TektonChain
operator.tekton.dev / v1alpha1
apiVersion: operator.tekton.dev/v1alpha1
kind: TektonChain
metadata:
name: example
apiVersion
string
APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind
string
Kind is a string value representing the REST resource this object represents.
Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata
object
spec object
TektonChainSpec defines the desired state of TektonChain
artifacts.oci.format
string
oci artifacts config
artifacts.oci.signer
string
artifacts.oci.storage
string
artifacts.pipelinerun.enable-deep-inspection
string
artifacts.pipelinerun.format
string
pipelinerun artifacts config
artifacts.pipelinerun.signer
string
artifacts.pipelinerun.storage
string
artifacts.taskrun.format
string
taskrun artifacts config
artifacts.taskrun.signer
string
artifacts.taskrun.storage
string
builddefinition.buildtype
string
builder.id
string
builder config
config object
Config holds the configuration for resources created by TektonChain
nodeSelector
object
priorityClassName
string
PriorityClassName holds the priority class to be set to pod template
tolerations []object
effect
string
Effect indicates the taint effect to match. Empty means match all taint effects.
When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
key
string
Key is the taint key that the toleration applies to. Empty means match all taint keys.
If the key is empty, operator must be Exists; this combination means to match all values and all keys.
operator
string
Operator represents a key's relationship to the value.
Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal.
Exists is equivalent to wildcard for value, so that a pod can
tolerate all taints of a particular category.
Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators).
tolerationSeconds
integer
TolerationSeconds represents the period of time the toleration (which must be
of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,
it is not set, which means tolerate the taint forever (do not evict). Zero and
negative values will be treated as 0 (evict immediately) by the system.
format:
int64
value
string
Value is the taint value the toleration matches to.
If the operator is Exists, the value should be empty, otherwise just a regular string.
controllerEnvs []object
name
string required
Name of the environment variable.
May consist of any printable ASCII characters except '='.
value
string
Variable references $(VAR_NAME) are expanded
using the previously defined environment variables in the container and
any service environment variables. If a variable cannot be resolved,
the reference in the input string will be unchanged. Double $$ are reduced
to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.
"$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
Escaped references will never be expanded, regardless of whether the variable
exists or not.
Defaults to "".
valueFrom object
Source for the environment variable's value. Cannot be used if value is not empty.
configMapKeyRef object
Selects a key of a ConfigMap.
key
string required
The key to select.
name
string
Name of the referent.
This field is effectively required, but due to backwards compatibility is
allowed to be empty. Instances of this type with an empty value here are
almost certainly wrong.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
optional
boolean
Specify whether the ConfigMap or its key must be defined
fieldRef object
Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`,
spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
apiVersion
string
Version of the schema the FieldPath is written in terms of, defaults to "v1".
fieldPath
string required
Path of the field to select in the specified API version.
fileKeyRef object
FileKeyRef selects a key of the env file.
Requires the EnvFiles feature gate to be enabled.
key
string required
The key within the env file. An invalid key will prevent the pod from starting.
The keys defined within a source may consist of any printable ASCII characters except '='.
During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters.
optional
boolean
Specify whether the file or its key must be defined. If the file or key
does not exist, then the env var is not published.
If optional is set to true and the specified key does not exist,
the environment variable will not be set in the Pod's containers.
If optional is set to false and the specified key does not exist,
an error will be returned during Pod creation.
path
string required
The path within the volume from which to select the file.
Must be relative and may not contain the '..' path or start with '..'.
volumeName
string required
The name of the volume mount containing the env file.
resourceFieldRef object
Selects a resource of the container: only resources limits and requests
(limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
containerName
string
Container name: required for volumes, optional for env vars
divisor
string | integer
Specifies the output format of the exposed resources, defaults to "1"
string pattern:
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
resource
string required
Required: resource to select
secretKeyRef object
Selects a key of a secret in the pod's namespace
key
string required
The key of the secret to select from. Must be a valid secret key.
name
string
Name of the referent.
This field is effectively required, but due to backwards compatibility is
allowed to be empty. Instances of this type with an empty value here are
almost certainly wrong.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
optional
boolean
Specify whether the Secret or its key must be defined
disabled
boolean required
enable or disable chains feature
generateSigningSecret
boolean
generate signing key
options object required
options holds additions fields and these fields will be updated on the manifests
configMaps
object
deployments
object
disabled
boolean
horizontalPodAutoscalers
object
statefulSets
object
webhookConfigurationOptions
object
performance object
PerformanceProperties defines the fields which are configurable
to tune the performance of component controller
buckets
integer
disable-ha
boolean required
if it is true, disables the HA feature
kube-api-burst
integer
kube-api-qps
number
queries per second (QPS) and burst to the master from rest API client
actually the number multiplied by 2
https://github.com/pierretasci/pipeline/blob/05d67e427c722a2a57e58328d7097e21429b7524/cmd/controller/main.go#L85-L87
defaults: https://github.com/tektoncd/pipeline/blob/34618964300620dca44d10a595e4af84e9903a55/vendor/k8s.io/client-go/rest/config.go#L45-L46
replicas
integer
format:
int32
statefulset-ordinals
boolean
if is true, enable StatefulsetOrdinals mode
threads-per-controller
integer
The number of workers to use when processing the component controller's work queue
signers.kms.auth.address
string
signers.kms.auth.oidc.path
string
signers.kms.auth.oidc.role
string
signers.kms.auth.spire.audience
string
signers.kms.auth.spire.sock
string
signers.kms.auth.token
string
signers.kms.auth.token-path
string
signers.kms.kmsref
string
kms signer config
signers.x509.fulcio.address
string
signers.x509.fulcio.enabled
boolean
x509 signer config
signers.x509.fulcio.issuer
string
signers.x509.fulcio.provider
string
signers.x509.identity.token.file
string
signers.x509.tuf.mirror.url
string
storage.docdb.mongo-server-url
string
storage.docdb.mongo-server-url-dir
string
storage.docdb.url
string
storage.gcs.bucket
string
storage configs
storage.grafeas.notehint
string
storage.grafeas.noteid
string
storage.grafeas.projectid
string
storage.oci.repository
string
storage.oci.repository.insecure
boolean
targetNamespace
string
TargetNamespace is where resources will be installed
transparency.enabled
string
transparency.url
string
status object
TektonChainStatus defines the observed state of TektonChain
annotations
object
Annotations is additional Status fields for the Resource to save some
additional State as well as convey more information to the user. This is
roughly akin to Annotations on any k8s resource, just the reconciler conveying
richer information outwards.
conditions []object
Conditions the latest available observations of a resource's current state.
lastTransitionTime
string
LastTransitionTime is the last time the condition transitioned from one status to another.
We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic
differences (all other things held constant).
message
string
A human readable message indicating details about the transition.
reason
string
The reason for the condition's last transition.
severity
string
Severity with which to treat failures of this type of condition.
When this is not specified, it defaults to Error.
status
string required
Status of the condition, one of True, False, Unknown.
type
string required
Type of condition.
observedGeneration
integer
ObservedGeneration is the 'Generation' of the Service that
was last processed by the controller.
format:
int64
tektonInstallerSet
string
The current installer set name for TektonChain
version
string
The version of the installed release
No matches. Try .spec.artifacts.oci.format for an exact path