--- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: annotations: controller-gen.kubebuilder.io/version: v0.22.0 name: terdutteams.terdut.ryuvia.com spec: group: terdut.ryuvia.com names: kind: TerdutTeam listKind: TerdutTeamList plural: terdutteams singular: terdutteam scope: Namespaced versions: - additionalPrinterColumns: - jsonPath: .spec.serverRef.name name: Server type: string - jsonPath: .status.teamID name: TeamID type: integer - jsonPath: .status.conditions[?(@.type=="Ready")].status name: Ready type: string - jsonPath: .status.conditions[?(@.type=="Ready")].reason name: Reason type: string name: v1alpha1 schema: openAPIV3Schema: description: TerdutTeam is the Schema for the terdutteams API properties: apiVersion: description: |- APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources type: string kind: description: |- Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds type: string metadata: type: object spec: description: spec defines the desired state of TerdutTeam properties: deadmanSwitches: description: |- deadmanSwitches are this team's dead man's switches, by name. Switches on the server that are not listed here are removed: in operator mode this list is the whole truth. items: description: |- DeadmanSwitchSpec is one dead man's switch: the absence of an alert matching matcher for longer than timeout opens an incident. properties: matcher: description: |- matcher names the alerts this switch watches, e.g. "alertname=Watchdog,cluster=prod". One matcher per switch. maxLength: 512 minLength: 1 type: string x-kubernetes-validations: - message: 'one matcher per switch: add another entry instead of separating with ;' rule: '!self.contains('';'')' name: description: name identifies the switch within the team. maxLength: 100 minLength: 1 type: string severity: default: critical enum: - critical - error - warning - info type: string timeout: description: timeout is a Go duration string, e.g. "15m". maxLength: 32 pattern: ^([0-9]+(\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$ type: string required: - matcher - name - timeout type: object maxItems: 50 type: array x-kubernetes-list-map-keys: - name x-kubernetes-list-type: map displayName: description: |- displayName is this team's name on the server. It can be changed freely: the team is found by the CR's own identity (/, sent as external_id), not by this name. minLength: 1 type: string escalation: description: |- escalation is this team's escalation ladder. Omitted, the team has none (the server's plain reminder behaviour applies). properties: fallback: description: |- fallback is paged once when the ladder has run out of levels and repeats. Omitted, the chain just ends there. properties: address: description: 'address is where that provider delivers it: an ntfy topic, say.' maxLength: 256 minLength: 1 type: string type: description: |- type is the notification provider, e.g. "ntfy". The server refuses a provider it has not been configured with. maxLength: 32 minLength: 1 type: string required: - address - type type: object levels: items: description: |- EscalationLevel is one rung of the ladder: how long to wait, and who to page if nobody has acknowledged by then. properties: targets: items: description: |- EscalationTarget is one page within a level. username is required iff kind is "user". properties: kind: description: EscalationTargetKind is who one rung of the ladder pages. enum: - oncall - user type: string username: maxLength: 255 type: string required: - kind type: object x-kubernetes-validations: - message: username is required when kind is user rule: self.kind != 'user' || has(self.username) - message: username must not be set when kind is oncall rule: self.kind != 'oncall' || !has(self.username) maxItems: 20 minItems: 1 type: array timeout: description: timeout is a Go duration string, e.g. "5m". maxLength: 32 pattern: ^([0-9]+(\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$ type: string required: - targets - timeout type: object maxItems: 10 minItems: 1 type: array repeatCount: format: int64 maximum: 10 minimum: 0 type: integer required: - levels type: object oidc: description: |- TerdutTeamOIDC binds which identity-provider groups grant membership and ownership of this team (DESIGN.md §4.2). Both empty means no group grants either role here — matches terdut-server's own NULLIF-on-empty-string handling (internal/api/oidc_teams.go). properties: memberGroup: type: string ownerGroup: type: string type: object serverRef: description: serverRef names the TerdutServer this team belongs to. properties: name: minLength: 1 type: string namespace: type: string required: - name type: object required: - displayName - serverRef type: object status: description: status defines the observed state of TerdutTeam properties: conditions: items: description: Condition contains details for one aspect of the current state of this API Resource. properties: lastTransitionTime: description: |- lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time type: string message: description: |- message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 type: string observedGeneration: description: |- observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 type: integer reason: description: |- reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ type: string status: description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown type: string type: description: type of condition in CamelCase or in foo.example.com/CamelCase. maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ type: string required: - lastTransitionTime - message - reason - status - type type: object type: array x-kubernetes-list-map-keys: - type x-kubernetes-list-type: map observedGeneration: format: int64 type: integer teamID: description: |- teamID is the server-side id -- needed by every child object's controller (DESIGN.md §4.2). format: int64 type: integer type: object required: - spec type: object served: true storage: true subresources: status: {}