flux v2.9.5

OCIRepository.spec

OCIRepositorySpec defines the desired state of OCIRepository

OCIRepository.spec fields and descriptions
Field / Type	Description
certSecretRef `object`	CertSecretRef can be given the name of a Secret containing either or both of - a PEM-encoded client certificate (`tls.crt`) and private key (`tls.key`); - a PEM-encoded CA certificate (`ca.crt`) and whichever are supplied, will be used for connecting to the registry. The client cert and key are useful if you are authenticating with a certificate; the CA cert is useful if you are using a self-signed server certificate. The Secret must be of type `Opaque` or `kubernetes.io/tls`.
ignore `string`	Ignore overrides the set of excluded patterns in the .sourceignore format (which is the same as .gitignore). If not provided, a default will be used, consult the documentation for your version to find out what those are.
insecure `boolean`	Insecure allows connecting to a non-TLS HTTP container registry.
interval `string` required	Interval at which the OCIRepository URL is checked for updates. This interval is approximate and may be subject to jitter to ensure efficient use of resources. `pattern: ^([0-9]+(\.[0-9]+)?(ms\|s\|m\|h))+$`
layerSelector `object`	LayerSelector specifies which layer should be extracted from the OCI artifact. When not specified, the first layer found in the artifact is selected.
provider `string`	The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. When not specified, defaults to 'generic'. `enum: ["generic","aws","azure","gcp"]` `default: "generic"`
proxySecretRef `object`	ProxySecretRef specifies the Secret containing the proxy configuration to use while communicating with the container registry.
ref `object`	The OCI reference to pull and monitor for changes, defaults to the latest tag.
secretRef `object`	SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson.
serviceAccountName `string`	ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull if the service account has attached pull secrets. For more information: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account
suspend `boolean`	This flag tells the controller to suspend the reconciliation of this source.
timeout `string`	The timeout for remote OCI Repository operations like pulling, defaults to 60s. `default: "60s"` `pattern: ^([0-9]+(\.[0-9]+)?(ms\|s\|m))+$`
url `string` required	URL is a reference to an OCI artifact repository hosted on a remote container registry. `pattern: ^oci://.*$`
verify `object`	Verify contains the secret name containing the trusted public keys used to verify the signature and specifies which provider to use to check whether OCI image is authentic.