diff --git a/packs/tekton-operator-0.80.0/README.md b/packs/tekton-operator-0.80.0/README.md new file mode 100644 index 00000000..bf65260c --- /dev/null +++ b/packs/tekton-operator-0.80.0/README.md @@ -0,0 +1,103 @@ + +```markdown +# Tektoncd Operator + +The Tektoncd Operator provides a declarative way to install, upgrade, and manage the lifecycle of Tekton components (Pipelines, Triggers, Dashboard, etc.) on Kubernetes and OpenShift clusters. + +--- + +## Prerequisites + +Before deploying the operator, ensure your environment meets the following requirements: + +* **Kubernetes:** v1.29+ (or a compatible OpenShift environment). +* **Tools:** `kubectl` CLI installed and configured. +* **Cluster Permissions:** Cluster-admin privileges are required to deploy the cluster-wide Custom Resource Definitions (CRDs), Roles, and Operator deployments. + +--- + +## Parameters + +When configuring the operator via its main Custom Resource (`TektonConfig`), you can manage components through **Installation Profiles**. The available profiles and the components they install are: + +| Platform | Profile | Installed Components | +| :--- | :--- | :--- | +| Kubernetes, OpenShift | `lite` | Pipeline | +| Kubernetes, OpenShift | `basic` | Pipeline, Trigger, Chains | +| Kubernetes | `all` | Pipeline, Trigger, Chains, Dashboard | +| OpenShift | `all` | Pipeline, Trigger, Chains, Pipelines as Code, Addons | + +--- + +## Upgrade + +To upgrade the Tektoncd Operator to the latest LTS version, re-apply the official release manifest. The operator will automatically handle the lifecycle and rolling updates of the underlying Tekton components based on your active profile. + +1. **Backup existing configurations:** + ```bash + kubectl get tektonconfigs.operator.tekton.dev -o yaml > tektonconfig-backup.yaml + +``` + +2. **Apply the updated manifest:** +```bash +kubectl apply -f [https://infra.tekton.dev/tekton-releases/operator/latest/release.yaml](https://infra.tekton.dev/tekton-releases/operator/latest/release.yaml) + +``` + + + +--- + +## Usage + +### 1. Install the Operator + +Deploy the operator using the official release manifest. This single command sets up the operator alongside the default components (Pipelines, Triggers, Chains, and Dashboard): + +```bash +kubectl apply -f [https://infra.tekton.dev/tekton-releases/operator/latest/release.yaml](https://infra.tekton.dev/tekton-releases/operator/latest/release.yaml) + +``` + +### 2. Configure Installation Profiles (Optional) + +If you prefer a different subset of components instead of the default stack, you can apply a specific configuration profile (e.g., the `all` profile for Kubernetes): + +```bash +kubectl apply -f [https://raw.githubusercontent.com/tektoncd/operator/main/config/crs/kubernetes/config/all/operator_v1alpha1_config_cr.yaml](https://raw.githubusercontent.com/tektoncd/operator/main/config/crs/kubernetes/config/all/operator_v1alpha1_config_cr.yaml) + +``` + +### 3. Verify the Installation + +Ensure the operator and its custom resources are successfully deployed in the cluster: + +```bash +kubectl get deployments -n tekton-operator +kubectl get tektonconfig + +``` + +### 4. Uninstalling + +The tekton-operator pack acts as an orchestrator for other components; therefore, it creates resources that cannot be removed when the operator is uninstalled. In this case, the user must manually remove all remaining resources. The tekton pack is designed this way to protect user data, separate the infrastructure from workloads, prevent dangerous cascading removals, and for other reasons. + +To remove the operator from your cluster: + +```bash +kubectl delete -f [https://infra.tekton.dev/tekton-releases/operator/latest/release.yaml](https://infra.tekton.dev/tekton-releases/operator/latest/release.yaml) + +``` + +--- + +## References + +* [Official Tekton Operator Installation Guide](https://tekton.dev/docs/operator/install/) +* [Tektoncd Operator GitHub Repository](https://github.com/tektoncd/operator) +* [Air Gap Image Configuration Guide](https://www.google.com/search?q=https://tekton.dev/docs/operator/air-gap/) + +``` + +``` \ No newline at end of file diff --git a/packs/tekton-operator-0.80.0/logo.png b/packs/tekton-operator-0.80.0/logo.png new file mode 100644 index 00000000..125cb264 Binary files /dev/null and b/packs/tekton-operator-0.80.0/logo.png differ diff --git a/packs/tekton-operator-0.80.0/manifests/tekton-config.yaml b/packs/tekton-operator-0.80.0/manifests/tekton-config.yaml new file mode 100644 index 00000000..7c9ea815 --- /dev/null +++ b/packs/tekton-operator-0.80.0/manifests/tekton-config.yaml @@ -0,0 +1 @@ +{{ .Values.contents }} \ No newline at end of file diff --git a/packs/tekton-operator-0.80.0/manifests/tekton-config.yaml.orig b/packs/tekton-operator-0.80.0/manifests/tekton-config.yaml.orig new file mode 100644 index 00000000..2659bde3 --- /dev/null +++ b/packs/tekton-operator-0.80.0/manifests/tekton-config.yaml.orig @@ -0,0 +1,27 @@ +# Copyright 2020 The Tekton Authors +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +apiVersion: operator.tekton.dev/v1alpha1 +kind: TektonConfig +metadata: + name: config +spec: + profile: all + targetNamespace: tekton-pipelines + pruner: + resources: + - pipelinerun + - taskrun + keep: 100 + schedule: "0 8 * * *" diff --git a/packs/tekton-operator-0.80.0/manifests/tekton-operator.yaml b/packs/tekton-operator-0.80.0/manifests/tekton-operator.yaml new file mode 100644 index 00000000..7c9ea815 --- /dev/null +++ b/packs/tekton-operator-0.80.0/manifests/tekton-operator.yaml @@ -0,0 +1 @@ +{{ .Values.contents }} \ No newline at end of file diff --git a/packs/tekton-operator-0.80.0/manifests/tekton-operator.yaml.orig b/packs/tekton-operator-0.80.0/manifests/tekton-operator.yaml.orig new file mode 100644 index 00000000..54dee506 --- /dev/null +++ b/packs/tekton-operator-0.80.0/manifests/tekton-operator.yaml.orig @@ -0,0 +1,5341 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: tekton-operator +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: manualapprovalgates.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: ManualApprovalGate + listKind: ManualApprovalGateList + plural: manualapprovalgates + shortNames: + - mag + singular: manualapprovalgate + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: ManualApprovalGate is the Schema for the ManualApprovalGate API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + properties: + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - options + type: object + status: + description: ManualApprovalGateStatus defines the observed state of ManualApprovalGate + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for ManualApprovalGate + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: openshiftpipelinesascodes.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: OpenShiftPipelinesAsCode + listKind: OpenShiftPipelinesAsCodeList + plural: openshiftpipelinesascodes + shortNames: + - opac + - pac + singular: openshiftpipelinesascode + preserveUnknownFields: false + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: Schema for the OpenShiftPipelinesAsCode API + type: object + x-kubernetes-preserve-unknown-fields: true + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: syncerservices.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: SyncerService + listKind: SyncerServiceList + plural: syncerservices + singular: syncerservice + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: SyncerService is the Schema for the syncerservices API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: SyncerServiceSpec defines the desired state of SyncerService + properties: + config: + description: Config holds the configuration for resources created by SyncerService + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + options: + description: Options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + type: object + status: + description: SyncerServiceStatus defines the observed state of SyncerService + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + syncerServiceInstallerSet: + description: The current installer set name for SyncerService + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonchains.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: TektonChain + listKind: TektonChainList + plural: tektonchains + singular: tektonchain + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonChain is the Schema for the tektonchain API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonChainSpec defines the desired state of TektonChain + properties: + artifacts.oci.format: + description: oci artifacts config + type: string + artifacts.oci.signer: + type: string + artifacts.oci.storage: + type: string + artifacts.pipelinerun.enable-deep-inspection: + type: string + artifacts.pipelinerun.format: + description: pipelinerun artifacts config + type: string + artifacts.pipelinerun.signer: + type: string + artifacts.pipelinerun.storage: + type: string + artifacts.taskrun.format: + description: taskrun artifacts config + type: string + artifacts.taskrun.signer: + type: string + artifacts.taskrun.storage: + type: string + builddefinition.buildtype: + type: string + builder.id: + description: builder config + type: string + config: + description: Config holds the configuration for resources created by TektonChain + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + controllerEnvs: + items: + description: EnvVar represents an environment variable present in a Container. + properties: + name: + description: |- + Name of the environment variable. + May consist of any printable ASCII characters except '='. + type: string + value: + description: |- + Variable references $(VAR_NAME) are expanded + using the previously defined environment variables in the container and + any service environment variables. If a variable cannot be resolved, + the reference in the input string will be unchanged. Double $$ are reduced + to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. + "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". + Escaped references will never be expanded, regardless of whether the variable + exists or not. + Defaults to "". + type: string + valueFrom: + description: Source for the environment variable's value. Cannot be used if value is not empty. + properties: + configMapKeyRef: + description: Selects a key of a ConfigMap. + properties: + key: + description: The key to select. + type: string + name: + default: "" + description: |- + Name of the referent. + This field is effectively required, but due to backwards compatibility is + allowed to be empty. Instances of this type with an empty value here are + almost certainly wrong. + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + type: string + optional: + description: Specify whether the ConfigMap or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + fieldRef: + description: |- + Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['']`, `metadata.annotations['']`, + spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. + properties: + apiVersion: + description: Version of the schema the FieldPath is written in terms of, defaults to "v1". + type: string + fieldPath: + description: Path of the field to select in the specified API version. + type: string + required: + - fieldPath + type: object + x-kubernetes-map-type: atomic + fileKeyRef: + description: |- + FileKeyRef selects a key of the env file. + Requires the EnvFiles feature gate to be enabled. + properties: + key: + description: |- + The key within the env file. An invalid key will prevent the pod from starting. + The keys defined within a source may consist of any printable ASCII characters except '='. + During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. + type: string + optional: + default: false + description: |- + Specify whether the file or its key must be defined. If the file or key + does not exist, then the env var is not published. + If optional is set to true and the specified key does not exist, + the environment variable will not be set in the Pod's containers. + + If optional is set to false and the specified key does not exist, + an error will be returned during Pod creation. + type: boolean + path: + description: |- + The path within the volume from which to select the file. + Must be relative and may not contain the '..' path or start with '..'. + type: string + volumeName: + description: The name of the volume mount containing the env file. + type: string + required: + - key + - path + - volumeName + type: object + x-kubernetes-map-type: atomic + resourceFieldRef: + description: |- + Selects a resource of the container: only resources limits and requests + (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. + properties: + containerName: + description: 'Container name: required for volumes, optional for env vars' + type: string + divisor: + anyOf: + - type: integer + - type: string + description: Specifies the output format of the exposed resources, defaults to "1" + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + resource: + description: 'Required: resource to select' + type: string + required: + - resource + type: object + x-kubernetes-map-type: atomic + secretKeyRef: + description: Selects a key of a secret in the pod's namespace + properties: + key: + description: The key of the secret to select from. Must be a valid secret key. + type: string + name: + default: "" + description: |- + Name of the referent. + This field is effectively required, but due to backwards compatibility is + allowed to be empty. Instances of this type with an empty value here are + almost certainly wrong. + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + type: string + optional: + description: Specify whether the Secret or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + type: object + required: + - name + type: object + type: array + disabled: + description: enable or disable chains feature + type: boolean + generateSigningSecret: + description: generate signing key + type: boolean + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + performance: + description: |- + PerformanceProperties defines the fields which are configurable + to tune the performance of component controller + properties: + buckets: + type: integer + disable-ha: + description: if it is true, disables the HA feature + type: boolean + kube-api-burst: + type: integer + kube-api-qps: + description: |- + queries per second (QPS) and burst to the master from rest API client + actually the number multiplied by 2 + https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87 + defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46 + type: number + replicas: + format: int32 + type: integer + statefulset-ordinals: + description: if is true, enable StatefulsetOrdinals mode + type: boolean + threads-per-controller: + description: The number of workers to use when processing the component controller's work queue + type: integer + required: + - disable-ha + type: object + signers.kms.auth.address: + type: string + signers.kms.auth.oidc.path: + type: string + signers.kms.auth.oidc.role: + type: string + signers.kms.auth.spire.audience: + type: string + signers.kms.auth.spire.sock: + type: string + signers.kms.auth.token: + type: string + signers.kms.auth.token-path: + type: string + signers.kms.kmsref: + description: kms signer config + type: string + signers.x509.fulcio.address: + type: string + signers.x509.fulcio.enabled: + description: x509 signer config + type: boolean + signers.x509.fulcio.issuer: + type: string + signers.x509.fulcio.provider: + type: string + signers.x509.identity.token.file: + type: string + signers.x509.tuf.mirror.url: + type: string + storage.docdb.mongo-server-url: + type: string + storage.docdb.mongo-server-url-dir: + type: string + storage.docdb.url: + type: string + storage.gcs.bucket: + description: storage configs + type: string + storage.grafeas.notehint: + type: string + storage.grafeas.noteid: + type: string + storage.grafeas.projectid: + type: string + storage.oci.repository: + type: string + storage.oci.repository.insecure: + type: boolean + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + transparency.enabled: + type: string + transparency.url: + type: string + required: + - disabled + - options + type: object + status: + description: TektonChainStatus defines the observed state of TektonChain + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for TektonChain + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonconfigs.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: TektonConfig + listKind: TektonConfigList + plural: tektonconfigs + singular: tektonconfig + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonConfig is the Schema for the TektonConfigs API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonConfigSpec defines the desired state of TektonConfig + properties: + addon: + description: Addon holds the addons config + properties: + enablePipelinesAsCode: + description: |- + Deprecated, will be removed in further release + EnablePAC field defines whether to install PAC + type: boolean + params: + description: Params is the list of params passed for Addon customization + items: + description: Param declares an string value to use for the parameter called name. + properties: + name: + type: string + value: + type: string + type: object + type: array + type: object + chain: + description: Chain holds the customizable option for chains component + properties: + artifacts.oci.format: + description: oci artifacts config + type: string + artifacts.oci.signer: + type: string + artifacts.oci.storage: + type: string + artifacts.pipelinerun.enable-deep-inspection: + type: string + artifacts.pipelinerun.format: + description: pipelinerun artifacts config + type: string + artifacts.pipelinerun.signer: + type: string + artifacts.pipelinerun.storage: + type: string + artifacts.taskrun.format: + description: taskrun artifacts config + type: string + artifacts.taskrun.signer: + type: string + artifacts.taskrun.storage: + type: string + builddefinition.buildtype: + type: string + builder.id: + description: builder config + type: string + controllerEnvs: + items: + description: EnvVar represents an environment variable present in a Container. + properties: + name: + description: |- + Name of the environment variable. + May consist of any printable ASCII characters except '='. + type: string + value: + description: |- + Variable references $(VAR_NAME) are expanded + using the previously defined environment variables in the container and + any service environment variables. If a variable cannot be resolved, + the reference in the input string will be unchanged. Double $$ are reduced + to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. + "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". + Escaped references will never be expanded, regardless of whether the variable + exists or not. + Defaults to "". + type: string + valueFrom: + description: Source for the environment variable's value. Cannot be used if value is not empty. + properties: + configMapKeyRef: + description: Selects a key of a ConfigMap. + properties: + key: + description: The key to select. + type: string + name: + default: "" + description: |- + Name of the referent. + This field is effectively required, but due to backwards compatibility is + allowed to be empty. Instances of this type with an empty value here are + almost certainly wrong. + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + type: string + optional: + description: Specify whether the ConfigMap or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + fieldRef: + description: |- + Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['']`, `metadata.annotations['']`, + spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. + properties: + apiVersion: + description: Version of the schema the FieldPath is written in terms of, defaults to "v1". + type: string + fieldPath: + description: Path of the field to select in the specified API version. + type: string + required: + - fieldPath + type: object + x-kubernetes-map-type: atomic + fileKeyRef: + description: |- + FileKeyRef selects a key of the env file. + Requires the EnvFiles feature gate to be enabled. + properties: + key: + description: |- + The key within the env file. An invalid key will prevent the pod from starting. + The keys defined within a source may consist of any printable ASCII characters except '='. + During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. + type: string + optional: + default: false + description: |- + Specify whether the file or its key must be defined. If the file or key + does not exist, then the env var is not published. + If optional is set to true and the specified key does not exist, + the environment variable will not be set in the Pod's containers. + + If optional is set to false and the specified key does not exist, + an error will be returned during Pod creation. + type: boolean + path: + description: |- + The path within the volume from which to select the file. + Must be relative and may not contain the '..' path or start with '..'. + type: string + volumeName: + description: The name of the volume mount containing the env file. + type: string + required: + - key + - path + - volumeName + type: object + x-kubernetes-map-type: atomic + resourceFieldRef: + description: |- + Selects a resource of the container: only resources limits and requests + (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. + properties: + containerName: + description: 'Container name: required for volumes, optional for env vars' + type: string + divisor: + anyOf: + - type: integer + - type: string + description: Specifies the output format of the exposed resources, defaults to "1" + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + resource: + description: 'Required: resource to select' + type: string + required: + - resource + type: object + x-kubernetes-map-type: atomic + secretKeyRef: + description: Selects a key of a secret in the pod's namespace + properties: + key: + description: The key of the secret to select from. Must be a valid secret key. + type: string + name: + default: "" + description: |- + Name of the referent. + This field is effectively required, but due to backwards compatibility is + allowed to be empty. Instances of this type with an empty value here are + almost certainly wrong. + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + type: string + optional: + description: Specify whether the Secret or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + type: object + required: + - name + type: object + type: array + disabled: + description: enable or disable chains feature + type: boolean + generateSigningSecret: + description: generate signing key + type: boolean + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + performance: + description: |- + PerformanceProperties defines the fields which are configurable + to tune the performance of component controller + properties: + buckets: + type: integer + disable-ha: + description: if it is true, disables the HA feature + type: boolean + kube-api-burst: + type: integer + kube-api-qps: + description: |- + queries per second (QPS) and burst to the master from rest API client + actually the number multiplied by 2 + https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87 + defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46 + type: number + replicas: + format: int32 + type: integer + statefulset-ordinals: + description: if is true, enable StatefulsetOrdinals mode + type: boolean + threads-per-controller: + description: The number of workers to use when processing the component controller's work queue + type: integer + required: + - disable-ha + type: object + signers.kms.auth.address: + type: string + signers.kms.auth.oidc.path: + type: string + signers.kms.auth.oidc.role: + type: string + signers.kms.auth.spire.audience: + type: string + signers.kms.auth.spire.sock: + type: string + signers.kms.auth.token: + type: string + signers.kms.auth.token-path: + type: string + signers.kms.kmsref: + description: kms signer config + type: string + signers.x509.fulcio.address: + type: string + signers.x509.fulcio.enabled: + description: x509 signer config + type: boolean + signers.x509.fulcio.issuer: + type: string + signers.x509.fulcio.provider: + type: string + signers.x509.identity.token.file: + type: string + signers.x509.tuf.mirror.url: + type: string + storage.docdb.mongo-server-url: + type: string + storage.docdb.mongo-server-url-dir: + type: string + storage.docdb.url: + type: string + storage.gcs.bucket: + description: storage configs + type: string + storage.grafeas.notehint: + type: string + storage.grafeas.noteid: + type: string + storage.grafeas.projectid: + type: string + storage.oci.repository: + type: string + storage.oci.repository.insecure: + type: boolean + transparency.enabled: + type: string + transparency.url: + type: string + required: + - disabled + - options + type: object + config: + description: Config holds the configuration for resources created by TektonConfig + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + dashboard: + description: Dashboard holds the customizable options for dashboards component + properties: + external-logs: + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + readonly: + description: Readonly when set to true configures the Tekton dashboard in read-only mode + type: boolean + required: + - options + - readonly + type: object + hub: + description: Hub holds the hub config + properties: + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + params: + description: Params is the list of params passed for Hub customization + items: + description: Param declares an string value to use for the parameter called name. + properties: + name: + type: string + value: + type: string + type: object + type: array + required: + - options + type: object + multiclusterProxyAAE: + description: MulticlusterProxyAAE holds the customizable options for the multicluster-proxy-aae component + properties: + options: + description: options holds additional fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + required: + - options + type: object + params: + description: Params is the list of params passed for all platforms + items: + description: Param declares an string value to use for the parameter called name. + properties: + name: + type: string + value: + type: string + type: object + type: array + pipeline: + description: Pipeline holds the customizable option for pipeline component + properties: + await-sidecar-readiness: + type: boolean + bundles-resolver-config: + additionalProperties: + type: string + type: object + cluster-resolver-config: + additionalProperties: + type: string + type: object + coschedule: + type: string + default-affinity-assistant-pod-template: + type: string + default-cloud-events-sink: + type: string + default-forbidden-env: + type: string + default-managed-by-label-value: + type: string + default-max-matrix-combinations-count: + type: string + default-pod-template: + type: string + default-resolver-type: + type: string + default-service-account: + type: string + default-task-run-workspace-binding: + type: string + default-timeout-minutes: + type: integer + disable-affinity-assistant: + description: |- + Deprecated: DisableAffinityAssistant is deprecated and no longer used. + This field is removed from pipeline component. + Keeping here to maintain API compatibility during upgrades. + type: boolean + disable-creds-init: + type: boolean + disable-inline-spec: + type: string + embedded-status: + type: string + enable-api-fields: + type: string + enable-bundles-resolver: + type: boolean + enable-cel-in-whenexpression: + type: boolean + enable-cluster-resolver: + type: boolean + enable-custom-tasks: + type: boolean + enable-git-resolver: + type: boolean + enable-hub-resolver: + type: boolean + enable-param-enum: + type: boolean + enable-provenance-in-status: + type: boolean + enable-step-actions: + type: boolean + enable-tekton-oci-bundles: + description: |- + not in use, see: https://github.com/tektoncd/pipeline/pull/7789 + this field is removed from pipeline component + keeping here to maintain the API compatibility + type: boolean + enforce-nonfalsifiability: + type: string + git-resolver-config: + additionalProperties: + type: string + type: object + hub-resolver-config: + additionalProperties: + type: string + type: object + keep-pod-on-cancel: + type: boolean + max-result-size: + format: int32 + type: integer + metrics.count.enable-reason: + type: boolean + metrics.pipelinerun.duration-type: + type: string + metrics.pipelinerun.level: + type: string + metrics.taskrun.duration-type: + type: string + metrics.taskrun.level: + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + params: + description: The params to customize different components of Pipelines + items: + description: Param declares an string value to use for the parameter called name. + properties: + name: + type: string + value: + type: string + type: object + type: array + performance: + description: |- + PerformanceProperties defines the fields which are configurable + to tune the performance of component controller + properties: + buckets: + type: integer + disable-ha: + description: if it is true, disables the HA feature + type: boolean + kube-api-burst: + type: integer + kube-api-qps: + description: |- + queries per second (QPS) and burst to the master from rest API client + actually the number multiplied by 2 + https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87 + defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46 + type: number + replicas: + format: int32 + type: integer + statefulset-ordinals: + description: if is true, enable StatefulsetOrdinals mode + type: boolean + threads-per-controller: + description: The number of workers to use when processing the component controller's work queue + type: integer + required: + - disable-ha + type: object + require-git-ssh-secret-known-hosts: + type: boolean + results-from: + type: string + running-in-environment-with-injected-sidecars: + type: boolean + scope-when-expressions-to-task: + description: ScopeWhenExpressionsToTask is deprecated and never used. + type: boolean + send-cloudevents-for-runs: + type: boolean + set-security-context: + type: boolean + traces.credentialsSecret: + description: CredentialsSecret is the name of the secret containing credentials for the tracing endpoint + type: string + traces.enabled: + description: Enabled controls whether tracing is enabled or not + type: boolean + traces.endpoint: + description: Endpoint is the URL for the OpenTelemetry trace collector + type: string + trusted-resources-verification-no-match-policy: + type: string + verification-mode: + type: string + required: + - options + type: object + platforms: + description: Platforms allows configuring platform specific configurations + properties: + kubernetes: + description: Kubernetes allows configuring kubernetes specific components and configurations + properties: + pipelinesAsCode: + description: PipelinesAsCode allows configuring PipelinesAsCode configurations + properties: + additionalPACControllers: + additionalProperties: + description: AdditionalPACControllerConfig contains config for additionalPACControllers + properties: + configMapName: + description: Name of the additional controller configMap + type: string + enable: + description: Enable or disable this additional pipelines as code instance by changing this bool + type: boolean + secretName: + description: Name of the additional controller Secret + type: string + settings: + additionalProperties: + type: string + description: Setting will contains the configMap data + type: object + type: object + description: AdditionalPACControllers allows to deploy additional PAC controller + type: object + enable: + description: Enable or disable pipelines as code by changing this bool + type: boolean + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + settings: + additionalProperties: + type: string + type: object + required: + - options + type: object + type: object + openshift: + description: OpenShift allows configuring openshift specific components and configurations + properties: + enableCentralTLSConfig: + description: |- + EnableCentralTLSConfig enables TLS configuration inheritance from + the cluster's APIServer TLS security profile. When enabled, TLS settings + (minimum version, cipher suites, curve preferences) are automatically + derived from the cluster-wide security policy and injected into Tekton + component containers that support TLS configuration. + If the APIServer does not have a TLS profile configured, user-specified + TLS settings in component configurations will be used as fallback. + Default: false (opt-in) + type: boolean + pipelinesAsCode: + description: PipelinesAsCode allows configuring PipelinesAsCode configurations + properties: + additionalPACControllers: + additionalProperties: + description: AdditionalPACControllerConfig contains config for additionalPACControllers + properties: + configMapName: + description: Name of the additional controller configMap + type: string + enable: + description: Enable or disable this additional pipelines as code instance by changing this bool + type: boolean + secretName: + description: Name of the additional controller Secret + type: string + settings: + additionalProperties: + type: string + description: Setting will contains the configMap data + type: object + type: object + description: AdditionalPACControllers allows to deploy additional PAC controller + type: object + enable: + description: Enable or disable pipelines as code by changing this bool + type: boolean + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + settings: + additionalProperties: + type: string + type: object + required: + - options + type: object + scc: + description: SCC allows configuring security context constraints used by workloads + properties: + default: + description: |- + Default contains the default SCC that will be attached to the service + account used for workloads (`pipeline` SA by default) and defined in + PipelineProperties.OptionalPipelineProperties.DefaultServiceAccount + type: string + maxAllowed: + description: |- + MaxAllowed specifies the highest SCC that can be requested for in a + namespace or in the Default field. + type: string + type: object + type: object + type: object + profile: + type: string + pruner: + description: Pruner holds the prune config + properties: + disabled: + description: enable or disable pruner feature + type: boolean + keep: + description: |- + The number of resource to keep + You dont want to delete all the pipelinerun/taskrun's by a cron + type: integer + keep-since: + description: |- + KeepSince keeps the resources younger than the specified value + Its value is taken in minutes + type: integer + prune-per-resource: + description: apply the prune job to the individual resources + type: boolean + resources: + description: The resources which need to be pruned + items: + type: string + type: array + schedule: + description: How frequent pruning should happen + type: string + startingDeadlineSeconds: + description: |- + Optional deadline in seconds for starting the job if it misses scheduled time for any reason. + Missed jobs executions will be counted as failed ones. + format: int64 + type: integer + required: + - disabled + type: object + result: + description: Result holds the customize option for results component + properties: + auth_disable: + type: boolean + auth_impersonate: + type: boolean + db_enable_auto_migration: + type: boolean + db_host: + type: string + db_name: + type: string + db_port: + format: int64 + type: integer + db_secret_name: + type: string + db_secret_password_key: + type: string + db_secret_user_key: + type: string + db_sslmode: + type: string + db_sslrootcert: + type: string + disabled: + description: enable or disable Result Component + type: boolean + gcs_bucket_name: + type: string + gcs_creds_secret_key: + type: string + gcs_creds_secret_name: + type: string + is_external_db: + type: boolean + log_level: + type: string + logging_plugin_api_url: + type: string + logging_plugin_ca_cert: + type: string + logging_plugin_forwarder_delay_duration: + type: integer + logging_plugin_multipart_regex: + type: string + logging_plugin_namespace_key: + type: string + logging_plugin_proxy_path: + type: string + logging_plugin_query_limit: + type: integer + logging_plugin_query_params: + type: string + logging_plugin_static_labels: + type: string + logging_plugin_tls_verification_disable: + type: boolean + logging_plugin_token_path: + type: string + logging_pvc_name: + type: string + logs_api: + type: boolean + logs_buffer_size: + format: int64 + type: integer + logs_path: + type: string + logs_type: + type: string + loki_stack_name: + type: string + loki_stack_namespace: + type: string + options: + description: Options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + performance: + description: |- + PerformanceProperties defines the fields which are configurable + to tune the performance of component controller + properties: + buckets: + type: integer + disable-ha: + description: if it is true, disables the HA feature + type: boolean + kube-api-burst: + type: integer + kube-api-qps: + description: |- + queries per second (QPS) and burst to the master from rest API client + actually the number multiplied by 2 + https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87 + defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46 + type: number + replicas: + format: int32 + type: integer + statefulset-ordinals: + description: if is true, enable StatefulsetOrdinals mode + type: boolean + threads-per-controller: + description: The number of workers to use when processing the component controller's work queue + type: integer + required: + - disable-ha + type: object + prometheus_histogram: + type: boolean + prometheus_port: + format: int64 + type: integer + route_enabled: + description: Route configuration for Results API service exposure + type: boolean + route_host: + type: string + route_path: + type: string + route_tls_termination: + type: string + secret_name: + description: |- + name of the secret used to get S3 credentials and + pass it as environment variables to the "tekton-results-api" deployment under "api" container + type: string + server_port: + format: int64 + type: integer + storage_emulator_host: + type: string + tls_hostname_override: + type: string + required: + - disabled + - is_external_db + - options + type: object + scheduler: + description: To enable Pipeline Scheduling on Single Cluster or Multiple Clusters + properties: + config.yaml: + description: |- + This hold the config data from tekton-kueue. ConfigMap in tekton kueue is loaded as config.yaml so we need to + match the key here + x-kubernetes-preserve-unknown-fields: true + disabled: + description: enable or disable TektonScheduler Component + type: boolean + multi-cluster-disabled: + type: boolean + multi-cluster-role: + description: |- + MultiClusterRole Define the role of current cluster in multi-cluster environment. The MultiClusterRole + can be one of Hub or Spoke + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + required: + - config.yaml + - disabled + - multi-cluster-disabled + - multi-cluster-role + - options + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + targetNamespaceMetadata: + description: holds target namespace metadata + properties: + annotations: + additionalProperties: + type: string + type: object + labels: + additionalProperties: + type: string + type: object + type: object + tektonpruner: + description: New EventBasedPruner which provides more granular control over TaskRun and PipelineRuns + properties: + disabled: + description: enable or disable TektonPruner Component + type: boolean + global-config: + x-kubernetes-preserve-unknown-fields: true + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + required: + - disabled + - global-config + - options + type: object + trigger: + description: Trigger holds the customizable option for triggers component + properties: + default-service-account: + type: string + disabled: + description: enable or disable Trigger Component + type: boolean + enable-api-fields: + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + required: + - disabled + - options + type: object + type: object + status: + description: TektonConfigStatus defines the observed state of TektonConfig + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + profile: + description: The profile installed + type: string + tektonInstallerSets: + additionalProperties: + type: string + description: The current installer set name + type: object + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektondashboards.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: TektonDashboard + listKind: TektonDashboardList + plural: tektondashboards + singular: tektondashboard + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonDashboard is the Schema for the tektondashboards API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonDashboardSpec defines the desired state of TektonDashboard + properties: + config: + description: Config holds the configuration for resources created by TektonDashboard + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + external-logs: + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + readonly: + description: Readonly when set to true configures the Tekton dashboard in read-only mode + type: boolean + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - options + - readonly + type: object + status: + description: TektonDashboardStatus defines the observed state of TektonDashboard + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for TektonDashboard + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonhubs.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: TektonHub + listKind: TektonHubList + plural: tektonhubs + singular: tektonhub + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + - jsonPath: .status.apiUrl + name: ApiUrl + type: string + - jsonPath: .status.uiUrl + name: UiUrl + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonHub is the Schema for the tektonhub API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + properties: + api: + properties: + catalogRefreshInterval: + type: string + hubConfigUrl: + description: Deprecated, will be removed in further release + type: string + routeHostUrl: + type: string + secret: + type: string + type: object + catalogs: + items: + properties: + contextDir: + type: string + name: + type: string + org: + type: string + provider: + type: string + revision: + type: string + sshUrl: + type: string + type: + type: string + url: + type: string + type: object + type: array + categories: + items: + type: string + type: array + customLogo: + description: The Base64 Encode data and mediaType of the Custom Logo + properties: + base64Data: + type: string + mediaType: + type: string + type: object + db: + properties: + secret: + type: string + type: object + default: + properties: + scopes: + items: + type: string + type: array + type: object + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + params: + description: Params is the list of params passed for Hub customization + items: + description: Param declares an string value to use for the parameter called name. + properties: + name: + type: string + value: + type: string + type: object + type: array + scopes: + items: + properties: + name: + type: string + users: + items: + type: string + type: array + type: object + type: array + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - options + type: object + status: + description: TektonHubStatus defines the observed state of TektonHub + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + apiUrl: + description: The URL route for API which needs to be exposed + type: string + authUrl: + description: The URL route for Auth server + type: string + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + hubInstallerSets: + additionalProperties: + type: string + description: The current installer set name + type: object + manifests: + description: The url links of the manifests, separated by comma + items: + type: string + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + uiUrl: + description: The URL route for UI which needs to be exposed + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektoninstallersets.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: TektonInstallerSet + listKind: TektonInstallerSetList + plural: tektoninstallersets + singular: tektoninstallerset + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonInstallerSet is the Schema for the TektonInstallerSet API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonInstallerSetSpec defines the desired state of TektonInstallerSet + properties: + manifests: + x-kubernetes-preserve-unknown-fields: true + type: object + status: + description: TektonInstallerSetStatus defines the observed state of TektonInstallerSet + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonmulticlusterproxyaaes.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: TektonMulticlusterProxyAAE + listKind: TektonMulticlusterProxyAAEList + plural: tektonmulticlusterproxyaaes + singular: tektonmulticlusterproxyaae + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonMulticlusterProxyAAE is the Schema for the TektonMulticlusterProxyAAE API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + properties: + options: + description: options holds additional fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - options + type: object + status: + description: TektonMulticlusterProxyAAEStatus defines the observed state of TektonMulticlusterProxyAAE + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for TektonMulticlusterProxyAAE + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonpipelines.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: TektonPipeline + listKind: TektonPipelineList + plural: tektonpipelines + singular: tektonpipeline + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonPipeline is the Schema for the tektonpipelines API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonPipelineSpec defines the desired state of TektonPipeline + properties: + await-sidecar-readiness: + type: boolean + bundles-resolver-config: + additionalProperties: + type: string + type: object + cluster-resolver-config: + additionalProperties: + type: string + type: object + config: + description: Config holds the configuration for resources created by TektonPipeline + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + coschedule: + type: string + default-affinity-assistant-pod-template: + type: string + default-cloud-events-sink: + type: string + default-forbidden-env: + type: string + default-managed-by-label-value: + type: string + default-max-matrix-combinations-count: + type: string + default-pod-template: + type: string + default-resolver-type: + type: string + default-service-account: + type: string + default-task-run-workspace-binding: + type: string + default-timeout-minutes: + type: integer + disable-affinity-assistant: + description: |- + Deprecated: DisableAffinityAssistant is deprecated and no longer used. + This field is removed from pipeline component. + Keeping here to maintain API compatibility during upgrades. + type: boolean + disable-creds-init: + type: boolean + disable-inline-spec: + type: string + embedded-status: + type: string + enable-api-fields: + type: string + enable-bundles-resolver: + type: boolean + enable-cel-in-whenexpression: + type: boolean + enable-cluster-resolver: + type: boolean + enable-custom-tasks: + type: boolean + enable-git-resolver: + type: boolean + enable-hub-resolver: + type: boolean + enable-param-enum: + type: boolean + enable-provenance-in-status: + type: boolean + enable-step-actions: + type: boolean + enable-tekton-oci-bundles: + description: |- + not in use, see: https://github.com/tektoncd/pipeline/pull/7789 + this field is removed from pipeline component + keeping here to maintain the API compatibility + type: boolean + enforce-nonfalsifiability: + type: string + git-resolver-config: + additionalProperties: + type: string + type: object + hub-resolver-config: + additionalProperties: + type: string + type: object + keep-pod-on-cancel: + type: boolean + max-result-size: + format: int32 + type: integer + metrics.count.enable-reason: + type: boolean + metrics.pipelinerun.duration-type: + type: string + metrics.pipelinerun.level: + type: string + metrics.taskrun.duration-type: + type: string + metrics.taskrun.level: + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + params: + description: The params to customize different components of Pipelines + items: + description: Param declares an string value to use for the parameter called name. + properties: + name: + type: string + value: + type: string + type: object + type: array + performance: + description: |- + PerformanceProperties defines the fields which are configurable + to tune the performance of component controller + properties: + buckets: + type: integer + disable-ha: + description: if it is true, disables the HA feature + type: boolean + kube-api-burst: + type: integer + kube-api-qps: + description: |- + queries per second (QPS) and burst to the master from rest API client + actually the number multiplied by 2 + https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87 + defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46 + type: number + replicas: + format: int32 + type: integer + statefulset-ordinals: + description: if is true, enable StatefulsetOrdinals mode + type: boolean + threads-per-controller: + description: The number of workers to use when processing the component controller's work queue + type: integer + required: + - disable-ha + type: object + require-git-ssh-secret-known-hosts: + type: boolean + results-from: + type: string + running-in-environment-with-injected-sidecars: + type: boolean + scope-when-expressions-to-task: + description: ScopeWhenExpressionsToTask is deprecated and never used. + type: boolean + send-cloudevents-for-runs: + type: boolean + set-security-context: + type: boolean + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + traces.credentialsSecret: + description: CredentialsSecret is the name of the secret containing credentials for the tracing endpoint + type: string + traces.enabled: + description: Enabled controls whether tracing is enabled or not + type: boolean + traces.endpoint: + description: Endpoint is the URL for the OpenTelemetry trace collector + type: string + trusted-resources-verification-no-match-policy: + type: string + verification-mode: + type: string + required: + - options + type: object + status: + description: TektonPipelineStatus defines the observed state of TektonPipeline + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + extTektonInstallerSets: + additionalProperties: + type: string + description: The installer sets created for extension components + type: object + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for TektonPipeline + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonpruners.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: TektonPruner + listKind: TektonPrunerList + plural: tektonpruners + singular: tektonpruner + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonPruner is the Schema for the TektonPruner API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + properties: + config: + description: Config holds the configuration for resources created by TektonPruner + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + disabled: + description: enable or disable TektonPruner Component + type: boolean + global-config: + x-kubernetes-preserve-unknown-fields: true + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - disabled + - global-config + - options + type: object + status: + description: TektonPrunerStatus defines the observed state of TektonPruner + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for TektonPruner + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonresults.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: TektonResult + listKind: TektonResultList + plural: tektonresults + singular: tektonresult + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonResult is the Schema for the tektonresults API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonResultSpec defines the desired state of TektonResult + properties: + auth_disable: + type: boolean + auth_impersonate: + type: boolean + config: + description: Config holds the configuration for resources created by TektonResult + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + db_enable_auto_migration: + type: boolean + db_host: + type: string + db_name: + type: string + db_port: + format: int64 + type: integer + db_secret_name: + type: string + db_secret_password_key: + type: string + db_secret_user_key: + type: string + db_sslmode: + type: string + db_sslrootcert: + type: string + disabled: + description: enable or disable Result Component + type: boolean + gcs_bucket_name: + type: string + gcs_creds_secret_key: + type: string + gcs_creds_secret_name: + type: string + is_external_db: + type: boolean + log_level: + type: string + logging_plugin_api_url: + type: string + logging_plugin_ca_cert: + type: string + logging_plugin_forwarder_delay_duration: + type: integer + logging_plugin_multipart_regex: + type: string + logging_plugin_namespace_key: + type: string + logging_plugin_proxy_path: + type: string + logging_plugin_query_limit: + type: integer + logging_plugin_query_params: + type: string + logging_plugin_static_labels: + type: string + logging_plugin_tls_verification_disable: + type: boolean + logging_plugin_token_path: + type: string + logging_pvc_name: + type: string + logs_api: + type: boolean + logs_buffer_size: + format: int64 + type: integer + logs_path: + type: string + logs_type: + type: string + loki_stack_name: + type: string + loki_stack_namespace: + type: string + options: + description: Options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + performance: + description: |- + PerformanceProperties defines the fields which are configurable + to tune the performance of component controller + properties: + buckets: + type: integer + disable-ha: + description: if it is true, disables the HA feature + type: boolean + kube-api-burst: + type: integer + kube-api-qps: + description: |- + queries per second (QPS) and burst to the master from rest API client + actually the number multiplied by 2 + https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87 + defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46 + type: number + replicas: + format: int32 + type: integer + statefulset-ordinals: + description: if is true, enable StatefulsetOrdinals mode + type: boolean + threads-per-controller: + description: The number of workers to use when processing the component controller's work queue + type: integer + required: + - disable-ha + type: object + prometheus_histogram: + type: boolean + prometheus_port: + format: int64 + type: integer + route_enabled: + description: Route configuration for Results API service exposure + type: boolean + route_host: + type: string + route_path: + type: string + route_tls_termination: + type: string + secret_name: + description: |- + name of the secret used to get S3 credentials and + pass it as environment variables to the "tekton-results-api" deployment under "api" container + type: string + server_port: + format: int64 + type: integer + storage_emulator_host: + type: string + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + tls_hostname_override: + type: string + required: + - disabled + - is_external_db + - options + type: object + status: + description: TektonResultStatus defines the observed state of TektonResult + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for TektonResult + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonschedulers.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: TektonScheduler + listKind: TektonSchedulerList + plural: tektonschedulers + singular: tektonscheduler + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonScheduler is the Schema for the TektonScheduler API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + properties: + config.yaml: + description: |- + This hold the config data from tekton-kueue. ConfigMap in tekton kueue is loaded as config.yaml so we need to + match the key here + x-kubernetes-preserve-unknown-fields: true + disabled: + description: enable or disable TektonScheduler Component + type: boolean + multi-cluster-disabled: + type: boolean + multi-cluster-role: + description: |- + MultiClusterRole Define the role of current cluster in multi-cluster environment. The MultiClusterRole + can be one of Hub or Spoke + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - config.yaml + - disabled + - multi-cluster-disabled + - multi-cluster-role + - options + type: object + status: + description: TektonSchedulerStatus defines the observed state of TektonScheduler + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tekton-scheduler: + description: The current installer set name for TektonScheduler + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektontriggers.operator.tekton.dev +spec: + group: operator.tekton.dev + names: + kind: TektonTrigger + listKind: TektonTriggerList + plural: tektontriggers + singular: tektontrigger + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonTrigger is the Schema for the tektontriggers API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonTriggerSpec defines the desired state of TektonTrigger + properties: + config: + description: Config holds the configuration for resources created by TektonTrigger + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + default-service-account: + type: string + disabled: + description: enable or disable Trigger Component + type: boolean + enable-api-fields: + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - disabled + - options + type: object + status: + description: TektonTriggerStatus defines the observed state of TektonTrigger + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: tekton-operator + namespace: tekton-operator +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/instance: default + name: tekton-operator-info + namespace: tekton-operator +rules: + - apiGroups: + - "" + resourceNames: + - tekton-operator-info + resources: + - configmaps + verbs: + - get + - describe +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: tekton-config-read-role +rules: + - apiGroups: + - operator.tekton.dev + resources: + - tektonconfigs + verbs: + - get + - watch + - list +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: tekton-multicluster-proxy-aae-role +rules: + - apiGroups: + - kueue.x-k8s.io + resources: + - workloads + - multikueueclusters + verbs: + - get + - list + - watch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: tekton-operator +rules: + - apiGroups: + - "" + resources: + - nodes + verbs: + - list + - apiGroups: + - "" + resources: + - pods + - services + - endpoints + - persistentvolumeclaims + - events + - configmaps + - secrets + - pods/log + - limitranges + verbs: + - delete + - deletecollection + - create + - patch + - get + - list + - update + - watch + - describe + - apiGroups: + - extensions + - apps + - networking.k8s.io + resources: + - ingresses + - ingresses/status + verbs: + - delete + - create + - patch + - get + - list + - update + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces/finalizers + verbs: + - update + - apiGroups: + - apps + resources: + - deployments + - daemonsets + - replicasets + - statefulsets + - deployments/finalizers + verbs: + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - servicemonitors + verbs: + - get + - create + - delete + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterroles + - roles + verbs: + - get + - create + - update + - delete + - list + - watch + - apiGroups: + - "" + resources: + - serviceaccounts + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - impersonate + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - rolebindings + verbs: + - get + - create + - update + - delete + - list + - watch + - apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + - customresourcedefinitions/status + verbs: + - get + - create + - update + - delete + - list + - patch + - watch + - apiGroups: + - admissionregistration.k8s.io + resources: + - mutatingwebhookconfigurations + - validatingwebhookconfigurations + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - build.knative.dev + resources: + - builds + - buildtemplates + - clusterbuildtemplates + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - extensions + resources: + - deployments/finalizers + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - operator.tekton.dev + resources: + - '*' + - tektonaddons + verbs: + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + - apiGroups: + - tekton.dev + resources: + - tasks + - clustertasks + - taskruns + - pipelines + - pipelineruns + - pipelineresources + - conditions + - tasks/status + - clustertasks/status + - taskruns/status + - pipelines/status + - pipelineruns/status + - pipelineresources/status + - taskruns/finalizers + - pipelineruns/finalizers + - runs + - runs/status + - runs/finalizers + - customruns + - customruns/status + - customruns/finalizers + - verificationpolicies + - verificationpolicies/status + - stepactions + - stepactions/status + verbs: + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + - apiGroups: + - triggers.tekton.dev + - operator.tekton.dev + resources: + - '*' + verbs: + - add + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + - apiGroups: + - dashboard.tekton.dev + resources: + - '*' + - tektonaddons + - extensions + verbs: + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + - apiGroups: + - security.openshift.io + resources: + - securitycontextconstraints + verbs: + - use + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - delete + - deletecollection + - create + - patch + - get + - list + - update + - watch + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - delete + - deletecollection + - create + - patch + - get + - list + - update + - watch + - apiGroups: + - serving.knative.dev + resources: + - '*' + - '*/status' + - '*/finalizers' + verbs: + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + - apiGroups: + - batch + resources: + - cronjobs + - jobs + verbs: + - delete + - create + - patch + - get + - list + - update + - watch + - apiGroups: + - admissionregistration.k8s.io + resources: + - mutatingwebhookconfigurations + - validatingwebhookconfigurations + verbs: + - delete + - create + - patch + - get + - list + - update + - watch + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create + - apiGroups: + - results.tekton.dev + resources: + - '*' + verbs: + - delete + - deletecollection + - create + - patch + - get + - list + - update + - watch + - apiGroups: + - resolution.tekton.dev + resources: + - resolutionrequests + - resolutionrequests/status + verbs: + - get + - list + - watch + - create + - delete + - update + - patch + - apiGroups: + - openshift-pipelines.org + resources: + - approvaltasks + - approvaltasks/status + verbs: + - add + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: tekton-pac-controller-role +rules: + - apiGroups: + - pipelinesascode.tekton.dev + resources: + - repositories + - webhooks + verbs: + - get + - list + - watch + - create + - update + - patch + - delete + - deletecollection +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: tekton-result-read-role +rules: + - apiGroups: + - operator.tekton.dev + resources: + - tektonresults + verbs: + - get + - watch + - list +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: tekton-scheduler-role +rules: + - apiGroups: + - kueue.x-k8s.io + resources: + - resourceflavors + - workloads + - workloads/finalizers + - workloads/status + - workloadpriorityclasses + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch + - apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - get + - create + - update + - list + - nonResourceURLs: + - /metrics + verbs: + - get +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/instance: default + name: tekton-operator-info + namespace: tekton-operator +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: tekton-operator-info +subjects: + - apiGroup: rbac.authorization.k8s.io + kind: Group + name: system:authenticated +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: tekton-config-read-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-config-read-role +subjects: + - apiGroup: rbac.authorization.k8s.io + kind: Group + name: system:authenticated +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: tekton-multicluster-proxy-aae-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-multicluster-proxy-aae-role +subjects: + - kind: ServiceAccount + name: tekton-operator + namespace: tekton-operator +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: tekton-operator +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-operator +subjects: + - kind: ServiceAccount + name: tekton-operator + namespace: tekton-operator +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: tekton-pac-controller-role-binding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-pac-controller-role +subjects: + - kind: ServiceAccount + name: tekton-operator + namespace: tekton-operator +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: tekton-result-read-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-result-read-role +subjects: + - apiGroup: rbac.authorization.k8s.io + kind: Group + name: system:authenticated +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: tekton-scheduler-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-scheduler-role +subjects: + - kind: ServiceAccount + name: tekton-operator + namespace: tekton-operator +--- +apiVersion: v1 +data: + _example: | + ################################ + # # + # EXAMPLE CONFIGURATION # + # # + ################################ + + # This block is not actually functional configuration, + # but serves to illustrate the available configuration + # options and document them in a way that is accessible + # to users that `kubectl edit` this config map. + # + # These sample configuration options may be copied out of + # this example block and unindented to be in the data block + # to actually change the configuration. + + # Common configuration for all Knative codebase + zap-logger-config: | + { + "level": "info", + "development": false, + "outputPaths": ["stdout"], + "errorOutputPaths": ["stderr"], + "encoding": "json", + "encoderConfig": { + "timeKey": "ts", + "levelKey": "level", + "nameKey": "logger", + "callerKey": "caller", + "messageKey": "msg", + "stacktraceKey": "stacktrace", + "lineEnding": "", + "levelEncoder": "", + "timeEncoder": "iso8601", + "durationEncoder": "", + "callerEncoder": "" + } + } + loglevel.tekton-operator-cluster-operations: info + loglevel.tekton-operator-lifecycle: info + loglevel.tekton-operator-webhook: info + zap-logger-config: | + { + "level": "info", + "development": false, + "sampling": { + "initial": 100, + "thereafter": 100 + }, + "outputPaths": ["stdout"], + "errorOutputPaths": ["stderr"], + "encoding": "json", + "encoderConfig": { + "timeKey": "timestamp", + "levelKey": "level", + "nameKey": "logger", + "callerKey": "caller", + "messageKey": "msg", + "stacktraceKey": "stacktrace", + "lineEnding": "", + "levelEncoder": "", + "timeEncoder": "iso8601", + "durationEncoder": "", + "callerEncoder": "" + } + } +kind: ConfigMap +metadata: + labels: + operator.tekton.dev/release: "v0.80.0" + name: config-logging + namespace: tekton-operator +--- +apiVersion: v1 +data: + AUTOINSTALL_COMPONENTS: "true" + DEFAULT_TARGET_NAMESPACE: tekton-pipelines +kind: ConfigMap +metadata: + labels: + operator.tekton.dev/release: "v0.80.0" + name: tekton-config-defaults + namespace: tekton-operator +--- +apiVersion: v1 +data: + _example: | + ################################ + # # + # EXAMPLE CONFIGURATION # + # # + ################################ + + # This block is not actually functional configuration, + # but serves to illustrate the available configuration + # options and document them in a way that is accessible + # to users that `kubectl edit` this config map. + # + # These sample configuration options may be copied out of + # this example block and unindented to be in the data block + # to actually change the configuration. + + # OpenTelemetry Metrics Configuration + # Protocol for metrics export (prometheus, grpc, http/protobuf, none) + # Default: prometheus + metrics-protocol: prometheus + + # Metrics endpoint (for grpc/http protocols) + # Default: empty (uses default OTLP endpoint) + metrics-endpoint: "" + + # Metrics export interval (e.g., "30s", "1m") + # Default: empty (uses SDK default) + metrics-export-interval: "" + + # OpenTelemetry Tracing Configuration + # Protocol for tracing export (grpc, http/protobuf, none, stdout) + # Default: none + tracing-protocol: none + + # Tracing endpoint (for grpc/http protocols) + # Default: empty + tracing-endpoint: "" + + # Tracing sampling rate (0.0 to 1.0) + # Default: 1.0 (100% sampling) + tracing-sampling-rate: "1.0" + + # Runtime Configuration + # Enable profiling (enabled, disabled) + # Default: disabled + runtime-profiling: disabled + + # Runtime export interval (e.g., "15s") + # Default: 15s + runtime-export-interval: "15s" + + # Note: Legacy OpenCensus configuration keys (metrics.backend-destination, + # metrics.stackdriver-project-id, metrics.allow-stackdriver-custom-metrics) + # are no longer recognized. Use the OpenTelemetry options above. + metrics-protocol: prometheus +kind: ConfigMap +metadata: + labels: + app.kubernetes.io/instance: default + name: tekton-config-observability + namespace: tekton-operator +--- +apiVersion: v1 +data: + _example: | + ################################ + # # + # EXAMPLE CONFIGURATION # + # # + ################################ + # This block is not actually functional configuration, + # but serves to illustrate the available configuration + # options and document them in a way that is accessible + # to users that `kubectl edit` this config map. + # + # These sample configuration options may be copied out of + # this example block and unindented to be in the data block + # to actually change the configuration. + # lease-duration is how long non-leaders will wait to try to acquire the + # lock; 15 seconds is the value used by core kubernetes controllers. + lease-duration: "60s" + # renew-deadline is how long a leader will try to renew the lease before + # giving up; 10 seconds is the value used by core kubernetes controllers. + renew-deadline: "40s" + # retry-period is how long the leader election client waits between tries of + # actions; 2 seconds is the value used by core kubernetes controllers. + retry-period: "10s" + # buckets is the number of buckets used to partition key space of each + # Reconciler. If this number is M and the replica number of the controller + # is N, the N replicas will compete for the M buckets. The owner of a + # bucket will take care of the reconciling for the keys partitioned into + # that bucket. + buckets: "1" +kind: ConfigMap +metadata: + labels: + app.kubernetes.io/instance: default + operator.tekton.dev/release: "v0.80.0" + name: tekton-operator-controller-config-leader-election + namespace: tekton-operator +--- +apiVersion: v1 +data: + version: "v0.80.0" +kind: ConfigMap +metadata: + labels: + app.kubernetes.io/instance: default + name: tekton-operator-info + namespace: tekton-operator +--- +apiVersion: v1 +data: + _example: | + ################################ + # # + # EXAMPLE CONFIGURATION # + # # + ################################ + # This block is not actually functional configuration, + # but serves to illustrate the available configuration + # options and document them in a way that is accessible + # to users that `kubectl edit` this config map. + # + # These sample configuration options may be copied out of + # this example block and unindented to be in the data block + # to actually change the configuration. + # lease-duration is how long non-leaders will wait to try to acquire the + # lock; 15 seconds is the value used by core kubernetes controllers. + lease-duration: "60s" + # renew-deadline is how long a leader will try to renew the lease before + # giving up; 10 seconds is the value used by core kubernetes controllers. + renew-deadline: "40s" + # retry-period is how long the leader election client waits between tries of + # actions; 2 seconds is the value used by core kubernetes controllers. + retry-period: "10s" + # buckets is the number of buckets used to partition key space of each + # Reconciler. If this number is M and the replica number of the controller + # is N, the N replicas will compete for the M buckets. The owner of a + # bucket will take care of the reconciling for the keys partitioned into + # that bucket. + buckets: "1" +kind: ConfigMap +metadata: + labels: + app.kubernetes.io/instance: default + operator.tekton.dev/release: "v0.80.0" + name: tekton-operator-webhook-config-leader-election + namespace: tekton-operator +--- +apiVersion: v1 +kind: Secret +metadata: + labels: + app: tekton-operator + name: tekton-operator-webhook + name: tekton-operator-webhook-certs + namespace: tekton-operator +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: tekton-pipelines-controller + version: "v0.80.0" + name: tekton-operator + namespace: tekton-operator +spec: + ports: + - name: http-metrics + port: 9090 + protocol: TCP + targetPort: 9090 + selector: + app: tekton-operator + name: tekton-operator +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: tekton-operator + name: tekton-operator-webhook + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tekton-operator-webhook + namespace: tekton-operator +spec: + ports: + - name: https-webhook + port: 443 + targetPort: 8443 + selector: + app: tekton-operator + name: tekton-operator-webhook +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tekton-operator + namespace: tekton-operator +spec: + replicas: 1 + selector: + matchLabels: + name: tekton-operator + template: + metadata: + labels: + app: tekton-operator + name: tekton-operator + spec: + containers: + - args: + - -controllers + - tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonresult,tektondashboard,manualapprovalgate,tektonpruner,tektonscheduler,tektonmulticlusterproxyaae,openshiftpipelinesascode + - -unique-process-name + - tekton-operator-lifecycle + env: + - name: KUBERNETES_MIN_VERSION + value: v1.0.0 + - name: SYSTEM_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: OPERATOR_NAME + value: tekton-operator + - name: IMAGE_PIPELINES_PROXY + value: ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.80.0@sha256:2260f9bdf1699253a47e5d2664f70465f1a8c59ad7651cede2469a7586774341 + - name: IMAGE_JOB_PRUNER_TKN + value: ghcr.io/tektoncd/plumbing/tkn@sha256:233de6c8b8583a34c2379fa98d42dba739146c9336e8d41b66030484357481ed + - name: METRICS_DOMAIN + value: tekton.dev/operator + - name: VERSION + value: v0.80.0 + - name: CONFIG_OBSERVABILITY_NAME + value: tekton-config-observability + - name: CONFIG_LEADERELECTION_NAME + value: tekton-operator-controller-config-leader-election + - name: AUTOINSTALL_COMPONENTS + valueFrom: + configMapKeyRef: + key: AUTOINSTALL_COMPONENTS + name: tekton-config-defaults + - name: DEFAULT_TARGET_NAMESPACE + valueFrom: + configMapKeyRef: + key: DEFAULT_TARGET_NAMESPACE + name: tekton-config-defaults + image: ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.80.0@sha256:49f9f258920f77ca9db8031f8ee93b6abef0ff6a1a23254d937fd347601f4853 + imagePullPolicy: IfNotPresent + name: tekton-operator-lifecycle + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault + - args: + - -controllers + - tektoninstallerset + - -unique-process-name + - tekton-operator-cluster-operations + env: + - name: KUBERNETES_MIN_VERSION + value: v1.0.0 + - name: SYSTEM_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: OPERATOR_NAME + value: tekton-operator + - name: PROFILING_PORT + value: "9009" + - name: VERSION + value: v0.80.0 + - name: METRICS_DOMAIN + value: tekton.dev/operator + - name: CONFIG_LEADERELECTION_NAME + value: tekton-operator-controller-config-leader-election + image: ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.80.0@sha256:49f9f258920f77ca9db8031f8ee93b6abef0ff6a1a23254d937fd347601f4853 + imagePullPolicy: IfNotPresent + name: tekton-operator-cluster-operations + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault + serviceAccountName: tekton-operator +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tekton-operator-webhook + namespace: tekton-operator +spec: + replicas: 1 + selector: + matchLabels: + name: tekton-operator-webhook + template: + metadata: + labels: + app: tekton-operator + name: tekton-operator-webhook + spec: + containers: + - env: + - name: KUBERNETES_MIN_VERSION + value: v1.0.0 + - name: SYSTEM_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: WEBHOOK_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: CONFIG_LOGGING_NAME + value: config-logging + - name: CONFIG_LEADERELECTION_NAME + value: tekton-operator-webhook-config-leader-election + - name: WEBHOOK_SERVICE_NAME + value: tekton-operator-webhook + - name: WEBHOOK_SECRET_NAME + value: tekton-operator-webhook-certs + - name: METRICS_DOMAIN + value: tekton.dev/operator + image: ghcr.io/tektoncd/operator/webhook-f2bb711aa8f0c0892856a4cbf6d9ddd8:v0.80.0@sha256:e4ec282861616a364dd8ad02cadec0fdabe26087605852ec85de3b7c084e5c50 + name: tekton-operator-webhook + ports: + - containerPort: 8443 + name: https-webhook + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault + serviceAccountName: tekton-operator + +--- diff --git a/packs/tekton-operator-0.80.0/pack.json b/packs/tekton-operator-0.80.0/pack.json new file mode 100644 index 00000000..5668d73a --- /dev/null +++ b/packs/tekton-operator-0.80.0/pack.json @@ -0,0 +1,31 @@ +{ + "name": "tekton-operator", + "displayName": "Tekton Operator", + "annotations": { + "docsURL": "https://github.com/tektoncd/operator", + "description": "Tekton Operator", + "source": "community", + "contributor" : "spectrocloud" + }, + "version": "0.80.0", + "kubeManifests": [ + "manifests/tekton-operator.yaml", + "manifests/tekton-config.yaml" + ], + "layer": "addon", + "addonType": "system app", + "cloudTypes": [ + "all" + ], + "constraints": { + "dependencies": [ + { + "packName": "kubernetes", + "layer": "k8s", + "minVersion": "1.29", + "maxVersion": "", + "type": "optional" + } + ] + } +} \ No newline at end of file diff --git a/packs/tekton-operator-0.80.0/values.yaml b/packs/tekton-operator-0.80.0/values.yaml new file mode 100644 index 00000000..bf83d628 --- /dev/null +++ b/packs/tekton-operator-0.80.0/values.yaml @@ -0,0 +1,5387 @@ +pack: + content: + images: + - image: ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.80.0@sha256:2260f9bdf1699253a47e5d2664f70465f1a8c59ad7651cede2469a7586774341 + - image: ghcr.io/tektoncd/plumbing/tkn@sha256:233de6c8b8583a34c2379fa98d42dba739146c9336e8d41b66030484357481ed + - image: ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.80.0@sha256:49f9f258920f77ca9db8031f8ee93b6abef0ff6a1a23254d937fd347601f4853 + - image: ghcr.io/tektoncd/operator/webhook-f2bb711aa8f0c0892856a4cbf6d9ddd8:v0.80.0@sha256:e4ec282861616a364dd8ad02cadec0fdabe26087605852ec85de3b7c084e5c50 + + namespace: "tekton-operator" + +manifests: + tekton-config: + contents: | + # Copyright 2020 The Tekton Authors + # + # Licensed under the Apache License, Version 2.0 (the "License"); + # you may not use this file except in compliance with the License. + # You may obtain a copy of the License at + # + # http://www.apache.org/licenses/LICENSE-2.0 + # + # Unless required by applicable law or agreed to in writing, software + # distributed under the License is distributed on an "AS IS" BASIS, + # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + # See the License for the specific language governing permissions and + # limitations under the License. + + apiVersion: operator.tekton.dev/v1alpha1 + kind: TektonConfig + metadata: + name: config + spec: + profile: all + targetNamespace: tekton-pipelines + pruner: + resources: + - pipelinerun + - taskrun + keep: 100 + schedule: "0 8 * * *" + + tekton-operator: + contents: | + apiVersion: v1 + kind: Namespace + metadata: + name: tekton-operator + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: manualapprovalgates.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: ManualApprovalGate + listKind: ManualApprovalGateList + plural: manualapprovalgates + shortNames: + - mag + singular: manualapprovalgate + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: ManualApprovalGate is the Schema for the ManualApprovalGate API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + properties: + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - options + type: object + status: + description: ManualApprovalGateStatus defines the observed state of ManualApprovalGate + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for ManualApprovalGate + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: openshiftpipelinesascodes.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: OpenShiftPipelinesAsCode + listKind: OpenShiftPipelinesAsCodeList + plural: openshiftpipelinesascodes + shortNames: + - opac + - pac + singular: openshiftpipelinesascode + preserveUnknownFields: false + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: Schema for the OpenShiftPipelinesAsCode API + type: object + x-kubernetes-preserve-unknown-fields: true + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: syncerservices.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: SyncerService + listKind: SyncerServiceList + plural: syncerservices + singular: syncerservice + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: SyncerService is the Schema for the syncerservices API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: SyncerServiceSpec defines the desired state of SyncerService + properties: + config: + description: Config holds the configuration for resources created by SyncerService + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + options: + description: Options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + type: object + status: + description: SyncerServiceStatus defines the observed state of SyncerService + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + syncerServiceInstallerSet: + description: The current installer set name for SyncerService + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonchains.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: TektonChain + listKind: TektonChainList + plural: tektonchains + singular: tektonchain + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonChain is the Schema for the tektonchain API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonChainSpec defines the desired state of TektonChain + properties: + artifacts.oci.format: + description: oci artifacts config + type: string + artifacts.oci.signer: + type: string + artifacts.oci.storage: + type: string + artifacts.pipelinerun.enable-deep-inspection: + type: string + artifacts.pipelinerun.format: + description: pipelinerun artifacts config + type: string + artifacts.pipelinerun.signer: + type: string + artifacts.pipelinerun.storage: + type: string + artifacts.taskrun.format: + description: taskrun artifacts config + type: string + artifacts.taskrun.signer: + type: string + artifacts.taskrun.storage: + type: string + builddefinition.buildtype: + type: string + builder.id: + description: builder config + type: string + config: + description: Config holds the configuration for resources created by TektonChain + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + controllerEnvs: + items: + description: EnvVar represents an environment variable present in a Container. + properties: + name: + description: |- + Name of the environment variable. + May consist of any printable ASCII characters except '='. + type: string + value: + description: |- + Variable references $(VAR_NAME) are expanded + using the previously defined environment variables in the container and + any service environment variables. If a variable cannot be resolved, + the reference in the input string will be unchanged. Double $$ are reduced + to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. + "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". + Escaped references will never be expanded, regardless of whether the variable + exists or not. + Defaults to "". + type: string + valueFrom: + description: Source for the environment variable's value. Cannot be used if value is not empty. + properties: + configMapKeyRef: + description: Selects a key of a ConfigMap. + properties: + key: + description: The key to select. + type: string + name: + default: "" + description: |- + Name of the referent. + This field is effectively required, but due to backwards compatibility is + allowed to be empty. Instances of this type with an empty value here are + almost certainly wrong. + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + type: string + optional: + description: Specify whether the ConfigMap or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + fieldRef: + description: |- + Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['']`, `metadata.annotations['']`, + spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. + properties: + apiVersion: + description: Version of the schema the FieldPath is written in terms of, defaults to "v1". + type: string + fieldPath: + description: Path of the field to select in the specified API version. + type: string + required: + - fieldPath + type: object + x-kubernetes-map-type: atomic + fileKeyRef: + description: |- + FileKeyRef selects a key of the env file. + Requires the EnvFiles feature gate to be enabled. + properties: + key: + description: |- + The key within the env file. An invalid key will prevent the pod from starting. + The keys defined within a source may consist of any printable ASCII characters except '='. + During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. + type: string + optional: + default: false + description: |- + Specify whether the file or its key must be defined. If the file or key + does not exist, then the env var is not published. + If optional is set to true and the specified key does not exist, + the environment variable will not be set in the Pod's containers. + + If optional is set to false and the specified key does not exist, + an error will be returned during Pod creation. + type: boolean + path: + description: |- + The path within the volume from which to select the file. + Must be relative and may not contain the '..' path or start with '..'. + type: string + volumeName: + description: The name of the volume mount containing the env file. + type: string + required: + - key + - path + - volumeName + type: object + x-kubernetes-map-type: atomic + resourceFieldRef: + description: |- + Selects a resource of the container: only resources limits and requests + (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. + properties: + containerName: + description: 'Container name: required for volumes, optional for env vars' + type: string + divisor: + anyOf: + - type: integer + - type: string + description: Specifies the output format of the exposed resources, defaults to "1" + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + resource: + description: 'Required: resource to select' + type: string + required: + - resource + type: object + x-kubernetes-map-type: atomic + secretKeyRef: + description: Selects a key of a secret in the pod's namespace + properties: + key: + description: The key of the secret to select from. Must be a valid secret key. + type: string + name: + default: "" + description: |- + Name of the referent. + This field is effectively required, but due to backwards compatibility is + allowed to be empty. Instances of this type with an empty value here are + almost certainly wrong. + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + type: string + optional: + description: Specify whether the Secret or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + type: object + required: + - name + type: object + type: array + disabled: + description: enable or disable chains feature + type: boolean + generateSigningSecret: + description: generate signing key + type: boolean + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + performance: + description: |- + PerformanceProperties defines the fields which are configurable + to tune the performance of component controller + properties: + buckets: + type: integer + disable-ha: + description: if it is true, disables the HA feature + type: boolean + kube-api-burst: + type: integer + kube-api-qps: + description: |- + queries per second (QPS) and burst to the master from rest API client + actually the number multiplied by 2 + https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87 + defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46 + type: number + replicas: + format: int32 + type: integer + statefulset-ordinals: + description: if is true, enable StatefulsetOrdinals mode + type: boolean + threads-per-controller: + description: The number of workers to use when processing the component controller's work queue + type: integer + required: + - disable-ha + type: object + signers.kms.auth.address: + type: string + signers.kms.auth.oidc.path: + type: string + signers.kms.auth.oidc.role: + type: string + signers.kms.auth.spire.audience: + type: string + signers.kms.auth.spire.sock: + type: string + signers.kms.auth.token: + type: string + signers.kms.auth.token-path: + type: string + signers.kms.kmsref: + description: kms signer config + type: string + signers.x509.fulcio.address: + type: string + signers.x509.fulcio.enabled: + description: x509 signer config + type: boolean + signers.x509.fulcio.issuer: + type: string + signers.x509.fulcio.provider: + type: string + signers.x509.identity.token.file: + type: string + signers.x509.tuf.mirror.url: + type: string + storage.docdb.mongo-server-url: + type: string + storage.docdb.mongo-server-url-dir: + type: string + storage.docdb.url: + type: string + storage.gcs.bucket: + description: storage configs + type: string + storage.grafeas.notehint: + type: string + storage.grafeas.noteid: + type: string + storage.grafeas.projectid: + type: string + storage.oci.repository: + type: string + storage.oci.repository.insecure: + type: boolean + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + transparency.enabled: + type: string + transparency.url: + type: string + required: + - disabled + - options + type: object + status: + description: TektonChainStatus defines the observed state of TektonChain + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for TektonChain + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonconfigs.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: TektonConfig + listKind: TektonConfigList + plural: tektonconfigs + singular: tektonconfig + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonConfig is the Schema for the TektonConfigs API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonConfigSpec defines the desired state of TektonConfig + properties: + addon: + description: Addon holds the addons config + properties: + enablePipelinesAsCode: + description: |- + Deprecated, will be removed in further release + EnablePAC field defines whether to install PAC + type: boolean + params: + description: Params is the list of params passed for Addon customization + items: + description: Param declares an string value to use for the parameter called name. + properties: + name: + type: string + value: + type: string + type: object + type: array + type: object + chain: + description: Chain holds the customizable option for chains component + properties: + artifacts.oci.format: + description: oci artifacts config + type: string + artifacts.oci.signer: + type: string + artifacts.oci.storage: + type: string + artifacts.pipelinerun.enable-deep-inspection: + type: string + artifacts.pipelinerun.format: + description: pipelinerun artifacts config + type: string + artifacts.pipelinerun.signer: + type: string + artifacts.pipelinerun.storage: + type: string + artifacts.taskrun.format: + description: taskrun artifacts config + type: string + artifacts.taskrun.signer: + type: string + artifacts.taskrun.storage: + type: string + builddefinition.buildtype: + type: string + builder.id: + description: builder config + type: string + controllerEnvs: + items: + description: EnvVar represents an environment variable present in a Container. + properties: + name: + description: |- + Name of the environment variable. + May consist of any printable ASCII characters except '='. + type: string + value: + description: |- + Variable references $(VAR_NAME) are expanded + using the previously defined environment variables in the container and + any service environment variables. If a variable cannot be resolved, + the reference in the input string will be unchanged. Double $$ are reduced + to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. + "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". + Escaped references will never be expanded, regardless of whether the variable + exists or not. + Defaults to "". + type: string + valueFrom: + description: Source for the environment variable's value. Cannot be used if value is not empty. + properties: + configMapKeyRef: + description: Selects a key of a ConfigMap. + properties: + key: + description: The key to select. + type: string + name: + default: "" + description: |- + Name of the referent. + This field is effectively required, but due to backwards compatibility is + allowed to be empty. Instances of this type with an empty value here are + almost certainly wrong. + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + type: string + optional: + description: Specify whether the ConfigMap or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + fieldRef: + description: |- + Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['']`, `metadata.annotations['']`, + spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. + properties: + apiVersion: + description: Version of the schema the FieldPath is written in terms of, defaults to "v1". + type: string + fieldPath: + description: Path of the field to select in the specified API version. + type: string + required: + - fieldPath + type: object + x-kubernetes-map-type: atomic + fileKeyRef: + description: |- + FileKeyRef selects a key of the env file. + Requires the EnvFiles feature gate to be enabled. + properties: + key: + description: |- + The key within the env file. An invalid key will prevent the pod from starting. + The keys defined within a source may consist of any printable ASCII characters except '='. + During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. + type: string + optional: + default: false + description: |- + Specify whether the file or its key must be defined. If the file or key + does not exist, then the env var is not published. + If optional is set to true and the specified key does not exist, + the environment variable will not be set in the Pod's containers. + + If optional is set to false and the specified key does not exist, + an error will be returned during Pod creation. + type: boolean + path: + description: |- + The path within the volume from which to select the file. + Must be relative and may not contain the '..' path or start with '..'. + type: string + volumeName: + description: The name of the volume mount containing the env file. + type: string + required: + - key + - path + - volumeName + type: object + x-kubernetes-map-type: atomic + resourceFieldRef: + description: |- + Selects a resource of the container: only resources limits and requests + (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. + properties: + containerName: + description: 'Container name: required for volumes, optional for env vars' + type: string + divisor: + anyOf: + - type: integer + - type: string + description: Specifies the output format of the exposed resources, defaults to "1" + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + resource: + description: 'Required: resource to select' + type: string + required: + - resource + type: object + x-kubernetes-map-type: atomic + secretKeyRef: + description: Selects a key of a secret in the pod's namespace + properties: + key: + description: The key of the secret to select from. Must be a valid secret key. + type: string + name: + default: "" + description: |- + Name of the referent. + This field is effectively required, but due to backwards compatibility is + allowed to be empty. Instances of this type with an empty value here are + almost certainly wrong. + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + type: string + optional: + description: Specify whether the Secret or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + type: object + required: + - name + type: object + type: array + disabled: + description: enable or disable chains feature + type: boolean + generateSigningSecret: + description: generate signing key + type: boolean + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + performance: + description: |- + PerformanceProperties defines the fields which are configurable + to tune the performance of component controller + properties: + buckets: + type: integer + disable-ha: + description: if it is true, disables the HA feature + type: boolean + kube-api-burst: + type: integer + kube-api-qps: + description: |- + queries per second (QPS) and burst to the master from rest API client + actually the number multiplied by 2 + https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87 + defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46 + type: number + replicas: + format: int32 + type: integer + statefulset-ordinals: + description: if is true, enable StatefulsetOrdinals mode + type: boolean + threads-per-controller: + description: The number of workers to use when processing the component controller's work queue + type: integer + required: + - disable-ha + type: object + signers.kms.auth.address: + type: string + signers.kms.auth.oidc.path: + type: string + signers.kms.auth.oidc.role: + type: string + signers.kms.auth.spire.audience: + type: string + signers.kms.auth.spire.sock: + type: string + signers.kms.auth.token: + type: string + signers.kms.auth.token-path: + type: string + signers.kms.kmsref: + description: kms signer config + type: string + signers.x509.fulcio.address: + type: string + signers.x509.fulcio.enabled: + description: x509 signer config + type: boolean + signers.x509.fulcio.issuer: + type: string + signers.x509.fulcio.provider: + type: string + signers.x509.identity.token.file: + type: string + signers.x509.tuf.mirror.url: + type: string + storage.docdb.mongo-server-url: + type: string + storage.docdb.mongo-server-url-dir: + type: string + storage.docdb.url: + type: string + storage.gcs.bucket: + description: storage configs + type: string + storage.grafeas.notehint: + type: string + storage.grafeas.noteid: + type: string + storage.grafeas.projectid: + type: string + storage.oci.repository: + type: string + storage.oci.repository.insecure: + type: boolean + transparency.enabled: + type: string + transparency.url: + type: string + required: + - disabled + - options + type: object + config: + description: Config holds the configuration for resources created by TektonConfig + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + dashboard: + description: Dashboard holds the customizable options for dashboards component + properties: + external-logs: + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + readonly: + description: Readonly when set to true configures the Tekton dashboard in read-only mode + type: boolean + required: + - options + - readonly + type: object + hub: + description: Hub holds the hub config + properties: + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + params: + description: Params is the list of params passed for Hub customization + items: + description: Param declares an string value to use for the parameter called name. + properties: + name: + type: string + value: + type: string + type: object + type: array + required: + - options + type: object + multiclusterProxyAAE: + description: MulticlusterProxyAAE holds the customizable options for the multicluster-proxy-aae component + properties: + options: + description: options holds additional fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + required: + - options + type: object + params: + description: Params is the list of params passed for all platforms + items: + description: Param declares an string value to use for the parameter called name. + properties: + name: + type: string + value: + type: string + type: object + type: array + pipeline: + description: Pipeline holds the customizable option for pipeline component + properties: + await-sidecar-readiness: + type: boolean + bundles-resolver-config: + additionalProperties: + type: string + type: object + cluster-resolver-config: + additionalProperties: + type: string + type: object + coschedule: + type: string + default-affinity-assistant-pod-template: + type: string + default-cloud-events-sink: + type: string + default-forbidden-env: + type: string + default-managed-by-label-value: + type: string + default-max-matrix-combinations-count: + type: string + default-pod-template: + type: string + default-resolver-type: + type: string + default-service-account: + type: string + default-task-run-workspace-binding: + type: string + default-timeout-minutes: + type: integer + disable-affinity-assistant: + description: |- + Deprecated: DisableAffinityAssistant is deprecated and no longer used. + This field is removed from pipeline component. + Keeping here to maintain API compatibility during upgrades. + type: boolean + disable-creds-init: + type: boolean + disable-inline-spec: + type: string + embedded-status: + type: string + enable-api-fields: + type: string + enable-bundles-resolver: + type: boolean + enable-cel-in-whenexpression: + type: boolean + enable-cluster-resolver: + type: boolean + enable-custom-tasks: + type: boolean + enable-git-resolver: + type: boolean + enable-hub-resolver: + type: boolean + enable-param-enum: + type: boolean + enable-provenance-in-status: + type: boolean + enable-step-actions: + type: boolean + enable-tekton-oci-bundles: + description: |- + not in use, see: https://github.com/tektoncd/pipeline/pull/7789 + this field is removed from pipeline component + keeping here to maintain the API compatibility + type: boolean + enforce-nonfalsifiability: + type: string + git-resolver-config: + additionalProperties: + type: string + type: object + hub-resolver-config: + additionalProperties: + type: string + type: object + keep-pod-on-cancel: + type: boolean + max-result-size: + format: int32 + type: integer + metrics.count.enable-reason: + type: boolean + metrics.pipelinerun.duration-type: + type: string + metrics.pipelinerun.level: + type: string + metrics.taskrun.duration-type: + type: string + metrics.taskrun.level: + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + params: + description: The params to customize different components of Pipelines + items: + description: Param declares an string value to use for the parameter called name. + properties: + name: + type: string + value: + type: string + type: object + type: array + performance: + description: |- + PerformanceProperties defines the fields which are configurable + to tune the performance of component controller + properties: + buckets: + type: integer + disable-ha: + description: if it is true, disables the HA feature + type: boolean + kube-api-burst: + type: integer + kube-api-qps: + description: |- + queries per second (QPS) and burst to the master from rest API client + actually the number multiplied by 2 + https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87 + defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46 + type: number + replicas: + format: int32 + type: integer + statefulset-ordinals: + description: if is true, enable StatefulsetOrdinals mode + type: boolean + threads-per-controller: + description: The number of workers to use when processing the component controller's work queue + type: integer + required: + - disable-ha + type: object + require-git-ssh-secret-known-hosts: + type: boolean + results-from: + type: string + running-in-environment-with-injected-sidecars: + type: boolean + scope-when-expressions-to-task: + description: ScopeWhenExpressionsToTask is deprecated and never used. + type: boolean + send-cloudevents-for-runs: + type: boolean + set-security-context: + type: boolean + traces.credentialsSecret: + description: CredentialsSecret is the name of the secret containing credentials for the tracing endpoint + type: string + traces.enabled: + description: Enabled controls whether tracing is enabled or not + type: boolean + traces.endpoint: + description: Endpoint is the URL for the OpenTelemetry trace collector + type: string + trusted-resources-verification-no-match-policy: + type: string + verification-mode: + type: string + required: + - options + type: object + platforms: + description: Platforms allows configuring platform specific configurations + properties: + kubernetes: + description: Kubernetes allows configuring kubernetes specific components and configurations + properties: + pipelinesAsCode: + description: PipelinesAsCode allows configuring PipelinesAsCode configurations + properties: + additionalPACControllers: + additionalProperties: + description: AdditionalPACControllerConfig contains config for additionalPACControllers + properties: + configMapName: + description: Name of the additional controller configMap + type: string + enable: + description: Enable or disable this additional pipelines as code instance by changing this bool + type: boolean + secretName: + description: Name of the additional controller Secret + type: string + settings: + additionalProperties: + type: string + description: Setting will contains the configMap data + type: object + type: object + description: AdditionalPACControllers allows to deploy additional PAC controller + type: object + enable: + description: Enable or disable pipelines as code by changing this bool + type: boolean + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + settings: + additionalProperties: + type: string + type: object + required: + - options + type: object + type: object + openshift: + description: OpenShift allows configuring openshift specific components and configurations + properties: + enableCentralTLSConfig: + description: |- + EnableCentralTLSConfig enables TLS configuration inheritance from + the cluster's APIServer TLS security profile. When enabled, TLS settings + (minimum version, cipher suites, curve preferences) are automatically + derived from the cluster-wide security policy and injected into Tekton + component containers that support TLS configuration. + If the APIServer does not have a TLS profile configured, user-specified + TLS settings in component configurations will be used as fallback. + Default: false (opt-in) + type: boolean + pipelinesAsCode: + description: PipelinesAsCode allows configuring PipelinesAsCode configurations + properties: + additionalPACControllers: + additionalProperties: + description: AdditionalPACControllerConfig contains config for additionalPACControllers + properties: + configMapName: + description: Name of the additional controller configMap + type: string + enable: + description: Enable or disable this additional pipelines as code instance by changing this bool + type: boolean + secretName: + description: Name of the additional controller Secret + type: string + settings: + additionalProperties: + type: string + description: Setting will contains the configMap data + type: object + type: object + description: AdditionalPACControllers allows to deploy additional PAC controller + type: object + enable: + description: Enable or disable pipelines as code by changing this bool + type: boolean + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + settings: + additionalProperties: + type: string + type: object + required: + - options + type: object + scc: + description: SCC allows configuring security context constraints used by workloads + properties: + default: + description: |- + Default contains the default SCC that will be attached to the service + account used for workloads (`pipeline` SA by default) and defined in + PipelineProperties.OptionalPipelineProperties.DefaultServiceAccount + type: string + maxAllowed: + description: |- + MaxAllowed specifies the highest SCC that can be requested for in a + namespace or in the Default field. + type: string + type: object + type: object + type: object + profile: + type: string + pruner: + description: Pruner holds the prune config + properties: + disabled: + description: enable or disable pruner feature + type: boolean + keep: + description: |- + The number of resource to keep + You dont want to delete all the pipelinerun/taskrun's by a cron + type: integer + keep-since: + description: |- + KeepSince keeps the resources younger than the specified value + Its value is taken in minutes + type: integer + prune-per-resource: + description: apply the prune job to the individual resources + type: boolean + resources: + description: The resources which need to be pruned + items: + type: string + type: array + schedule: + description: How frequent pruning should happen + type: string + startingDeadlineSeconds: + description: |- + Optional deadline in seconds for starting the job if it misses scheduled time for any reason. + Missed jobs executions will be counted as failed ones. + format: int64 + type: integer + required: + - disabled + type: object + result: + description: Result holds the customize option for results component + properties: + auth_disable: + type: boolean + auth_impersonate: + type: boolean + db_enable_auto_migration: + type: boolean + db_host: + type: string + db_name: + type: string + db_port: + format: int64 + type: integer + db_secret_name: + type: string + db_secret_password_key: + type: string + db_secret_user_key: + type: string + db_sslmode: + type: string + db_sslrootcert: + type: string + disabled: + description: enable or disable Result Component + type: boolean + gcs_bucket_name: + type: string + gcs_creds_secret_key: + type: string + gcs_creds_secret_name: + type: string + is_external_db: + type: boolean + log_level: + type: string + logging_plugin_api_url: + type: string + logging_plugin_ca_cert: + type: string + logging_plugin_forwarder_delay_duration: + type: integer + logging_plugin_multipart_regex: + type: string + logging_plugin_namespace_key: + type: string + logging_plugin_proxy_path: + type: string + logging_plugin_query_limit: + type: integer + logging_plugin_query_params: + type: string + logging_plugin_static_labels: + type: string + logging_plugin_tls_verification_disable: + type: boolean + logging_plugin_token_path: + type: string + logging_pvc_name: + type: string + logs_api: + type: boolean + logs_buffer_size: + format: int64 + type: integer + logs_path: + type: string + logs_type: + type: string + loki_stack_name: + type: string + loki_stack_namespace: + type: string + options: + description: Options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + performance: + description: |- + PerformanceProperties defines the fields which are configurable + to tune the performance of component controller + properties: + buckets: + type: integer + disable-ha: + description: if it is true, disables the HA feature + type: boolean + kube-api-burst: + type: integer + kube-api-qps: + description: |- + queries per second (QPS) and burst to the master from rest API client + actually the number multiplied by 2 + https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87 + defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46 + type: number + replicas: + format: int32 + type: integer + statefulset-ordinals: + description: if is true, enable StatefulsetOrdinals mode + type: boolean + threads-per-controller: + description: The number of workers to use when processing the component controller's work queue + type: integer + required: + - disable-ha + type: object + prometheus_histogram: + type: boolean + prometheus_port: + format: int64 + type: integer + route_enabled: + description: Route configuration for Results API service exposure + type: boolean + route_host: + type: string + route_path: + type: string + route_tls_termination: + type: string + secret_name: + description: |- + name of the secret used to get S3 credentials and + pass it as environment variables to the "tekton-results-api" deployment under "api" container + type: string + server_port: + format: int64 + type: integer + storage_emulator_host: + type: string + tls_hostname_override: + type: string + required: + - disabled + - is_external_db + - options + type: object + scheduler: + description: To enable Pipeline Scheduling on Single Cluster or Multiple Clusters + properties: + config.yaml: + description: |- + This hold the config data from tekton-kueue. ConfigMap in tekton kueue is loaded as config.yaml so we need to + match the key here + x-kubernetes-preserve-unknown-fields: true + disabled: + description: enable or disable TektonScheduler Component + type: boolean + multi-cluster-disabled: + type: boolean + multi-cluster-role: + description: |- + MultiClusterRole Define the role of current cluster in multi-cluster environment. The MultiClusterRole + can be one of Hub or Spoke + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + required: + - config.yaml + - disabled + - multi-cluster-disabled + - multi-cluster-role + - options + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + targetNamespaceMetadata: + description: holds target namespace metadata + properties: + annotations: + additionalProperties: + type: string + type: object + labels: + additionalProperties: + type: string + type: object + type: object + tektonpruner: + description: New EventBasedPruner which provides more granular control over TaskRun and PipelineRuns + properties: + disabled: + description: enable or disable TektonPruner Component + type: boolean + global-config: + x-kubernetes-preserve-unknown-fields: true + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + required: + - disabled + - global-config + - options + type: object + trigger: + description: Trigger holds the customizable option for triggers component + properties: + default-service-account: + type: string + disabled: + description: enable or disable Trigger Component + type: boolean + enable-api-fields: + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + required: + - disabled + - options + type: object + type: object + status: + description: TektonConfigStatus defines the observed state of TektonConfig + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + profile: + description: The profile installed + type: string + tektonInstallerSets: + additionalProperties: + type: string + description: The current installer set name + type: object + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektondashboards.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: TektonDashboard + listKind: TektonDashboardList + plural: tektondashboards + singular: tektondashboard + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonDashboard is the Schema for the tektondashboards API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonDashboardSpec defines the desired state of TektonDashboard + properties: + config: + description: Config holds the configuration for resources created by TektonDashboard + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + external-logs: + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + readonly: + description: Readonly when set to true configures the Tekton dashboard in read-only mode + type: boolean + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - options + - readonly + type: object + status: + description: TektonDashboardStatus defines the observed state of TektonDashboard + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for TektonDashboard + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonhubs.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: TektonHub + listKind: TektonHubList + plural: tektonhubs + singular: tektonhub + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + - jsonPath: .status.apiUrl + name: ApiUrl + type: string + - jsonPath: .status.uiUrl + name: UiUrl + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonHub is the Schema for the tektonhub API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + properties: + api: + properties: + catalogRefreshInterval: + type: string + hubConfigUrl: + description: Deprecated, will be removed in further release + type: string + routeHostUrl: + type: string + secret: + type: string + type: object + catalogs: + items: + properties: + contextDir: + type: string + name: + type: string + org: + type: string + provider: + type: string + revision: + type: string + sshUrl: + type: string + type: + type: string + url: + type: string + type: object + type: array + categories: + items: + type: string + type: array + customLogo: + description: The Base64 Encode data and mediaType of the Custom Logo + properties: + base64Data: + type: string + mediaType: + type: string + type: object + db: + properties: + secret: + type: string + type: object + default: + properties: + scopes: + items: + type: string + type: array + type: object + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + params: + description: Params is the list of params passed for Hub customization + items: + description: Param declares an string value to use for the parameter called name. + properties: + name: + type: string + value: + type: string + type: object + type: array + scopes: + items: + properties: + name: + type: string + users: + items: + type: string + type: array + type: object + type: array + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - options + type: object + status: + description: TektonHubStatus defines the observed state of TektonHub + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + apiUrl: + description: The URL route for API which needs to be exposed + type: string + authUrl: + description: The URL route for Auth server + type: string + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + hubInstallerSets: + additionalProperties: + type: string + description: The current installer set name + type: object + manifests: + description: The url links of the manifests, separated by comma + items: + type: string + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + uiUrl: + description: The URL route for UI which needs to be exposed + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektoninstallersets.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: TektonInstallerSet + listKind: TektonInstallerSetList + plural: tektoninstallersets + singular: tektoninstallerset + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonInstallerSet is the Schema for the TektonInstallerSet API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonInstallerSetSpec defines the desired state of TektonInstallerSet + properties: + manifests: + x-kubernetes-preserve-unknown-fields: true + type: object + status: + description: TektonInstallerSetStatus defines the observed state of TektonInstallerSet + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonmulticlusterproxyaaes.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: TektonMulticlusterProxyAAE + listKind: TektonMulticlusterProxyAAEList + plural: tektonmulticlusterproxyaaes + singular: tektonmulticlusterproxyaae + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonMulticlusterProxyAAE is the Schema for the TektonMulticlusterProxyAAE API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + properties: + options: + description: options holds additional fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - options + type: object + status: + description: TektonMulticlusterProxyAAEStatus defines the observed state of TektonMulticlusterProxyAAE + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for TektonMulticlusterProxyAAE + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonpipelines.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: TektonPipeline + listKind: TektonPipelineList + plural: tektonpipelines + singular: tektonpipeline + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonPipeline is the Schema for the tektonpipelines API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonPipelineSpec defines the desired state of TektonPipeline + properties: + await-sidecar-readiness: + type: boolean + bundles-resolver-config: + additionalProperties: + type: string + type: object + cluster-resolver-config: + additionalProperties: + type: string + type: object + config: + description: Config holds the configuration for resources created by TektonPipeline + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + coschedule: + type: string + default-affinity-assistant-pod-template: + type: string + default-cloud-events-sink: + type: string + default-forbidden-env: + type: string + default-managed-by-label-value: + type: string + default-max-matrix-combinations-count: + type: string + default-pod-template: + type: string + default-resolver-type: + type: string + default-service-account: + type: string + default-task-run-workspace-binding: + type: string + default-timeout-minutes: + type: integer + disable-affinity-assistant: + description: |- + Deprecated: DisableAffinityAssistant is deprecated and no longer used. + This field is removed from pipeline component. + Keeping here to maintain API compatibility during upgrades. + type: boolean + disable-creds-init: + type: boolean + disable-inline-spec: + type: string + embedded-status: + type: string + enable-api-fields: + type: string + enable-bundles-resolver: + type: boolean + enable-cel-in-whenexpression: + type: boolean + enable-cluster-resolver: + type: boolean + enable-custom-tasks: + type: boolean + enable-git-resolver: + type: boolean + enable-hub-resolver: + type: boolean + enable-param-enum: + type: boolean + enable-provenance-in-status: + type: boolean + enable-step-actions: + type: boolean + enable-tekton-oci-bundles: + description: |- + not in use, see: https://github.com/tektoncd/pipeline/pull/7789 + this field is removed from pipeline component + keeping here to maintain the API compatibility + type: boolean + enforce-nonfalsifiability: + type: string + git-resolver-config: + additionalProperties: + type: string + type: object + hub-resolver-config: + additionalProperties: + type: string + type: object + keep-pod-on-cancel: + type: boolean + max-result-size: + format: int32 + type: integer + metrics.count.enable-reason: + type: boolean + metrics.pipelinerun.duration-type: + type: string + metrics.pipelinerun.level: + type: string + metrics.taskrun.duration-type: + type: string + metrics.taskrun.level: + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + params: + description: The params to customize different components of Pipelines + items: + description: Param declares an string value to use for the parameter called name. + properties: + name: + type: string + value: + type: string + type: object + type: array + performance: + description: |- + PerformanceProperties defines the fields which are configurable + to tune the performance of component controller + properties: + buckets: + type: integer + disable-ha: + description: if it is true, disables the HA feature + type: boolean + kube-api-burst: + type: integer + kube-api-qps: + description: |- + queries per second (QPS) and burst to the master from rest API client + actually the number multiplied by 2 + https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87 + defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46 + type: number + replicas: + format: int32 + type: integer + statefulset-ordinals: + description: if is true, enable StatefulsetOrdinals mode + type: boolean + threads-per-controller: + description: The number of workers to use when processing the component controller's work queue + type: integer + required: + - disable-ha + type: object + require-git-ssh-secret-known-hosts: + type: boolean + results-from: + type: string + running-in-environment-with-injected-sidecars: + type: boolean + scope-when-expressions-to-task: + description: ScopeWhenExpressionsToTask is deprecated and never used. + type: boolean + send-cloudevents-for-runs: + type: boolean + set-security-context: + type: boolean + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + traces.credentialsSecret: + description: CredentialsSecret is the name of the secret containing credentials for the tracing endpoint + type: string + traces.enabled: + description: Enabled controls whether tracing is enabled or not + type: boolean + traces.endpoint: + description: Endpoint is the URL for the OpenTelemetry trace collector + type: string + trusted-resources-verification-no-match-policy: + type: string + verification-mode: + type: string + required: + - options + type: object + status: + description: TektonPipelineStatus defines the observed state of TektonPipeline + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + extTektonInstallerSets: + additionalProperties: + type: string + description: The installer sets created for extension components + type: object + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for TektonPipeline + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonpruners.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: TektonPruner + listKind: TektonPrunerList + plural: tektonpruners + singular: tektonpruner + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonPruner is the Schema for the TektonPruner API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + properties: + config: + description: Config holds the configuration for resources created by TektonPruner + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + disabled: + description: enable or disable TektonPruner Component + type: boolean + global-config: + x-kubernetes-preserve-unknown-fields: true + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - disabled + - global-config + - options + type: object + status: + description: TektonPrunerStatus defines the observed state of TektonPruner + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for TektonPruner + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonresults.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: TektonResult + listKind: TektonResultList + plural: tektonresults + singular: tektonresult + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonResult is the Schema for the tektonresults API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonResultSpec defines the desired state of TektonResult + properties: + auth_disable: + type: boolean + auth_impersonate: + type: boolean + config: + description: Config holds the configuration for resources created by TektonResult + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + db_enable_auto_migration: + type: boolean + db_host: + type: string + db_name: + type: string + db_port: + format: int64 + type: integer + db_secret_name: + type: string + db_secret_password_key: + type: string + db_secret_user_key: + type: string + db_sslmode: + type: string + db_sslrootcert: + type: string + disabled: + description: enable or disable Result Component + type: boolean + gcs_bucket_name: + type: string + gcs_creds_secret_key: + type: string + gcs_creds_secret_name: + type: string + is_external_db: + type: boolean + log_level: + type: string + logging_plugin_api_url: + type: string + logging_plugin_ca_cert: + type: string + logging_plugin_forwarder_delay_duration: + type: integer + logging_plugin_multipart_regex: + type: string + logging_plugin_namespace_key: + type: string + logging_plugin_proxy_path: + type: string + logging_plugin_query_limit: + type: integer + logging_plugin_query_params: + type: string + logging_plugin_static_labels: + type: string + logging_plugin_tls_verification_disable: + type: boolean + logging_plugin_token_path: + type: string + logging_pvc_name: + type: string + logs_api: + type: boolean + logs_buffer_size: + format: int64 + type: integer + logs_path: + type: string + logs_type: + type: string + loki_stack_name: + type: string + loki_stack_namespace: + type: string + options: + description: Options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + performance: + description: |- + PerformanceProperties defines the fields which are configurable + to tune the performance of component controller + properties: + buckets: + type: integer + disable-ha: + description: if it is true, disables the HA feature + type: boolean + kube-api-burst: + type: integer + kube-api-qps: + description: |- + queries per second (QPS) and burst to the master from rest API client + actually the number multiplied by 2 + https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87 + defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46 + type: number + replicas: + format: int32 + type: integer + statefulset-ordinals: + description: if is true, enable StatefulsetOrdinals mode + type: boolean + threads-per-controller: + description: The number of workers to use when processing the component controller's work queue + type: integer + required: + - disable-ha + type: object + prometheus_histogram: + type: boolean + prometheus_port: + format: int64 + type: integer + route_enabled: + description: Route configuration for Results API service exposure + type: boolean + route_host: + type: string + route_path: + type: string + route_tls_termination: + type: string + secret_name: + description: |- + name of the secret used to get S3 credentials and + pass it as environment variables to the "tekton-results-api" deployment under "api" container + type: string + server_port: + format: int64 + type: integer + storage_emulator_host: + type: string + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + tls_hostname_override: + type: string + required: + - disabled + - is_external_db + - options + type: object + status: + description: TektonResultStatus defines the observed state of TektonResult + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name for TektonResult + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektonschedulers.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: TektonScheduler + listKind: TektonSchedulerList + plural: tektonschedulers + singular: tektonscheduler + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonScheduler is the Schema for the TektonScheduler API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + properties: + config.yaml: + description: |- + This hold the config data from tekton-kueue. ConfigMap in tekton kueue is loaded as config.yaml so we need to + match the key here + x-kubernetes-preserve-unknown-fields: true + disabled: + description: enable or disable TektonScheduler Component + type: boolean + multi-cluster-disabled: + type: boolean + multi-cluster-role: + description: |- + MultiClusterRole Define the role of current cluster in multi-cluster environment. The MultiClusterRole + can be one of Hub or Spoke + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - config.yaml + - disabled + - multi-cluster-disabled + - multi-cluster-role + - options + type: object + status: + description: TektonSchedulerStatus defines the observed state of TektonScheduler + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tekton-scheduler: + description: The current installer set name for TektonScheduler + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: apiextensions.k8s.io/v1 + kind: CustomResourceDefinition + metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.18.0 + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tektontriggers.operator.tekton.dev + spec: + group: operator.tekton.dev + names: + kind: TektonTrigger + listKind: TektonTriggerList + plural: tektontriggers + singular: tektontrigger + scope: Cluster + versions: + - additionalPrinterColumns: + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].status + name: Ready + type: string + - jsonPath: .status.conditions[?(@.type=="Ready")].message + name: Reason + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: TektonTrigger is the Schema for the tektontriggers API + properties: + apiVersion: + description: |- + APIVersion defines the versioned schema of this representation of an object. + Servers should convert recognized schemas to the latest internal value, and + may reject unrecognized values. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + type: string + kind: + description: |- + Kind is a string value representing the REST resource this object represents. + Servers may infer this from the endpoint the client submits requests to. + Cannot be updated. + In CamelCase. + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + type: string + metadata: + type: object + spec: + description: TektonTriggerSpec defines the desired state of TektonTrigger + properties: + config: + description: Config holds the configuration for resources created by TektonTrigger + properties: + nodeSelector: + additionalProperties: + type: string + type: object + priorityClassName: + description: PriorityClassName holds the priority class to be set to pod template + type: string + tolerations: + items: + description: |- + The pod this Toleration is attached to tolerates any taint that matches + the triple using the matching operator . + properties: + effect: + description: |- + Effect indicates the taint effect to match. Empty means match all taint effects. + When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: |- + Key is the taint key that the toleration applies to. Empty means match all taint keys. + If the key is empty, operator must be Exists; this combination means to match all values and all keys. + type: string + operator: + description: |- + Operator represents a key's relationship to the value. + Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod can + tolerate all taints of a particular category. + Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). + type: string + tolerationSeconds: + description: |- + TolerationSeconds represents the period of time the toleration (which must be + of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, + it is not set, which means tolerate the taint forever (do not evict). Zero and + negative values will be treated as 0 (evict immediately) by the system. + format: int64 + type: integer + value: + description: |- + Value is the taint value the toleration matches to. + If the operator is Exists, the value should be empty, otherwise just a regular string. + type: string + type: object + type: array + type: object + default-service-account: + type: string + disabled: + description: enable or disable Trigger Component + type: boolean + enable-api-fields: + type: string + options: + description: options holds additions fields and these fields will be updated on the manifests + properties: + configMaps: + x-kubernetes-preserve-unknown-fields: true + deployments: + x-kubernetes-preserve-unknown-fields: true + disabled: + type: boolean + horizontalPodAutoscalers: + x-kubernetes-preserve-unknown-fields: true + statefulSets: + x-kubernetes-preserve-unknown-fields: true + webhookConfigurationOptions: + additionalProperties: + description: WebhookOptions defines options for webhooks + properties: + failurePolicy: + description: FailurePolicyType specifies a failure policy that defines how unrecognized errors from the admission endpoint are handled. + type: string + sideEffects: + description: SideEffectClass specifies the types of side effects a webhook may have. + type: string + timeoutSeconds: + format: int32 + type: integer + type: object + type: object + type: object + targetNamespace: + description: TargetNamespace is where resources will be installed + type: string + required: + - disabled + - options + type: object + status: + description: TektonTriggerStatus defines the observed state of TektonTrigger + properties: + annotations: + additionalProperties: + type: string + description: |- + Annotations is additional Status fields for the Resource to save some + additional State as well as convey more information to the user. This is + roughly akin to Annotations on any k8s resource, just the reconciler conveying + richer information outwards. + type: object + conditions: + description: Conditions the latest available observations of a resource's current state. + items: + description: |- + Condition defines a readiness condition for a Knative resource. + See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties + properties: + lastTransitionTime: + description: |- + LastTransitionTime is the last time the condition transitioned from one status to another. + We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + differences (all other things held constant). + type: string + message: + description: A human readable message indicating details about the transition. + type: string + reason: + description: The reason for the condition's last transition. + type: string + severity: + description: |- + Severity with which to treat failures of this type of condition. + When this is not specified, it defaults to Error. + type: string + status: + description: Status of the condition, one of True, False, Unknown. + type: string + type: + description: Type of condition. + type: string + required: + - status + - type + type: object + type: array + observedGeneration: + description: |- + ObservedGeneration is the 'Generation' of the Service that + was last processed by the controller. + format: int64 + type: integer + tektonInstallerSet: + description: The current installer set name + type: string + version: + description: The version of the installed release + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} + --- + apiVersion: v1 + kind: ServiceAccount + metadata: + name: tekton-operator + namespace: tekton-operator + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: Role + metadata: + labels: + app.kubernetes.io/instance: default + name: tekton-operator-info + namespace: tekton-operator + rules: + - apiGroups: + - "" + resourceNames: + - tekton-operator-info + resources: + - configmaps + verbs: + - get + - describe + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRole + metadata: + name: tekton-config-read-role + rules: + - apiGroups: + - operator.tekton.dev + resources: + - tektonconfigs + verbs: + - get + - watch + - list + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRole + metadata: + name: tekton-multicluster-proxy-aae-role + rules: + - apiGroups: + - kueue.x-k8s.io + resources: + - workloads + - multikueueclusters + verbs: + - get + - list + - watch + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRole + metadata: + name: tekton-operator + rules: + - apiGroups: + - "" + resources: + - nodes + verbs: + - list + - apiGroups: + - "" + resources: + - pods + - services + - endpoints + - persistentvolumeclaims + - events + - configmaps + - secrets + - pods/log + - limitranges + verbs: + - delete + - deletecollection + - create + - patch + - get + - list + - update + - watch + - describe + - apiGroups: + - extensions + - apps + - networking.k8s.io + resources: + - ingresses + - ingresses/status + verbs: + - delete + - create + - patch + - get + - list + - update + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces/finalizers + verbs: + - update + - apiGroups: + - apps + resources: + - deployments + - daemonsets + - replicasets + - statefulsets + - deployments/finalizers + verbs: + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - servicemonitors + verbs: + - get + - create + - delete + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterroles + - roles + verbs: + - get + - create + - update + - delete + - list + - watch + - apiGroups: + - "" + resources: + - serviceaccounts + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - impersonate + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - rolebindings + verbs: + - get + - create + - update + - delete + - list + - watch + - apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + - customresourcedefinitions/status + verbs: + - get + - create + - update + - delete + - list + - patch + - watch + - apiGroups: + - admissionregistration.k8s.io + resources: + - mutatingwebhookconfigurations + - validatingwebhookconfigurations + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - build.knative.dev + resources: + - builds + - buildtemplates + - clusterbuildtemplates + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - extensions + resources: + - deployments/finalizers + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - operator.tekton.dev + resources: + - '*' + - tektonaddons + verbs: + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + - apiGroups: + - tekton.dev + resources: + - tasks + - clustertasks + - taskruns + - pipelines + - pipelineruns + - pipelineresources + - conditions + - tasks/status + - clustertasks/status + - taskruns/status + - pipelines/status + - pipelineruns/status + - pipelineresources/status + - taskruns/finalizers + - pipelineruns/finalizers + - runs + - runs/status + - runs/finalizers + - customruns + - customruns/status + - customruns/finalizers + - verificationpolicies + - verificationpolicies/status + - stepactions + - stepactions/status + verbs: + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + - apiGroups: + - triggers.tekton.dev + - operator.tekton.dev + resources: + - '*' + verbs: + - add + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + - apiGroups: + - dashboard.tekton.dev + resources: + - '*' + - tektonaddons + - extensions + verbs: + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + - apiGroups: + - security.openshift.io + resources: + - securitycontextconstraints + verbs: + - use + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - delete + - deletecollection + - create + - patch + - get + - list + - update + - watch + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - delete + - deletecollection + - create + - patch + - get + - list + - update + - watch + - apiGroups: + - serving.knative.dev + resources: + - '*' + - '*/status' + - '*/finalizers' + verbs: + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + - apiGroups: + - batch + resources: + - cronjobs + - jobs + verbs: + - delete + - create + - patch + - get + - list + - update + - watch + - apiGroups: + - admissionregistration.k8s.io + resources: + - mutatingwebhookconfigurations + - validatingwebhookconfigurations + verbs: + - delete + - create + - patch + - get + - list + - update + - watch + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create + - apiGroups: + - results.tekton.dev + resources: + - '*' + verbs: + - delete + - deletecollection + - create + - patch + - get + - list + - update + - watch + - apiGroups: + - resolution.tekton.dev + resources: + - resolutionrequests + - resolutionrequests/status + verbs: + - get + - list + - watch + - create + - delete + - update + - patch + - apiGroups: + - openshift-pipelines.org + resources: + - approvaltasks + - approvaltasks/status + verbs: + - add + - get + - list + - create + - update + - delete + - deletecollection + - patch + - watch + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRole + metadata: + name: tekton-pac-controller-role + rules: + - apiGroups: + - pipelinesascode.tekton.dev + resources: + - repositories + - webhooks + verbs: + - get + - list + - watch + - create + - update + - patch + - delete + - deletecollection + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRole + metadata: + name: tekton-result-read-role + rules: + - apiGroups: + - operator.tekton.dev + resources: + - tektonresults + verbs: + - get + - watch + - list + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRole + metadata: + name: tekton-scheduler-role + rules: + - apiGroups: + - kueue.x-k8s.io + resources: + - resourceflavors + - workloads + - workloads/finalizers + - workloads/status + - workloadpriorityclasses + verbs: + - get + - list + - create + - update + - delete + - patch + - watch + - apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch + - apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - get + - create + - update + - list + - nonResourceURLs: + - /metrics + verbs: + - get + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: RoleBinding + metadata: + labels: + app.kubernetes.io/instance: default + name: tekton-operator-info + namespace: tekton-operator + roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: tekton-operator-info + subjects: + - apiGroup: rbac.authorization.k8s.io + kind: Group + name: system:authenticated + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRoleBinding + metadata: + name: tekton-config-read-rolebinding + roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-config-read-role + subjects: + - apiGroup: rbac.authorization.k8s.io + kind: Group + name: system:authenticated + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRoleBinding + metadata: + name: tekton-multicluster-proxy-aae-rolebinding + roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-multicluster-proxy-aae-role + subjects: + - kind: ServiceAccount + name: tekton-operator + namespace: tekton-operator + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRoleBinding + metadata: + name: tekton-operator + roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-operator + subjects: + - kind: ServiceAccount + name: tekton-operator + namespace: tekton-operator + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRoleBinding + metadata: + name: tekton-pac-controller-role-binding + roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-pac-controller-role + subjects: + - kind: ServiceAccount + name: tekton-operator + namespace: tekton-operator + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRoleBinding + metadata: + name: tekton-result-read-rolebinding + roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-result-read-role + subjects: + - apiGroup: rbac.authorization.k8s.io + kind: Group + name: system:authenticated + --- + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRoleBinding + metadata: + name: tekton-scheduler-rolebinding + roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-scheduler-role + subjects: + - kind: ServiceAccount + name: tekton-operator + namespace: tekton-operator + --- + apiVersion: v1 + data: + _example: | + ################################ + # # + # EXAMPLE CONFIGURATION # + # # + ################################ + + # This block is not actually functional configuration, + # but serves to illustrate the available configuration + # options and document them in a way that is accessible + # to users that `kubectl edit` this config map. + # + # These sample configuration options may be copied out of + # this example block and unindented to be in the data block + # to actually change the configuration. + + # Common configuration for all Knative codebase + zap-logger-config: | + { + "level": "info", + "development": false, + "outputPaths": ["stdout"], + "errorOutputPaths": ["stderr"], + "encoding": "json", + "encoderConfig": { + "timeKey": "ts", + "levelKey": "level", + "nameKey": "logger", + "callerKey": "caller", + "messageKey": "msg", + "stacktraceKey": "stacktrace", + "lineEnding": "", + "levelEncoder": "", + "timeEncoder": "iso8601", + "durationEncoder": "", + "callerEncoder": "" + } + } + loglevel.tekton-operator-cluster-operations: info + loglevel.tekton-operator-lifecycle: info + loglevel.tekton-operator-webhook: info + zap-logger-config: | + { + "level": "info", + "development": false, + "sampling": { + "initial": 100, + "thereafter": 100 + }, + "outputPaths": ["stdout"], + "errorOutputPaths": ["stderr"], + "encoding": "json", + "encoderConfig": { + "timeKey": "timestamp", + "levelKey": "level", + "nameKey": "logger", + "callerKey": "caller", + "messageKey": "msg", + "stacktraceKey": "stacktrace", + "lineEnding": "", + "levelEncoder": "", + "timeEncoder": "iso8601", + "durationEncoder": "", + "callerEncoder": "" + } + } + kind: ConfigMap + metadata: + labels: + operator.tekton.dev/release: "v0.80.0" + name: config-logging + namespace: tekton-operator + --- + apiVersion: v1 + data: + AUTOINSTALL_COMPONENTS: "true" + DEFAULT_TARGET_NAMESPACE: tekton-pipelines + kind: ConfigMap + metadata: + labels: + operator.tekton.dev/release: "v0.80.0" + name: tekton-config-defaults + namespace: tekton-operator + --- + apiVersion: v1 + data: + _example: | + ################################ + # # + # EXAMPLE CONFIGURATION # + # # + ################################ + + # This block is not actually functional configuration, + # but serves to illustrate the available configuration + # options and document them in a way that is accessible + # to users that `kubectl edit` this config map. + # + # These sample configuration options may be copied out of + # this example block and unindented to be in the data block + # to actually change the configuration. + + # OpenTelemetry Metrics Configuration + # Protocol for metrics export (prometheus, grpc, http/protobuf, none) + # Default: prometheus + metrics-protocol: prometheus + + # Metrics endpoint (for grpc/http protocols) + # Default: empty (uses default OTLP endpoint) + metrics-endpoint: "" + + # Metrics export interval (e.g., "30s", "1m") + # Default: empty (uses SDK default) + metrics-export-interval: "" + + # OpenTelemetry Tracing Configuration + # Protocol for tracing export (grpc, http/protobuf, none, stdout) + # Default: none + tracing-protocol: none + + # Tracing endpoint (for grpc/http protocols) + # Default: empty + tracing-endpoint: "" + + # Tracing sampling rate (0.0 to 1.0) + # Default: 1.0 (100% sampling) + tracing-sampling-rate: "1.0" + + # Runtime Configuration + # Enable profiling (enabled, disabled) + # Default: disabled + runtime-profiling: disabled + + # Runtime export interval (e.g., "15s") + # Default: 15s + runtime-export-interval: "15s" + + # Note: Legacy OpenCensus configuration keys (metrics.backend-destination, + # metrics.stackdriver-project-id, metrics.allow-stackdriver-custom-metrics) + # are no longer recognized. Use the OpenTelemetry options above. + metrics-protocol: prometheus + kind: ConfigMap + metadata: + labels: + app.kubernetes.io/instance: default + name: tekton-config-observability + namespace: tekton-operator + --- + apiVersion: v1 + data: + _example: | + ################################ + # # + # EXAMPLE CONFIGURATION # + # # + ################################ + # This block is not actually functional configuration, + # but serves to illustrate the available configuration + # options and document them in a way that is accessible + # to users that `kubectl edit` this config map. + # + # These sample configuration options may be copied out of + # this example block and unindented to be in the data block + # to actually change the configuration. + # lease-duration is how long non-leaders will wait to try to acquire the + # lock; 15 seconds is the value used by core kubernetes controllers. + lease-duration: "60s" + # renew-deadline is how long a leader will try to renew the lease before + # giving up; 10 seconds is the value used by core kubernetes controllers. + renew-deadline: "40s" + # retry-period is how long the leader election client waits between tries of + # actions; 2 seconds is the value used by core kubernetes controllers. + retry-period: "10s" + # buckets is the number of buckets used to partition key space of each + # Reconciler. If this number is M and the replica number of the controller + # is N, the N replicas will compete for the M buckets. The owner of a + # bucket will take care of the reconciling for the keys partitioned into + # that bucket. + buckets: "1" + kind: ConfigMap + metadata: + labels: + app.kubernetes.io/instance: default + operator.tekton.dev/release: "v0.80.0" + name: tekton-operator-controller-config-leader-election + namespace: tekton-operator + --- + apiVersion: v1 + data: + version: "v0.80.0" + kind: ConfigMap + metadata: + labels: + app.kubernetes.io/instance: default + name: tekton-operator-info + namespace: tekton-operator + --- + apiVersion: v1 + data: + _example: | + ################################ + # # + # EXAMPLE CONFIGURATION # + # # + ################################ + # This block is not actually functional configuration, + # but serves to illustrate the available configuration + # options and document them in a way that is accessible + # to users that `kubectl edit` this config map. + # + # These sample configuration options may be copied out of + # this example block and unindented to be in the data block + # to actually change the configuration. + # lease-duration is how long non-leaders will wait to try to acquire the + # lock; 15 seconds is the value used by core kubernetes controllers. + lease-duration: "60s" + # renew-deadline is how long a leader will try to renew the lease before + # giving up; 10 seconds is the value used by core kubernetes controllers. + renew-deadline: "40s" + # retry-period is how long the leader election client waits between tries of + # actions; 2 seconds is the value used by core kubernetes controllers. + retry-period: "10s" + # buckets is the number of buckets used to partition key space of each + # Reconciler. If this number is M and the replica number of the controller + # is N, the N replicas will compete for the M buckets. The owner of a + # bucket will take care of the reconciling for the keys partitioned into + # that bucket. + buckets: "1" + kind: ConfigMap + metadata: + labels: + app.kubernetes.io/instance: default + operator.tekton.dev/release: "v0.80.0" + name: tekton-operator-webhook-config-leader-election + namespace: tekton-operator + --- + apiVersion: v1 + kind: Secret + metadata: + labels: + app: tekton-operator + name: tekton-operator-webhook + name: tekton-operator-webhook-certs + namespace: tekton-operator + --- + apiVersion: v1 + kind: Service + metadata: + labels: + app: tekton-pipelines-controller + version: "v0.80.0" + name: tekton-operator + namespace: tekton-operator + spec: + ports: + - name: http-metrics + port: 9090 + protocol: TCP + targetPort: 9090 + selector: + app: tekton-operator + name: tekton-operator + --- + apiVersion: v1 + kind: Service + metadata: + labels: + app: tekton-operator + name: tekton-operator-webhook + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tekton-operator-webhook + namespace: tekton-operator + spec: + ports: + - name: https-webhook + port: 443 + targetPort: 8443 + selector: + app: tekton-operator + name: tekton-operator-webhook + --- + apiVersion: apps/v1 + kind: Deployment + metadata: + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tekton-operator + namespace: tekton-operator + spec: + replicas: 1 + selector: + matchLabels: + name: tekton-operator + template: + metadata: + labels: + app: tekton-operator + name: tekton-operator + spec: + containers: + - args: + - -controllers + - tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonresult,tektondashboard,manualapprovalgate,tektonpruner,tektonscheduler,tektonmulticlusterproxyaae,openshiftpipelinesascode + - -unique-process-name + - tekton-operator-lifecycle + env: + - name: KUBERNETES_MIN_VERSION + value: v1.0.0 + - name: SYSTEM_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: OPERATOR_NAME + value: tekton-operator + - name: IMAGE_PIPELINES_PROXY + value: ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.80.0@sha256:2260f9bdf1699253a47e5d2664f70465f1a8c59ad7651cede2469a7586774341 + - name: IMAGE_JOB_PRUNER_TKN + value: ghcr.io/tektoncd/plumbing/tkn@sha256:233de6c8b8583a34c2379fa98d42dba739146c9336e8d41b66030484357481ed + - name: METRICS_DOMAIN + value: tekton.dev/operator + - name: VERSION + value: v0.80.0 + - name: CONFIG_OBSERVABILITY_NAME + value: tekton-config-observability + - name: CONFIG_LEADERELECTION_NAME + value: tekton-operator-controller-config-leader-election + - name: AUTOINSTALL_COMPONENTS + valueFrom: + configMapKeyRef: + key: AUTOINSTALL_COMPONENTS + name: tekton-config-defaults + - name: DEFAULT_TARGET_NAMESPACE + valueFrom: + configMapKeyRef: + key: DEFAULT_TARGET_NAMESPACE + name: tekton-config-defaults + image: ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.80.0@sha256:49f9f258920f77ca9db8031f8ee93b6abef0ff6a1a23254d937fd347601f4853 + imagePullPolicy: IfNotPresent + name: tekton-operator-lifecycle + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault + - args: + - -controllers + - tektoninstallerset + - -unique-process-name + - tekton-operator-cluster-operations + env: + - name: KUBERNETES_MIN_VERSION + value: v1.0.0 + - name: SYSTEM_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: OPERATOR_NAME + value: tekton-operator + - name: PROFILING_PORT + value: "9009" + - name: VERSION + value: v0.80.0 + - name: METRICS_DOMAIN + value: tekton.dev/operator + - name: CONFIG_LEADERELECTION_NAME + value: tekton-operator-controller-config-leader-election + image: ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.80.0@sha256:49f9f258920f77ca9db8031f8ee93b6abef0ff6a1a23254d937fd347601f4853 + imagePullPolicy: IfNotPresent + name: tekton-operator-cluster-operations + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault + serviceAccountName: tekton-operator + --- + apiVersion: apps/v1 + kind: Deployment + metadata: + labels: + operator.tekton.dev/release: "v0.80.0" + version: "v0.80.0" + name: tekton-operator-webhook + namespace: tekton-operator + spec: + replicas: 1 + selector: + matchLabels: + name: tekton-operator-webhook + template: + metadata: + labels: + app: tekton-operator + name: tekton-operator-webhook + spec: + containers: + - env: + - name: KUBERNETES_MIN_VERSION + value: v1.0.0 + - name: SYSTEM_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: WEBHOOK_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: CONFIG_LOGGING_NAME + value: config-logging + - name: CONFIG_LEADERELECTION_NAME + value: tekton-operator-webhook-config-leader-election + - name: WEBHOOK_SERVICE_NAME + value: tekton-operator-webhook + - name: WEBHOOK_SECRET_NAME + value: tekton-operator-webhook-certs + - name: METRICS_DOMAIN + value: tekton.dev/operator + image: ghcr.io/tektoncd/operator/webhook-f2bb711aa8f0c0892856a4cbf6d9ddd8:v0.80.0@sha256:e4ec282861616a364dd8ad02cadec0fdabe26087605852ec85de3b7c084e5c50 + name: tekton-operator-webhook + ports: + - containerPort: 8443 + name: https-webhook + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault + serviceAccountName: tekton-operator + + --- + + + \ No newline at end of file