update schemas

Signed-off-by: Charles-Edouard Brétéché <[email protected]>
kyverno · Sep 21, 2023 · f2b5311 · f2b5311
1 parent 765f372
commit f2b5311
Show file tree

Hide file tree

Showing 287 changed files with 31,010 additions and 6,895 deletions.
diff --git a/Makefile b/Makefile
@@ -2,9 +2,9 @@
 # DEFAULTS #
 ############
 
-KIND_IMAGE           ?= kindest/node:v1.26.3
+KIND_IMAGE           ?= kindest/node:v1.28.0
 KIND_NAME            ?= kind
-KYVERNO_VERSION      ?= 1c7d62f9a1d0
+KYVERNO_VERSION      ?= v1.11.0-beta.1
 KOCACHE              ?= /tmp/ko-cache
 USE_CONFIG           ?= standard,no-ingress,in-cluster,all-read-rbac
 KUBECONFIG           ?= ""

diff --git a/schemas/json/_definitions.json b/schemas/json/_definitions.json
diff --git a/schemas/json/admissionreport-kyverno-v1alpha2.json b/schemas/json/admissionreport-kyverno-v1alpha2.json
@@ -33,7 +33,7 @@
       ],
       "properties": {
         "annotations": {
-          "description": "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations",
+          "description": "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations",
           "type": [
             "object",
             "null"
@@ -99,7 +99,7 @@
           "format": "int64"
         },
         "labels": {
-          "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels",
+          "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels",
           "type": [
             "object",
             "null"
@@ -178,14 +178,14 @@
           }
         },
         "name": {
-          "description": "Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names",
+          "description": "Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names",
           "type": [
             "string",
             "null"
           ]
         },
         "namespace": {
-          "description": "Namespace defines the space within which each name must be unique. An empty namespace is equivalent to the \"default\" namespace, but \"default\" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.\n\nMust be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces",
+          "description": "Namespace defines the space within which each name must be unique. An empty namespace is equivalent to the \"default\" namespace, but \"default\" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.\n\nMust be a DNS_LABEL. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces",
           "type": [
             "string",
             "null"
@@ -233,11 +233,11 @@
                 "type": "string"
               },
               "name": {
-                "description": "Name of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#names",
+                "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names",
                 "type": "string"
               },
               "uid": {
-                "description": "UID of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#uids",
+                "description": "UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids",
                 "type": "string"
               }
             },
@@ -261,7 +261,7 @@
           ]
         },
         "uid": {
-          "description": "UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.\n\nPopulated by the system. Read-only. More info: http://kubernetes.io/docs/user-guide/identifiers#uids",
+          "description": "UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.\n\nPopulated by the system. Read-only. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids",
           "type": [
             "string",
             "null"

diff --git a/schemas/json/admissionreportlist-kyverno-v1alpha2.json b/schemas/json/admissionreportlist-kyverno-v1alpha2.json
@@ -1,5 +1,6 @@
 {
   "description": "AdmissionReportList is a list of AdmissionReport",
+  "type": "object",
   "required": [
     "items"
   ],
@@ -58,7 +59,7 @@
             ],
             "properties": {
               "annotations": {
-                "description": "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations",
+                "description": "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations",
                 "type": [
                   "object",
                   "null"
@@ -124,7 +125,7 @@
                 "format": "int64"
               },
               "labels": {
-                "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels",
+                "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels",
                 "type": [
                   "object",
                   "null"
@@ -203,14 +204,14 @@
                 }
               },
               "name": {
-                "description": "Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names",
+                "description": "Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names",
                 "type": [
                   "string",
                   "null"
                 ]
               },
               "namespace": {
-                "description": "Namespace defines the space within which each name must be unique. An empty namespace is equivalent to the \"default\" namespace, but \"default\" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.\n\nMust be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces",
+                "description": "Namespace defines the space within which each name must be unique. An empty namespace is equivalent to the \"default\" namespace, but \"default\" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.\n\nMust be a DNS_LABEL. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces",
                 "type": [
                   "string",
                   "null"
@@ -258,11 +259,11 @@
                       "type": "string"
                     },
                     "name": {
-                      "description": "Name of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#names",
+                      "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names",
                       "type": "string"
                     },
                     "uid": {
-                      "description": "UID of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#uids",
+                      "description": "UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids",
                       "type": "string"
                     }
                   },
@@ -286,7 +287,7 @@
                 ]
               },
               "uid": {
-                "description": "UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.\n\nPopulated by the system. Read-only. More info: http://kubernetes.io/docs/user-guide/identifiers#uids",
+                "description": "UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.\n\nPopulated by the system. Read-only. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids",
                 "type": [
                   "string",
                   "null"
@@ -707,6 +708,5 @@
       "version": "v1alpha2"
     }
   ],
-  "$schema": "http://json-schema.org/schema#",
-  "type": "object"
+  "$schema": "http://json-schema.org/schema#"
 }
diff --git a/schemas/json/affinity-v1.json b/schemas/json/affinity-v1.json
@@ -323,9 +323,7 @@
                           "properties": {
                             "key": {
                               "description": "key is the label key that the selector applies to.",
-                              "type": "string",
-                              "x-kubernetes-patch-merge-key": "key",
-                              "x-kubernetes-patch-strategy": "merge"
+                              "type": "string"
                             },
                             "operator": {
                               "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.",
@@ -389,9 +387,7 @@
                           "properties": {
                             "key": {
                               "description": "key is the label key that the selector applies to.",
-                              "type": "string",
-                              "x-kubernetes-patch-merge-key": "key",
-                              "x-kubernetes-patch-strategy": "merge"
+                              "type": "string"
                             },
                             "operator": {
                               "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.",
@@ -498,9 +494,7 @@
                       "properties": {
                         "key": {
                           "description": "key is the label key that the selector applies to.",
-                          "type": "string",
-                          "x-kubernetes-patch-merge-key": "key",
-                          "x-kubernetes-patch-strategy": "merge"
+                          "type": "string"
                         },
                         "operator": {
                           "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.",
@@ -564,9 +558,7 @@
                       "properties": {
                         "key": {
                           "description": "key is the label key that the selector applies to.",
-                          "type": "string",
-                          "x-kubernetes-patch-merge-key": "key",
-                          "x-kubernetes-patch-strategy": "merge"
+                          "type": "string"
                         },
                         "operator": {
                           "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.",
@@ -683,9 +675,7 @@
                           "properties": {
                             "key": {
                               "description": "key is the label key that the selector applies to.",
-                              "type": "string",
-                              "x-kubernetes-patch-merge-key": "key",
-                              "x-kubernetes-patch-strategy": "merge"
+                              "type": "string"
                             },
                             "operator": {
                               "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.",
@@ -749,9 +739,7 @@
                           "properties": {
                             "key": {
                               "description": "key is the label key that the selector applies to.",
-                              "type": "string",
-                              "x-kubernetes-patch-merge-key": "key",
-                              "x-kubernetes-patch-strategy": "merge"
+                              "type": "string"
                             },
                             "operator": {
                               "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.",
@@ -858,9 +846,7 @@
                       "properties": {
                         "key": {
                           "description": "key is the label key that the selector applies to.",
-                          "type": "string",
-                          "x-kubernetes-patch-merge-key": "key",
-                          "x-kubernetes-patch-strategy": "merge"
+                          "type": "string"
                         },
                         "operator": {
                           "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.",
@@ -924,9 +910,7 @@
                       "properties": {
                         "key": {
                           "description": "key is the label key that the selector applies to.",
-                          "type": "string",
-                          "x-kubernetes-patch-merge-key": "key",
-                          "x-kubernetes-patch-strategy": "merge"
+                          "type": "string"
                         },
                         "operator": {
                           "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.",

diff --git a/schemas/json/aggregationrule-rbac-v1.json b/schemas/json/aggregationrule-rbac-v1.json
@@ -34,9 +34,7 @@
               "properties": {
                 "key": {
                   "description": "key is the label key that the selector applies to.",
-                  "type": "string",
-                  "x-kubernetes-patch-merge-key": "key",
-                  "x-kubernetes-patch-strategy": "merge"
+                  "type": "string"
                 },
                 "operator": {
                   "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.",

diff --git a/schemas/json/all.json b/schemas/json/all.json
@@ -1,5 +1,8 @@
 {
   "oneOf": [
+    {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.admissionregistration.v1.MatchCondition"
+    },
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhook"
     },
@@ -120,6 +123,12 @@
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.authentication.v1.BoundObjectReference"
     },
+    {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.authentication.v1.SelfSubjectReview"
+    },
+    {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.authentication.v1.SelfSubjectReviewStatus"
+    },
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.authentication.v1.TokenRequest"
     },
@@ -432,6 +441,9 @@
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.ContainerPort"
     },
+    {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.ContainerResizePolicy"
+    },
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.ContainerState"
     },
@@ -543,6 +555,9 @@
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.HostAlias"
     },
+    {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.HostIP"
+    },
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.HostPathVolumeSource"
     },
@@ -723,6 +738,9 @@
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.PodResourceClaim"
     },
+    {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.PodResourceClaimStatus"
+    },
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.PodSchedulingGate"
     },
@@ -960,6 +978,9 @@
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.events.v1.EventSeries"
     },
+    {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.flowcontrol.v1beta2.ExemptPriorityLevelConfiguration"
+    },
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.flowcontrol.v1beta2.FlowDistinguisherMethod"
     },
@@ -1026,6 +1047,9 @@
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.flowcontrol.v1beta2.UserSubject"
     },
+    {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.flowcontrol.v1beta3.ExemptPriorityLevelConfiguration"
+    },
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.flowcontrol.v1beta3.FlowDistinguisherMethod"
     },
@@ -1167,9 +1191,6 @@
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.networking.v1.NetworkPolicySpec"
     },
-    {
-      "$ref": "_definitions.json#/definitions/io.k8s.api.networking.v1.NetworkPolicyStatus"
-    },
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.networking.v1.ServiceBackendPort"
     },
@@ -1299,12 +1320,6 @@
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.storage.v1.VolumeNodeResources"
     },
-    {
-      "$ref": "_definitions.json#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity"
-    },
-    {
-      "$ref": "_definitions.json#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacityList"
-    },
     {
       "$ref": "_definitions.json#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceColumnDefinition"
     },
@@ -1545,6 +1560,12 @@
     {
       "$ref": "_definitions.json#/definitions/io.kyverno.v2beta1.Policy"
     },
+    {
+      "$ref": "_definitions.json#/definitions/io.kyverno.v2beta1.PolicyException"
+    },
+    {
+      "$ref": "_definitions.json#/definitions/io.kyverno.v2beta1.PolicyExceptionList"
+    },
     {
       "$ref": "_definitions.json#/definitions/io.kyverno.v2beta1.PolicyList"
     },