add IRSA api

2026-10-09 00:09:43 +00:00 · 2024-05-15 21:58:49 +09:00
parent 811d295b74
commit a3d160c47c
16 changed files with 647 additions and 5 deletions
@@ -0,0 +1,83 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.14.0
+  name: irsas.irsa.kkb0318.github.io
+spec:
+  group: irsa.kkb0318.github.io
+  names:
+    kind: IRSA
+    listKind: IRSAList
+    plural: irsas
+    singular: irsa
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: IRSA is the Schema for the irsas API
+        properties:
+          apiVersion:
+            description: |-
+              APIVersion defines the versioned schema of this representation of an object.
+              Servers should convert recognized schemas to the latest internal value, and
+              may reject unrecognized values.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+            type: string
+          kind:
+            description: |-
+              Kind is a string value representing the REST resource this object represents.
+              Servers may infer this from the endpoint the client submits requests to.
+              Cannot be updated.
+              In CamelCase.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: IRSASpec defines the desired state of IRSA
+            properties:
+              iamPolicies:
+                description: IamPolicies represents the list of IAM policies to be
+                  attached to the IAM role
+                items:
+                  type: string
+                type: array
+              iamRole:
+                description: IamRole represents the IAM role details associated with
+                  the IRSA
+                properties:
+                  create:
+                    description: Create specifies whether to create the IAM role or
+                      not
+                    type: boolean
+                  name:
+                    description: Name represents the name of the IAM role
+                    type: string
+                type: object
+              serviceAccount:
+                description: ServiceAccount represents the Kubernetes service account
+                  associated with the IRSA
+                properties:
+                  name:
+                    description: Name represents the name of the Kubernetes service
+                      account
+                    type: string
+                  namespaces:
+                    description: Namespaces represents the list of namespaces where
+                      the service account is used
+                    items:
+                      type: string
+                    type: array
+                type: object
+            type: object
+          status:
+            description: IRSAStatus defines the observed state of IRSA
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}