ImageRepository

io.fluxcd.toolkit.image.v1beta2.ImageRepository

ImageRepository is the Schema for the imagerepositories API

apiVersionstring = "image.toolkit.fluxcd.io/v1beta2"APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kindstring = "ImageRepository"Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to.Cannot be updated. In CamelCase.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadataobject
specobjectImageRepositorySpec defines the parameters for scanning an image repository, e.g., `fluxcd/flux`.
accessFromobjectAccessFrom defines an ACL for allowing cross-namespace references to the ImageRepository object based on the caller's namespace labels.
namespaceSelectors[]object requiredNamespaceSelectors is the list of namespace selectors to which this ACL applies. Items in this list are evaluated using a logical OR operation.
matchLabelsmap[string]stringMatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
certSecretRefobjectCertSecretRef can be given the name of a Secret containing either or both of
  • a PEM-encoded client certificate (`tls.crt`) and private
key (`tls.key`);
  • a PEM-encoded CA certificate (`ca.crt`)
and whichever are supplied, will be used for connecting to the registry. The client cert and key are useful if you are authenticating with a certificate; the CA cert is useful if you are using a self-signed server certificate. The Secret must be of type `Opaque` or `kubernetes.io/tls`.Note: Support for the `caFile`, `certFile` and `keyFile` keys has been deprecated.
namestring requiredName of the referent.
exclusionList[]stringExclusionList is a list of regex strings used to exclude certain tags from being stored in the database.
imagestring requiredImage is the name of the image repository
insecurebooleanInsecure allows connecting to a non-TLS HTTP container registry.
intervalstring requiredInterval is the length of time to wait between scans of the image repository.
providerstringThe provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. When not specified, defaults to 'generic'.
proxySecretRefobjectProxySecretRef specifies the Secret containing the proxy configuration to use while communicating with the container registry.
namestring requiredName of the referent.
secretRefobjectSecretRef can be given the name of a secret containing credentials to use for the image registry. The secret should be created with `kubectl create secret docker-registry`, or the equivalent.
namestring requiredName of the referent.
serviceAccountNamestringServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull if the service account has attached pull secrets.
suspendbooleanThis flag tells the controller to suspend subsequent image scans. It does not apply to already started scans. Defaults to false.
timeoutstringTimeout for image scanning. Defaults to 'Interval' duration.
statusobject read-onlyImageRepositoryStatus defines the observed state of ImageRepository
canonicalImageNamestring read-onlyCanonicalName is the name of the image repository with all the implied bits made explicit; e.g., `docker.io/library/alpine` rather than `alpine`.
conditions[]object read-only
lastTransitionTimestring (date-time) required read-onlylastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
messagestring required read-onlymessage is a human readable message indicating details about the transition. This may be an empty string.
observedGenerationinteger (int64) read-onlyobservedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
reasonstring required read-onlyreason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
statusstring required read-onlystatus of the condition, one of True, False, Unknown.
typestring required read-onlytype of condition in CamelCase or in foo.example.com/CamelCase.
lastHandledReconcileAtstring read-onlyLastHandledReconcileAt holds the value of the most recent reconcile request value, so a change of the annotation value can be detected.
lastScanResultobject read-onlyLastScanResult contains the number of fetched tags.
latestTags[]string read-onlyLatestTags is a small sample of the tags found in the last scan. It's the first 10 tags when sorting all the tags in descending alphabetical order.
revisionstring read-onlyRevision is a stable hash of the scanned tags.
scanTimestring (date-time) read-onlyScanTime is the time when the last scan was performed.
tagCountinteger required read-onlyTagCount is the number of tags found in the last scan.
observedExclusionList[]string read-onlyObservedExclusionList is a list of observed exclusion list. It reflects the exclusion rules used for the observed scan result in spec.lastScanResult.
observedGenerationinteger (int64) read-onlyObservedGeneration is the last reconciled generation.