3367 lines
83 KiB
YAML
3367 lines
83 KiB
YAML
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: tekton-dashboard
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: tekton-pipelines
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
pod-security.kubernetes.io/enforce: restricted
|
|
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: tekton-pipelines-resolvers
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
pod-security.kubernetes.io/enforce: restricted
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
name: clusterinterceptors.triggers.tekton.dev
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
spec:
|
|
group: triggers.tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-triggers
|
|
kind: ClusterInterceptor
|
|
plural: clusterinterceptors
|
|
shortNames:
|
|
- ci
|
|
singular: clusterinterceptor
|
|
scope: Cluster
|
|
versions:
|
|
- name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
pipeline.tekton.dev/release: v0.57.0
|
|
version: v0.57.0
|
|
name: clustertasks.tekton.dev
|
|
spec:
|
|
conversion:
|
|
strategy: Webhook
|
|
webhook:
|
|
clientConfig:
|
|
service:
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
conversionReviewVersions:
|
|
- v1beta1
|
|
group: tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-pipelines
|
|
kind: ClusterTask
|
|
plural: clustertasks
|
|
singular: clustertask
|
|
preserveUnknownFields: false
|
|
scope: Cluster
|
|
versions:
|
|
- name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
name: clustertriggerbindings.triggers.tekton.dev
|
|
spec:
|
|
group: triggers.tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-triggers
|
|
kind: ClusterTriggerBinding
|
|
plural: clustertriggerbindings
|
|
shortNames:
|
|
- ctb
|
|
singular: clustertriggerbinding
|
|
scope: Cluster
|
|
versions:
|
|
- name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
- name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: false
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
pipeline.tekton.dev/release: v0.57.0
|
|
version: v0.57.0
|
|
name: customruns.tekton.dev
|
|
spec:
|
|
group: tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-pipelines
|
|
kind: CustomRun
|
|
plural: customruns
|
|
singular: customrun
|
|
preserveUnknownFields: false
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- jsonPath: .status.conditions[?(@.type=="Succeeded")].status
|
|
name: Succeeded
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=="Succeeded")].reason
|
|
name: Reason
|
|
type: string
|
|
- jsonPath: .status.startTime
|
|
name: StartTime
|
|
type: date
|
|
- jsonPath: .status.completionTime
|
|
name: CompletionTime
|
|
type: date
|
|
name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
name: eventlisteners.triggers.tekton.dev
|
|
spec:
|
|
group: triggers.tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-triggers
|
|
kind: EventListener
|
|
plural: eventlisteners
|
|
shortNames:
|
|
- el
|
|
singular: eventlistener
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- jsonPath: .status.address.url
|
|
name: Address
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=='Available')].status
|
|
name: Available
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=='Available')].reason
|
|
name: Reason
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=='Ready')].status
|
|
name: Ready
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=='Ready')].reason
|
|
name: Reason
|
|
type: string
|
|
name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
- additionalPrinterColumns:
|
|
- jsonPath: .status.address.url
|
|
name: Address
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=='Available')].status
|
|
name: Available
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=='Available')].reason
|
|
name: Reason
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=='Ready')].status
|
|
name: Ready
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=='Ready')].reason
|
|
name: Reason
|
|
type: string
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: false
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: dashboard
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
name: extensions.dashboard.tekton.dev
|
|
spec:
|
|
group: dashboard.tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-dashboard
|
|
kind: Extension
|
|
plural: extensions
|
|
shortNames:
|
|
- ext
|
|
- exts
|
|
preserveUnknownFields: false
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- jsonPath: .spec.apiVersion
|
|
name: API version
|
|
type: string
|
|
- jsonPath: .spec.name
|
|
name: Kind
|
|
type: string
|
|
- jsonPath: .spec.displayname
|
|
name: Display name
|
|
type: string
|
|
- jsonPath: .metadata.creationTimestamp
|
|
name: Age
|
|
type: date
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
name: interceptors.triggers.tekton.dev
|
|
spec:
|
|
group: triggers.tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-triggers
|
|
kind: Interceptor
|
|
plural: interceptors
|
|
shortNames:
|
|
- ni
|
|
singular: interceptor
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
pipeline.tekton.dev/release: v0.57.0
|
|
version: v0.57.0
|
|
name: pipelineruns.tekton.dev
|
|
spec:
|
|
conversion:
|
|
strategy: Webhook
|
|
webhook:
|
|
clientConfig:
|
|
service:
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
conversionReviewVersions:
|
|
- v1beta1
|
|
- v1
|
|
group: tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-pipelines
|
|
kind: PipelineRun
|
|
plural: pipelineruns
|
|
shortNames:
|
|
- pr
|
|
- prs
|
|
singular: pipelinerun
|
|
preserveUnknownFields: false
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- jsonPath: .status.conditions[?(@.type=="Succeeded")].status
|
|
name: Succeeded
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=="Succeeded")].reason
|
|
name: Reason
|
|
type: string
|
|
- jsonPath: .status.startTime
|
|
name: StartTime
|
|
type: date
|
|
- jsonPath: .status.completionTime
|
|
name: CompletionTime
|
|
type: date
|
|
name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: false
|
|
subresources:
|
|
status: {}
|
|
- additionalPrinterColumns:
|
|
- jsonPath: .status.conditions[?(@.type=="Succeeded")].status
|
|
name: Succeeded
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=="Succeeded")].reason
|
|
name: Reason
|
|
type: string
|
|
- jsonPath: .status.startTime
|
|
name: StartTime
|
|
type: date
|
|
- jsonPath: .status.completionTime
|
|
name: CompletionTime
|
|
type: date
|
|
name: v1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
pipeline.tekton.dev/release: v0.57.0
|
|
version: v0.57.0
|
|
name: pipelines.tekton.dev
|
|
spec:
|
|
conversion:
|
|
strategy: Webhook
|
|
webhook:
|
|
clientConfig:
|
|
service:
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
conversionReviewVersions:
|
|
- v1beta1
|
|
- v1
|
|
group: tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-pipelines
|
|
kind: Pipeline
|
|
plural: pipelines
|
|
singular: pipeline
|
|
preserveUnknownFields: false
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: false
|
|
subresources:
|
|
status: {}
|
|
- name: v1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
resolution.tekton.dev/release: devel
|
|
name: resolutionrequests.resolution.tekton.dev
|
|
spec:
|
|
conversion:
|
|
strategy: Webhook
|
|
webhook:
|
|
clientConfig:
|
|
service:
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
conversionReviewVersions:
|
|
- v1alpha1
|
|
- v1beta1
|
|
group: resolution.tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-pipelines
|
|
kind: ResolutionRequest
|
|
plural: resolutionrequests
|
|
shortNames:
|
|
- resolutionrequest
|
|
- resolutionrequests
|
|
singular: resolutionrequest
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- jsonPath: .status.conditions[?(@.type=='Succeeded')].status
|
|
name: Succeeded
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=='Succeeded')].reason
|
|
name: Reason
|
|
type: string
|
|
deprecated: true
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: false
|
|
subresources:
|
|
status: {}
|
|
- additionalPrinterColumns:
|
|
- jsonPath: .metadata.ownerReferences[0].kind
|
|
name: OwnerKind
|
|
type: string
|
|
- jsonPath: .metadata.ownerReferences[0].name
|
|
name: Owner
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=='Succeeded')].status
|
|
name: Succeeded
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=='Succeeded')].reason
|
|
name: Reason
|
|
type: string
|
|
- jsonPath: .metadata.creationTimestamp
|
|
name: StartTime
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=='Succeeded')].lastTransitionTime
|
|
name: EndTime
|
|
type: string
|
|
name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
pipeline.tekton.dev/release: v0.57.0
|
|
version: v0.57.0
|
|
name: stepactions.tekton.dev
|
|
spec:
|
|
group: tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-pipelines
|
|
kind: StepAction
|
|
plural: stepactions
|
|
singular: stepaction
|
|
preserveUnknownFields: false
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
pipeline.tekton.dev/release: v0.57.0
|
|
version: v0.57.0
|
|
name: taskruns.tekton.dev
|
|
spec:
|
|
conversion:
|
|
strategy: Webhook
|
|
webhook:
|
|
clientConfig:
|
|
service:
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
conversionReviewVersions:
|
|
- v1beta1
|
|
- v1
|
|
group: tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-pipelines
|
|
kind: TaskRun
|
|
plural: taskruns
|
|
shortNames:
|
|
- tr
|
|
- trs
|
|
singular: taskrun
|
|
preserveUnknownFields: false
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- jsonPath: .status.conditions[?(@.type=="Succeeded")].status
|
|
name: Succeeded
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=="Succeeded")].reason
|
|
name: Reason
|
|
type: string
|
|
- jsonPath: .status.startTime
|
|
name: StartTime
|
|
type: date
|
|
- jsonPath: .status.completionTime
|
|
name: CompletionTime
|
|
type: date
|
|
name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: false
|
|
subresources:
|
|
status: {}
|
|
- additionalPrinterColumns:
|
|
- jsonPath: .status.conditions[?(@.type=="Succeeded")].status
|
|
name: Succeeded
|
|
type: string
|
|
- jsonPath: .status.conditions[?(@.type=="Succeeded")].reason
|
|
name: Reason
|
|
type: string
|
|
- jsonPath: .status.startTime
|
|
name: StartTime
|
|
type: date
|
|
- jsonPath: .status.completionTime
|
|
name: CompletionTime
|
|
type: date
|
|
name: v1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
pipeline.tekton.dev/release: v0.57.0
|
|
version: v0.57.0
|
|
name: tasks.tekton.dev
|
|
spec:
|
|
conversion:
|
|
strategy: Webhook
|
|
webhook:
|
|
clientConfig:
|
|
service:
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
conversionReviewVersions:
|
|
- v1beta1
|
|
- v1
|
|
group: tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-pipelines
|
|
kind: Task
|
|
plural: tasks
|
|
singular: task
|
|
preserveUnknownFields: false
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: false
|
|
subresources:
|
|
status: {}
|
|
- name: v1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
name: triggerbindings.triggers.tekton.dev
|
|
spec:
|
|
group: triggers.tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-triggers
|
|
kind: TriggerBinding
|
|
plural: triggerbindings
|
|
shortNames:
|
|
- tb
|
|
singular: triggerbinding
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
- name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: false
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
name: triggers.triggers.tekton.dev
|
|
spec:
|
|
group: triggers.tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-triggers
|
|
kind: Trigger
|
|
plural: triggers
|
|
shortNames:
|
|
- tri
|
|
singular: trigger
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
- name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: false
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
name: triggertemplates.triggers.tekton.dev
|
|
spec:
|
|
group: triggers.tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-triggers
|
|
kind: TriggerTemplate
|
|
plural: triggertemplates
|
|
shortNames:
|
|
- tt
|
|
singular: triggertemplate
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
- name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: false
|
|
subresources:
|
|
status: {}
|
|
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
pipeline.tekton.dev/release: v0.57.0
|
|
version: v0.57.0
|
|
name: verificationpolicies.tekton.dev
|
|
spec:
|
|
group: tekton.dev
|
|
names:
|
|
categories:
|
|
- tekton
|
|
- tekton-pipelines
|
|
kind: VerificationPolicy
|
|
plural: verificationpolicies
|
|
singular: verificationpolicy
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
served: true
|
|
storage: true
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-resolvers
|
|
namespace: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: dashboard
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
name: tekton-dashboard
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: events
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-events-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-core-interceptors
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-webhook
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-resolvers-namespace-rbac
|
|
namespace: tekton-pipelines-resolvers
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
- secrets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- coordination.k8s.io
|
|
resources:
|
|
- leases
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
name: tekton-dashboard-info
|
|
namespace: tekton-pipelines
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- dashboard-info
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- get
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-controller
|
|
namespace: tekton-pipelines
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- config-logging
|
|
- config-observability
|
|
- feature-flags
|
|
- config-leader-election-controller
|
|
- config-registry-cert
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- get
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: events
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-events-controller
|
|
namespace: tekton-pipelines
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- config-logging
|
|
- config-observability
|
|
- feature-flags
|
|
- config-leader-election-events
|
|
- config-registry-cert
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- get
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-info
|
|
namespace: tekton-pipelines
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- pipelines-info
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- get
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-leader-election
|
|
namespace: tekton-pipelines
|
|
rules:
|
|
- apiGroups:
|
|
- coordination.k8s.io
|
|
resources:
|
|
- leases
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- config-logging
|
|
- config-observability
|
|
- config-leader-election-webhook
|
|
- feature-flags
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- get
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- webhook-certs
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- get
|
|
- update
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-admin-webhook
|
|
namespace: tekton-pipelines
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-core-interceptors
|
|
namespace: tekton-pipelines
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-info
|
|
namespace: tekton-pipelines
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- triggers-info
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- get
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
|
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
|
name: tekton-aggregate-edit
|
|
rules:
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- tasks
|
|
- taskruns
|
|
- pipelines
|
|
- pipelineruns
|
|
- runs
|
|
- customruns
|
|
- stepactions
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- deletecollection
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
rbac.authorization.k8s.io/aggregate-to-view: "true"
|
|
name: tekton-aggregate-view
|
|
rules:
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- tasks
|
|
- taskruns
|
|
- pipelines
|
|
- pipelineruns
|
|
- runs
|
|
- customruns
|
|
- stepactions
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: dashboard
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
name: tekton-dashboard-backend
|
|
rules:
|
|
- apiGroups:
|
|
- apiextensions.k8s.io
|
|
resources:
|
|
- customresourcedefinitions
|
|
verbs:
|
|
- get
|
|
- list
|
|
- apiGroups:
|
|
- security.openshift.io
|
|
resources:
|
|
- securitycontextconstraints
|
|
verbs:
|
|
- use
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- clustertasks
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- triggers.tekton.dev
|
|
resources:
|
|
- clusterinterceptors
|
|
- clustertriggerbindings
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- serviceaccounts
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- dashboard.tekton.dev
|
|
resources:
|
|
- extensions
|
|
verbs:
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- clustertasks
|
|
verbs:
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- apiGroups:
|
|
- triggers.tekton.dev
|
|
resources:
|
|
- clusterinterceptors
|
|
- clustertriggerbindings
|
|
verbs:
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: tekton-dashboard-cronjobs-extension
|
|
rules:
|
|
- apiGroups:
|
|
- batch
|
|
resources:
|
|
- cronjobs
|
|
verbs:
|
|
- get
|
|
- list
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: dashboard
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
name: tekton-dashboard-tenant
|
|
rules:
|
|
- apiGroups:
|
|
- dashboard.tekton.dev
|
|
resources:
|
|
- extensions
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- events
|
|
- namespaces
|
|
- pods
|
|
- pods/log
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- tasks
|
|
- taskruns
|
|
- pipelines
|
|
- pipelineruns
|
|
- customruns
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- triggers.tekton.dev
|
|
resources:
|
|
- eventlisteners
|
|
- interceptors
|
|
- triggerbindings
|
|
- triggers
|
|
- triggertemplates
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- tasks
|
|
- taskruns
|
|
- pipelines
|
|
- pipelineruns
|
|
- customruns
|
|
verbs:
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- apiGroups:
|
|
- triggers.tekton.dev
|
|
resources:
|
|
- eventlisteners
|
|
- interceptors
|
|
- triggerbindings
|
|
- triggers
|
|
- triggertemplates
|
|
verbs:
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: events
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-events-controller-cluster-access
|
|
rules:
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- tasks
|
|
- clustertasks
|
|
- taskruns
|
|
- pipelines
|
|
- pipelineruns
|
|
- customruns
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-controller-cluster-access
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
verbs:
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- nodes
|
|
verbs:
|
|
- list
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- tasks
|
|
- clustertasks
|
|
- taskruns
|
|
- pipelines
|
|
- pipelineruns
|
|
- customruns
|
|
- stepactions
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- verificationpolicies
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- taskruns/finalizers
|
|
- pipelineruns/finalizers
|
|
- customruns/finalizers
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- tasks/status
|
|
- clustertasks/status
|
|
- taskruns/status
|
|
- pipelines/status
|
|
- pipelineruns/status
|
|
- customruns/status
|
|
- verificationpolicies/status
|
|
- stepactions/status
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
- apiGroups:
|
|
- resolution.tekton.dev
|
|
resources:
|
|
- resolutionrequests
|
|
- resolutionrequests/status
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-controller-tenant-access
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
- persistentvolumeclaims
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- events
|
|
verbs:
|
|
- create
|
|
- update
|
|
- patch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
- limitranges
|
|
- secrets
|
|
- serviceaccounts
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- statefulsets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-resolvers-resolution-request-updates
|
|
rules:
|
|
- apiGroups:
|
|
- resolution.tekton.dev
|
|
resources:
|
|
- resolutionrequests
|
|
- resolutionrequests/status
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- patch
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- tasks
|
|
- pipelines
|
|
verbs:
|
|
- get
|
|
- list
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-webhook-cluster-access
|
|
rules:
|
|
- apiGroups:
|
|
- apiextensions.k8s.io
|
|
resourceNames:
|
|
- pipelines.tekton.dev
|
|
- pipelineruns.tekton.dev
|
|
- tasks.tekton.dev
|
|
- clustertasks.tekton.dev
|
|
- taskruns.tekton.dev
|
|
- resolutionrequests.resolution.tekton.dev
|
|
- customruns.tekton.dev
|
|
- verificationpolicies.tekton.dev
|
|
- stepactions.tekton.dev
|
|
resources:
|
|
- customresourcedefinitions
|
|
- customresourcedefinitions/status
|
|
verbs:
|
|
- get
|
|
- update
|
|
- patch
|
|
- apiGroups:
|
|
- apiextensions.k8s.io
|
|
resources:
|
|
- customresourcedefinitions
|
|
verbs:
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- admissionregistration.k8s.io
|
|
resources:
|
|
- mutatingwebhookconfigurations
|
|
- validatingwebhookconfigurations
|
|
verbs:
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- admissionregistration.k8s.io
|
|
resourceNames:
|
|
- webhook.pipeline.tekton.dev
|
|
resources:
|
|
- mutatingwebhookconfigurations
|
|
verbs:
|
|
- get
|
|
- update
|
|
- delete
|
|
- apiGroups:
|
|
- admissionregistration.k8s.io
|
|
resourceNames:
|
|
- validation.webhook.pipeline.tekton.dev
|
|
- config.webhook.pipeline.tekton.dev
|
|
resources:
|
|
- validatingwebhookconfigurations
|
|
verbs:
|
|
- get
|
|
- update
|
|
- delete
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- tekton-pipelines
|
|
resources:
|
|
- namespaces
|
|
verbs:
|
|
- get
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- tekton-pipelines
|
|
resources:
|
|
- namespaces/finalizers
|
|
verbs:
|
|
- update
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-admin
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
- services
|
|
- events
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- deployments
|
|
- deployments/finalizers
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
- apiGroups:
|
|
- admissionregistration.k8s.io
|
|
resources:
|
|
- mutatingwebhookconfigurations
|
|
- validatingwebhookconfigurations
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
- apiGroups:
|
|
- triggers.tekton.dev
|
|
resources:
|
|
- clustertriggerbindings
|
|
- clusterinterceptors
|
|
- interceptors
|
|
- eventlisteners
|
|
- triggerbindings
|
|
- triggertemplates
|
|
- triggers
|
|
- eventlisteners/finalizers
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
- apiGroups:
|
|
- triggers.tekton.dev
|
|
resources:
|
|
- clustertriggerbindings/status
|
|
- clusterinterceptors/status
|
|
- interceptors/status
|
|
- eventlisteners/status
|
|
- triggerbindings/status
|
|
- triggertemplates/status
|
|
- triggers/status
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
- apiGroups:
|
|
- coordination.k8s.io
|
|
resources:
|
|
- leases
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- patch
|
|
- watch
|
|
- apiGroups:
|
|
- serving.knative.dev
|
|
resources:
|
|
- '*'
|
|
- '*/status'
|
|
- '*/finalizers'
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- delete
|
|
- deletecollection
|
|
- patch
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- tekton-pipelines
|
|
resources:
|
|
- namespaces
|
|
verbs:
|
|
- get
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- tekton-pipelines
|
|
resources:
|
|
- namespaces/finalizers
|
|
verbs:
|
|
- update
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
|
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
|
name: tekton-triggers-aggregate-edit
|
|
rules:
|
|
- apiGroups:
|
|
- triggers.tekton.dev
|
|
resources:
|
|
- clustertriggerbindings
|
|
- clusterinterceptors
|
|
- eventlisteners
|
|
- interceptors
|
|
- triggers
|
|
- triggerbindings
|
|
- triggertemplates
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- deletecollection
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
rbac.authorization.k8s.io/aggregate-to-view: "true"
|
|
name: tekton-triggers-aggregate-view
|
|
rules:
|
|
- apiGroups:
|
|
- triggers.tekton.dev
|
|
resources:
|
|
- clustertriggerbindings
|
|
- clusterinterceptors
|
|
- eventlisteners
|
|
- interceptors
|
|
- triggers
|
|
- triggerbindings
|
|
- triggertemplates
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-core-interceptors
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-core-interceptors-secrets
|
|
rules:
|
|
- apiGroups:
|
|
- triggers.tekton.dev
|
|
resources:
|
|
- clusterinterceptors
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- tekton-triggers-core-interceptors-certs
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-eventlistener-clusterroles
|
|
rules:
|
|
- apiGroups:
|
|
- triggers.tekton.dev
|
|
resources:
|
|
- clustertriggerbindings
|
|
- clusterinterceptors
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-eventlistener-roles
|
|
rules:
|
|
- apiGroups:
|
|
- triggers.tekton.dev
|
|
resources:
|
|
- eventlisteners
|
|
- triggerbindings
|
|
- interceptors
|
|
- triggertemplates
|
|
- triggers
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- tekton.dev
|
|
resources:
|
|
- pipelineruns
|
|
- pipelineresources
|
|
- taskruns
|
|
verbs:
|
|
- create
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- serviceaccounts
|
|
verbs:
|
|
- impersonate
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- events
|
|
verbs:
|
|
- create
|
|
- patch
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-resolvers-namespace-rbac
|
|
namespace: tekton-pipelines-resolvers
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: tekton-pipelines-resolvers-namespace-rbac
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-pipelines-resolvers
|
|
namespace: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
name: tekton-dashboard-info
|
|
namespace: tekton-pipelines
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: tekton-dashboard-info
|
|
subjects:
|
|
- apiGroup: rbac.authorization.k8s.io
|
|
kind: Group
|
|
name: system:authenticated
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: events
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-events-controller-leaderelection
|
|
namespace: tekton-pipelines
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: tekton-pipelines-leader-election
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-events-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-controller
|
|
namespace: tekton-pipelines
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: tekton-pipelines-controller
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-pipelines-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-controller-leaderelection
|
|
namespace: tekton-pipelines
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: tekton-pipelines-leader-election
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-pipelines-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: events
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-events-controller
|
|
namespace: tekton-pipelines
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: tekton-pipelines-events-controller
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-events-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-info
|
|
namespace: tekton-pipelines
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: tekton-pipelines-info
|
|
subjects:
|
|
- apiGroup: rbac.authorization.k8s.io
|
|
kind: Group
|
|
name: system:authenticated
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: tekton-pipelines-webhook
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-webhook-leaderelection
|
|
namespace: tekton-pipelines
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: tekton-pipelines-leader-election
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-core-interceptors
|
|
namespace: tekton-pipelines
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: tekton-triggers-core-interceptors
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-triggers-core-interceptors
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-info
|
|
namespace: tekton-pipelines
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: tekton-triggers-info
|
|
subjects:
|
|
- apiGroup: rbac.authorization.k8s.io
|
|
kind: Group
|
|
name: system:authenticated
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-webhook-admin
|
|
namespace: tekton-pipelines
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: tekton-triggers-admin-webhook
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-triggers-webhook
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: dashboard
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
rbac.dashboard.tekton.dev/subject: tekton-dashboard
|
|
name: tekton-dashboard-backend
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: tekton-dashboard-backend
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-dashboard
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: tekton-dashboard-cronjobs-extension
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: tekton-dashboard-cronjobs-extension
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-dashboard
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: dashboard
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
rbac.dashboard.tekton.dev/subject: tekton-dashboard
|
|
name: tekton-dashboard-tenant
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: tekton-dashboard-tenant
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-dashboard
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: events
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-events-controller-cluster-access
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: tekton-events-controller-cluster-access
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-events-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-controller-cluster-access
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: tekton-pipelines-controller-cluster-access
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-pipelines-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-controller-tenant-access
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: tekton-pipelines-controller-tenant-access
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-pipelines-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-resolvers
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: tekton-pipelines-resolvers-resolution-request-updates
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-pipelines-resolvers
|
|
namespace: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: tekton-pipelines-webhook-cluster-access
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: tekton-pipelines-webhook-cluster-access
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-controller-admin
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: tekton-triggers-admin
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-triggers-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-core-interceptors
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: tekton-triggers-core-interceptors
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-triggers-core-interceptors
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-core-interceptors-secrets
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: tekton-triggers-core-interceptors-secrets
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-triggers-core-interceptors
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: tekton-triggers-webhook-admin
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: tekton-triggers-admin
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-triggers-webhook
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
default-kind: task
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: bundleresolver-config
|
|
namespace: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
allowed-namespaces: ""
|
|
blocked-namespaces: ""
|
|
default-kind: task
|
|
default-namespace: ""
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: cluster-resolver-config
|
|
namespace: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
# lease-duration is how long non-leaders will wait to try to acquire the
|
|
# lock; 15 seconds is the value used by core kubernetes controllers.
|
|
lease-duration: "60s"
|
|
# renew-deadline is how long a leader will try to renew the lease before
|
|
# giving up; 10 seconds is the value used by core kubernetes controllers.
|
|
renew-deadline: "40s"
|
|
# retry-period is how long the leader election client waits between tries of
|
|
# actions; 2 seconds is the value used by core kubernetes controllers.
|
|
retry-period: "10s"
|
|
# buckets is the number of buckets used to partition key space of each
|
|
# Reconciler. If this number is M and the replica number of the controller
|
|
# is N, the N replicas will compete for the M buckets. The owner of a
|
|
# bucket will take care of the reconciling for the keys partitioned into
|
|
# that bucket.
|
|
buckets: "1"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-leader-election-resolvers
|
|
namespace: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
loglevel.controller: info
|
|
loglevel.webhook: info
|
|
zap-logger-config: |
|
|
{
|
|
"level": "info",
|
|
"development": false,
|
|
"sampling": {
|
|
"initial": 100,
|
|
"thereafter": 100
|
|
},
|
|
"outputPaths": ["stdout"],
|
|
"errorOutputPaths": ["stderr"],
|
|
"encoding": "json",
|
|
"encoderConfig": {
|
|
"timeKey": "timestamp",
|
|
"levelKey": "severity",
|
|
"nameKey": "logger",
|
|
"callerKey": "caller",
|
|
"messageKey": "message",
|
|
"stacktraceKey": "stacktrace",
|
|
"lineEnding": "",
|
|
"levelEncoder": "",
|
|
"timeEncoder": "iso8601",
|
|
"durationEncoder": "",
|
|
"callerEncoder": ""
|
|
}
|
|
}
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-logging
|
|
namespace: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
|
|
# metrics.backend-destination field specifies the system metrics destination.
|
|
# It supports either prometheus (the default) or stackdriver.
|
|
# Note: Using stackdriver will incur additional charges
|
|
metrics.backend-destination: prometheus
|
|
|
|
# metrics.request-metrics-backend-destination specifies the request metrics
|
|
# destination. If non-empty, it enables queue proxy to send request metrics.
|
|
# Currently supported values: prometheus, stackdriver.
|
|
metrics.request-metrics-backend-destination: prometheus
|
|
|
|
# metrics.stackdriver-project-id field specifies the stackdriver project ID. This
|
|
# field is optional. When running on GCE, application default credentials will be
|
|
# used if this field is not provided.
|
|
metrics.stackdriver-project-id: "<your stackdriver project id>"
|
|
|
|
# metrics.allow-stackdriver-custom-metrics indicates whether it is allowed to send metrics to
|
|
# Stackdriver using "global" resource type and custom metric type if the
|
|
# metrics are not supported by "knative_revision" resource type. Setting this
|
|
# flag to "true" could cause extra Stackdriver charge.
|
|
# If metrics.backend-destination is not Stackdriver, this is ignored.
|
|
metrics.allow-stackdriver-custom-metrics: "false"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-observability
|
|
namespace: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
api-token-secret-key: ""
|
|
api-token-secret-name: ""
|
|
api-token-secret-namespace: default
|
|
default-org: ""
|
|
default-revision: main
|
|
default-url: https://github.com/tektoncd/catalog.git
|
|
fetch-timeout: 1m
|
|
scm-type: github
|
|
server-url: ""
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: git-resolver-config
|
|
namespace: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
fetch-timeout: 1m
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: http-resolver-config
|
|
namespace: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
default-artifact-hub-pipeline-catalog: tekton-catalog-pipelines
|
|
default-artifact-hub-task-catalog: tekton-catalog-tasks
|
|
default-kind: task
|
|
default-tekton-hub-catalog: Tekton
|
|
default-type: artifact
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: hubresolver-config
|
|
namespace: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
enable-bundles-resolver: "true"
|
|
enable-cluster-resolver: "true"
|
|
enable-git-resolver: "true"
|
|
enable-hub-resolver: "true"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: resolvers-feature-flags
|
|
namespace: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
|
|
# default-timeout-minutes contains the default number of
|
|
# minutes to use for TaskRun and PipelineRun, if none is specified.
|
|
default-timeout-minutes: "60" # 60 minutes
|
|
|
|
# default-service-account contains the default service account name
|
|
# to use for TaskRun and PipelineRun, if none is specified.
|
|
default-service-account: "default"
|
|
|
|
# default-managed-by-label-value contains the default value given to the
|
|
# "app.kubernetes.io/managed-by" label applied to all Pods created for
|
|
# TaskRuns. If a user's requested TaskRun specifies another value for this
|
|
# label, the user's request supercedes.
|
|
default-managed-by-label-value: "tekton-pipelines"
|
|
|
|
# default-pod-template contains the default pod template to use for
|
|
# TaskRun and PipelineRun. If a pod template is specified on the
|
|
# PipelineRun, the default-pod-template is merged with that one.
|
|
# default-pod-template:
|
|
|
|
# default-affinity-assistant-pod-template contains the default pod template
|
|
# to use for affinity assistant pods. If a pod template is specified on the
|
|
# PipelineRun, the default-affinity-assistant-pod-template is merged with
|
|
# that one.
|
|
# default-affinity-assistant-pod-template:
|
|
|
|
# default-cloud-events-sink contains the default CloudEvents sink to be
|
|
# used for TaskRun and PipelineRun, when no sink is specified.
|
|
# Note that right now it is still not possible to set a PipelineRun or
|
|
# TaskRun specific sink, so the default is the only option available.
|
|
# If no sink is specified, no CloudEvent is generated
|
|
# default-cloud-events-sink:
|
|
|
|
# default-task-run-workspace-binding contains the default workspace
|
|
# configuration provided for any Workspaces that a Task declares
|
|
# but that a TaskRun does not explicitly provide.
|
|
# default-task-run-workspace-binding: |
|
|
# emptyDir: {}
|
|
|
|
# default-max-matrix-combinations-count contains the default maximum number
|
|
# of combinations from a Matrix, if none is specified.
|
|
default-max-matrix-combinations-count: "256"
|
|
|
|
# default-forbidden-env contains comma seperated environment variables that cannot be
|
|
# overridden by podTemplate.
|
|
default-forbidden-env:
|
|
|
|
# default-resolver-type contains the default resolver type to be used in the cluster,
|
|
# no default-resolver-type is specified by default
|
|
default-resolver-type:
|
|
|
|
# default-imagepullbackoff-timeout contains the default duration to wait
|
|
# before requeuing the TaskRun to retry, specifying 0 here is equivalent to fail fast
|
|
# possible values could be 1m, 5m, 10s, 1h, etc
|
|
# default-imagepullbackoff-timeout: "5m"
|
|
|
|
# default-container-resource-requirements allow users to update default resource requirements
|
|
# to a init-containers and containers of a pods create by the controller
|
|
# Onet: All the resource requirements are applied to init-containers and containers
|
|
# only if the existing resource requirements are empty.
|
|
# default-container-resource-requirements: |
|
|
# place-scripts: # updates resource requirements of a 'place-scripts' container
|
|
# requests:
|
|
# memory: "64Mi"
|
|
# cpu: "250m"
|
|
# limits:
|
|
# memory: "128Mi"
|
|
# cpu: "500m"
|
|
#
|
|
# prepare: # updates resource requirements of a 'prepare' container
|
|
# requests:
|
|
# memory: "64Mi"
|
|
# cpu: "250m"
|
|
# limits:
|
|
# memory: "256Mi"
|
|
# cpu: "500m"
|
|
#
|
|
# working-dir-initializer: # updates resource requirements of a 'working-dir-initializer' container
|
|
# requests:
|
|
# memory: "64Mi"
|
|
# cpu: "250m"
|
|
# limits:
|
|
# memory: "512Mi"
|
|
# cpu: "500m"
|
|
#
|
|
# prefix-scripts: # updates resource requirements of containers which starts with 'scripts-'
|
|
# requests:
|
|
# memory: "64Mi"
|
|
# cpu: "250m"
|
|
# limits:
|
|
# memory: "128Mi"
|
|
# cpu: "500m"
|
|
#
|
|
# prefix-sidecar-scripts: # updates resource requirements of containers which starts with 'sidecar-scripts-'
|
|
# requests:
|
|
# memory: "64Mi"
|
|
# cpu: "250m"
|
|
# limits:
|
|
# memory: "128Mi"
|
|
# cpu: "500m"
|
|
#
|
|
# default: # updates resource requirements of init-containers and containers which has empty resource resource requirements
|
|
# requests:
|
|
# memory: "64Mi"
|
|
# cpu: "250m"
|
|
# limits:
|
|
# memory: "256Mi"
|
|
# cpu: "500m"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-defaults
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
|
|
# default-service-account contains the default service account name
|
|
# to use for TaskRun and PipelineRun, if none is specified.
|
|
default-service-account: "default"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: config-defaults-triggers
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
|
|
# formats contains a comma seperated list of event formats to be used
|
|
# the only format supported today is "tektonv1". An empty string is not
|
|
# a valid configuration. To disable events, do not specify the sink.
|
|
formats: "tektonv1"
|
|
|
|
# sink contains the event sink to be used for TaskRun, PipelineRun and
|
|
# CustomRun. If no sink is specified, no CloudEvent is generated.
|
|
# This setting supercedes the "default-cloud-events-sink" from the
|
|
# "config-defaults" config map
|
|
sink: "https://events.sink/cdevents"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-events
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
# lease-duration is how long non-leaders will wait to try to acquire the
|
|
# lock; 15 seconds is the value used by core kubernetes controllers.
|
|
lease-duration: "60s"
|
|
# renew-deadline is how long a leader will try to renew the lease before
|
|
# giving up; 10 seconds is the value used by core kubernetes controllers.
|
|
renew-deadline: "40s"
|
|
# retry-period is how long the leader election client waits between tries of
|
|
# actions; 2 seconds is the value used by core kubernetes controllers.
|
|
retry-period: "10s"
|
|
# buckets is the number of buckets used to partition key space of each
|
|
# Reconciler. If this number is M and the replica number of the controller
|
|
# is N, the N replicas will compete for the M buckets. The owner of a
|
|
# bucket will take care of the reconciling for the keys partitioned into
|
|
# that bucket.
|
|
buckets: "1"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-leader-election-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
# lease-duration is how long non-leaders will wait to try to acquire the
|
|
# lock; 15 seconds is the value used by core kubernetes controllers.
|
|
lease-duration: "60s"
|
|
# renew-deadline is how long a leader will try to renew the lease before
|
|
# giving up; 10 seconds is the value used by core kubernetes controllers.
|
|
renew-deadline: "40s"
|
|
# retry-period is how long the leader election client waits between tries of
|
|
# actions; 2 seconds is the value used by core kubernetes controllers.
|
|
retry-period: "10s"
|
|
# buckets is the number of buckets used to partition key space of each
|
|
# Reconciler. If this number is M and the replica number of the controller
|
|
# is N, the N replicas will compete for the M buckets. The owner of a
|
|
# bucket will take care of the reconciling for the keys partitioned into
|
|
# that bucket.
|
|
buckets: "1"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-leader-election-events
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
# lease-duration is how long non-leaders will wait to try to acquire the
|
|
# lock; 15 seconds is the value used by core kubernetes controllers.
|
|
lease-duration: "60s"
|
|
# renew-deadline is how long a leader will try to renew the lease before
|
|
# giving up; 10 seconds is the value used by core kubernetes controllers.
|
|
renew-deadline: "40s"
|
|
# retry-period is how long the leader election client waits between tries of
|
|
# actions; 2 seconds is the value used by core kubernetes controllers.
|
|
retry-period: "10s"
|
|
# buckets is the number of buckets used to partition key space of each
|
|
# Reconciler. If this number is M and the replica number of the controller
|
|
# is N, the N replicas will compete for the M buckets. The owner of a
|
|
# bucket will take care of the reconciling for the keys partitioned into
|
|
# that bucket.
|
|
buckets: "1"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: config-leader-election-triggers-controller
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
# lease-duration is how long non-leaders will wait to try to acquire the
|
|
# lock; 15 seconds is the value used by core kubernetes controllers.
|
|
lease-duration: "60s"
|
|
# renew-deadline is how long a leader will try to renew the lease before
|
|
# giving up; 10 seconds is the value used by core kubernetes controllers.
|
|
renew-deadline: "40s"
|
|
# retry-period is how long the leader election client waits between tries of
|
|
# actions; 2 seconds is the value used by core kubernetes controllers.
|
|
retry-period: "10s"
|
|
# buckets is the number of buckets used to partition key space of each
|
|
# Reconciler. If this number is M and the replica number of the controller
|
|
# is N, the N replicas will compete for the M buckets. The owner of a
|
|
# bucket will take care of the reconciling for the keys partitioned into
|
|
# that bucket.
|
|
buckets: "1"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: config-leader-election-triggers-webhook
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
# lease-duration is how long non-leaders will wait to try to acquire the
|
|
# lock; 15 seconds is the value used by core kubernetes controllers.
|
|
lease-duration: "60s"
|
|
# renew-deadline is how long a leader will try to renew the lease before
|
|
# giving up; 10 seconds is the value used by core kubernetes controllers.
|
|
renew-deadline: "40s"
|
|
# retry-period is how long the leader election client waits between tries of
|
|
# actions; 2 seconds is the value used by core kubernetes controllers.
|
|
retry-period: "10s"
|
|
# buckets is the number of buckets used to partition key space of each
|
|
# Reconciler. If this number is M and the replica number of the controller
|
|
# is N, the N replicas will compete for the M buckets. The owner of a
|
|
# bucket will take care of the reconciling for the keys partitioned into
|
|
# that bucket.
|
|
buckets: "1"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-leader-election-webhook
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
loglevel.controller: info
|
|
loglevel.webhook: info
|
|
zap-logger-config: |
|
|
{
|
|
"level": "info",
|
|
"development": false,
|
|
"sampling": {
|
|
"initial": 100,
|
|
"thereafter": 100
|
|
},
|
|
"outputPaths": ["stdout"],
|
|
"errorOutputPaths": ["stderr"],
|
|
"encoding": "json",
|
|
"encoderConfig": {
|
|
"timeKey": "timestamp",
|
|
"levelKey": "severity",
|
|
"nameKey": "logger",
|
|
"callerKey": "caller",
|
|
"messageKey": "message",
|
|
"stacktraceKey": "stacktrace",
|
|
"lineEnding": "",
|
|
"levelEncoder": "",
|
|
"timeEncoder": "iso8601",
|
|
"durationEncoder": "",
|
|
"callerEncoder": ""
|
|
}
|
|
}
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-logging
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
loglevel.controller: info
|
|
loglevel.eventlistener: info
|
|
loglevel.webhook: info
|
|
zap-logger-config: |
|
|
{
|
|
"level": "info",
|
|
"development": false,
|
|
"disableStacktrace": true,
|
|
"sampling": {
|
|
"initial": 100,
|
|
"thereafter": 100
|
|
},
|
|
"outputPaths": ["stdout"],
|
|
"errorOutputPaths": ["stderr"],
|
|
"encoding": "json",
|
|
"encoderConfig": {
|
|
"timeKey": "timestamp",
|
|
"levelKey": "severity",
|
|
"nameKey": "logger",
|
|
"callerKey": "caller",
|
|
"messageKey": "message",
|
|
"stacktraceKey": "stacktrace",
|
|
"lineEnding": "",
|
|
"levelEncoder": "",
|
|
"timeEncoder": "iso8601",
|
|
"durationEncoder": "",
|
|
"callerEncoder": ""
|
|
}
|
|
}
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: config-logging-triggers
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
|
|
# metrics.backend-destination field specifies the system metrics destination.
|
|
# It supports either prometheus (the default) or stackdriver.
|
|
# Note: Using Stackdriver will incur additional charges.
|
|
metrics.backend-destination: prometheus
|
|
|
|
# metrics.stackdriver-project-id field specifies the Stackdriver project ID. This
|
|
# field is optional. When running on GCE, application default credentials will be
|
|
# used and metrics will be sent to the cluster's project if this field is
|
|
# not provided.
|
|
metrics.stackdriver-project-id: "<your stackdriver project id>"
|
|
|
|
# metrics.allow-stackdriver-custom-metrics indicates whether it is allowed
|
|
# to send metrics to Stackdriver using "global" resource type and custom
|
|
# metric type. Setting this flag to "true" could cause extra Stackdriver
|
|
# charge. If metrics.backend-destination is not Stackdriver, this is
|
|
# ignored.
|
|
metrics.allow-stackdriver-custom-metrics: "false"
|
|
metrics.taskrun.level: "task"
|
|
metrics.taskrun.duration-type: "histogram"
|
|
metrics.pipelinerun.level: "pipeline"
|
|
metrics.pipelinerun.duration-type: "histogram"
|
|
metrics.count.enable-reason: "false"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-observability
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
|
|
# metrics.backend-destination field specifies the system metrics destination.
|
|
# It supports either prometheus (the default) or stackdriver.
|
|
# Note: Using stackdriver will incur additional charges
|
|
metrics.backend-destination: prometheus
|
|
|
|
# metrics.stackdriver-project-id field specifies the stackdriver project ID. This
|
|
# field is optional. When running on GCE, application default credentials will be
|
|
# used if this field is not provided.
|
|
metrics.stackdriver-project-id: "<your stackdriver project id>"
|
|
|
|
# metrics.allow-stackdriver-custom-metrics indicates whether it is allowed to send metrics to
|
|
# Stackdriver using "global" resource type and custom metric type if the
|
|
# metrics are not supported by "knative_revision" resource type. Setting this
|
|
# flag to "true" could cause extra Stackdriver charge.
|
|
# If metrics.backend-destination is not Stackdriver, this is ignored.
|
|
metrics.allow-stackdriver-custom-metrics: "false"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: config-observability-triggers
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-registry-cert
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
#
|
|
# spire-trust-domain specifies the SPIRE trust domain to use.
|
|
# spire-trust-domain: "example.org"
|
|
#
|
|
# spire-socket-path specifies the SPIRE agent socket for SPIFFE workload API.
|
|
# spire-socket-path: "unix:///spiffe-workload-api/spire-agent.sock"
|
|
#
|
|
# spire-server-addr specifies the SPIRE server address for workload/node registration.
|
|
# spire-server-addr: "spire-server.spire.svc.cluster.local:8081"
|
|
#
|
|
# spire-node-alias-prefix specifies the SPIRE node alias prefix to use.
|
|
# spire-node-alias-prefix: "/tekton-node/"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-spire
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
_example: |
|
|
################################
|
|
# #
|
|
# EXAMPLE CONFIGURATION #
|
|
# #
|
|
################################
|
|
# This block is not actually functional configuration,
|
|
# but serves to illustrate the available configuration
|
|
# options and document them in a way that is accessible
|
|
# to users that `kubectl edit` this config map.
|
|
#
|
|
# These sample configuration options may be copied out of
|
|
# this example block and unindented to be in the data block
|
|
# to actually change the configuration.
|
|
#
|
|
# Enable sending traces to defined endpoint by setting this to true
|
|
enabled: "true"
|
|
#
|
|
# API endpoint to send the traces to
|
|
# (optional): The default value is given below
|
|
endpoint: "http://jaeger-collector.jaeger.svc.cluster.local:14268/api/traces"
|
|
# (optional) Name of the k8s secret which contains basic auth credentials
|
|
credentialsSecret: "jaeger-creds"
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: config-tracing
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
version: v0.44.0
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
name: dashboard-info
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
await-sidecar-readiness: "true"
|
|
coschedule: workspaces
|
|
disable-affinity-assistant: "false"
|
|
disable-creds-init: "false"
|
|
enable-api-fields: beta
|
|
enable-cel-in-whenexpression: "false"
|
|
enable-param-enum: "false"
|
|
enable-provenance-in-status: "true"
|
|
enable-step-actions: "false"
|
|
enable-tekton-oci-bundles: "false"
|
|
enforce-nonfalsifiability: none
|
|
keep-pod-on-cancel: "false"
|
|
require-git-ssh-secret-known-hosts: "false"
|
|
results-from: termination-message
|
|
running-in-environment-with-injected-sidecars: "true"
|
|
send-cloudevents-for-runs: "false"
|
|
set-security-context: "false"
|
|
trusted-resources-verification-no-match-policy: ignore
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: feature-flags
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
enable-api-fields: stable
|
|
labels-exclusion-pattern: ""
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: feature-flags-triggers
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
version: v0.57.0
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
name: pipelines-info
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
version: v0.26.1
|
|
kind: ConfigMap
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
name: triggers-info
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: interceptors
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: core-interceptors
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
triggers.tekton.dev/release: v0.26.1
|
|
name: tekton-triggers-core-interceptors-certs
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
triggers.tekton.dev/release: v0.26.1
|
|
name: triggers-webhook-certs
|
|
namespace: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
pipeline.tekton.dev/release: v0.57.0
|
|
name: webhook-certs
|
|
namespace: tekton-pipelines
|