
"vaultUri"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"boundServiceAccountToken": {
|
||||
"items": {
|
||||
"properties": {
|
||||
"parameter": {
|
||||
"type": "string"
|
||||
},
|
||||
"serviceAccountName": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"parameter",
|
||||
"serviceAccountName"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"configMapTargetRef": {
|
||||
"items": {
|
||||
"description": "AuthConfigMapTargetRef is used to authenticate using a reference to a config map",
|
||||
"properties": {
|
||||
"key": {
|
||||
"type": "string"
|
||||
},
|
||||
"name": {
|
||||
"type": "string"
|
||||
},
|
||||
"parameter": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"key",
|
||||
"name",
|
||||
"parameter"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"env": {
|
||||
"items": {
|
||||
"description": "AuthEnvironment is used to authenticate using environment variables\nin the destination ScaleTarget spec",
|
||||
"properties": {
|
||||
"containerName": {
|
||||
"type": "string"
|
||||
},
|
||||
"name": {
|
||||
"type": "string"
|
||||
},
|
||||
"parameter": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"name",
|
||||
"parameter"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"filePath": {
|
||||
"description": "FilePath specifies a file containing auth parameters as JSON map[string]string.\nWhen set, auth params are read directly from this file instead.",
|
||||
"type": "string"
|
||||
},
|
||||
"gcpSecretManager": {
|
||||
"properties": {
|
||||
"credentials": {
|
||||
"properties": {
|
||||
"clientSecret": {
|
||||
"properties": {
|
||||
"valueFrom": {
|
||||
"properties": {
|
||||
"secretKeyRef": {
|
||||
"properties": {
|
||||
"key": {
|
||||
"type": "string"
|
||||
},
|
||||
"name": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"key",
|
||||
"name"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"secretKeyRef"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"valueFrom"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"clientSecret"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"podIdentity": {
|
||||
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
|
||||
"properties": {
|
||||
"identityAuthorityHost": {
|
||||
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
|
||||
"type": "string"
|
||||
},
|
||||
"identityId": {
|
||||
"type": "string"
|
||||
},
|
||||
"identityOwner": {
|
||||
"description": "IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn",
|
||||
"enum": [
|
||||
"keda",
|
||||
"workload"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"identityTenantId": {
|
||||
"description": "Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set",
|
||||
"type": "string"
|
||||
},
|
||||
"provider": {
|
||||
"description": "PodIdentityProvider contains the list of providers",
|
||||
"enum": [
|
||||
"azure-workload",
|
||||
"gcp",
|
||||
"aws",
|
||||
"aws-eks",
|
||||
"none"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"roleArn": {
|
||||
"description": "RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"provider"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"secrets": {
|
||||
"items": {
|
||||
"properties": {
|
||||
"id": {
|
||||
"type": "string"
|
||||
},
|
||||
"parameter": {
|
||||
"type": "string"
|
||||
},
|
||||
"version": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"id",
|
||||
"parameter"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": "array"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"secrets"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"hashiCorpVault": {
|
||||
"description": "HashiCorpVault is used to authenticate using Hashicorp Vault",
|
||||
"properties": {
|
||||
"address": {
|
||||
"type": "string"
|
||||
},
|
||||
"authentication": {
|
||||
"description": "VaultAuthentication contains the list of Hashicorp Vault authentication methods",
|
||||
"type": "string"
|
||||
},
|
||||
"credential": {
|
||||
"description": "Credential defines the Hashicorp Vault credentials depending on the authentication method",
|
||||
"properties": {
|
||||
"serviceAccount": {
|
||||
"type": "string"
|
||||
},
|
||||
"serviceAccountName": {
|
||||
"type": "string"
|
||||
},
|
||||
"token": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"mount": {
|
||||
"type": "string"
|
||||
},
|
||||
"namespace": {
|
||||
"type": "string"
|
||||
},
|
||||
"role": {
|
||||
"type": "string"
|
||||
},
|
||||
"secrets": {
|
||||
"items": {
|
||||
"description": "VaultSecret defines the mapping between the path of the secret in Vault to the parameter",
|
||||
"properties": {
|
||||
"key": {
|
||||
"type": "string"
|
||||
},
|
||||
"parameter": {
|
||||
"type": "string"
|
||||
},
|
||||
"path": {
|
||||
"type": "string"
|
||||
},
|
||||
"pkiData": {
|
||||
"properties": {
|
||||
"altNames": {
|
||||
"type": "string"
|
||||
},
|
||||
"commonName": {
|
||||
"type": "string"
|
||||
},
|
||||
"format": {
|
||||
"type": "string"
|
||||
},
|
||||
"ipSans": {
|
||||
"type": "string"
|
||||
},
|
||||
"otherSans": {
|
||||
"type": "string"
|
||||
},
|
||||
"ttl": {
|
||||
"type": "string"
|
||||
},
|
||||
"uriSans": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": {
|
||||
"description": "VaultSecretType defines the type of vault secret",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"key",
|
||||
"parameter",
|
||||
"path"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": "array"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"address",
|
||||
"authentication",
|
||||
"secrets"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"podIdentity": {
|
||||
"description": "AuthPodIdentity allows users to select the platform native identity\nmechanism",
|
||||
"properties": {
|
||||
"identityAuthorityHost": {
|
||||
"description": "Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set",
|
||||
"type": "string"
|
||||
},
|
||||
"identityId": {
|
||||
"type": "string"
|
||||
},
|
||||
"identityOwner": {
|
||||
"description": "IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn",
|
||||
"enum": [
|
||||
"keda",
|
||||
"workload"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"identityTenantId": {
|
||||
"description": "Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set",
|
||||
"type": "string"
|
||||
},
|
||||
"provider": {
|
||||
"description": "PodIdentityProvider contains the list of providers",
|
||||
"enum": [
|
||||
"azure-workload",
|
||||
"gcp",
|
||||
"aws",
|
||||
"aws-eks",
|
||||
"none"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"roleArn": {
|
||||
"description": "RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"provider"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"secretTargetRef": {
|
||||
"items": {
|
||||
"description": "AuthSecretTargetRef is used to authenticate using a reference to a secret",
|
||||
"properties": {
|
||||
"key": {
|
||||
"type": "string"
|
||||
},
|
||||
"name": {
|
||||
"type": "string"
|
||||
},
|
||||
"parameter": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"key",
|
||||
"name",
|
||||
"parameter"
|
||||
],
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"type": "array"
|
||||
}
|
||||
},
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
},
|
||||
"status": {
|
||||
"description": "TriggerAuthenticationStatus defines the observed state of TriggerAuthentication",
|
||||
"properties": {
|
||||
"scaledjobs": {
|
||||
"type": "string"
|
||||
},
|
||||
"scaledobjects": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"type": "object",
|
||||
"additionalProperties": false
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"spec"
|
||||
],
|
||||
"type": "object"
|
||||
}
|
||||
Reference in New Issue
Block a user