|
18 | 18 | name: v1alpha2 |
19 | 19 | schema: |
20 | 20 | openAPIV3Schema: |
21 | | - description: Auto-generated derived type for OpaClusterSpec via `CustomResource` |
| 21 | + description: An Open Policy Agent (OPA) cluster stacklet. This resource is managed by the Stackable operator for OPA. |
22 | 22 | properties: |
23 | 23 | spec: |
24 | 24 | description: |- |
@@ -303,7 +303,7 @@ spec: |
303 | 303 | type: array |
304 | 304 | type: object |
305 | 305 | secretClass: |
306 | | - description: '[SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) containing the LDAP bind credentials.' |
| 306 | + description: '[SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) providing the requested secrets.' |
307 | 307 | type: string |
308 | 308 | required: |
309 | 309 | - secretClass |
@@ -1158,8 +1158,41 @@ spec: |
1158 | 1158 | default: |
1159 | 1159 | jsonMergePatch: {} |
1160 | 1160 | description: Overrides for the OPA `config.json` file. |
| 1161 | + oneOf: |
| 1162 | + - required: |
| 1163 | + - jsonMergePatch |
| 1164 | + - required: |
| 1165 | + - jsonPatch |
| 1166 | + - required: |
| 1167 | + - userProvided |
| 1168 | + properties: |
| 1169 | + jsonMergePatch: |
| 1170 | + description: |- |
| 1171 | + Can be set to arbitrary YAML content, which is converted to JSON and used as |
| 1172 | + [RFC 7396](https://datatracker.ietf.org/doc/html/rfc7396) JSON merge patch. |
| 1173 | + type: object |
| 1174 | + x-kubernetes-preserve-unknown-fields: true |
| 1175 | + jsonPatch: |
| 1176 | + description: |- |
| 1177 | + An [RFC 6902](https://datatracker.ietf.org/doc/html/rfc6902) JSON patch. |
| 1178 | +
|
| 1179 | + Can be used when more flexibility is needed, e.g. to only modify elements |
| 1180 | + in a list based on a condition. |
| 1181 | +
|
| 1182 | + A patch looks something like |
| 1183 | +
|
| 1184 | + `- {"op": "test", "path": "/0/name", "value": "Andrew"}` |
| 1185 | +
|
| 1186 | + or |
| 1187 | +
|
| 1188 | + `- {"op": "add", "path": "/0/happy", "value": true}` |
| 1189 | + type: object |
| 1190 | + x-kubernetes-preserve-unknown-fields: true |
| 1191 | + userProvided: |
| 1192 | + description: Override the entire config file with the specified JSON value. |
| 1193 | + type: object |
| 1194 | + x-kubernetes-preserve-unknown-fields: true |
1161 | 1195 | type: object |
1162 | | - x-kubernetes-preserve-unknown-fields: true |
1163 | 1196 | type: object |
1164 | 1197 | envOverrides: |
1165 | 1198 | additionalProperties: |
@@ -1719,8 +1752,41 @@ spec: |
1719 | 1752 | default: |
1720 | 1753 | jsonMergePatch: {} |
1721 | 1754 | description: Overrides for the OPA `config.json` file. |
| 1755 | + oneOf: |
| 1756 | + - required: |
| 1757 | + - jsonMergePatch |
| 1758 | + - required: |
| 1759 | + - jsonPatch |
| 1760 | + - required: |
| 1761 | + - userProvided |
| 1762 | + properties: |
| 1763 | + jsonMergePatch: |
| 1764 | + description: |- |
| 1765 | + Can be set to arbitrary YAML content, which is converted to JSON and used as |
| 1766 | + [RFC 7396](https://datatracker.ietf.org/doc/html/rfc7396) JSON merge patch. |
| 1767 | + type: object |
| 1768 | + x-kubernetes-preserve-unknown-fields: true |
| 1769 | + jsonPatch: |
| 1770 | + description: |- |
| 1771 | + An [RFC 6902](https://datatracker.ietf.org/doc/html/rfc6902) JSON patch. |
| 1772 | +
|
| 1773 | + Can be used when more flexibility is needed, e.g. to only modify elements |
| 1774 | + in a list based on a condition. |
| 1775 | +
|
| 1776 | + A patch looks something like |
| 1777 | +
|
| 1778 | + `- {"op": "test", "path": "/0/name", "value": "Andrew"}` |
| 1779 | +
|
| 1780 | + or |
| 1781 | +
|
| 1782 | + `- {"op": "add", "path": "/0/happy", "value": true}` |
| 1783 | + type: object |
| 1784 | + x-kubernetes-preserve-unknown-fields: true |
| 1785 | + userProvided: |
| 1786 | + description: Override the entire config file with the specified JSON value. |
| 1787 | + type: object |
| 1788 | + x-kubernetes-preserve-unknown-fields: true |
1722 | 1789 | type: object |
1723 | | - x-kubernetes-preserve-unknown-fields: true |
1724 | 1790 | type: object |
1725 | 1791 | envOverrides: |
1726 | 1792 | additionalProperties: |
@@ -1752,6 +1818,21 @@ spec: |
1752 | 1818 | nullable: true |
1753 | 1819 | type: integer |
1754 | 1820 | type: object |
| 1821 | + description: |- |
| 1822 | + The set of role groups for this role, keyed by their name. |
| 1823 | +
|
| 1824 | + A role group is a subset of the replicas of a role that share the same configuration, |
| 1825 | + allowing finer-grained control than the role level. This is useful to e.g. schedule groups |
| 1826 | + onto different classes of nodes or into different regions, or to run them with different |
| 1827 | + settings. Configuration set on a role group is merged on top of the role-level `config`, |
| 1828 | + with the more specific role group values taking precedence. |
| 1829 | +
|
| 1830 | + Every role needs at least one role group. A role with a single role group conventionally |
| 1831 | + names it `default`. |
| 1832 | +
|
| 1833 | + Read the |
| 1834 | + [roles and role groups concept documentation](https://docs.stackable.tech/home/nightly/concepts/roles-and-role-groups) |
| 1835 | + for more details. |
1755 | 1836 | type: object |
1756 | 1837 | required: |
1757 | 1838 | - roleGroups |
@@ -1814,7 +1895,7 @@ spec: |
1814 | 1895 | name: v1alpha1 |
1815 | 1896 | schema: |
1816 | 1897 | openAPIV3Schema: |
1817 | | - description: Auto-generated derived type for OpaClusterSpec via `CustomResource` |
| 1898 | + description: An Open Policy Agent (OPA) cluster stacklet. This resource is managed by the Stackable operator for OPA. |
1818 | 1899 | properties: |
1819 | 1900 | spec: |
1820 | 1901 | description: |- |
@@ -2099,7 +2180,7 @@ spec: |
2099 | 2180 | type: array |
2100 | 2181 | type: object |
2101 | 2182 | secretClass: |
2102 | | - description: '[SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) containing the LDAP bind credentials.' |
| 2183 | + description: '[SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) providing the requested secrets.' |
2103 | 2184 | type: string |
2104 | 2185 | required: |
2105 | 2186 | - secretClass |
@@ -2954,8 +3035,41 @@ spec: |
2954 | 3035 | default: |
2955 | 3036 | jsonMergePatch: {} |
2956 | 3037 | description: Overrides for the OPA `config.json` file. |
| 3038 | + oneOf: |
| 3039 | + - required: |
| 3040 | + - jsonMergePatch |
| 3041 | + - required: |
| 3042 | + - jsonPatch |
| 3043 | + - required: |
| 3044 | + - userProvided |
| 3045 | + properties: |
| 3046 | + jsonMergePatch: |
| 3047 | + description: |- |
| 3048 | + Can be set to arbitrary YAML content, which is converted to JSON and used as |
| 3049 | + [RFC 7396](https://datatracker.ietf.org/doc/html/rfc7396) JSON merge patch. |
| 3050 | + type: object |
| 3051 | + x-kubernetes-preserve-unknown-fields: true |
| 3052 | + jsonPatch: |
| 3053 | + description: |- |
| 3054 | + An [RFC 6902](https://datatracker.ietf.org/doc/html/rfc6902) JSON patch. |
| 3055 | +
|
| 3056 | + Can be used when more flexibility is needed, e.g. to only modify elements |
| 3057 | + in a list based on a condition. |
| 3058 | +
|
| 3059 | + A patch looks something like |
| 3060 | +
|
| 3061 | + `- {"op": "test", "path": "/0/name", "value": "Andrew"}` |
| 3062 | +
|
| 3063 | + or |
| 3064 | +
|
| 3065 | + `- {"op": "add", "path": "/0/happy", "value": true}` |
| 3066 | + type: object |
| 3067 | + x-kubernetes-preserve-unknown-fields: true |
| 3068 | + userProvided: |
| 3069 | + description: Override the entire config file with the specified JSON value. |
| 3070 | + type: object |
| 3071 | + x-kubernetes-preserve-unknown-fields: true |
2957 | 3072 | type: object |
2958 | | - x-kubernetes-preserve-unknown-fields: true |
2959 | 3073 | type: object |
2960 | 3074 | envOverrides: |
2961 | 3075 | additionalProperties: |
@@ -3515,8 +3629,41 @@ spec: |
3515 | 3629 | default: |
3516 | 3630 | jsonMergePatch: {} |
3517 | 3631 | description: Overrides for the OPA `config.json` file. |
| 3632 | + oneOf: |
| 3633 | + - required: |
| 3634 | + - jsonMergePatch |
| 3635 | + - required: |
| 3636 | + - jsonPatch |
| 3637 | + - required: |
| 3638 | + - userProvided |
| 3639 | + properties: |
| 3640 | + jsonMergePatch: |
| 3641 | + description: |- |
| 3642 | + Can be set to arbitrary YAML content, which is converted to JSON and used as |
| 3643 | + [RFC 7396](https://datatracker.ietf.org/doc/html/rfc7396) JSON merge patch. |
| 3644 | + type: object |
| 3645 | + x-kubernetes-preserve-unknown-fields: true |
| 3646 | + jsonPatch: |
| 3647 | + description: |- |
| 3648 | + An [RFC 6902](https://datatracker.ietf.org/doc/html/rfc6902) JSON patch. |
| 3649 | +
|
| 3650 | + Can be used when more flexibility is needed, e.g. to only modify elements |
| 3651 | + in a list based on a condition. |
| 3652 | +
|
| 3653 | + A patch looks something like |
| 3654 | +
|
| 3655 | + `- {"op": "test", "path": "/0/name", "value": "Andrew"}` |
| 3656 | +
|
| 3657 | + or |
| 3658 | +
|
| 3659 | + `- {"op": "add", "path": "/0/happy", "value": true}` |
| 3660 | + type: object |
| 3661 | + x-kubernetes-preserve-unknown-fields: true |
| 3662 | + userProvided: |
| 3663 | + description: Override the entire config file with the specified JSON value. |
| 3664 | + type: object |
| 3665 | + x-kubernetes-preserve-unknown-fields: true |
3518 | 3666 | type: object |
3519 | | - x-kubernetes-preserve-unknown-fields: true |
3520 | 3667 | type: object |
3521 | 3668 | envOverrides: |
3522 | 3669 | additionalProperties: |
@@ -3548,6 +3695,21 @@ spec: |
3548 | 3695 | nullable: true |
3549 | 3696 | type: integer |
3550 | 3697 | type: object |
| 3698 | + description: |- |
| 3699 | + The set of role groups for this role, keyed by their name. |
| 3700 | +
|
| 3701 | + A role group is a subset of the replicas of a role that share the same configuration, |
| 3702 | + allowing finer-grained control than the role level. This is useful to e.g. schedule groups |
| 3703 | + onto different classes of nodes or into different regions, or to run them with different |
| 3704 | + settings. Configuration set on a role group is merged on top of the role-level `config`, |
| 3705 | + with the more specific role group values taking precedence. |
| 3706 | +
|
| 3707 | + Every role needs at least one role group. A role with a single role group conventionally |
| 3708 | + names it `default`. |
| 3709 | +
|
| 3710 | + Read the |
| 3711 | + [roles and role groups concept documentation](https://docs.stackable.tech/home/nightly/concepts/roles-and-role-groups) |
| 3712 | + for more details. |
3551 | 3713 | type: object |
3552 | 3714 | required: |
3553 | 3715 | - roleGroups |
|
0 commit comments