rancher v2.15.1

ClusterRepo.spec

RepoSec contains details about the Helm repository that needs to be used. More info: kubectl explain clusterrepo.spec

ClusterRepo.spec fields and descriptions
Field / Type	Description
OCIOptions `object`	OCIOptions contains options that are only used when the ClusterRepo points to an OCI registry.
basicAuthSecretName `string`	BasicAuthSecretName is the client secret to be used to connect to the Helm repository.
caBundle `string`	CABundle is a PEM encoded CA bundle which will be used to validate the repo's certificate. If unspecified, system trust roots will be used. `format: byte`
clientSecret `object`	ClientSecret is the client secret to be used when connecting to a Helm repository. The expected secret type is "kubernetes.io/basic-auth" or "kubernetes.io/tls" for HTTP Helm repositories, only "kubernetes.io/basic-auth" for OCI Helm repostories and "kubernetes.io/basic-auth" or "kubernetes.io/ssh-auth" for Github Helm repositories.
defaultImagePullSecrets `object[]`	DefaultImagePullSecrets specifies one or more image pull secrets which will be used by default when deploying charts from this repository. If a chart supports image pull secrets in its values.yaml in an expected path (.Values.ImagePullSecrets, .Values.global.ImagePullSecrets, or .Values.global.cattle.imagePullSecrets) the secrets listed in this field will be automatically copied into the charts release namespace. Additionally, Rancher will inject these secret references into the charts values.yaml if no user provided value is set. Currently, this field is only honored by the "rancher-charts" repository, and can only copy secrets from the cattle-system namespace which have the appropriate labels.
disableSameOriginCheck `boolean`	DisableSameOriginCheck if true attaches the Basic Auth Header to all Helm client API calls regardless of whether the destination of the API call matches the origin of the repository's URL. Defaults to false, which keeps the SameOrigin check enabled. Setting this to true is not recommended in production environments due to the security implications.
enabled `boolean`	If disabled the repo will not be updated and won't pick up new changes.
exponentialBackOffValues `object`	ExponentialBackOffValues are values given to the Rancher manager to handle 429 TOOMANYREQUESTS response code from the OCI registry.
forceUpdate `string`	ForceUpdate will cause the Helm repository index file stored in Rancher to be updated from the Helm repository URL. This means if there are changes in the Helm repository they will be pulled into Rancher manager. `format: date-time`
gitBranch `string`	GitBranch is the git branch where the helm repository is hosted.
gitRepo `string`	GitRepo is the git repo to clone which contains the helm repository.
insecurePlainHttp `boolean`	InsecurePlainHTTP is only valid for OCI URL's and allows insecure connections to registries without enforcing TLS checks.
insecureSkipTLSVerify `boolean`	InsecureSkipTLSverify will disable the TLS verification when downloading the Helm repository's index file. Defaults is false. Enabling this is not recommended for production due to the security implications.
refreshInterval `integer`	RefreshInterval is the interval, in seconds, at which the Helm repository should be refreshed. Default value is 1 hour. Using a negative value disables periodic updates completely.
serviceAccount `string`	ServiceAccount when specified will be used in creating Helm operation pods which in turn run the Helm install or uninstall commands for a chart.
serviceAccountNamespace `string`	ServiceAccountNamespace is the namespace of the service account to use.
url `string`	URL is the HTTP or OCI URL of the helm repository to connect to.