Receiver.spec
ReceiverSpec defines the desired state of the Receiver.
| Field / Type | Description |
|---|---|
Events specifies the list of event types to handle, e.g. 'push' for GitHub or 'Push Hook' for GitLab. | |
interval | Interval at which to reconcile the Receiver with its Secret references.
|
OIDCProviders specifies the OIDC providers used to authenticate incoming requests when Type is 'generic-oidc'. The provider whose IssuerURL matches the token's 'iss' claim is used to verify the token signature, expiration and audience, and to evaluate the configured CEL validations against the token claims.
| |
resourceFilter | ResourceFilter is a CEL expression expected to return a boolean that is evaluated for each resource referenced in the Resources field when a webhook is received. If the expression returns false then the controller will not request a reconciliation for the resource. The expression can read the resource metadata via 'res' and the webhook request body via 'req'. For generic-oidc receivers, the verified OIDC token claims are also available via 'claims'. When the expression is specified the controller will parse it and mark the object as terminally failed if the expression is invalid or does not return a boolean. |
A list of resources to be notified about changes. | |
SecretRef specifies the Secret containing the token used to validate the payload authenticity. The Secret must contain a 'token' key. For GCR receivers, the Secret must also contain an 'email' key with the IAM service account email configured on the Pub/Sub push subscription, and an 'audience' key with the expected OIDC token audience. Required for all receiver types except 'generic-oidc', which authenticates requests using the OIDC token instead and must not set this field. | |
suspend | Suspend tells the controller to suspend subsequent events handling for this receiver. |
type | Type of webhook sender, used to determine the validation procedure and payload deserialization.
|