Implement addon mechanism (#1867)

* - add: list/enable/disable an addon.

- add: test addon

- add: full flux addon

- fix: flaky test

* try again

* 1. add readme
2. gen demo file

* fix ci

* change name

* try again

Makefile

@@ -146,11 +146,11 @@ docker-push:
 	docker push $(VELA_CORE_IMAGE)
 
 e2e-setup:
-	helm install --create-namespace -n flux-system helm-flux http://oam.dev/catalog/helm-flux2-0.1.0.tgz
 	helm install kruise https://github.com/openkruise/kruise/releases/download/v0.7.0/kruise-chart.tgz
 	sh ./hack/e2e/modify_charts.sh
 	helm upgrade --install --create-namespace --namespace vela-system --set image.pullPolicy=IfNotPresent --set image.repository=vela-core-test --set applicationRevisionLimit=5 --set dependCheckWait=10s --set image.tag=$(GIT_COMMIT) --wait kubevela ./charts/vela-core
 	helm upgrade --install --create-namespace --namespace oam-runtime-system --set image.pullPolicy=IfNotPresent --set image.repository=vela-core-test --set dependCheckWait=10s --set image.tag=$(GIT_COMMIT) --wait oam-runtime ./charts/oam-runtime
+	bin/vela addon enable fluxcd
 	ginkgo version
 	ginkgo -v -r e2e/setup
 	kubectl wait --for=condition=Ready pod -l app.kubernetes.io/name=vela-core,app.kubernetes.io/instance=kubevela -n vela-system --timeout=600s

e2e/addon/addon_suite_test.go

@@ -0,0 +1,29 @@
+/*
+Copyright 2021 The KubeVela Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package e2e
+
+import (
+	"testing"
+
+	"github.com/onsi/ginkgo"
+	"github.com/onsi/gomega"
+)
+
+func TestEnv(t *testing.T) {
+	gomega.RegisterFailHandler(ginkgo.Fail)
+	ginkgo.RunSpecs(t, "Addon Suite")
+}

e2e/addon/addon_test.go

@@ -0,0 +1,114 @@
+/*
+Copyright 2021 The KubeVela Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package e2e
+
+import (
+	"context"
+	"time"
+
+	"github.com/ghodss/yaml"
+	. "github.com/onsi/ginkgo"
+	. "github.com/onsi/gomega"
+	v1 "k8s.io/api/core/v1"
+
+	"github.com/oam-dev/kubevela/e2e"
+	"github.com/oam-dev/kubevela/pkg/oam/util"
+	"github.com/oam-dev/kubevela/pkg/utils/common"
+)
+
+var _ = Describe("Addon Test", func() {
+	args := common.Args{}
+	var cm v1.ConfigMap
+	Context("Prepare test addon", func() {
+		It("apply test addon", func() {
+			Expect(yaml.Unmarshal([]byte(test_addon), &cm)).Should(BeNil())
+			k8sClient, err := args.GetClient()
+			Expect(err).Should(BeNil())
+			err = k8sClient.Create(context.Background(), &cm)
+			Expect(err).Should(SatisfyAny(BeNil(), &util.AlreadyExistMatcher{}))
+		})
+	})
+
+	Context("list addons", func() {
+		It("list all addon", func() {
+			output, err := e2e.Exec("vela addon list")
+			Expect(err).NotTo(HaveOccurred())
+			Expect(output).To(ContainSubstring("test-addon"))
+		})
+	})
+	Context("enable addon", func() {
+		It("enable addon fluxcd", func() {
+			output, err := e2e.Exec("vela addon enable test-addon")
+			Expect(err).NotTo(HaveOccurred())
+			Expect(output).To(ContainSubstring("Successfully enable addon"))
+		})
+	})
+	Context("disable addon", func() {
+		It("disable addon fluxcd", func() {
+			output, err := e2e.LongTimeExec("vela addon disable test-addon", 600*time.Second)
+			Expect(err).NotTo(HaveOccurred())
+			Expect(output).To(ContainSubstring("Successfully disable addon"))
+		})
+	})
+
+	Context("Clean test environment", func() {
+		It("Delete test addon", func() {
+			k8sClient, err := args.GetClient()
+			Expect(err).Should(BeNil())
+			err = k8sClient.Delete(context.Background(), &cm)
+			Expect(err).Should(BeNil())
+		})
+	})
+
+})
+
+var test_addon = `
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  annotations:
+    addons.oam.dev/description: This is a addon for e2e test
+  labels:
+    addons.oam.dev/type: test-addon
+  name: test-addon
+  namespace: vela-system
+data:
+  initializer: |
+    apiVersion: core.oam.dev/v1beta1
+    kind: Initializer
+    metadata:
+      annotations:
+        addons.oam.dev/description: This is a addon for e2e test
+      name: test-addon
+      namespace: test-addon-system
+    spec:
+      appTemplate:
+        spec:
+          components:
+            - name: test-addon-pod
+              type: raw
+              properties:
+                apiVersion: v1
+                kind: Pod
+                metadata:
+                  name: test-addon-pod
+                  namespace: test-addon-system
+                spec:
+                  containers:
+                    - name: test-addon-pod-container
+                      image: nginx
+`

e2e/capability/capability_test.go

@@ -54,7 +54,7 @@ var (
 	}
 )
 
-// TODO: chagne this into a mock UT to avoid remote call.
+// TODO: change this into a mock UT to avoid remote call.
 
 var _ = ginkgo.Describe("Capability", func() {
 	ginkgo.Context("capability center", func() {

references/cli/addon.go

@@ -0,0 +1,417 @@
+/*
+Copyright 2021 The KubeVela Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package cli
+
+import (
+	"context"
+	"fmt"
+	"time"
+
+	"github.com/gosuri/uitable"
+	"github.com/pkg/errors"
+	"github.com/spf13/cobra"
+	v1 "k8s.io/api/core/v1"
+	errors2 "k8s.io/apimachinery/pkg/api/errors"
+	"k8s.io/apimachinery/pkg/api/meta"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
+	"k8s.io/apimachinery/pkg/runtime/schema"
+	"k8s.io/apimachinery/pkg/runtime/serializer/yaml"
+	types2 "k8s.io/apimachinery/pkg/types"
+	"k8s.io/client-go/dynamic"
+	"sigs.k8s.io/controller-runtime/pkg/client"
+
+	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1beta1"
+	"github.com/oam-dev/kubevela/apis/types"
+	"github.com/oam-dev/kubevela/pkg/oam/discoverymapper"
+	"github.com/oam-dev/kubevela/pkg/utils/apply"
+	"github.com/oam-dev/kubevela/pkg/utils/common"
+	cmdutil "github.com/oam-dev/kubevela/pkg/utils/util"
+)
+
+const (
+	// DescAnnotation records the description of addon
+	DescAnnotation = "addons.oam.dev/description"
+
+	// MarkLabel is annotation key marks configMap as an addon
+	MarkLabel = "addons.oam.dev/type"
+)
+
+var statusUninstalled = "uninstalled"
+var statusInstalled = "installed"
+var clt client.Client
+var clientArgs common.Args
+
+func init() {
+	clientArgs, _ = common.InitBaseRestConfig()
+	clt, _ = clientArgs.GetClient()
+}
+
+// NewAddonCommand create `addon` command
+func NewAddonCommand(c common.Args, ioStreams cmdutil.IOStreams) *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   "addon",
+		Short: "List and get addon in KubeVela",
+		Long:  "List and get addon in KubeVela",
+		Annotations: map[string]string{
+			types.TagCommandType: types.TypeSystem,
+		},
+	}
+	cmd.AddCommand(
+		NewAddonListCommand(),
+		NewAddonEnableCommand(ioStreams),
+		NewAddonDisableCommand(ioStreams),
+	)
+	return cmd
+}
+
+// NewAddonListCommand create addon list command
+func NewAddonListCommand() *cobra.Command {
+	return &cobra.Command{
+		Use:   "list",
+		Short: "List addons",
+		Long:  "List addons in KubeVela",
+		RunE: func(cmd *cobra.Command, args []string) error {
+			err := listAddons()
+			if err != nil {
+				return err
+			}
+			return nil
+		},
+	}
+}
+
+// NewAddonEnableCommand create addon enable command
+func NewAddonEnableCommand(ioStream cmdutil.IOStreams) *cobra.Command {
+	return &cobra.Command{
+		Use:     "enable",
+		Short:   "enable an addon",
+		Long:    "enable an addon in cluster",
+		Example: "vela addon enable <addon-name>",
+		RunE: func(cmd *cobra.Command, args []string) error {
+			if len(args) < 1 {
+				_, err := ioStream.Out.Write([]byte("Must specify addon name"))
+				if err != nil {
+					return err
+				}
+			}
+			name := args[0]
+			err := enableAddon(name)
+			if err != nil {
+				return err
+			}
+			return nil
+		},
+	}
+}
+
+// NewAddonDisableCommand create addon disable command
+func NewAddonDisableCommand(ioStream cmdutil.IOStreams) *cobra.Command {
+	return &cobra.Command{
+		Use:     "disable",
+		Short:   "disable an addon",
+		Long:    "disable an addon in cluster",
+		Example: "vela addon disable <addon-name>",
+		RunE: func(cmd *cobra.Command, args []string) error {
+			if len(args) < 1 {
+				_, err := ioStream.Out.Write([]byte("Must specify addon name"))
+				if err != nil {
+					return err
+				}
+			}
+			name := args[0]
+			err := disableAddon(name)
+			if err != nil {
+				return err
+			}
+			return nil
+		},
+	}
+}
+
+func listAddons() error {
+	repo, err := NewAddonRepo()
+	if err != nil {
+		return err
+	}
+	addons := repo.listAddons()
+	table := uitable.New()
+	table.AddRow("NAME", "DESCRIPTION", "STATUS", "IN-NAMESPACE")
+	for _, addon := range addons {
+		table.AddRow(addon.name, addon.description, addon.getStatus(), addon.addonNamespace)
+	}
+	fmt.Println(table.String())
+	return nil
+}
+
+func enableAddon(name string) error {
+	repo, err := NewAddonRepo()
+	if err != nil {
+		return err
+	}
+	addon, err := repo.getAddon(name)
+	if err != nil {
+		return err
+	}
+	err = addon.enable()
+	if err != nil {
+		return err
+	}
+	fmt.Printf("Successfully enable addon:%s\n", addon.name)
+	return nil
+}
+
+func disableAddon(name string) error {
+	repo, err := NewAddonRepo()
+	if err != nil {
+		return err
+	}
+	addon, err := repo.getAddon(name)
+	if err != nil {
+		return err
+	}
+	if addon.getStatus() == statusUninstalled {
+		fmt.Printf("Addon %s is not installed\n", addon.name)
+		return nil
+	}
+	err = addon.disable()
+	if err != nil {
+		return err
+	}
+	fmt.Printf("Successfully disable addon:%s\n", addon.name)
+	return nil
+}
+func newAddon(data *v1.ConfigMap) *Addon {
+	description := data.ObjectMeta.Annotations[DescAnnotation]
+	a := Addon{name: data.Name, description: description, initYaml: data.Data["initializer"]}
+	init, _ := a.getInitializer()
+	a.addonNamespace = init.GetNamespace()
+	return &a
+}
+
+// AddonRepo is a place to store addon info
+type AddonRepo interface {
+	getAddon(name string) (Addon, error)
+	listAddons() []Addon
+}
+
+// NewAddonRepo create new addon repo,now only support ConfigMap
+func NewAddonRepo() (AddonRepo, error) {
+	list := v1.ConfigMapList{}
+	matchLabels := metav1.LabelSelector{
+		MatchExpressions: []metav1.LabelSelectorRequirement{{
+			Key:      MarkLabel,
+			Operator: metav1.LabelSelectorOpExists,
+		}},
+	}
+	selector, err := metav1.LabelSelectorAsSelector(&matchLabels)
+	if err != nil {
+		return nil, err
+	}
+	err = clt.List(context.Background(), &list, &client.ListOptions{LabelSelector: selector})
+	if err != nil {
+		return nil, errors.Wrap(err, "Get addon list failed")
+	}
+	return configMapAddonRepo{maps: list.Items}, nil
+}
+
+type configMapAddonRepo struct {
+	maps []v1.ConfigMap
+}
+
+func (c configMapAddonRepo) getAddon(name string) (Addon, error) {
+	for i := range c.maps {
+		if c.maps[i].Name == name {
+			return *newAddon(&c.maps[i]), nil
+		}
+	}
+	return Addon{}, fmt.Errorf("addon: %s not found", name)
+}
+
+func (c configMapAddonRepo) listAddons() []Addon {
+	var addons []Addon
+	for i := range c.maps {
+		addon := newAddon(&c.maps[i])
+		addons = append(addons, *addon)
+	}
+	return addons
+}
+
+// Addon consist of a Initializer resource to enable an addon
+type Addon struct {
+	name           string
+	addonNamespace string // addonNamespace is where Initializer will be apply
+	description    string
+	initYaml       string
+	initializer    *unstructured.Unstructured
+	gvk            *schema.GroupVersionKind
+}
+
+func (a *Addon) getGVK() (*schema.GroupVersionKind, error) {
+	if a.gvk == nil {
+		if a.initializer == nil {
+			_, err := a.getInitializer()
+			if err != nil {
+				return nil, err
+			}
+		}
+		gvk := schema.FromAPIVersionAndKind(a.initializer.GetAPIVersion(), a.initializer.GetKind())
+		a.gvk = &gvk
+	}
+	return a.gvk, nil
+}
+
+func (a *Addon) getInitializer() (*unstructured.Unstructured, error) {
+	if a.initializer == nil {
+		res := a.initYaml
+		obj := &unstructured.Unstructured{}
+		dec := yaml.NewDecodingSerializer(unstructured.UnstructuredJSONScheme)
+		_, gvk, err := dec.Decode([]byte(res), nil, obj)
+		if err != nil {
+			return nil, err
+		}
+		a.initializer = obj
+		a.gvk = gvk
+	}
+	return a.initializer, nil
+}
+
+func (a *Addon) enable() error {
+	applicator := apply.NewAPIApplicator(clt)
+	ctx := context.Background()
+	obj, err := a.getInitializer()
+	if err != nil {
+		return err
+	}
+	var ns v1.Namespace
+	err = clt.Get(ctx, types2.NamespacedName{Name: obj.GetNamespace()}, &ns)
+	if err != nil && errors2.IsNotFound(err) {
+		fmt.Printf("Creating namespace: %s\n", obj.GetNamespace())
+		err = clt.Create(ctx, &v1.Namespace{
+			ObjectMeta: metav1.ObjectMeta{
+				Name: obj.GetNamespace(),
+			},
+		})
+	}
+	if err != nil {
+		return errors.Wrap(err, "Create namespace error")
+	}
+	err = applicator.Apply(ctx, obj)
+	// TODO Initializer should provide status so that enable addon is truly enabled.
+	if err != nil {
+		return errors.Wrapf(err, "Error occurs when enableing addon: %s\n", a.name)
+	}
+	return nil
+}
+
+func (a *Addon) disable() error {
+	dynamicClient, err := dynamic.NewForConfig(clientArgs.Config)
+	namespaceToDelete := make(map[string]bool)
+	if err != nil {
+		return err
+	}
+	mapper, err := discoverymapper.New(clientArgs.Config)
+	if err != nil {
+		return err
+	}
+	obj, err := a.getInitializer()
+	if err != nil {
+		return err
+	}
+	gvk, err := a.getGVK()
+	if err != nil {
+		return err
+	}
+	mapping, err := mapper.RESTMapping(gvk.GroupKind(), gvk.Version)
+	if err != nil {
+		return err
+	}
+	var resourceREST dynamic.ResourceInterface
+	if mapping.Scope.Name() == meta.RESTScopeNameNamespace {
+		// namespaced resources should specify the namespace
+		resourceREST = dynamicClient.Resource(mapping.Resource).Namespace(obj.GetNamespace())
+	} else {
+		// for cluster-wide resources
+		resourceREST = dynamicClient.Resource(mapping.Resource)
+	}
+	deletePolicy := metav1.DeletePropagationForeground
+	deleteOptions := metav1.DeleteOptions{
+		PropagationPolicy: &deletePolicy,
+	}
+	fmt.Println("Deleting all resources...")
+	err = resourceREST.Delete(context.TODO(), obj.GetName(), deleteOptions)
+	if err != nil {
+		return err
+	}
+	namespaceToDelete[obj.GetNamespace()] = true
+
+	for ns := range namespaceToDelete {
+		fmt.Printf("Deleting namespace: %s...\n", ns)
+		err = clt.Delete(context.Background(), &v1.Namespace{
+			ObjectMeta: metav1.ObjectMeta{
+				Name: ns,
+			},
+		})
+		if err != nil {
+			return errors.Wrap(err, "Delete namespace error")
+		}
+		err = waitDisableByNs(ns, 600)
+		if err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func (a *Addon) getStatus() string {
+	var initializer v1beta1.Initializer
+	err := clt.Get(context.Background(), client.ObjectKey{
+		Namespace: a.addonNamespace,
+		Name:      a.name,
+	}, &initializer)
+	if err != nil {
+		return statusUninstalled
+	}
+	return statusInstalled
+}
+
+// waitDisableByNs will wait until namespace is deleted or timeout
+func waitDisableByNs(namespace string, timeout int) error {
+	ctx := context.Background()
+	done := make(chan struct{}, 1)
+
+	go func(ctx context.Context) {
+		var ns v1.Namespace
+		for {
+			err := clt.Get(ctx, types2.NamespacedName{Name: namespace}, &ns)
+			if err != nil && errors2.IsNotFound(err) {
+				break
+			}
+			time.Sleep(1 * time.Second)
+		}
+		done <- struct{}{}
+	}(ctx)
+
+	select {
+	case <-done:
+		fmt.Printf("Namespace %s successfully deleted\n", namespace)
+		return nil
+	case <-time.After(time.Duration(timeout) * time.Second):
+		return fmt.Errorf("namespace %s is still terminating", namespace)
+	}
+
+}

references/cli/cli.go

@@ -92,6 +92,9 @@ func NewCommand() *cobra.Command {
 		NewComponentsCommand(commandArgs, ioStream),
 		NewWorkloadsCommand(commandArgs, ioStream),
 
+		// Addons
+		NewAddonCommand(commandArgs, ioStream),
+
 		// Helper
 		SystemCommandGroup(commandArgs, ioStream),
 		NewDashboardCommand(commandArgs, ioStream, fake.FrontendSource),

test/e2e-test/app_revision_clean_up_test.go

@@ -180,7 +180,10 @@ var _ = Describe("Test application controller clean up appRevision", func() {
 		app := getApp(appName, namespace, "normal-worker")
 		metav1.SetMetaDataAnnotation(&app.ObjectMeta, oam.AnnotationAppRollout, "true")
 		metav1.SetMetaDataAnnotation(&app.ObjectMeta, oam.AnnotationRollingComponent, "comp1")
-		Expect(k8sClient.Create(ctx, app)).Should(BeNil())
+		Eventually(func() error {
+			err := k8sClient.Create(ctx, app)
+			return err
+		}, 15*time.Second, 300*time.Millisecond).Should(BeNil())
 		checkApp := new(v1beta1.Application)
 		for i := 0; i < appRevisionLimit; i++ {
 			Eventually(func() error {

test/e2e-test/appctx_compatibility_test.go

@@ -63,7 +63,6 @@ var _ = Describe("Test compatibility for deprecation of appContext", func() {
 
 	AfterEach(func() {
 		Expect(k8sClient.Delete(ctx, &ns)).Should(Succeed())
-		Expect(k8sClient.DeleteAllOf(ctx, &v1beta1.ResourceTracker{})).Should(Succeed())
 		Expect(k8sClient.DeleteAllOf(ctx, &corev1.PersistentVolume{})).Should(Succeed())
 	})
 

test/e2e-test/definition_revision_test.go

@@ -435,7 +435,7 @@ var _ = Describe("Test application of the specified definition version", func()
 			}
 			By("Verify patch trait is applied")
 			templateLabels := deploy.GetLabels()
-			return templateLabels["hello"] != "world"
+			return templateLabels["hello"] == "world"
 		}, 120*time.Second, 10*time.Second).Should(BeTrue())
 
 		app = v1beta1.Application{

test/e2e-test/helm_app_test.go

@@ -315,7 +315,7 @@ var _ = Describe("Test application containing helm module", func() {
 		}, 240*time.Second, 5*time.Second).Should(Succeed())
 	})
 
-	It("Test deploy an application containing helm module and the componet refer to autodetect type worklaod", func() {
+	It("Test deploy an application containing helm module and the componet refer to autodetect type workload", func() {
 		cd := v1beta1.ComponentDefinition{}
 		cd.SetName("podinfo")
 		cd.SetNamespace(namespace)

vela-templates/README.md

@@ -1,6 +1,32 @@
-This is the sole place to hold built-in CUE templates for Vela Core and Registry.
+This is the stole place for
 
-To update definitions in charts and registry, run:
-```
-./vela-templates/gen_definitions.sh
-```
+1. Hold built-in CUE templates for Vela Core and Registry. `registry` and `internal` store these templates
+   
+   To update definitions in charts and registry, run:
+   
+   ```shell
+   ./vela-templates/gen_definitions.sh
+   ```
+2. Hold built in addon templates.
+   
+   `addons` stores these templates. Each one directory of `addons` represent an addon. For one addon, the directory like:
+   
+   ```shell
+   example-addon
+   ├── definitions # component defs can be use after this addon was enabled
+   │   └── example-def.yaml
+   ├── resource # resources to generate Initializer
+   │   ├── some-resources-dir
+   │   └── other-resources-dir
+   └── template.yaml # fixed filename
+   ```
+   
+   To generate addon, run
+   
+   ```shell
+    go run ./vela-templates/gen_addons.go --addons-path=./vela-templates/addons --store-path=./charts/vela-core/templates/addons 
+   ```
+   
+   This will generate
+      1. `charts/vela-core/addons/example-addon.yaml` (only Initializer)
+      2. `vela-templates/addons/demo/example-addon.yaml` (Initializer and ComponentDefinition)

vela-templates/addons/fluxcd/definitions/kustomize.yaml

@@ -0,0 +1,52 @@
+apiVersion: core.oam.dev/v1beta1
+kind: ComponentDefinition
+metadata:
+  name: kustomize
+  namespace: vela-system
+  annotations:
+    definition.oam.dev/description: "kustomize can fetching, building, updating and applying Kustomize manifests from git repo."
+spec:
+  workload:
+    type: autodetects.core.oam.dev
+  schematic:
+    cue:
+      template: |
+        output: {
+        	apiVersion: "source.toolkit.fluxcd.io/v1beta1"
+        	kind:       "GitRepository"
+        	metadata: {
+        		name: context.name
+        	}
+        	spec: {
+        		interval: parameter.pull_interval
+        		url:      parameter.repo_url
+        		ref: branch: parameter.branch
+        	}
+        }
+        outputs: kustomize: {
+        	apiVersion: "kustomize.toolkit.fluxcd.io/v1beta1"
+        	kind:       "Kustomization"
+        	metadata: {
+        		name: context.name
+        	}
+        	spec: {
+        		interval: parameter.pull_interval
+        		sourceRef: {
+        			kind: "GitRepository"
+        			name: context.name
+        		}
+        		path:       parameter.path
+        		prune:      true
+        		validation: "client"
+        	}
+        }
+        parameter: {
+        	//+usage=The repository URL, can be a HTTP/S or SSH address.
+        	repo_url: string
+        	//+usage=The interval at which to check for repository updates.
+        	pull_interval: *"1m" | string
+        	//+usage=The Git reference to checkout and monitor for changes, defaults to master branch.
+        	branch: *"master" | string
+        	//+usage=Path to the directory containing the kustomization.yaml file, or the set of plain YAMLs a kustomization.yaml should be generated for.
+        	path: string
+        }

vela-templates/addons/fluxcd/resource/cluster-role/controller-role-binding.yaml

@@ -1,18 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: crd-controller-role-binding
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: crd-controller
-subjects:
-  - kind: ServiceAccount
-    name: kustomize-controller-serviceaccount
-    namespace: vela-system
-  - kind: ServiceAccount
-    name: helm-controller-serviceaccount
-    namespace: vela-system
-  - kind: ServiceAccount
-    name: source-controller-serviceaccount
-    namespace: vela-system

vela-templates/addons/fluxcd/resource/cluster-role/helm-controller-serviceaccount.yaml

@@ -1,5 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: helm-controller-serviceaccount
-  namespace: vela-system

vela-templates/addons/fluxcd/resource/cluster-role/kustomize-controller-serviceaccount.yaml

@@ -1,5 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: kustomize-controller-serviceaccount
-  namespace: vela-system

vela-templates/addons/fluxcd/resource/cluster-role/source-controller-serviceaccount.yaml

@@ -1,5 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: source-controller-serviceaccount
-  namespace: vela-system

vela-templates/addons/fluxcd/resource/crds/alert.yaml

@@ -0,0 +1,200 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.5.0
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: alerts.notification.toolkit.fluxcd.io
+spec:
+  group: notification.toolkit.fluxcd.io
+  names:
+    kind: Alert
+    listKind: AlertList
+    plural: alerts
+    singular: alert
+  scope: Namespaced
+  versions:
+    - additionalPrinterColumns:
+        - jsonPath: .status.conditions[?(@.type=="Ready")].status
+          name: Ready
+          type: string
+        - jsonPath: .status.conditions[?(@.type=="Ready")].message
+          name: Status
+          type: string
+        - jsonPath: .metadata.creationTimestamp
+          name: Age
+          type: date
+      name: v1beta1
+      schema:
+        openAPIV3Schema:
+          description: Alert is the Schema for the alerts API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: AlertSpec defines an alerting rule for events involving a
+                list of objects
+              properties:
+                eventSeverity:
+                  default: info
+                  description: Filter events based on severity, defaults to ('info').
+                    If set to 'info' no events will be filtered.
+                  enum:
+                    - info
+                    - error
+                  type: string
+                eventSources:
+                  description: Filter events based on the involved objects.
+                  items:
+                    description: CrossNamespaceObjectReference contains enough information
+                      to let you locate the typed referenced object at cluster level
+                    properties:
+                      apiVersion:
+                        description: API version of the referent
+                        type: string
+                      kind:
+                        description: Kind of the referent
+                        enum:
+                          - Bucket
+                          - GitRepository
+                          - Kustomization
+                          - HelmRelease
+                          - HelmChart
+                          - HelmRepository
+                          - ImageRepository
+                          - ImagePolicy
+                          - ImageUpdateAutomation
+                        type: string
+                      name:
+                        description: Name of the referent
+                        maxLength: 53
+                        minLength: 1
+                        type: string
+                      namespace:
+                        description: Namespace of the referent
+                        maxLength: 53
+                        minLength: 1
+                        type: string
+                    required:
+                      - name
+                    type: object
+                  type: array
+                exclusionList:
+                  description: A list of Golang regular expressions to be used for excluding
+                    messages.
+                  items:
+                    type: string
+                  type: array
+                providerRef:
+                  description: Send events using this provider.
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                summary:
+                  description: Short description of the impact and affected cluster.
+                  type: string
+                suspend:
+                  description: This flag tells the controller to suspend subsequent
+                    events dispatching. Defaults to false.
+                  type: boolean
+              required:
+                - eventSources
+                - providerRef
+              type: object
+            status:
+              description: AlertStatus defines the observed state of Alert
+              properties:
+                conditions:
+                  items:
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
+                    properties:
+                      lastTransitionTime:
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
+                        format: date-time
+                        type: string
+                      message:
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
+                        maxLength: 32768
+                        type: string
+                      observedGeneration:
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
+                        format: int64
+                        minimum: 0
+                        type: integer
+                      reason:
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
+                        maxLength: 1024
+                        minLength: 1
+                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                        type: string
+                      status:
+                        description: status of the condition, one of True, False, Unknown.
+                        enum:
+                          - "True"
+                          - "False"
+                          - Unknown
+                        type: string
+                      type:
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        maxLength: 316
+                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                        type: string
+                    required:
+                      - lastTransitionTime
+                      - message
+                      - reason
+                      - status
+                      - type
+                    type: object
+                  type: array
+                observedGeneration:
+                  description: ObservedGeneration is the last observed generation.
+                  format: int64
+                  type: integer
+              type: object
+          type: object
+      served: true
+      storage: true
+      subresources:
+        status: {}

vela-templates/addons/fluxcd/resource/crds/bucket.yaml

@@ -2,10 +2,9 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.4.1
-  creationTimestamp: null
+    controller-gen.kubebuilder.io/version: v0.5.0
   labels:
-    app.kubernetes.io/instance: vela-system
+    app.kubernetes.io/instance: flux-system
   name: buckets.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -35,15 +34,20 @@ spec:
           description: Bucket is the Schema for the buckets API
           properties:
             apiVersion:
-              description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources"
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
               type: string
             kind:
-              description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
               type: string
             metadata:
               type: object
             spec:
-              description: BucketSpec defines the desired state of an S3 compatible bucket
+              description: BucketSpec defines the desired state of an S3 compatible
+                bucket
               properties:
                 bucketName:
                   description: The bucket name.
@@ -52,7 +56,10 @@ spec:
                   description: The bucket endpoint address.
                   type: string
                 ignore:
-                  description: Ignore overrides the set of excluded patterns in the .sourceignore format (which is the same as .gitignore). If not provided, a default will be used, consult the documentation for your version to find out what those are.
+                  description: Ignore overrides the set of excluded patterns in the
+                    .sourceignore format (which is the same as .gitignore). If not provided,
+                    a default will be used, consult the documentation for your version
+                    to find out what those are.
                   type: string
                 insecure:
                   description: Insecure allows connecting to a non-TLS S3 HTTP endpoint.
@@ -71,7 +78,8 @@ spec:
                   description: The bucket region.
                   type: string
                 secretRef:
-                  description: The name of the secret containing authentication credentials for the Bucket.
+                  description: The name of the secret containing authentication credentials
+                    for the Bucket.
                   properties:
                     name:
                       description: Name of the referent
@@ -80,7 +88,8 @@ spec:
                     - name
                   type: object
                 suspend:
-                  description: This flag tells the controller to suspend the reconciliation of this source.
+                  description: This flag tells the controller to suspend the reconciliation
+                    of this source.
                   type: boolean
                 timeout:
                   default: 20s
@@ -95,20 +104,24 @@ spec:
               description: BucketStatus defines the observed state of a bucket
               properties:
                 artifact:
-                  description: Artifact represents the output of the last successful Bucket sync.
+                  description: Artifact represents the output of the last successful
+                    Bucket sync.
                   properties:
                     checksum:
                       description: Checksum is the SHA1 checksum of the artifact.
                       type: string
                     lastUpdateTime:
-                      description: LastUpdateTime is the timestamp corresponding to the last update of this artifact.
+                      description: LastUpdateTime is the timestamp corresponding to
+                        the last update of this artifact.
                       format: date-time
                       type: string
                     path:
                       description: Path is the relative file path of this artifact.
                       type: string
                     revision:
-                      description: Revision is a human readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm chart version, etc.
+                      description: Revision is a human readable identifier traceable
+                        in the origin source system. It can be a Git commit SHA, Git
+                        tag, a Helm index timestamp, a Helm chart version, etc.
                       type: string
                     url:
                       description: URL is the HTTP address of this artifact.
@@ -120,23 +133,45 @@ spec:
                 conditions:
                   description: Conditions holds the conditions for the Bucket.
                   items:
-                    description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions.  For example, type FooStatus struct{     // Represents the observations of a foo's current state.     // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type     // +patchStrategy=merge     // +listType=map     // +listMapKey=type     Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n     // other fields }"
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
                     properties:
                       lastTransitionTime:
-                        description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
                         format: date-time
                         type: string
                       message:
-                        description: message is a human readable message indicating details about the transition. This may be an empty string.
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
                         maxLength: 32768
                         type: string
                       observedGeneration:
-                        description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
                         format: int64
                         minimum: 0
                         type: integer
                       reason:
-                        description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
                         maxLength: 1024
                         minLength: 1
                         pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -149,7 +184,11 @@ spec:
                           - Unknown
                         type: string
                       type:
-                        description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
                         maxLength: 316
                         pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                         type: string
@@ -162,14 +201,16 @@ spec:
                     type: object
                   type: array
                 lastHandledReconcileAt:
-                  description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change can be detected.
+                  description: LastHandledReconcileAt holds the value of the most recent
+                    reconcile request value, so a change can be detected.
                   type: string
                 observedGeneration:
                   description: ObservedGeneration is the last observed generation.
                   format: int64
                   type: integer
                 url:
-                  description: URL is the download link for the artifact output of the last Bucket sync.
+                  description: URL is the download link for the artifact output of the
+                    last Bucket sync.
                   type: string
               type: object
           type: object
@@ -177,9 +218,3 @@ spec:
       storage: true
       subresources:
         status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []

vela-templates/addons/fluxcd/resource/crds/git-repo.yaml

@@ -2,10 +2,9 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.4.1
-  creationTimestamp: null
+    controller-gen.kubebuilder.io/version: v0.5.0
   labels:
-    app.kubernetes.io/instance: vela-system
+    app.kubernetes.io/instance: flux-system
   name: gitrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -13,6 +12,8 @@ spec:
     kind: GitRepository
     listKind: GitRepositoryList
     plural: gitrepositories
+    shortNames:
+      - gitrepo
     singular: gitrepository
   scope: Namespaced
   versions:
@@ -35,10 +36,14 @@ spec:
           description: GitRepository is the Schema for the gitrepositories API
           properties:
             apiVersion:
-              description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources"
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
               type: string
             kind:
-              description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
               type: string
             metadata:
               type: object
@@ -47,36 +52,78 @@ spec:
               properties:
                 gitImplementation:
                   default: go-git
-                  description: Determines which git client library to use. Defaults to go-git, valid values are ('go-git', 'libgit2').
+                  description: Determines which git client library to use. Defaults
+                    to go-git, valid values are ('go-git', 'libgit2').
                   enum:
                     - go-git
                     - libgit2
                   type: string
                 ignore:
-                  description: Ignore overrides the set of excluded patterns in the .sourceignore format (which is the same as .gitignore). If not provided, a default will be used, consult the documentation for your version to find out what those are.
+                  description: Ignore overrides the set of excluded patterns in the
+                    .sourceignore format (which is the same as .gitignore). If not provided,
+                    a default will be used, consult the documentation for your version
+                    to find out what those are.
                   type: string
+                include:
+                  description: Extra git repositories to map into the repository
+                  items:
+                    description: GitRepositoryInclude defines a source with a from and
+                      to path.
+                    properties:
+                      fromPath:
+                        description: The path to copy contents from, defaults to the
+                          root directory.
+                        type: string
+                      repository:
+                        description: Reference to a GitRepository to include.
+                        properties:
+                          name:
+                            description: Name of the referent
+                            type: string
+                        required:
+                          - name
+                        type: object
+                      toPath:
+                        description: The path to copy contents to, defaults to the name
+                          of the source ref.
+                        type: string
+                    required:
+                      - repository
+                    type: object
+                  type: array
                 interval:
                   description: The interval at which to check for repository updates.
                   type: string
+                recurseSubmodules:
+                  description: When enabled, after the clone is created, initializes
+                    all submodules within, using their default settings. This option
+                    is available only when using the 'go-git' GitImplementation.
+                  type: boolean
                 ref:
-                  description: The Git reference to checkout and monitor for changes, defaults to master branch.
+                  description: The Git reference to checkout and monitor for changes,
+                    defaults to master branch.
                   properties:
                     branch:
                       default: master
                       description: The Git branch to checkout, defaults to master.
                       type: string
                     commit:
-                      description: The Git commit SHA to checkout, if specified Tag filters will be ignored.
+                      description: The Git commit SHA to checkout, if specified Tag
+                        filters will be ignored.
                       type: string
                     semver:
-                      description: The Git tag semver expression, takes precedence over Tag.
+                      description: The Git tag semver expression, takes precedence over
+                        Tag.
                       type: string
                     tag:
                       description: The Git tag to checkout, takes precedence over Branch.
                       type: string
                   type: object
                 secretRef:
-                  description: The secret name containing the Git credentials. For HTTPS repositories the secret must contain username and password fields. For SSH repositories the secret must contain identity, identity.pub and known_hosts fields.
+                  description: The secret name containing the Git credentials. For HTTPS
+                    repositories the secret must contain username and password fields.
+                    For SSH repositories the secret must contain identity, identity.pub
+                    and known_hosts fields.
                   properties:
                     name:
                       description: Name of the referent
@@ -85,26 +132,31 @@ spec:
                     - name
                   type: object
                 suspend:
-                  description: This flag tells the controller to suspend the reconciliation of this source.
+                  description: This flag tells the controller to suspend the reconciliation
+                    of this source.
                   type: boolean
                 timeout:
                   default: 20s
-                  description: The timeout for remote Git operations like cloning, defaults to 20s.
+                  description: The timeout for remote Git operations like cloning, defaults
+                    to 20s.
                   type: string
                 url:
                   description: The repository URL, can be a HTTP/S or SSH address.
                   pattern: ^(http|https|ssh)://
                   type: string
                 verify:
-                  description: Verify OpenPGP signature for the Git commit HEAD points to.
+                  description: Verify OpenPGP signature for the Git commit HEAD points
+                    to.
                   properties:
                     mode:
-                      description: Mode describes what git object should be verified, currently ('head').
+                      description: Mode describes what git object should be verified,
+                        currently ('head').
                       enum:
                         - head
                       type: string
                     secretRef:
-                      description: The secret name containing the public keys of all trusted Git authors.
+                      description: The secret name containing the public keys of all
+                        trusted Git authors.
                       properties:
                         name:
                           description: Name of the referent
@@ -123,20 +175,24 @@ spec:
               description: GitRepositoryStatus defines the observed state of a Git repository.
               properties:
                 artifact:
-                  description: Artifact represents the output of the last successful repository sync.
+                  description: Artifact represents the output of the last successful
+                    repository sync.
                   properties:
                     checksum:
                       description: Checksum is the SHA1 checksum of the artifact.
                       type: string
                     lastUpdateTime:
-                      description: LastUpdateTime is the timestamp corresponding to the last update of this artifact.
+                      description: LastUpdateTime is the timestamp corresponding to
+                        the last update of this artifact.
                       format: date-time
                       type: string
                     path:
                       description: Path is the relative file path of this artifact.
                       type: string
                     revision:
-                      description: Revision is a human readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm chart version, etc.
+                      description: Revision is a human readable identifier traceable
+                        in the origin source system. It can be a Git commit SHA, Git
+                        tag, a Helm index timestamp, a Helm chart version, etc.
                       type: string
                     url:
                       description: URL is the HTTP address of this artifact.
@@ -148,23 +204,45 @@ spec:
                 conditions:
                   description: Conditions holds the conditions for the GitRepository.
                   items:
-                    description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions.  For example, type FooStatus struct{     // Represents the observations of a foo's current state.     // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type     // +patchStrategy=merge     // +listType=map     // +listMapKey=type     Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n     // other fields }"
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
                     properties:
                       lastTransitionTime:
-                        description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
                         format: date-time
                         type: string
                       message:
-                        description: message is a human readable message indicating details about the transition. This may be an empty string.
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
                         maxLength: 32768
                         type: string
                       observedGeneration:
-                        description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
                         format: int64
                         minimum: 0
                         type: integer
                       reason:
-                        description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
                         maxLength: 1024
                         minLength: 1
                         pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -177,7 +255,11 @@ spec:
                           - Unknown
                         type: string
                       type:
-                        description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
                         maxLength: 316
                         pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                         type: string
@@ -189,25 +271,51 @@ spec:
                       - type
                     type: object
                   type: array
+                includedArtifacts:
+                  description: IncludedArtifacts represents the included artifacts from
+                    the last successful repository sync.
+                  items:
+                    description: Artifact represents the output of a source synchronisation.
+                    properties:
+                      checksum:
+                        description: Checksum is the SHA1 checksum of the artifact.
+                        type: string
+                      lastUpdateTime:
+                        description: LastUpdateTime is the timestamp corresponding to
+                          the last update of this artifact.
+                        format: date-time
+                        type: string
+                      path:
+                        description: Path is the relative file path of this artifact.
+                        type: string
+                      revision:
+                        description: Revision is a human readable identifier traceable
+                          in the origin source system. It can be a Git commit SHA, Git
+                          tag, a Helm index timestamp, a Helm chart version, etc.
+                        type: string
+                      url:
+                        description: URL is the HTTP address of this artifact.
+                        type: string
+                    required:
+                      - path
+                      - url
+                    type: object
+                  type: array
                 lastHandledReconcileAt:
-                  description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change can be detected.
+                  description: LastHandledReconcileAt holds the value of the most recent
+                    reconcile request value, so a change can be detected.
                   type: string
                 observedGeneration:
                   description: ObservedGeneration is the last observed generation.
                   format: int64
                   type: integer
                 url:
-                  description: URL is the download link for the artifact output of the last repository sync.
+                  description: URL is the download link for the artifact output of the
+                    last repository sync.
                   type: string
               type: object
           type: object
       served: true
       storage: true
       subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
+        status: {}

vela-templates/addons/fluxcd/resource/crds/helm-chart.yaml

@@ -2,10 +2,9 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.4.1
-  creationTimestamp: null
+    controller-gen.kubebuilder.io/version: v0.5.0
   labels:
-    app.kubernetes.io/instance: vela-system
+    app.kubernetes.io/instance: flux-system
   name: helmcharts.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -13,6 +12,8 @@ spec:
     kind: HelmChart
     listKind: HelmChartList
     plural: helmcharts
+    shortNames:
+      - hc
     singular: helmchart
   scope: Namespaced
   versions:
@@ -44,10 +45,14 @@ spec:
           description: HelmChart is the Schema for the helmcharts API
           properties:
             apiVersion:
-              description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources"
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
               type: string
             kind:
-              description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
               type: string
             metadata:
               type: object
@@ -55,7 +60,8 @@ spec:
               description: HelmChartSpec defines the desired state of a Helm chart.
               properties:
                 chart:
-                  description: The name or path the Helm chart is available at in the SourceRef.
+                  description: The name or path the Helm chart is available at in the
+                    SourceRef.
                   type: string
                 interval:
                   description: The interval at which to check the Source for updates.
@@ -67,7 +73,8 @@ spec:
                       description: APIVersion of the referent.
                       type: string
                     kind:
-                      description: Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 'Bucket').
+                      description: Kind of the referent, valid values are ('HelmRepository',
+                        'GitRepository', 'Bucket').
                       enum:
                         - HelmRepository
                         - GitRepository
@@ -81,14 +88,28 @@ spec:
                     - name
                   type: object
                 suspend:
-                  description: This flag tells the controller to suspend the reconciliation of this source.
+                  description: This flag tells the controller to suspend the reconciliation
+                    of this source.
                   type: boolean
                 valuesFile:
-                  description: Alternative values file to use as the default chart values, expected to be a relative path in the SourceRef. Ignored when omitted.
+                  description: Alternative values file to use as the default chart values,
+                    expected to be a relative path in the SourceRef. Deprecated in favor
+                    of ValuesFiles, for backwards compatibility the file defined here
+                    is merged before the ValuesFiles items. Ignored when omitted.
                   type: string
+                valuesFiles:
+                  description: Alternative list of values files to use as the chart
+                    values (values.yaml is not included by default), expected to be
+                    a relative path in the SourceRef. Values files are merged in the
+                    order of this list with the last file overriding the first. Ignored
+                    when omitted.
+                  items:
+                    type: string
+                  type: array
                 version:
-                  default: "*"
-                  description: The chart version semver expression, ignored for charts from GitRepository and Bucket sources. Defaults to latest when omitted.
+                  default: '*'
+                  description: The chart version semver expression, ignored for charts
+                    from GitRepository and Bucket sources. Defaults to latest when omitted.
                   type: string
               required:
                 - chart
@@ -99,20 +120,24 @@ spec:
               description: HelmChartStatus defines the observed state of the HelmChart.
               properties:
                 artifact:
-                  description: Artifact represents the output of the last successful chart sync.
+                  description: Artifact represents the output of the last successful
+                    chart sync.
                   properties:
                     checksum:
                       description: Checksum is the SHA1 checksum of the artifact.
                       type: string
                     lastUpdateTime:
-                      description: LastUpdateTime is the timestamp corresponding to the last update of this artifact.
+                      description: LastUpdateTime is the timestamp corresponding to
+                        the last update of this artifact.
                       format: date-time
                       type: string
                     path:
                       description: Path is the relative file path of this artifact.
                       type: string
                     revision:
-                      description: Revision is a human readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm chart version, etc.
+                      description: Revision is a human readable identifier traceable
+                        in the origin source system. It can be a Git commit SHA, Git
+                        tag, a Helm index timestamp, a Helm chart version, etc.
                       type: string
                     url:
                       description: URL is the HTTP address of this artifact.
@@ -124,23 +149,45 @@ spec:
                 conditions:
                   description: Conditions holds the conditions for the HelmChart.
                   items:
-                    description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions.  For example, type FooStatus struct{     // Represents the observations of a foo's current state.     // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type     // +patchStrategy=merge     // +listType=map     // +listMapKey=type     Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n     // other fields }"
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
                     properties:
                       lastTransitionTime:
-                        description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
                         format: date-time
                         type: string
                       message:
-                        description: message is a human readable message indicating details about the transition. This may be an empty string.
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
                         maxLength: 32768
                         type: string
                       observedGeneration:
-                        description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
                         format: int64
                         minimum: 0
                         type: integer
                       reason:
-                        description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
                         maxLength: 1024
                         minLength: 1
                         pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -153,7 +200,11 @@ spec:
                           - Unknown
                         type: string
                       type:
-                        description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
                         maxLength: 316
                         pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                         type: string
@@ -166,7 +217,8 @@ spec:
                     type: object
                   type: array
                 lastHandledReconcileAt:
-                  description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change can be detected.
+                  description: LastHandledReconcileAt holds the value of the most recent
+                    reconcile request value, so a change can be detected.
                   type: string
                 observedGeneration:
                   description: ObservedGeneration is the last observed generation.
@@ -181,9 +233,3 @@ spec:
       storage: true
       subresources:
         status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []

vela-templates/addons/fluxcd/resource/crds/helm-release.yaml

@@ -2,10 +2,9 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.4.1
-  creationTimestamp: null
+    controller-gen.kubebuilder.io/version: v0.5.0
   labels:
-    app.kubernetes.io/instance: vela-system
+    app.kubernetes.io/instance: flux-system
   name: helmreleases.helm.toolkit.fluxcd.io
 spec:
   group: helm.toolkit.fluxcd.io
@@ -34,10 +33,14 @@ spec:
           description: HelmRelease is the Schema for the helmreleases API
           properties:
             apiVersion:
-              description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources"
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
               type: string
             kind:
-              description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
               type: string
             metadata:
               type: object
@@ -45,19 +48,24 @@ spec:
               description: HelmReleaseSpec defines the desired state of a Helm release.
               properties:
                 chart:
-                  description: Chart defines the template of the v1beta1.HelmChart that should be created for this HelmRelease.
+                  description: Chart defines the template of the v1beta1.HelmChart that
+                    should be created for this HelmRelease.
                   properties:
                     spec:
-                      description: Spec holds the template for the v1beta1.HelmChartSpec for this HelmRelease.
+                      description: Spec holds the template for the v1beta1.HelmChartSpec
+                        for this HelmRelease.
                       properties:
                         chart:
-                          description: The name or path the Helm chart is available at in the SourceRef.
+                          description: The name or path the Helm chart is available
+                            at in the SourceRef.
                           type: string
                         interval:
-                          description: Interval at which to check the v1beta1.Source for updates. Defaults to 'HelmReleaseSpec.Interval'.
+                          description: Interval at which to check the v1beta1.Source
+                            for updates. Defaults to 'HelmReleaseSpec.Interval'.
                           type: string
                         sourceRef:
-                          description: The name and namespace of the v1beta1.Source the chart is available at.
+                          description: The name and namespace of the v1beta1.Source
+                            the chart is available at.
                           properties:
                             apiVersion:
                               description: APIVersion of the referent.
@@ -83,11 +91,26 @@ spec:
                             - name
                           type: object
                         valuesFile:
-                          description: Alternative values file to use as the default chart values, expected to be a relative path in the SourceRef. Ignored when omitted.
+                          description: Alternative values file to use as the default
+                            chart values, expected to be a relative path in the SourceRef.
+                            Deprecated in favor of ValuesFiles, for backwards compatibility
+                            the file defined here is merged before the ValuesFiles items.
+                            Ignored when omitted.
                           type: string
+                        valuesFiles:
+                          description: Alternative list of values files to use as the
+                            chart values (values.yaml is not included by default), expected
+                            to be a relative path in the SourceRef. Values files are
+                            merged in the order of this list with the last file overriding
+                            the first. Ignored when omitted.
+                          items:
+                            type: string
+                          type: array
                         version:
-                          default: "*"
-                          description: Version semver expression, ignored for charts from v1beta1.GitRepository and v1beta1.Bucket sources. Defaults to latest when omitted.
+                          default: '*'
+                          description: Version semver expression, ignored for charts
+                            from v1beta1.GitRepository and v1beta1.Bucket sources. Defaults
+                            to latest when omitted.
                           type: string
                       required:
                         - chart
@@ -97,9 +120,12 @@ spec:
                     - spec
                   type: object
                 dependsOn:
-                  description: DependsOn may contain a dependency.CrossNamespaceDependencyReference slice with references to HelmRelease resources that must be ready before this HelmRelease can be reconciled.
+                  description: DependsOn may contain a dependency.CrossNamespaceDependencyReference
+                    slice with references to HelmRelease resources that must be ready
+                    before this HelmRelease can be reconciled.
                   items:
-                    description: CrossNamespaceDependencyReference holds the reference to a dependency.
+                    description: CrossNamespaceDependencyReference holds the reference
+                      to a dependency.
                     properties:
                       name:
                         description: Name holds the name reference of a dependency.
@@ -112,51 +138,104 @@ spec:
                     type: object
                   type: array
                 install:
-                  description: Install holds the configuration for Helm install actions for this HelmRelease.
+                  description: Install holds the configuration for Helm install actions
+                    for this HelmRelease.
                   properties:
+                    crds:
+                      description: "CRDs upgrade CRDs from the Helm Chart's crds directory
+                      according to the CRD upgrade policy provided here. Valid values
+                      are `Skip`, `Create` or `CreateReplace`. Default is `Create`
+                      and if omitted CRDs are installed but not updated. \n Skip:
+                      do neither install nor replace (update) any CRDs. \n Create:
+                      new CRDs are created, existing CRDs are neither updated nor
+                      deleted. \n CreateReplace: new CRDs are created, existing CRDs
+                      are updated (replaced) but not deleted. \n By default, CRDs
+                      are applied (installed) during Helm install action. With this
+                      option users can opt-in to CRD replace existing CRDs on Helm
+                      install actions, which is not (yet) natively supported by Helm.
+                      https://helm.sh/docs/chart_best_practices/custom_resource_definitions."
+                      enum:
+                        - Skip
+                        - Create
+                        - CreateReplace
+                      type: string
                     createNamespace:
-                      description: CreateNamespace tells the Helm install action to create the HelmReleaseSpec.TargetNamespace if it does not exist yet. On uninstall, the namespace will not be garbage collected.
+                      description: CreateNamespace tells the Helm install action to
+                        create the HelmReleaseSpec.TargetNamespace if it does not exist
+                        yet. On uninstall, the namespace will not be garbage collected.
                       type: boolean
                     disableHooks:
-                      description: DisableHooks prevents hooks from running during the Helm install action.
+                      description: DisableHooks prevents hooks from running during the
+                        Helm install action.
                       type: boolean
                     disableOpenAPIValidation:
-                      description: DisableOpenAPIValidation prevents the Helm install action from validating rendered templates against the Kubernetes OpenAPI Schema.
+                      description: DisableOpenAPIValidation prevents the Helm install
+                        action from validating rendered templates against the Kubernetes
+                        OpenAPI Schema.
                       type: boolean
                     disableWait:
-                      description: DisableWait disables the waiting for resources to be ready after a Helm install has been performed.
+                      description: DisableWait disables the waiting for resources to
+                        be ready after a Helm install has been performed.
+                      type: boolean
+                    disableWaitForJobs:
+                      description: DisableWaitForJobs disables waiting for jobs to complete
+                        after a Helm install has been performed.
                       type: boolean
                     remediation:
-                      description: Remediation holds the remediation configuration for when the Helm install action for the HelmRelease fails. The default is to not perform any action.
+                      description: Remediation holds the remediation configuration for
+                        when the Helm install action for the HelmRelease fails. The
+                        default is to not perform any action.
                       properties:
                         ignoreTestFailures:
-                          description: IgnoreTestFailures tells the controller to skip remediation when the Helm tests are run after an install action but fail. Defaults to 'Test.IgnoreFailures'.
+                          description: IgnoreTestFailures tells the controller to skip
+                            remediation when the Helm tests are run after an install
+                            action but fail. Defaults to 'Test.IgnoreFailures'.
                           type: boolean
                         remediateLastFailure:
-                          description: RemediateLastFailure tells the controller to remediate the last failure, when no retries remain. Defaults to 'false'.
+                          description: RemediateLastFailure tells the controller to
+                            remediate the last failure, when no retries remain. Defaults
+                            to 'false'.
                           type: boolean
                         retries:
-                          description: Retries is the number of retries that should be attempted on failures before bailing. Remediation, using an uninstall, is performed between each attempt. Defaults to '0', a negative integer equals to unlimited retries.
+                          description: Retries is the number of retries that should
+                            be attempted on failures before bailing. Remediation, using
+                            an uninstall, is performed between each attempt. Defaults
+                            to '0', a negative integer equals to unlimited retries.
                           type: integer
                       type: object
                     replace:
-                      description: Replace tells the Helm install action to re-use the 'ReleaseName', but only if that name is a deleted release which remains in the history.
+                      description: Replace tells the Helm install action to re-use the
+                        'ReleaseName', but only if that name is a deleted release which
+                        remains in the history.
                       type: boolean
                     skipCRDs:
-                      description: SkipCRDs tells the Helm install action to not install any CRDs. By default, CRDs are installed if not already present.
+                      description: "SkipCRDs tells the Helm install action to not install
+                      any CRDs. By default, CRDs are installed if not already present.
+                      \n Deprecated use CRD policy (`crds`) attribute with value `Skip`
+                      instead."
                       type: boolean
                     timeout:
-                      description: Timeout is the time to wait for any individual Kubernetes operation (like Jobs for hooks) during the performance of a Helm install action. Defaults to 'HelmReleaseSpec.Timeout'.
+                      description: Timeout is the time to wait for any individual Kubernetes
+                        operation (like Jobs for hooks) during the performance of a
+                        Helm install action. Defaults to 'HelmReleaseSpec.Timeout'.
                       type: string
                   type: object
                 interval:
                   description: Interval at which to reconcile the Helm release.
                   type: string
                 kubeConfig:
-                  description: KubeConfig for reconciling the HelmRelease on a remote cluster. When specified, KubeConfig takes precedence over ServiceAccountName.
+                  description: KubeConfig for reconciling the HelmRelease on a remote
+                    cluster. When specified, KubeConfig takes precedence over ServiceAccountName.
                   properties:
                     secretRef:
-                      description: SecretRef holds the name to a secret that contains a 'value' key with the kubeconfig file as the value. It must be in the same namespace as the HelmRelease. It is recommended that the kubeconfig is self-contained, and the secret is regularly updated if credentials such as a cloud-access-token expire. Cloud specific `cmd-path` auth helpers will not function without adding binaries and credentials to the Pod that is responsible for reconciling the HelmRelease.
+                      description: SecretRef holds the name to a secret that contains
+                        a 'value' key with the kubeconfig file as the value. It must
+                        be in the same namespace as the HelmRelease. It is recommended
+                        that the kubeconfig is self-contained, and the secret is regularly
+                        updated if credentials such as a cloud-access-token expire.
+                        Cloud specific `cmd-path` auth helpers will not function without
+                        adding binaries and credentials to the Pod that is responsible
+                        for reconciling the HelmRelease.
                       properties:
                         name:
                           description: Name of the referent
@@ -166,10 +245,13 @@ spec:
                       type: object
                   type: object
                 maxHistory:
-                  description: MaxHistory is the number of revisions saved by Helm for this HelmRelease. Use '0' for an unlimited number of revisions; defaults to '10'.
+                  description: MaxHistory is the number of revisions saved by Helm for
+                    this HelmRelease. Use '0' for an unlimited number of revisions;
+                    defaults to '10'.
                   type: integer
                 postRenderers:
-                  description: PostRenderers holds an array of Helm PostRenderers, which will be applied in order of their definition.
+                  description: PostRenderers holds an array of Helm PostRenderers, which
+                    will be applied in order of their definition.
                   items:
                     description: PostRenderer contains a Helm PostRenderer specification.
                     properties:
@@ -177,21 +259,30 @@ spec:
                         description: Kustomization to apply as PostRenderer.
                         properties:
                           images:
-                            description: Images is a list of (image name, new name, new tag or digest) for changing image names, tags or digests. This can also be achieved with a patch, but this operator is simpler to specify.
+                            description: Images is a list of (image name, new name,
+                              new tag or digest) for changing image names, tags or digests.
+                              This can also be achieved with a patch, but this operator
+                              is simpler to specify.
                             items:
-                              description: Image contains an image name, a new name, a new tag or digest, which will replace the original name and tag.
+                              description: Image contains an image name, a new name,
+                                a new tag or digest, which will replace the original
+                                name and tag.
                               properties:
                                 digest:
-                                  description: Digest is the value used to replace the original image tag. If digest is present NewTag value is ignored.
+                                  description: Digest is the value used to replace the
+                                    original image tag. If digest is present NewTag
+                                    value is ignored.
                                   type: string
                                 name:
                                   description: Name is a tag-less image name.
                                   type: string
                                 newName:
-                                  description: NewName is the value used to replace the original name.
+                                  description: NewName is the value used to replace
+                                    the original name.
                                   type: string
                                 newTag:
-                                  description: NewTag is the value used to replace the original tag.
+                                  description: NewTag is the value used to replace the
+                                    original tag.
                                   type: string
                               required:
                                 - name
@@ -200,12 +291,15 @@ spec:
                           patchesJson6902:
                             description: JSON 6902 patches, defined as inline YAML objects.
                             items:
-                              description: JSON6902Patch contains a JSON6902 patch and the target the patch should be applied to.
+                              description: JSON6902Patch contains a JSON6902 patch and
+                                the target the patch should be applied to.
                               properties:
                                 patch:
-                                  description: Patch contains the JSON6902 patch document with an array of operation objects.
+                                  description: Patch contains the JSON6902 patch document
+                                    with an array of operation objects.
                                   items:
-                                    description: JSON6902 is a JSON6902 operation object. https://tools.ietf.org/html/rfc6902#section-4
+                                    description: JSON6902 is a JSON6902 operation object.
+                                      https://tools.ietf.org/html/rfc6902#section-4
                                     properties:
                                       from:
                                         type: string
@@ -228,19 +322,30 @@ spec:
                                     type: object
                                   type: array
                                 target:
-                                  description: Target points to the resources that the patch document should be applied to.
+                                  description: Target points to the resources that the
+                                    patch document should be applied to.
                                   properties:
                                     annotationSelector:
-                                      description: AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotations.
+                                      description: AnnotationSelector is a string that
+                                        follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
+                                        It matches with the resource annotations.
                                       type: string
                                     group:
-                                      description: Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
+                                      description: Group is the API group to select
+                                        resources from. Together with Version and Kind
+                                        it is capable of unambiguously identifying and/or
+                                        selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
                                       type: string
                                     kind:
-                                      description: Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
+                                      description: Kind of the API Group to select resources
+                                        from. Together with Group and Version it is
+                                        capable of unambiguously identifying and/or
+                                        selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
                                       type: string
                                     labelSelector:
-                                      description: LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels.
+                                      description: LabelSelector is a string that follows
+                                        the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
+                                        It matches with the resource labels.
                                       type: string
                                     name:
                                       description: Name to match resources with.
@@ -249,7 +354,10 @@ spec:
                                       description: Namespace to select resources from.
                                       type: string
                                     version:
-                                      description: Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
+                                      description: Version of the API Group to select
+                                        resources from. Together with Group and Kind
+                                        it is capable of unambiguously identifying and/or
+                                        selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
                                       type: string
                                   type: object
                               required:
@@ -258,7 +366,8 @@ spec:
                               type: object
                             type: array
                           patchesStrategicMerge:
-                            description: Strategic merge patches, defined as inline YAML objects.
+                            description: Strategic merge patches, defined as inline
+                              YAML objects.
                             items:
                               x-kubernetes-preserve-unknown-fields: true
                             type: array
@@ -266,148 +375,235 @@ spec:
                     type: object
                   type: array
                 releaseName:
-                  description: ReleaseName used for the Helm release. Defaults to a composition of '[TargetNamespace-]Name'.
+                  description: ReleaseName used for the Helm release. Defaults to a
+                    composition of '[TargetNamespace-]Name'.
                   maxLength: 53
                   minLength: 1
                   type: string
                 rollback:
-                  description: Rollback holds the configuration for Helm rollback actions for this HelmRelease.
+                  description: Rollback holds the configuration for Helm rollback actions
+                    for this HelmRelease.
                   properties:
                     cleanupOnFail:
-                      description: CleanupOnFail allows deletion of new resources created during the Helm rollback action when it fails.
+                      description: CleanupOnFail allows deletion of new resources created
+                        during the Helm rollback action when it fails.
                       type: boolean
                     disableHooks:
-                      description: DisableHooks prevents hooks from running during the Helm rollback action.
+                      description: DisableHooks prevents hooks from running during the
+                        Helm rollback action.
                       type: boolean
                     disableWait:
-                      description: DisableWait disables the waiting for resources to be ready after a Helm rollback has been performed.
+                      description: DisableWait disables the waiting for resources to
+                        be ready after a Helm rollback has been performed.
+                      type: boolean
+                    disableWaitForJobs:
+                      description: DisableWaitForJobs disables waiting for jobs to complete
+                        after a Helm rollback has been performed.
                       type: boolean
                     force:
-                      description: Force forces resource updates through a replacement strategy.
+                      description: Force forces resource updates through a replacement
+                        strategy.
                       type: boolean
                     recreate:
-                      description: Recreate performs pod restarts for the resource if applicable.
+                      description: Recreate performs pod restarts for the resource if
+                        applicable.
                       type: boolean
                     timeout:
-                      description: Timeout is the time to wait for any individual Kubernetes operation (like Jobs for hooks) during the performance of a Helm rollback action. Defaults to 'HelmReleaseSpec.Timeout'.
+                      description: Timeout is the time to wait for any individual Kubernetes
+                        operation (like Jobs for hooks) during the performance of a
+                        Helm rollback action. Defaults to 'HelmReleaseSpec.Timeout'.
                       type: string
                   type: object
                 serviceAccountName:
-                  description: The name of the Kubernetes service account to impersonate when reconciling this HelmRelease.
+                  description: The name of the Kubernetes service account to impersonate
+                    when reconciling this HelmRelease.
                   type: string
                 storageNamespace:
-                  description: StorageNamespace used for the Helm storage. Defaults to the namespace of the HelmRelease.
+                  description: StorageNamespace used for the Helm storage. Defaults
+                    to the namespace of the HelmRelease.
                   maxLength: 63
                   minLength: 1
                   type: string
                 suspend:
-                  description: Suspend tells the controller to suspend reconciliation for this HelmRelease, it does not apply to already started reconciliations. Defaults to false.
+                  description: Suspend tells the controller to suspend reconciliation
+                    for this HelmRelease, it does not apply to already started reconciliations.
+                    Defaults to false.
                   type: boolean
                 targetNamespace:
-                  description: TargetNamespace to target when performing operations for the HelmRelease. Defaults to the namespace of the HelmRelease.
+                  description: TargetNamespace to target when performing operations
+                    for the HelmRelease. Defaults to the namespace of the HelmRelease.
                   maxLength: 63
                   minLength: 1
                   type: string
                 test:
-                  description: Test holds the configuration for Helm test actions for this HelmRelease.
+                  description: Test holds the configuration for Helm test actions for
+                    this HelmRelease.
                   properties:
                     enable:
-                      description: Enable enables Helm test actions for this HelmRelease after an Helm install or upgrade action has been performed.
+                      description: Enable enables Helm test actions for this HelmRelease
+                        after an Helm install or upgrade action has been performed.
                       type: boolean
                     ignoreFailures:
-                      description: IgnoreFailures tells the controller to skip remediation when the Helm tests are run but fail. Can be overwritten for tests run after install or upgrade actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'.
+                      description: IgnoreFailures tells the controller to skip remediation
+                        when the Helm tests are run but fail. Can be overwritten for
+                        tests run after install or upgrade actions in 'Install.IgnoreTestFailures'
+                        and 'Upgrade.IgnoreTestFailures'.
                       type: boolean
                     timeout:
-                      description: Timeout is the time to wait for any individual Kubernetes operation during the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'.
+                      description: Timeout is the time to wait for any individual Kubernetes
+                        operation during the performance of a Helm test action. Defaults
+                        to 'HelmReleaseSpec.Timeout'.
                       type: string
                   type: object
                 timeout:
-                  description: Timeout is the time to wait for any individual Kubernetes operation (like Jobs for hooks) during the performance of a Helm action. Defaults to '5m0s'.
+                  description: Timeout is the time to wait for any individual Kubernetes
+                    operation (like Jobs for hooks) during the performance of a Helm
+                    action. Defaults to '5m0s'.
                   type: string
                 uninstall:
-                  description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease.
+                  description: Uninstall holds the configuration for Helm uninstall
+                    actions for this HelmRelease.
                   properties:
                     disableHooks:
-                      description: DisableHooks prevents hooks from running during the Helm rollback action.
+                      description: DisableHooks prevents hooks from running during the
+                        Helm rollback action.
                       type: boolean
                     keepHistory:
-                      description: KeepHistory tells Helm to remove all associated resources and mark the release as deleted, but retain the release history.
+                      description: KeepHistory tells Helm to remove all associated resources
+                        and mark the release as deleted, but retain the release history.
                       type: boolean
                     timeout:
-                      description: Timeout is the time to wait for any individual Kubernetes operation (like Jobs for hooks) during the performance of a Helm uninstall action. Defaults to 'HelmReleaseSpec.Timeout'.
+                      description: Timeout is the time to wait for any individual Kubernetes
+                        operation (like Jobs for hooks) during the performance of a
+                        Helm uninstall action. Defaults to 'HelmReleaseSpec.Timeout'.
                       type: string
                   type: object
                 upgrade:
-                  description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease.
+                  description: Upgrade holds the configuration for Helm upgrade actions
+                    for this HelmRelease.
                   properties:
                     cleanupOnFail:
-                      description: CleanupOnFail allows deletion of new resources created during the Helm upgrade action when it fails.
+                      description: CleanupOnFail allows deletion of new resources created
+                        during the Helm upgrade action when it fails.
                       type: boolean
+                    crds:
+                      description: "CRDs upgrade CRDs from the Helm Chart's crds directory
+                      according to the CRD upgrade policy provided here. Valid values
+                      are `Skip`, `Create` or `CreateReplace`. Default is `Skip` and
+                      if omitted CRDs are neither installed nor upgraded. \n Skip:
+                      do neither install nor replace (update) any CRDs. \n Create:
+                      new CRDs are created, existing CRDs are neither updated nor
+                      deleted. \n CreateReplace: new CRDs are created, existing CRDs
+                      are updated (replaced) but not deleted. \n By default, CRDs
+                      are not applied during Helm upgrade action. With this option
+                      users can opt-in to CRD upgrade, which is not (yet) natively
+                      supported by Helm. https://helm.sh/docs/chart_best_practices/custom_resource_definitions."
+                      enum:
+                        - Skip
+                        - Create
+                        - CreateReplace
+                      type: string
                     disableHooks:
-                      description: DisableHooks prevents hooks from running during the Helm upgrade action.
+                      description: DisableHooks prevents hooks from running during the
+                        Helm upgrade action.
                       type: boolean
                     disableOpenAPIValidation:
-                      description: DisableOpenAPIValidation prevents the Helm upgrade action from validating rendered templates against the Kubernetes OpenAPI Schema.
+                      description: DisableOpenAPIValidation prevents the Helm upgrade
+                        action from validating rendered templates against the Kubernetes
+                        OpenAPI Schema.
                       type: boolean
                     disableWait:
-                      description: DisableWait disables the waiting for resources to be ready after a Helm upgrade has been performed.
+                      description: DisableWait disables the waiting for resources to
+                        be ready after a Helm upgrade has been performed.
+                      type: boolean
+                    disableWaitForJobs:
+                      description: DisableWaitForJobs disables waiting for jobs to complete
+                        after a Helm upgrade has been performed.
                       type: boolean
                     force:
-                      description: Force forces resource updates through a replacement strategy.
+                      description: Force forces resource updates through a replacement
+                        strategy.
                       type: boolean
                     preserveValues:
-                      description: PreserveValues will make Helm reuse the last release's values and merge in overrides from 'Values'. Setting this flag makes the HelmRelease non-declarative.
+                      description: PreserveValues will make Helm reuse the last release's
+                        values and merge in overrides from 'Values'. Setting this flag
+                        makes the HelmRelease non-declarative.
                       type: boolean
                     remediation:
-                      description: Remediation holds the remediation configuration for when the Helm upgrade action for the HelmRelease fails. The default is to not perform any action.
+                      description: Remediation holds the remediation configuration for
+                        when the Helm upgrade action for the HelmRelease fails. The
+                        default is to not perform any action.
                       properties:
                         ignoreTestFailures:
-                          description: IgnoreTestFailures tells the controller to skip remediation when the Helm tests are run after an upgrade action but fail. Defaults to 'Test.IgnoreFailures'.
+                          description: IgnoreTestFailures tells the controller to skip
+                            remediation when the Helm tests are run after an upgrade
+                            action but fail. Defaults to 'Test.IgnoreFailures'.
                           type: boolean
                         remediateLastFailure:
-                          description: RemediateLastFailure tells the controller to remediate the last failure, when no retries remain. Defaults to 'false' unless 'Retries' is greater than 0.
+                          description: RemediateLastFailure tells the controller to
+                            remediate the last failure, when no retries remain. Defaults
+                            to 'false' unless 'Retries' is greater than 0.
                           type: boolean
                         retries:
-                          description: Retries is the number of retries that should be attempted on failures before bailing. Remediation, using 'Strategy', is performed between each attempt. Defaults to '0', a negative integer equals to unlimited retries.
+                          description: Retries is the number of retries that should
+                            be attempted on failures before bailing. Remediation, using
+                            'Strategy', is performed between each attempt. Defaults
+                            to '0', a negative integer equals to unlimited retries.
                           type: integer
                         strategy:
-                          description: Strategy to use for failure remediation. Defaults to 'rollback'.
+                          description: Strategy to use for failure remediation. Defaults
+                            to 'rollback'.
                           enum:
                             - rollback
                             - uninstall
                           type: string
                       type: object
                     timeout:
-                      description: Timeout is the time to wait for any individual Kubernetes operation (like Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 'HelmReleaseSpec.Timeout'.
+                      description: Timeout is the time to wait for any individual Kubernetes
+                        operation (like Jobs for hooks) during the performance of a
+                        Helm upgrade action. Defaults to 'HelmReleaseSpec.Timeout'.
                       type: string
                   type: object
                 values:
                   description: Values holds the values for this Helm release.
                   x-kubernetes-preserve-unknown-fields: true
                 valuesFrom:
-                  description: ValuesFrom holds references to resources containing Helm values for this HelmRelease, and information about how they should be merged.
+                  description: ValuesFrom holds references to resources containing Helm
+                    values for this HelmRelease, and information about how they should
+                    be merged.
                   items:
-                    description: ValuesReference contains a reference to a resource containing Helm values, and optionally the key they can be found at.
+                    description: ValuesReference contains a reference to a resource
+                      containing Helm values, and optionally the key they can be found
+                      at.
                     properties:
                       kind:
-                        description: Kind of the values referent, valid values are ('Secret', 'ConfigMap').
+                        description: Kind of the values referent, valid values are ('Secret',
+                          'ConfigMap').
                         enum:
                           - Secret
                           - ConfigMap
                         type: string
                       name:
-                        description: Name of the values referent. Should reside in the same namespace as the referring resource.
+                        description: Name of the values referent. Should reside in the
+                          same namespace as the referring resource.
                         maxLength: 253
                         minLength: 1
                         type: string
                       optional:
-                        description: Optional marks this ValuesReference as optional. When set, a not found error for the values reference is ignored, but any ValuesKey, TargetPath or transient error will still result in a reconciliation failure.
+                        description: Optional marks this ValuesReference as optional.
+                          When set, a not found error for the values reference is ignored,
+                          but any ValuesKey, TargetPath or transient error will still
+                          result in a reconciliation failure.
                         type: boolean
                       targetPath:
-                        description: TargetPath is the YAML dot notation path the value should be merged at. When set, the ValuesKey is expected to be a single flat value. Defaults to 'None', which results in the values getting merged at the root.
+                        description: TargetPath is the YAML dot notation path the value
+                          should be merged at. When set, the ValuesKey is expected to
+                          be a single flat value. Defaults to 'None', which results
+                          in the values getting merged at the root.
                         type: string
                       valuesKey:
-                        description: ValuesKey is the data key where the values.yaml or a specific value can be found at. Defaults to 'values.yaml'.
+                        description: ValuesKey is the data key where the values.yaml
+                          or a specific value can be found at. Defaults to 'values.yaml'.
                         type: string
                     required:
                       - kind
@@ -424,23 +620,45 @@ spec:
                 conditions:
                   description: Conditions holds the conditions for the HelmRelease.
                   items:
-                    description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions.  For example, type FooStatus struct{     // Represents the observations of a foo's current state.     // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type     // +patchStrategy=merge     // +listType=map     // +listMapKey=type     Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n     // other fields }"
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
                     properties:
                       lastTransitionTime:
-                        description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
                         format: date-time
                         type: string
                       message:
-                        description: message is a human readable message indicating details about the transition. This may be an empty string.
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
                         maxLength: 32768
                         type: string
                       observedGeneration:
-                        description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
                         format: int64
                         minimum: 0
                         type: integer
                       reason:
-                        description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
                         maxLength: 1024
                         minLength: 1
                         pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -453,7 +671,11 @@ spec:
                           - Unknown
                         type: string
                       type:
-                        description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
                         maxLength: 316
                         pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                         type: string
@@ -466,37 +688,46 @@ spec:
                     type: object
                   type: array
                 failures:
-                  description: Failures is the reconciliation failure count against the latest desired state. It is reset after a successful reconciliation.
+                  description: Failures is the reconciliation failure count against
+                    the latest desired state. It is reset after a successful reconciliation.
                   format: int64
                   type: integer
                 helmChart:
-                  description: HelmChart is the namespaced name of the HelmChart resource created by the controller for the HelmRelease.
+                  description: HelmChart is the namespaced name of the HelmChart resource
+                    created by the controller for the HelmRelease.
                   type: string
                 installFailures:
-                  description: InstallFailures is the install failure count against the latest desired state. It is reset after a successful reconciliation.
+                  description: InstallFailures is the install failure count against
+                    the latest desired state. It is reset after a successful reconciliation.
                   format: int64
                   type: integer
                 lastAppliedRevision:
-                  description: LastAppliedRevision is the revision of the last successfully applied source.
+                  description: LastAppliedRevision is the revision of the last successfully
+                    applied source.
                   type: string
                 lastAttemptedRevision:
-                  description: LastAttemptedRevision is the revision of the last reconciliation attempt.
+                  description: LastAttemptedRevision is the revision of the last reconciliation
+                    attempt.
                   type: string
                 lastAttemptedValuesChecksum:
-                  description: LastAttemptedValuesChecksum is the SHA1 checksum of the values of the last reconciliation attempt.
+                  description: LastAttemptedValuesChecksum is the SHA1 checksum of the
+                    values of the last reconciliation attempt.
                   type: string
                 lastHandledReconcileAt:
-                  description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change can be detected.
+                  description: LastHandledReconcileAt holds the value of the most recent
+                    reconcile request value, so a change can be detected.
                   type: string
                 lastReleaseRevision:
-                  description: LastReleaseRevision is the revision of the last successful Helm release.
+                  description: LastReleaseRevision is the revision of the last successful
+                    Helm release.
                   type: integer
                 observedGeneration:
                   description: ObservedGeneration is the last observed generation.
                   format: int64
                   type: integer
                 upgradeFailures:
-                  description: UpgradeFailures is the upgrade failure count against the latest desired state. It is reset after a successful reconciliation.
+                  description: UpgradeFailures is the upgrade failure count against
+                    the latest desired state. It is reset after a successful reconciliation.
                   format: int64
                   type: integer
               type: object
@@ -505,9 +736,3 @@ spec:
       storage: true
       subresources:
         status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []

vela-templates/addons/fluxcd/resource/crds/helm-repo.yaml

@@ -2,10 +2,9 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.4.1
-  creationTimestamp: null
+    controller-gen.kubebuilder.io/version: v0.5.0
   labels:
-    app.kubernetes.io/instance: vela-system
+    app.kubernetes.io/instance: flux-system
   name: helmrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -13,6 +12,8 @@ spec:
     kind: HelmRepository
     listKind: HelmRepositoryList
     plural: helmrepositories
+    shortNames:
+      - helmrepo
     singular: helmrepository
   scope: Namespaced
   versions:
@@ -35,10 +36,14 @@ spec:
           description: HelmRepository is the Schema for the helmrepositories API
           properties:
             apiVersion:
-              description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources"
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
               type: string
             kind:
-              description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
               type: string
             metadata:
               type: object
@@ -48,8 +53,19 @@ spec:
                 interval:
                   description: The interval at which to check the upstream for updates.
                   type: string
+                passCredentials:
+                  description: PassCredentials allows the credentials from the SecretRef
+                    to be passed on to a host that does not match the host as defined
+                    in URL. This may be required if the host of the advertised chart
+                    URLs in the index differ from the defined URL. Enabling this should
+                    be done with caution, as it can potentially result in credentials
+                    getting stolen in a MITM-attack.
+                  type: boolean
                 secretRef:
-                  description: The name of the secret containing authentication credentials for the Helm repository. For HTTP/S basic auth the secret must contain username and password fields. For TLS the secret must contain a certFile and keyFile, and/or caCert fields.
+                  description: The name of the secret containing authentication credentials
+                    for the Helm repository. For HTTP/S basic auth the secret must contain
+                    username and password fields. For TLS the secret must contain a
+                    certFile and keyFile, and/or caCert fields.
                   properties:
                     name:
                       description: Name of the referent
@@ -58,14 +74,16 @@ spec:
                     - name
                   type: object
                 suspend:
-                  description: This flag tells the controller to suspend the reconciliation of this source.
+                  description: This flag tells the controller to suspend the reconciliation
+                    of this source.
                   type: boolean
                 timeout:
                   default: 60s
                   description: The timeout of index downloading, defaults to 60s.
                   type: string
                 url:
-                  description: The Helm repository URL, a valid URL contains at least a protocol and host.
+                  description: The Helm repository URL, a valid URL contains at least
+                    a protocol and host.
                   type: string
               required:
                 - interval
@@ -75,20 +93,24 @@ spec:
               description: HelmRepositoryStatus defines the observed state of the HelmRepository.
               properties:
                 artifact:
-                  description: Artifact represents the output of the last successful repository sync.
+                  description: Artifact represents the output of the last successful
+                    repository sync.
                   properties:
                     checksum:
                       description: Checksum is the SHA1 checksum of the artifact.
                       type: string
                     lastUpdateTime:
-                      description: LastUpdateTime is the timestamp corresponding to the last update of this artifact.
+                      description: LastUpdateTime is the timestamp corresponding to
+                        the last update of this artifact.
                       format: date-time
                       type: string
                     path:
                       description: Path is the relative file path of this artifact.
                       type: string
                     revision:
-                      description: Revision is a human readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm chart version, etc.
+                      description: Revision is a human readable identifier traceable
+                        in the origin source system. It can be a Git commit SHA, Git
+                        tag, a Helm index timestamp, a Helm chart version, etc.
                       type: string
                     url:
                       description: URL is the HTTP address of this artifact.
@@ -100,23 +122,45 @@ spec:
                 conditions:
                   description: Conditions holds the conditions for the HelmRepository.
                   items:
-                    description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions.  For example, type FooStatus struct{     // Represents the observations of a foo's current state.     // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type     // +patchStrategy=merge     // +listType=map     // +listMapKey=type     Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n     // other fields }"
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
                     properties:
                       lastTransitionTime:
-                        description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
                         format: date-time
                         type: string
                       message:
-                        description: message is a human readable message indicating details about the transition. This may be an empty string.
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
                         maxLength: 32768
                         type: string
                       observedGeneration:
-                        description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
                         format: int64
                         minimum: 0
                         type: integer
                       reason:
-                        description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
                         maxLength: 1024
                         minLength: 1
                         pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -129,7 +173,11 @@ spec:
                           - Unknown
                         type: string
                       type:
-                        description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
                         maxLength: 316
                         pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                         type: string
@@ -142,7 +190,8 @@ spec:
                     type: object
                   type: array
                 lastHandledReconcileAt:
-                  description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change can be detected.
+                  description: LastHandledReconcileAt holds the value of the most recent
+                    reconcile request value, so a change can be detected.
                   type: string
                 observedGeneration:
                   description: ObservedGeneration is the last observed generation.
@@ -157,9 +206,3 @@ spec:
       storage: true
       subresources:
         status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []

vela-templates/addons/fluxcd/resource/crds/image-policy.yaml

@@ -0,0 +1,575 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.5.0
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: imagepolicies.image.toolkit.fluxcd.io
+spec:
+  group: image.toolkit.fluxcd.io
+  names:
+    kind: ImagePolicy
+    listKind: ImagePolicyList
+    plural: imagepolicies
+    singular: imagepolicy
+  scope: Namespaced
+  versions:
+    - additionalPrinterColumns:
+        - jsonPath: .status.latestImage
+          name: LatestImage
+          type: string
+      name: v1alpha1
+      schema:
+        openAPIV3Schema:
+          description: ImagePolicy is the Schema for the imagepolicies API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: ImagePolicySpec defines the parameters for calculating the
+                ImagePolicy
+              properties:
+                filterTags:
+                  description: FilterTags enables filtering for only a subset of tags
+                    based on a set of rules. If no rules are provided, all the tags
+                    from the repository will be ordered and compared.
+                  properties:
+                    extract:
+                      description: Extract allows a capture group to be extracted from
+                        the specified regular expression pattern, useful before tag
+                        evaluation.
+                      type: string
+                    pattern:
+                      description: Pattern specifies a regular expression pattern used
+                        to filter for image tags.
+                      type: string
+                  type: object
+                imageRepositoryRef:
+                  description: ImageRepositoryRef points at the object specifying the
+                    image being scanned
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                policy:
+                  description: Policy gives the particulars of the policy to be followed
+                    in selecting the most recent image
+                  properties:
+                    alphabetical:
+                      description: Alphabetical set of rules to use for alphabetical
+                        ordering of the tags.
+                      properties:
+                        order:
+                          default: asc
+                          description: Order specifies the sorting order of the tags.
+                            Given the letters of the alphabet as tags, ascending order
+                            would select Z, and descending order would select A.
+                          enum:
+                            - asc
+                            - desc
+                          type: string
+                      type: object
+                    numerical:
+                      description: Numerical set of rules to use for numerical ordering
+                        of the tags.
+                      properties:
+                        order:
+                          default: asc
+                          description: Order specifies the sorting order of the tags.
+                            Given the integer values from 0 to 9 as tags, ascending
+                            order would select 9, and descending order would select
+                            0.
+                          enum:
+                            - asc
+                            - desc
+                          type: string
+                      type: object
+                    semver:
+                      description: SemVer gives a semantic version range to check against
+                        the tags available.
+                      properties:
+                        range:
+                          description: Range gives a semver range for the image tag;
+                            the highest version within the range that's a tag yields
+                            the latest image.
+                          type: string
+                      required:
+                        - range
+                      type: object
+                  type: object
+              required:
+                - imageRepositoryRef
+                - policy
+              type: object
+            status:
+              description: ImagePolicyStatus defines the observed state of ImagePolicy
+              properties:
+                conditions:
+                  items:
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
+                    properties:
+                      lastTransitionTime:
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
+                        format: date-time
+                        type: string
+                      message:
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
+                        maxLength: 32768
+                        type: string
+                      observedGeneration:
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
+                        format: int64
+                        minimum: 0
+                        type: integer
+                      reason:
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
+                        maxLength: 1024
+                        minLength: 1
+                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                        type: string
+                      status:
+                        description: status of the condition, one of True, False, Unknown.
+                        enum:
+                          - "True"
+                          - "False"
+                          - Unknown
+                        type: string
+                      type:
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        maxLength: 316
+                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                        type: string
+                    required:
+                      - lastTransitionTime
+                      - message
+                      - reason
+                      - status
+                      - type
+                    type: object
+                  type: array
+                latestImage:
+                  description: LatestImage gives the first in the list of images scanned
+                    by the image repository, when filtered and ordered according to
+                    the policy.
+                  type: string
+                observedGeneration:
+                  format: int64
+                  type: integer
+              type: object
+          type: object
+      served: true
+      storage: false
+      subresources:
+        status: {}
+    - additionalPrinterColumns:
+        - jsonPath: .status.latestImage
+          name: LatestImage
+          type: string
+      name: v1alpha2
+      schema:
+        openAPIV3Schema:
+          description: ImagePolicy is the Schema for the imagepolicies API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: ImagePolicySpec defines the parameters for calculating the
+                ImagePolicy
+              properties:
+                filterTags:
+                  description: FilterTags enables filtering for only a subset of tags
+                    based on a set of rules. If no rules are provided, all the tags
+                    from the repository will be ordered and compared.
+                  properties:
+                    extract:
+                      description: Extract allows a capture group to be extracted from
+                        the specified regular expression pattern, useful before tag
+                        evaluation.
+                      type: string
+                    pattern:
+                      description: Pattern specifies a regular expression pattern used
+                        to filter for image tags.
+                      type: string
+                  type: object
+                imageRepositoryRef:
+                  description: ImageRepositoryRef points at the object specifying the
+                    image being scanned
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                policy:
+                  description: Policy gives the particulars of the policy to be followed
+                    in selecting the most recent image
+                  properties:
+                    alphabetical:
+                      description: Alphabetical set of rules to use for alphabetical
+                        ordering of the tags.
+                      properties:
+                        order:
+                          default: asc
+                          description: Order specifies the sorting order of the tags.
+                            Given the letters of the alphabet as tags, ascending order
+                            would select Z, and descending order would select A.
+                          enum:
+                            - asc
+                            - desc
+                          type: string
+                      type: object
+                    numerical:
+                      description: Numerical set of rules to use for numerical ordering
+                        of the tags.
+                      properties:
+                        order:
+                          default: asc
+                          description: Order specifies the sorting order of the tags.
+                            Given the integer values from 0 to 9 as tags, ascending
+                            order would select 9, and descending order would select
+                            0.
+                          enum:
+                            - asc
+                            - desc
+                          type: string
+                      type: object
+                    semver:
+                      description: SemVer gives a semantic version range to check against
+                        the tags available.
+                      properties:
+                        range:
+                          description: Range gives a semver range for the image tag;
+                            the highest version within the range that's a tag yields
+                            the latest image.
+                          type: string
+                      required:
+                        - range
+                      type: object
+                  type: object
+              required:
+                - imageRepositoryRef
+                - policy
+              type: object
+            status:
+              description: ImagePolicyStatus defines the observed state of ImagePolicy
+              properties:
+                conditions:
+                  items:
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
+                    properties:
+                      lastTransitionTime:
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
+                        format: date-time
+                        type: string
+                      message:
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
+                        maxLength: 32768
+                        type: string
+                      observedGeneration:
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
+                        format: int64
+                        minimum: 0
+                        type: integer
+                      reason:
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
+                        maxLength: 1024
+                        minLength: 1
+                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                        type: string
+                      status:
+                        description: status of the condition, one of True, False, Unknown.
+                        enum:
+                          - "True"
+                          - "False"
+                          - Unknown
+                        type: string
+                      type:
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        maxLength: 316
+                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                        type: string
+                    required:
+                      - lastTransitionTime
+                      - message
+                      - reason
+                      - status
+                      - type
+                    type: object
+                  type: array
+                latestImage:
+                  description: LatestImage gives the first in the list of images scanned
+                    by the image repository, when filtered and ordered according to
+                    the policy.
+                  type: string
+                observedGeneration:
+                  format: int64
+                  type: integer
+              type: object
+          type: object
+      served: true
+      storage: false
+      subresources:
+        status: {}
+    - additionalPrinterColumns:
+        - jsonPath: .status.latestImage
+          name: LatestImage
+          type: string
+      name: v1beta1
+      schema:
+        openAPIV3Schema:
+          description: ImagePolicy is the Schema for the imagepolicies API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: ImagePolicySpec defines the parameters for calculating the
+                ImagePolicy
+              properties:
+                filterTags:
+                  description: FilterTags enables filtering for only a subset of tags
+                    based on a set of rules. If no rules are provided, all the tags
+                    from the repository will be ordered and compared.
+                  properties:
+                    extract:
+                      description: Extract allows a capture group to be extracted from
+                        the specified regular expression pattern, useful before tag
+                        evaluation.
+                      type: string
+                    pattern:
+                      description: Pattern specifies a regular expression pattern used
+                        to filter for image tags.
+                      type: string
+                  type: object
+                imageRepositoryRef:
+                  description: ImageRepositoryRef points at the object specifying the
+                    image being scanned
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                policy:
+                  description: Policy gives the particulars of the policy to be followed
+                    in selecting the most recent image
+                  properties:
+                    alphabetical:
+                      description: Alphabetical set of rules to use for alphabetical
+                        ordering of the tags.
+                      properties:
+                        order:
+                          default: asc
+                          description: Order specifies the sorting order of the tags.
+                            Given the letters of the alphabet as tags, ascending order
+                            would select Z, and descending order would select A.
+                          enum:
+                            - asc
+                            - desc
+                          type: string
+                      type: object
+                    numerical:
+                      description: Numerical set of rules to use for numerical ordering
+                        of the tags.
+                      properties:
+                        order:
+                          default: asc
+                          description: Order specifies the sorting order of the tags.
+                            Given the integer values from 0 to 9 as tags, ascending
+                            order would select 9, and descending order would select
+                            0.
+                          enum:
+                            - asc
+                            - desc
+                          type: string
+                      type: object
+                    semver:
+                      description: SemVer gives a semantic version range to check against
+                        the tags available.
+                      properties:
+                        range:
+                          description: Range gives a semver range for the image tag;
+                            the highest version within the range that's a tag yields
+                            the latest image.
+                          type: string
+                      required:
+                        - range
+                      type: object
+                  type: object
+              required:
+                - imageRepositoryRef
+                - policy
+              type: object
+            status:
+              description: ImagePolicyStatus defines the observed state of ImagePolicy
+              properties:
+                conditions:
+                  items:
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
+                    properties:
+                      lastTransitionTime:
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
+                        format: date-time
+                        type: string
+                      message:
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
+                        maxLength: 32768
+                        type: string
+                      observedGeneration:
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
+                        format: int64
+                        minimum: 0
+                        type: integer
+                      reason:
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
+                        maxLength: 1024
+                        minLength: 1
+                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                        type: string
+                      status:
+                        description: status of the condition, one of True, False, Unknown.
+                        enum:
+                          - "True"
+                          - "False"
+                          - Unknown
+                        type: string
+                      type:
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        maxLength: 316
+                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                        type: string
+                    required:
+                      - lastTransitionTime
+                      - message
+                      - reason
+                      - status
+                      - type
+                    type: object
+                  type: array
+                latestImage:
+                  description: LatestImage gives the first in the list of images scanned
+                    by the image repository, when filtered and ordered according to
+                    the policy.
+                  type: string
+                observedGeneration:
+                  format: int64
+                  type: integer
+              type: object
+          type: object
+      served: true
+      storage: true
+      subresources:
+        status: {}

vela-templates/addons/fluxcd/resource/crds/image-repo.yaml

@@ -0,0 +1,533 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.5.0
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: imagerepositories.image.toolkit.fluxcd.io
+spec:
+  group: image.toolkit.fluxcd.io
+  names:
+    kind: ImageRepository
+    listKind: ImageRepositoryList
+    plural: imagerepositories
+    singular: imagerepository
+  scope: Namespaced
+  versions:
+    - additionalPrinterColumns:
+        - jsonPath: .status.lastScanResult.scanTime
+          name: Last scan
+          type: string
+        - jsonPath: .status.lastScanResult.tagCount
+          name: Tags
+          type: string
+      name: v1alpha1
+      schema:
+        openAPIV3Schema:
+          description: ImageRepository is the Schema for the imagerepositories API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: ImageRepositorySpec defines the parameters for scanning an
+                image repository, e.g., `fluxcd/flux`.
+              properties:
+                certSecretRef:
+                  description: "CertSecretRef can be given the name of a secret containing
+                  either or both of \n  - a PEM-encoded client certificate (`certFile`)
+                  and private  key (`keyFile`);  - a PEM-encoded CA certificate (`caFile`)
+                  \n  and whichever are supplied, will be used for connecting to the
+                  \ registry. The client cert and key are useful if you are  authenticating
+                  with a certificate; the CA cert is useful if  you are using a self-signed
+                  server certificate."
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                image:
+                  description: Image is the name of the image repository
+                  type: string
+                interval:
+                  description: Interval is the length of time to wait between scans
+                    of the image repository.
+                  type: string
+                secretRef:
+                  description: SecretRef can be given the name of a secret containing
+                    credentials to use for the image registry. The secret should be
+                    created with `kubectl create secret docker-registry`, or the equivalent.
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                suspend:
+                  description: This flag tells the controller to suspend subsequent
+                    image scans. It does not apply to already started scans. Defaults
+                    to false.
+                  type: boolean
+                timeout:
+                  description: Timeout for image scanning. Defaults to 'Interval' duration.
+                  type: string
+              type: object
+            status:
+              description: ImageRepositoryStatus defines the observed state of ImageRepository
+              properties:
+                canonicalImageName:
+                  description: CanonicalName is the name of the image repository with
+                    all the implied bits made explicit; e.g., `docker.io/library/alpine`
+                    rather than `alpine`.
+                  type: string
+                conditions:
+                  items:
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
+                    properties:
+                      lastTransitionTime:
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
+                        format: date-time
+                        type: string
+                      message:
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
+                        maxLength: 32768
+                        type: string
+                      observedGeneration:
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
+                        format: int64
+                        minimum: 0
+                        type: integer
+                      reason:
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
+                        maxLength: 1024
+                        minLength: 1
+                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                        type: string
+                      status:
+                        description: status of the condition, one of True, False, Unknown.
+                        enum:
+                          - "True"
+                          - "False"
+                          - Unknown
+                        type: string
+                      type:
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        maxLength: 316
+                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                        type: string
+                    required:
+                      - lastTransitionTime
+                      - message
+                      - reason
+                      - status
+                      - type
+                    type: object
+                  type: array
+                lastHandledReconcileAt:
+                  description: LastHandledReconcileAt holds the value of the most recent
+                    reconcile request value, so a change can be detected.
+                  type: string
+                lastScanResult:
+                  description: LastScanResult contains the number of fetched tags.
+                  properties:
+                    scanTime:
+                      format: date-time
+                      type: string
+                    tagCount:
+                      type: integer
+                  required:
+                    - tagCount
+                  type: object
+                observedGeneration:
+                  description: ObservedGeneration is the last reconciled generation.
+                  format: int64
+                  type: integer
+              type: object
+          type: object
+      served: true
+      storage: false
+      subresources:
+        status: {}
+    - additionalPrinterColumns:
+        - jsonPath: .status.lastScanResult.scanTime
+          name: Last scan
+          type: string
+        - jsonPath: .status.lastScanResult.tagCount
+          name: Tags
+          type: string
+      name: v1alpha2
+      schema:
+        openAPIV3Schema:
+          description: ImageRepository is the Schema for the imagerepositories API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: ImageRepositorySpec defines the parameters for scanning an
+                image repository, e.g., `fluxcd/flux`.
+              properties:
+                certSecretRef:
+                  description: "CertSecretRef can be given the name of a secret containing
+                  either or both of \n  - a PEM-encoded client certificate (`certFile`)
+                  and private  key (`keyFile`);  - a PEM-encoded CA certificate (`caFile`)
+                  \n  and whichever are supplied, will be used for connecting to the
+                  \ registry. The client cert and key are useful if you are  authenticating
+                  with a certificate; the CA cert is useful if  you are using a self-signed
+                  server certificate."
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                image:
+                  description: Image is the name of the image repository
+                  type: string
+                interval:
+                  description: Interval is the length of time to wait between scans
+                    of the image repository.
+                  type: string
+                secretRef:
+                  description: SecretRef can be given the name of a secret containing
+                    credentials to use for the image registry. The secret should be
+                    created with `kubectl create secret docker-registry`, or the equivalent.
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                suspend:
+                  description: This flag tells the controller to suspend subsequent
+                    image scans. It does not apply to already started scans. Defaults
+                    to false.
+                  type: boolean
+                timeout:
+                  description: Timeout for image scanning. Defaults to 'Interval' duration.
+                  type: string
+              type: object
+            status:
+              description: ImageRepositoryStatus defines the observed state of ImageRepository
+              properties:
+                canonicalImageName:
+                  description: CanonicalName is the name of the image repository with
+                    all the implied bits made explicit; e.g., `docker.io/library/alpine`
+                    rather than `alpine`.
+                  type: string
+                conditions:
+                  items:
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
+                    properties:
+                      lastTransitionTime:
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
+                        format: date-time
+                        type: string
+                      message:
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
+                        maxLength: 32768
+                        type: string
+                      observedGeneration:
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
+                        format: int64
+                        minimum: 0
+                        type: integer
+                      reason:
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
+                        maxLength: 1024
+                        minLength: 1
+                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                        type: string
+                      status:
+                        description: status of the condition, one of True, False, Unknown.
+                        enum:
+                          - "True"
+                          - "False"
+                          - Unknown
+                        type: string
+                      type:
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        maxLength: 316
+                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                        type: string
+                    required:
+                      - lastTransitionTime
+                      - message
+                      - reason
+                      - status
+                      - type
+                    type: object
+                  type: array
+                lastHandledReconcileAt:
+                  description: LastHandledReconcileAt holds the value of the most recent
+                    reconcile request value, so a change can be detected.
+                  type: string
+                lastScanResult:
+                  description: LastScanResult contains the number of fetched tags.
+                  properties:
+                    scanTime:
+                      format: date-time
+                      type: string
+                    tagCount:
+                      type: integer
+                  required:
+                    - tagCount
+                  type: object
+                observedGeneration:
+                  description: ObservedGeneration is the last reconciled generation.
+                  format: int64
+                  type: integer
+              type: object
+          type: object
+      served: true
+      storage: false
+      subresources:
+        status: {}
+    - additionalPrinterColumns:
+        - jsonPath: .status.lastScanResult.scanTime
+          name: Last scan
+          type: string
+        - jsonPath: .status.lastScanResult.tagCount
+          name: Tags
+          type: string
+      name: v1beta1
+      schema:
+        openAPIV3Schema:
+          description: ImageRepository is the Schema for the imagerepositories API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: ImageRepositorySpec defines the parameters for scanning an
+                image repository, e.g., `fluxcd/flux`.
+              properties:
+                certSecretRef:
+                  description: "CertSecretRef can be given the name of a secret containing
+                  either or both of \n  - a PEM-encoded client certificate (`certFile`)
+                  and private  key (`keyFile`);  - a PEM-encoded CA certificate (`caFile`)
+                  \n  and whichever are supplied, will be used for connecting to the
+                  \ registry. The client cert and key are useful if you are  authenticating
+                  with a certificate; the CA cert is useful if  you are using a self-signed
+                  server certificate."
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                image:
+                  description: Image is the name of the image repository
+                  type: string
+                interval:
+                  description: Interval is the length of time to wait between scans
+                    of the image repository.
+                  type: string
+                secretRef:
+                  description: SecretRef can be given the name of a secret containing
+                    credentials to use for the image registry. The secret should be
+                    created with `kubectl create secret docker-registry`, or the equivalent.
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                suspend:
+                  description: This flag tells the controller to suspend subsequent
+                    image scans. It does not apply to already started scans. Defaults
+                    to false.
+                  type: boolean
+                timeout:
+                  description: Timeout for image scanning. Defaults to 'Interval' duration.
+                  type: string
+              type: object
+            status:
+              description: ImageRepositoryStatus defines the observed state of ImageRepository
+              properties:
+                canonicalImageName:
+                  description: CanonicalName is the name of the image repository with
+                    all the implied bits made explicit; e.g., `docker.io/library/alpine`
+                    rather than `alpine`.
+                  type: string
+                conditions:
+                  items:
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
+                    properties:
+                      lastTransitionTime:
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
+                        format: date-time
+                        type: string
+                      message:
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
+                        maxLength: 32768
+                        type: string
+                      observedGeneration:
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
+                        format: int64
+                        minimum: 0
+                        type: integer
+                      reason:
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
+                        maxLength: 1024
+                        minLength: 1
+                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                        type: string
+                      status:
+                        description: status of the condition, one of True, False, Unknown.
+                        enum:
+                          - "True"
+                          - "False"
+                          - Unknown
+                        type: string
+                      type:
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        maxLength: 316
+                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                        type: string
+                    required:
+                      - lastTransitionTime
+                      - message
+                      - reason
+                      - status
+                      - type
+                    type: object
+                  type: array
+                lastHandledReconcileAt:
+                  description: LastHandledReconcileAt holds the value of the most recent
+                    reconcile request value, so a change can be detected.
+                  type: string
+                lastScanResult:
+                  description: LastScanResult contains the number of fetched tags.
+                  properties:
+                    scanTime:
+                      format: date-time
+                      type: string
+                    tagCount:
+                      type: integer
+                  required:
+                    - tagCount
+                  type: object
+                observedGeneration:
+                  description: ObservedGeneration is the last reconciled generation.
+                  format: int64
+                  type: integer
+              type: object
+          type: object
+      served: true
+      storage: true
+      subresources:
+        status: {}

vela-templates/addons/fluxcd/resource/crds/image-update-automation.yaml

@@ -0,0 +1,792 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.5.0
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: imageupdateautomations.image.toolkit.fluxcd.io
+spec:
+  group: image.toolkit.fluxcd.io
+  names:
+    kind: ImageUpdateAutomation
+    listKind: ImageUpdateAutomationList
+    plural: imageupdateautomations
+    singular: imageupdateautomation
+  scope: Namespaced
+  versions:
+    - additionalPrinterColumns:
+        - jsonPath: .status.lastAutomationRunTime
+          name: Last run
+          type: string
+      name: v1alpha1
+      schema:
+        openAPIV3Schema:
+          description: ImageUpdateAutomation is the Schema for the imageupdateautomations
+            API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation
+              properties:
+                checkout:
+                  description: Checkout gives the parameters for cloning the git repository,
+                    ready to make changes.
+                  properties:
+                    branch:
+                      description: Branch gives the branch to clone from the git repository.
+                        If `.spec.push` is not supplied, commits will also be pushed
+                        to this branch.
+                      type: string
+                    gitRepositoryRef:
+                      description: GitRepositoryRef refers to the resource giving access
+                        details to a git repository to update files in.
+                      properties:
+                        name:
+                          description: Name of the referent
+                          type: string
+                      required:
+                        - name
+                      type: object
+                  required:
+                    - branch
+                    - gitRepositoryRef
+                  type: object
+                commit:
+                  description: Commit specifies how to commit to the git repository.
+                  properties:
+                    authorEmail:
+                      description: AuthorEmail gives the email to provide when making
+                        a commit
+                      type: string
+                    authorName:
+                      description: AuthorName gives the name to provide when making
+                        a commit
+                      type: string
+                    messageTemplate:
+                      description: MessageTemplate provides a template for the commit
+                        message, into which will be interpolated the details of the
+                        change made.
+                      type: string
+                    signingKey:
+                      description: SigningKey provides the option to sign commits with
+                        a GPG key
+                      properties:
+                        secretRef:
+                          description: SecretRef holds the name to a secret that contains
+                            a 'git.asc' key corresponding to the ASCII Armored file
+                            containing the GPG signing keypair as the value. It must
+                            be in the same namespace as the ImageUpdateAutomation.
+                          properties:
+                            name:
+                              description: Name of the referent
+                              type: string
+                          required:
+                            - name
+                          type: object
+                      type: object
+                  required:
+                    - authorEmail
+                    - authorName
+                  type: object
+                interval:
+                  description: Interval gives an lower bound for how often the automation
+                    run should be attempted.
+                  type: string
+                push:
+                  description: Push specifies how and where to push commits made by
+                    the automation. If missing, commits are pushed (back) to `.spec.checkout.branch`.
+                  properties:
+                    branch:
+                      description: Branch specifies that commits should be pushed to
+                        the branch named. The branch is created using `.spec.checkout.branch`
+                        as the starting point, if it doesn't already exist.
+                      type: string
+                  required:
+                    - branch
+                  type: object
+                suspend:
+                  description: Suspend tells the controller to not run this automation,
+                    until it is unset (or set to false). Defaults to false.
+                  type: boolean
+                update:
+                  default:
+                    strategy: Setters
+                  description: Update gives the specification for how to update the
+                    files in the repository. This can be left empty, to use the default
+                    value.
+                  properties:
+                    path:
+                      description: Path to the directory containing the manifests to
+                        be updated. Defaults to 'None', which translates to the root
+                        path of the GitRepositoryRef.
+                      type: string
+                    strategy:
+                      default: Setters
+                      description: Strategy names the strategy to be used.
+                      enum:
+                        - Setters
+                      type: string
+                  required:
+                    - strategy
+                  type: object
+              required:
+                - checkout
+                - commit
+                - interval
+              type: object
+            status:
+              description: ImageUpdateAutomationStatus defines the observed state of
+                ImageUpdateAutomation
+              properties:
+                conditions:
+                  items:
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
+                    properties:
+                      lastTransitionTime:
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
+                        format: date-time
+                        type: string
+                      message:
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
+                        maxLength: 32768
+                        type: string
+                      observedGeneration:
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
+                        format: int64
+                        minimum: 0
+                        type: integer
+                      reason:
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
+                        maxLength: 1024
+                        minLength: 1
+                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                        type: string
+                      status:
+                        description: status of the condition, one of True, False, Unknown.
+                        enum:
+                          - "True"
+                          - "False"
+                          - Unknown
+                        type: string
+                      type:
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        maxLength: 316
+                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                        type: string
+                    required:
+                      - lastTransitionTime
+                      - message
+                      - reason
+                      - status
+                      - type
+                    type: object
+                  type: array
+                lastAutomationRunTime:
+                  description: LastAutomationRunTime records the last time the controller
+                    ran this automation through to completion (even if no updates were
+                    made).
+                  format: date-time
+                  type: string
+                lastHandledReconcileAt:
+                  description: LastHandledReconcileAt holds the value of the most recent
+                    reconcile request value, so a change can be detected.
+                  type: string
+                lastPushCommit:
+                  description: LastPushCommit records the SHA1 of the last commit made
+                    by the controller, for this automation object
+                  type: string
+                lastPushTime:
+                  description: LastPushTime records the time of the last pushed change.
+                  format: date-time
+                  type: string
+                observedGeneration:
+                  format: int64
+                  type: integer
+              type: object
+          type: object
+      served: true
+      storage: false
+      subresources:
+        status: {}
+    - additionalPrinterColumns:
+        - jsonPath: .status.lastAutomationRunTime
+          name: Last run
+          type: string
+      name: v1alpha2
+      schema:
+        openAPIV3Schema:
+          description: ImageUpdateAutomation is the Schema for the imageupdateautomations
+            API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation
+              properties:
+                git:
+                  description: GitSpec contains all the git-specific definitions. This
+                    is technically optional, but in practice mandatory until there are
+                    other kinds of source allowed.
+                  properties:
+                    checkout:
+                      description: Checkout gives the parameters for cloning the git
+                        repository, ready to make changes. If not present, the `spec.ref`
+                        field from the referenced `GitRepository` or its default will
+                        be used.
+                      properties:
+                        ref:
+                          description: Reference gives a branch, tag or commit to clone
+                            from the Git repository.
+                          properties:
+                            branch:
+                              default: master
+                              description: The Git branch to checkout, defaults to master.
+                              type: string
+                            commit:
+                              description: The Git commit SHA to checkout, if specified
+                                Tag filters will be ignored.
+                              type: string
+                            semver:
+                              description: The Git tag semver expression, takes precedence
+                                over Tag.
+                              type: string
+                            tag:
+                              description: The Git tag to checkout, takes precedence
+                                over Branch.
+                              type: string
+                          type: object
+                      required:
+                        - ref
+                      type: object
+                    commit:
+                      description: Commit specifies how to commit to the git repository.
+                      properties:
+                        author:
+                          description: Author gives the email and optionally the name
+                            to use as the author of commits.
+                          properties:
+                            email:
+                              description: Email gives the email to provide when making
+                                a commit.
+                              type: string
+                            name:
+                              description: Name gives the name to provide when making
+                                a commit.
+                              type: string
+                          required:
+                            - email
+                          type: object
+                        messageTemplate:
+                          description: MessageTemplate provides a template for the commit
+                            message, into which will be interpolated the details of
+                            the change made.
+                          type: string
+                        signingKey:
+                          description: SigningKey provides the option to sign commits
+                            with a GPG key
+                          properties:
+                            secretRef:
+                              description: SecretRef holds the name to a secret that
+                                contains a 'git.asc' key corresponding to the ASCII
+                                Armored file containing the GPG signing keypair as the
+                                value. It must be in the same namespace as the ImageUpdateAutomation.
+                              properties:
+                                name:
+                                  description: Name of the referent
+                                  type: string
+                              required:
+                                - name
+                              type: object
+                          type: object
+                      required:
+                        - author
+                      type: object
+                    push:
+                      description: Push specifies how and where to push commits made
+                        by the automation. If missing, commits are pushed (back) to
+                        `.spec.checkout.branch` or its default.
+                      properties:
+                        branch:
+                          description: Branch specifies that commits should be pushed
+                            to the branch named. The branch is created using `.spec.checkout.branch`
+                            as the starting point, if it doesn't already exist.
+                          type: string
+                      required:
+                        - branch
+                      type: object
+                  required:
+                    - commit
+                  type: object
+                interval:
+                  description: Interval gives an lower bound for how often the automation
+                    run should be attempted.
+                  type: string
+                sourceRef:
+                  description: SourceRef refers to the resource giving access details
+                    to a git repository.
+                  properties:
+                    apiVersion:
+                      description: API version of the referent
+                      type: string
+                    kind:
+                      default: GitRepository
+                      description: Kind of the referent
+                      enum:
+                        - GitRepository
+                      type: string
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - kind
+                    - name
+                  type: object
+                suspend:
+                  description: Suspend tells the controller to not run this automation,
+                    until it is unset (or set to false). Defaults to false.
+                  type: boolean
+                update:
+                  default:
+                    strategy: Setters
+                  description: Update gives the specification for how to update the
+                    files in the repository. This can be left empty, to use the default
+                    value.
+                  properties:
+                    path:
+                      description: Path to the directory containing the manifests to
+                        be updated. Defaults to 'None', which translates to the root
+                        path of the GitRepositoryRef.
+                      type: string
+                    strategy:
+                      default: Setters
+                      description: Strategy names the strategy to be used.
+                      enum:
+                        - Setters
+                      type: string
+                  required:
+                    - strategy
+                  type: object
+              required:
+                - interval
+                - sourceRef
+              type: object
+            status:
+              description: ImageUpdateAutomationStatus defines the observed state of
+                ImageUpdateAutomation
+              properties:
+                conditions:
+                  items:
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
+                    properties:
+                      lastTransitionTime:
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
+                        format: date-time
+                        type: string
+                      message:
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
+                        maxLength: 32768
+                        type: string
+                      observedGeneration:
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
+                        format: int64
+                        minimum: 0
+                        type: integer
+                      reason:
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
+                        maxLength: 1024
+                        minLength: 1
+                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                        type: string
+                      status:
+                        description: status of the condition, one of True, False, Unknown.
+                        enum:
+                          - "True"
+                          - "False"
+                          - Unknown
+                        type: string
+                      type:
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        maxLength: 316
+                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                        type: string
+                    required:
+                      - lastTransitionTime
+                      - message
+                      - reason
+                      - status
+                      - type
+                    type: object
+                  type: array
+                lastAutomationRunTime:
+                  description: LastAutomationRunTime records the last time the controller
+                    ran this automation through to completion (even if no updates were
+                    made).
+                  format: date-time
+                  type: string
+                lastHandledReconcileAt:
+                  description: LastHandledReconcileAt holds the value of the most recent
+                    reconcile request value, so a change can be detected.
+                  type: string
+                lastPushCommit:
+                  description: LastPushCommit records the SHA1 of the last commit made
+                    by the controller, for this automation object
+                  type: string
+                lastPushTime:
+                  description: LastPushTime records the time of the last pushed change.
+                  format: date-time
+                  type: string
+                observedGeneration:
+                  format: int64
+                  type: integer
+              type: object
+          type: object
+      served: true
+      storage: false
+      subresources:
+        status: {}
+    - additionalPrinterColumns:
+        - jsonPath: .status.lastAutomationRunTime
+          name: Last run
+          type: string
+      name: v1beta1
+      schema:
+        openAPIV3Schema:
+          description: ImageUpdateAutomation is the Schema for the imageupdateautomations
+            API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation
+              properties:
+                git:
+                  description: GitSpec contains all the git-specific definitions. This
+                    is technically optional, but in practice mandatory until there are
+                    other kinds of source allowed.
+                  properties:
+                    checkout:
+                      description: Checkout gives the parameters for cloning the git
+                        repository, ready to make changes. If not present, the `spec.ref`
+                        field from the referenced `GitRepository` or its default will
+                        be used.
+                      properties:
+                        ref:
+                          description: Reference gives a branch, tag or commit to clone
+                            from the Git repository.
+                          properties:
+                            branch:
+                              default: master
+                              description: The Git branch to checkout, defaults to master.
+                              type: string
+                            commit:
+                              description: The Git commit SHA to checkout, if specified
+                                Tag filters will be ignored.
+                              type: string
+                            semver:
+                              description: The Git tag semver expression, takes precedence
+                                over Tag.
+                              type: string
+                            tag:
+                              description: The Git tag to checkout, takes precedence
+                                over Branch.
+                              type: string
+                          type: object
+                      required:
+                        - ref
+                      type: object
+                    commit:
+                      description: Commit specifies how to commit to the git repository.
+                      properties:
+                        author:
+                          description: Author gives the email and optionally the name
+                            to use as the author of commits.
+                          properties:
+                            email:
+                              description: Email gives the email to provide when making
+                                a commit.
+                              type: string
+                            name:
+                              description: Name gives the name to provide when making
+                                a commit.
+                              type: string
+                          required:
+                            - email
+                          type: object
+                        messageTemplate:
+                          description: MessageTemplate provides a template for the commit
+                            message, into which will be interpolated the details of
+                            the change made.
+                          type: string
+                        signingKey:
+                          description: SigningKey provides the option to sign commits
+                            with a GPG key
+                          properties:
+                            secretRef:
+                              description: SecretRef holds the name to a secret that
+                                contains a 'git.asc' key corresponding to the ASCII
+                                Armored file containing the GPG signing keypair as the
+                                value. It must be in the same namespace as the ImageUpdateAutomation.
+                              properties:
+                                name:
+                                  description: Name of the referent
+                                  type: string
+                              required:
+                                - name
+                              type: object
+                          type: object
+                      required:
+                        - author
+                      type: object
+                    push:
+                      description: Push specifies how and where to push commits made
+                        by the automation. If missing, commits are pushed (back) to
+                        `.spec.checkout.branch` or its default.
+                      properties:
+                        branch:
+                          description: Branch specifies that commits should be pushed
+                            to the branch named. The branch is created using `.spec.checkout.branch`
+                            as the starting point, if it doesn't already exist.
+                          type: string
+                      required:
+                        - branch
+                      type: object
+                  required:
+                    - commit
+                  type: object
+                interval:
+                  description: Interval gives an lower bound for how often the automation
+                    run should be attempted.
+                  type: string
+                sourceRef:
+                  description: SourceRef refers to the resource giving access details
+                    to a git repository.
+                  properties:
+                    apiVersion:
+                      description: API version of the referent
+                      type: string
+                    kind:
+                      default: GitRepository
+                      description: Kind of the referent
+                      enum:
+                        - GitRepository
+                      type: string
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - kind
+                    - name
+                  type: object
+                suspend:
+                  description: Suspend tells the controller to not run this automation,
+                    until it is unset (or set to false). Defaults to false.
+                  type: boolean
+                update:
+                  default:
+                    strategy: Setters
+                  description: Update gives the specification for how to update the
+                    files in the repository. This can be left empty, to use the default
+                    value.
+                  properties:
+                    path:
+                      description: Path to the directory containing the manifests to
+                        be updated. Defaults to 'None', which translates to the root
+                        path of the GitRepositoryRef.
+                      type: string
+                    strategy:
+                      default: Setters
+                      description: Strategy names the strategy to be used.
+                      enum:
+                        - Setters
+                      type: string
+                  required:
+                    - strategy
+                  type: object
+              required:
+                - interval
+                - sourceRef
+              type: object
+            status:
+              description: ImageUpdateAutomationStatus defines the observed state of
+                ImageUpdateAutomation
+              properties:
+                conditions:
+                  items:
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
+                    properties:
+                      lastTransitionTime:
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
+                        format: date-time
+                        type: string
+                      message:
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
+                        maxLength: 32768
+                        type: string
+                      observedGeneration:
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
+                        format: int64
+                        minimum: 0
+                        type: integer
+                      reason:
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
+                        maxLength: 1024
+                        minLength: 1
+                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                        type: string
+                      status:
+                        description: status of the condition, one of True, False, Unknown.
+                        enum:
+                          - "True"
+                          - "False"
+                          - Unknown
+                        type: string
+                      type:
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        maxLength: 316
+                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                        type: string
+                    required:
+                      - lastTransitionTime
+                      - message
+                      - reason
+                      - status
+                      - type
+                    type: object
+                  type: array
+                lastAutomationRunTime:
+                  description: LastAutomationRunTime records the last time the controller
+                    ran this automation through to completion (even if no updates were
+                    made).
+                  format: date-time
+                  type: string
+                lastHandledReconcileAt:
+                  description: LastHandledReconcileAt holds the value of the most recent
+                    reconcile request value, so a change can be detected.
+                  type: string
+                lastPushCommit:
+                  description: LastPushCommit records the SHA1 of the last commit made
+                    by the controller, for this automation object
+                  type: string
+                lastPushTime:
+                  description: LastPushTime records the time of the last pushed change.
+                  format: date-time
+                  type: string
+                observedGeneration:
+                  format: int64
+                  type: integer
+              type: object
+          type: object
+      served: true
+      storage: true
+      subresources:
+        status: {}

vela-templates/addons/fluxcd/resource/crds/kustomize.yaml

@@ -3,7 +3,6 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     controller-gen.kubebuilder.io/version: v0.5.0
-  creationTimestamp: null
   labels:
     app.kubernetes.io/instance: flux-system
   name: kustomizations.kustomize.toolkit.fluxcd.io
@@ -34,10 +33,14 @@ spec:
           description: Kustomization is the Schema for the kustomizations API.
           properties:
             apiVersion:
-              description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources"
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
               type: string
             kind:
-              description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
               type: string
             metadata:
               type: object
@@ -45,7 +48,8 @@ spec:
               description: KustomizationSpec defines the desired state of a kustomization.
               properties:
                 decryption:
-                  description: Decrypt Kubernetes secrets before applying them on the cluster.
+                  description: Decrypt Kubernetes secrets before applying them on the
+                    cluster.
                   properties:
                     provider:
                       description: Provider is the name of the decryption engine.
@@ -53,7 +57,8 @@ spec:
                         - sops
                       type: string
                     secretRef:
-                      description: The secret name containing the private OpenPGP keys used for decryption.
+                      description: The secret name containing the private OpenPGP keys
+                        used for decryption.
                       properties:
                         name:
                           description: Name of the referent
@@ -65,9 +70,12 @@ spec:
                     - provider
                   type: object
                 dependsOn:
-                  description: DependsOn may contain a dependency.CrossNamespaceDependencyReference slice with references to Kustomization resources that must be ready before this Kustomization can be reconciled.
+                  description: DependsOn may contain a dependency.CrossNamespaceDependencyReference
+                    slice with references to Kustomization resources that must be ready
+                    before this Kustomization can be reconciled.
                   items:
-                    description: CrossNamespaceDependencyReference holds the reference to a dependency.
+                    description: CrossNamespaceDependencyReference holds the reference
+                      to a dependency.
                     properties:
                       name:
                         description: Name holds the name reference of a dependency.
@@ -81,15 +89,18 @@ spec:
                   type: array
                 force:
                   default: false
-                  description: Force instructs the controller to recreate resources when patching fails due to an immutable field change.
+                  description: Force instructs the controller to recreate resources
+                    when patching fails due to an immutable field change.
                   type: boolean
                 healthChecks:
                   description: A list of resources to be included in the health assessment.
                   items:
-                    description: NamespacedObjectKindReference contains enough information to let you locate the typed referenced object in any namespace
+                    description: NamespacedObjectKindReference contains enough information
+                      to let you locate the typed referenced object in any namespace
                     properties:
                       apiVersion:
-                        description: API version of the referent, if not specified the Kubernetes preferred version will be used
+                        description: API version of the referent, if not specified the
+                          Kubernetes preferred version will be used
                         type: string
                       kind:
                         description: Kind of the referent
@@ -98,7 +109,8 @@ spec:
                         description: Name of the referent
                         type: string
                       namespace:
-                        description: Namespace of the referent, when not specified it acts as LocalObjectReference
+                        description: Namespace of the referent, when not specified it
+                          acts as LocalObjectReference
                         type: string
                     required:
                       - kind
@@ -106,21 +118,27 @@ spec:
                     type: object
                   type: array
                 images:
-                  description: Images is a list of (image name, new name, new tag or digest) for changing image names, tags or digests. This can also be achieved with a patch, but this operator is simpler to specify.
+                  description: Images is a list of (image name, new name, new tag or
+                    digest) for changing image names, tags or digests. This can also
+                    be achieved with a patch, but this operator is simpler to specify.
                   items:
-                    description: Image contains an image name, a new name, a new tag or digest, which will replace the original name and tag.
+                    description: Image contains an image name, a new name, a new tag
+                      or digest, which will replace the original name and tag.
                     properties:
                       digest:
-                        description: Digest is the value used to replace the original image tag. If digest is present NewTag value is ignored.
+                        description: Digest is the value used to replace the original
+                          image tag. If digest is present NewTag value is ignored.
                         type: string
                       name:
                         description: Name is a tag-less image name.
                         type: string
                       newName:
-                        description: NewName is the value used to replace the original name.
+                        description: NewName is the value used to replace the original
+                          name.
                         type: string
                       newTag:
-                        description: NewTag is the value used to replace the original tag.
+                        description: NewTag is the value used to replace the original
+                          tag.
                         type: string
                     required:
                       - name
@@ -130,10 +148,19 @@ spec:
                   description: The interval at which to reconcile the Kustomization.
                   type: string
                 kubeConfig:
-                  description: The KubeConfig for reconciling the Kustomization on a remote cluster. When specified, KubeConfig takes precedence over ServiceAccountName.
+                  description: The KubeConfig for reconciling the Kustomization on a
+                    remote cluster. When specified, KubeConfig takes precedence over
+                    ServiceAccountName.
                   properties:
                     secretRef:
-                      description: SecretRef holds the name to a secret that contains a 'value' key with the kubeconfig file as the value. It must be in the same namespace as the Kustomization. It is recommended that the kubeconfig is self-contained, and the secret is regularly updated if credentials such as a cloud-access-token expire. Cloud specific `cmd-path` auth helpers will not function without adding binaries and credentials to the Pod that is responsible for reconciling the Kustomization.
+                      description: SecretRef holds the name to a secret that contains
+                        a 'value' key with the kubeconfig file as the value. It must
+                        be in the same namespace as the Kustomization. It is recommended
+                        that the kubeconfig is self-contained, and the secret is regularly
+                        updated if credentials such as a cloud-access-token expire.
+                        Cloud specific `cmd-path` auth helpers will not function without
+                        adding binaries and credentials to the Pod that is responsible
+                        for reconciling the Kustomization.
                       properties:
                         name:
                           description: Name of the referent
@@ -143,27 +170,42 @@ spec:
                       type: object
                   type: object
                 patches:
-                  description: Patches (also called overlays), defined as inline YAML objects.
+                  description: Strategic merge and JSON patches, defined as inline YAML
+                    objects, capable of targeting objects based on kind, label and annotation
+                    selectors.
                   items:
-                    description: Patch contains either a StrategicMerge or a JSON6902 patch, either a file or inline, and the target the patch should be applied to.
+                    description: Patch contains either a StrategicMerge or a JSON6902
+                      patch, either a file or inline, and the target the patch should
+                      be applied to.
                     properties:
                       patch:
-                        description: Patch contains the JSON6902 patch document with an array of operation objects.
+                        description: Patch contains the JSON6902 patch document with
+                          an array of operation objects.
                         type: string
                       target:
-                        description: Target points to the resources that the patch document should be applied to.
+                        description: Target points to the resources that the patch document
+                          should be applied to.
                         properties:
                           annotationSelector:
-                            description: AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotations.
+                            description: AnnotationSelector is a string that follows
+                              the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
+                              It matches with the resource annotations.
                             type: string
                           group:
-                            description: Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
+                            description: Group is the API group to select resources
+                              from. Together with Version and Kind it is capable of
+                              unambiguously identifying and/or selecting resources.
+                              https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
                             type: string
                           kind:
-                            description: Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
+                            description: Kind of the API Group to select resources from.
+                              Together with Group and Version it is capable of unambiguously
+                              identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
                             type: string
                           labelSelector:
-                            description: LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels.
+                            description: LabelSelector is a string that follows the
+                              label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
+                              It matches with the resource labels.
                             type: string
                           name:
                             description: Name to match resources with.
@@ -172,7 +214,9 @@ spec:
                             description: Namespace to select resources from.
                             type: string
                           version:
-                            description: Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
+                            description: Version of the API Group to select resources
+                              from. Together with Group and Kind it is capable of unambiguously
+                              identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
                             type: string
                         type: object
                     type: object
@@ -180,10 +224,12 @@ spec:
                 patchesJson6902:
                   description: JSON 6902 patches, defined as inline YAML objects.
                   items:
-                    description: JSON6902Patch contains a JSON6902 patch and the target the patch should be applied to.
+                    description: JSON6902Patch contains a JSON6902 patch and the target
+                      the patch should be applied to.
                     properties:
                       patch:
-                        description: Patch contains the JSON6902 patch document with an array of operation objects.
+                        description: Patch contains the JSON6902 patch document with
+                          an array of operation objects.
                         items:
                           description: JSON6902 is a JSON6902 operation object. https://tools.ietf.org/html/rfc6902#section-4
                           properties:
@@ -208,19 +254,29 @@ spec:
                           type: object
                         type: array
                       target:
-                        description: Target points to the resources that the patch document should be applied to.
+                        description: Target points to the resources that the patch document
+                          should be applied to.
                         properties:
                           annotationSelector:
-                            description: AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotations.
+                            description: AnnotationSelector is a string that follows
+                              the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
+                              It matches with the resource annotations.
                             type: string
                           group:
-                            description: Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
+                            description: Group is the API group to select resources
+                              from. Together with Version and Kind it is capable of
+                              unambiguously identifying and/or selecting resources.
+                              https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
                             type: string
                           kind:
-                            description: Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
+                            description: Kind of the API Group to select resources from.
+                              Together with Group and Version it is capable of unambiguously
+                              identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
                             type: string
                           labelSelector:
-                            description: LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels.
+                            description: LabelSelector is a string that follows the
+                              label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
+                              It matches with the resource labels.
                             type: string
                           name:
                             description: Name to match resources with.
@@ -229,7 +285,9 @@ spec:
                             description: Namespace to select resources from.
                             type: string
                           version:
-                            description: Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
+                            description: Version of the API Group to select resources
+                              from. Together with Group and Kind it is capable of unambiguously
+                              identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
                             type: string
                         type: object
                     required:
@@ -243,29 +301,44 @@ spec:
                     x-kubernetes-preserve-unknown-fields: true
                   type: array
                 path:
-                  description: Path to the directory containing the kustomization.yaml file, or the set of plain YAMLs a kustomization.yaml should be generated for. Defaults to 'None', which translates to the root path of the SourceRef.
+                  description: Path to the directory containing the kustomization.yaml
+                    file, or the set of plain YAMLs a kustomization.yaml should be generated
+                    for. Defaults to 'None', which translates to the root path of the
+                    SourceRef.
                   type: string
                 postBuild:
-                  description: PostBuild describes which actions to perform on the YAML manifest generated by building the kustomize overlay.
+                  description: PostBuild describes which actions to perform on the YAML
+                    manifest generated by building the kustomize overlay.
                   properties:
                     substitute:
                       additionalProperties:
                         type: string
-                      description: Substitute holds a map of key/value pairs. The variables defined in your YAML manifests that match any of the keys defined in the map will be substituted with the set value. Includes support for bash string replacement functions e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}.
+                      description: Substitute holds a map of key/value pairs. The variables
+                        defined in your YAML manifests that match any of the keys defined
+                        in the map will be substituted with the set value. Includes
+                        support for bash string replacement functions e.g. ${var:=default},
+                        ${var:position} and ${var/substring/replacement}.
                       type: object
                     substituteFrom:
-                      description: SubstituteFrom holds references to ConfigMaps and Secrets containing the variables and their values to be substituted in the YAML manifests. The ConfigMap and the Secret data keys represent the var names and they must match the vars declared in the manifests for the substitution to happen.
+                      description: SubstituteFrom holds references to ConfigMaps and
+                        Secrets containing the variables and their values to be substituted
+                        in the YAML manifests. The ConfigMap and the Secret data keys
+                        represent the var names and they must match the vars declared
+                        in the manifests for the substitution to happen.
                       items:
-                        description: SubstituteReference contains a reference to a resource containing the variables name and value.
+                        description: SubstituteReference contains a reference to a resource
+                          containing the variables name and value.
                         properties:
                           kind:
-                            description: Kind of the values referent, valid values are ('Secret', 'ConfigMap').
+                            description: Kind of the values referent, valid values are
+                              ('Secret', 'ConfigMap').
                             enum:
                               - Secret
                               - ConfigMap
                             type: string
                           name:
-                            description: Name of the values referent. Should reside in the same namespace as the referring resource.
+                            description: Name of the values referent. Should reside
+                              in the same namespace as the referring resource.
                             maxLength: 253
                             minLength: 1
                             type: string
@@ -279,13 +352,17 @@ spec:
                   description: Prune enables garbage collection.
                   type: boolean
                 retryInterval:
-                  description: The interval at which to retry a previously failed reconciliation. When not specified, the controller uses the KustomizationSpec.Interval value to retry failures.
+                  description: The interval at which to retry a previously failed reconciliation.
+                    When not specified, the controller uses the KustomizationSpec.Interval
+                    value to retry failures.
                   type: string
                 serviceAccountName:
-                  description: The name of the Kubernetes service account to impersonate when reconciling this Kustomization.
+                  description: The name of the Kubernetes service account to impersonate
+                    when reconciling this Kustomization.
                   type: string
                 sourceRef:
-                  description: Reference of the source where the kustomization file is.
+                  description: Reference of the source where the kustomization file
+                    is.
                   properties:
                     apiVersion:
                       description: API version of the referent
@@ -300,25 +377,34 @@ spec:
                       description: Name of the referent
                       type: string
                     namespace:
-                      description: Namespace of the referent, defaults to the Kustomization namespace
+                      description: Namespace of the referent, defaults to the Kustomization
+                        namespace
                       type: string
                   required:
                     - kind
                     - name
                   type: object
                 suspend:
-                  description: This flag tells the controller to suspend subsequent kustomize executions, it does not apply to already started executions. Defaults to false.
+                  description: This flag tells the controller to suspend subsequent
+                    kustomize executions, it does not apply to already started executions.
+                    Defaults to false.
                   type: boolean
                 targetNamespace:
-                  description: TargetNamespace sets or overrides the namespace in the kustomization.yaml file.
+                  description: TargetNamespace sets or overrides the namespace in the
+                    kustomization.yaml file.
                   maxLength: 63
                   minLength: 1
                   type: string
                 timeout:
-                  description: Timeout for validation, apply and health checking operations. Defaults to 'Interval' duration.
+                  description: Timeout for validation, apply and health checking operations.
+                    Defaults to 'Interval' duration.
                   type: string
                 validation:
-                  description: Validate the Kubernetes objects before applying them on the cluster. The validation strategy can be 'client' (local dry-run), 'server' (APIServer dry-run) or 'none'. When 'Force' is 'true', validation will fallback to 'client' if set to 'server' because server-side validation is not supported in this scenario.
+                  description: Validate the Kubernetes objects before applying them
+                    on the cluster. The validation strategy can be 'client' (local dry-run),
+                    'server' (APIServer dry-run) or 'none'. When 'Force' is 'true',
+                    validation will fallback to 'client' if set to 'server' because
+                    server-side validation is not supported in this scenario.
                   enum:
                     - none
                     - client
@@ -334,23 +420,45 @@ spec:
               properties:
                 conditions:
                   items:
-                    description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions.  For example, type FooStatus struct{     // Represents the observations of a foo's current state.     // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type     // +patchStrategy=merge     // +listType=map     // +listMapKey=type     Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n     // other fields }"
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
                     properties:
                       lastTransitionTime:
-                        description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
                         format: date-time
                         type: string
                       message:
-                        description: message is a human readable message indicating details about the transition. This may be an empty string.
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
                         maxLength: 32768
                         type: string
                       observedGeneration:
-                        description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
                         format: int64
                         minimum: 0
                         type: integer
                       reason:
-                        description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
                         maxLength: 1024
                         minLength: 1
                         pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -363,7 +471,11 @@ spec:
                           - Unknown
                         type: string
                       type:
-                        description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
                         maxLength: 316
                         pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                         type: string
@@ -376,13 +488,16 @@ spec:
                     type: object
                   type: array
                 lastAppliedRevision:
-                  description: The last successfully applied revision. The revision format for Git sources is <branch|tag>/<commit-sha>.
+                  description: The last successfully applied revision. The revision
+                    format for Git sources is <branch|tag>/<commit-sha>.
                   type: string
                 lastAttemptedRevision:
-                  description: LastAttemptedRevision is the revision of the last reconciliation attempt.
+                  description: LastAttemptedRevision is the revision of the last reconciliation
+                    attempt.
                   type: string
                 lastHandledReconcileAt:
-                  description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change can be detected.
+                  description: LastHandledReconcileAt holds the value of the most recent
+                    reconcile request value, so a change can be detected.
                   type: string
                 observedGeneration:
                   description: ObservedGeneration is the last reconciled generation.
@@ -397,7 +512,8 @@ spec:
                     entries:
                       description: A list of Kubernetes kinds grouped by namespace.
                       items:
-                        description: Snapshot holds the metadata of namespaced Kubernetes objects
+                        description: Snapshot holds the metadata of namespaced Kubernetes
+                          objects
                         properties:
                           kinds:
                             additionalProperties:
@@ -421,9 +537,3 @@ spec:
       storage: true
       subresources:
         status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []

vela-templates/addons/fluxcd/resource/crds/provider.yaml

@@ -0,0 +1,179 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.5.0
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: providers.notification.toolkit.fluxcd.io
+spec:
+  group: notification.toolkit.fluxcd.io
+  names:
+    kind: Provider
+    listKind: ProviderList
+    plural: providers
+    singular: provider
+  scope: Namespaced
+  versions:
+    - additionalPrinterColumns:
+        - jsonPath: .status.conditions[?(@.type=="Ready")].status
+          name: Ready
+          type: string
+        - jsonPath: .status.conditions[?(@.type=="Ready")].message
+          name: Status
+          type: string
+        - jsonPath: .metadata.creationTimestamp
+          name: Age
+          type: date
+      name: v1beta1
+      schema:
+        openAPIV3Schema:
+          description: Provider is the Schema for the providers API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: ProviderSpec defines the desired state of Provider
+              properties:
+                address:
+                  description: HTTP/S webhook address of this provider
+                  pattern: ^(http|https)://
+                  type: string
+                certSecretRef:
+                  description: CertSecretRef can be given the name of a secret containing
+                    a PEM-encoded CA certificate (`caFile`)
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                channel:
+                  description: Alert channel for this provider
+                  type: string
+                proxy:
+                  description: HTTP/S address of the proxy
+                  pattern: ^(http|https)://
+                  type: string
+                secretRef:
+                  description: Secret reference containing the provider webhook URL
+                    using "address" as data key
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                type:
+                  description: Type of provider
+                  enum:
+                    - slack
+                    - discord
+                    - msteams
+                    - rocket
+                    - generic
+                    - github
+                    - gitlab
+                    - bitbucket
+                    - azuredevops
+                    - googlechat
+                    - webex
+                    - sentry
+                    - azureeventhub
+                  type: string
+                username:
+                  description: Bot username for this provider
+                  type: string
+              required:
+                - type
+              type: object
+            status:
+              description: ProviderStatus defines the observed state of Provider
+              properties:
+                conditions:
+                  items:
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
+                    properties:
+                      lastTransitionTime:
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
+                        format: date-time
+                        type: string
+                      message:
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
+                        maxLength: 32768
+                        type: string
+                      observedGeneration:
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
+                        format: int64
+                        minimum: 0
+                        type: integer
+                      reason:
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
+                        maxLength: 1024
+                        minLength: 1
+                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                        type: string
+                      status:
+                        description: status of the condition, one of True, False, Unknown.
+                        enum:
+                          - "True"
+                          - "False"
+                          - Unknown
+                        type: string
+                      type:
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        maxLength: 316
+                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                        type: string
+                    required:
+                      - lastTransitionTime
+                      - message
+                      - reason
+                      - status
+                      - type
+                    type: object
+                  type: array
+              type: object
+          type: object
+      served: true
+      storage: true
+      subresources:
+        status: {}

vela-templates/addons/fluxcd/resource/crds/receiver.yaml

@@ -0,0 +1,208 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.5.0
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: receivers.notification.toolkit.fluxcd.io
+spec:
+  group: notification.toolkit.fluxcd.io
+  names:
+    kind: Receiver
+    listKind: ReceiverList
+    plural: receivers
+    singular: receiver
+  scope: Namespaced
+  versions:
+    - additionalPrinterColumns:
+        - jsonPath: .status.conditions[?(@.type=="Ready")].status
+          name: Ready
+          type: string
+        - jsonPath: .status.conditions[?(@.type=="Ready")].message
+          name: Status
+          type: string
+        - jsonPath: .metadata.creationTimestamp
+          name: Age
+          type: date
+      name: v1beta1
+      schema:
+        openAPIV3Schema:
+          description: Receiver is the Schema for the receivers API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: ReceiverSpec defines the desired state of Receiver
+              properties:
+                events:
+                  description: A list of events to handle, e.g. 'push' for GitHub or
+                    'Push Hook' for GitLab.
+                  items:
+                    type: string
+                  type: array
+                resources:
+                  description: A list of resources to be notified about changes.
+                  items:
+                    description: CrossNamespaceObjectReference contains enough information
+                      to let you locate the typed referenced object at cluster level
+                    properties:
+                      apiVersion:
+                        description: API version of the referent
+                        type: string
+                      kind:
+                        description: Kind of the referent
+                        enum:
+                          - Bucket
+                          - GitRepository
+                          - Kustomization
+                          - HelmRelease
+                          - HelmChart
+                          - HelmRepository
+                          - ImageRepository
+                          - ImagePolicy
+                          - ImageUpdateAutomation
+                        type: string
+                      name:
+                        description: Name of the referent
+                        maxLength: 53
+                        minLength: 1
+                        type: string
+                      namespace:
+                        description: Namespace of the referent
+                        maxLength: 53
+                        minLength: 1
+                        type: string
+                    required:
+                      - name
+                    type: object
+                  type: array
+                secretRef:
+                  description: Secret reference containing the token used to validate
+                    the payload authenticity
+                  properties:
+                    name:
+                      description: Name of the referent
+                      type: string
+                  required:
+                    - name
+                  type: object
+                suspend:
+                  description: This flag tells the controller to suspend subsequent
+                    events handling. Defaults to false.
+                  type: boolean
+                type:
+                  description: Type of webhook sender, used to determine the validation
+                    procedure and payload deserialization.
+                  enum:
+                    - generic
+                    - generic-hmac
+                    - github
+                    - gitlab
+                    - bitbucket
+                    - harbor
+                    - dockerhub
+                    - quay
+                    - gcr
+                    - nexus
+                    - acr
+                  type: string
+              required:
+                - resources
+                - type
+              type: object
+            status:
+              description: ReceiverStatus defines the observed state of Receiver
+              properties:
+                conditions:
+                  items:
+                    description: "Condition contains details for one aspect of the current
+                    state of this API Resource. --- This struct is intended for direct
+                    use as an array at the field path .status.conditions.  For example,
+                    type FooStatus struct{     // Represents the observations of a
+                    foo's current state.     // Known .status.conditions.type are:
+                    \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
+                    \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
+                    \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
+                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
+                    \n     // other fields }"
+                    properties:
+                      lastTransitionTime:
+                        description: lastTransitionTime is the last time the condition
+                          transitioned from one status to another. This should be when
+                          the underlying condition changed.  If that is not known, then
+                          using the time when the API field changed is acceptable.
+                        format: date-time
+                        type: string
+                      message:
+                        description: message is a human readable message indicating
+                          details about the transition. This may be an empty string.
+                        maxLength: 32768
+                        type: string
+                      observedGeneration:
+                        description: observedGeneration represents the .metadata.generation
+                          that the condition was set based upon. For instance, if .metadata.generation
+                          is currently 12, but the .status.conditions[x].observedGeneration
+                          is 9, the condition is out of date with respect to the current
+                          state of the instance.
+                        format: int64
+                        minimum: 0
+                        type: integer
+                      reason:
+                        description: reason contains a programmatic identifier indicating
+                          the reason for the condition's last transition. Producers
+                          of specific condition types may define expected values and
+                          meanings for this field, and whether the values are considered
+                          a guaranteed API. The value should be a CamelCase string.
+                          This field may not be empty.
+                        maxLength: 1024
+                        minLength: 1
+                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+                        type: string
+                      status:
+                        description: status of the condition, one of True, False, Unknown.
+                        enum:
+                          - "True"
+                          - "False"
+                          - Unknown
+                        type: string
+                      type:
+                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
+                          --- Many .condition.type values are consistent across resources
+                          like Available, but because arbitrary conditions can be useful
+                          (see .node.status.conditions), the ability to deconflict is
+                          important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                        maxLength: 316
+                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+                        type: string
+                    required:
+                      - lastTransitionTime
+                      - message
+                      - reason
+                      - status
+                      - type
+                    type: object
+                  type: array
+                observedGeneration:
+                  description: ObservedGeneration is the last observed generation.
+                  format: int64
+                  type: integer
+                url:
+                  description: Generated webhook URL in the format of '/hook/sha256sum(token+name+namespace)'.
+                  type: string
+              type: object
+          type: object
+      served: true
+      storage: true
+      subresources:
+        status: {}

vela-templates/addons/fluxcd/resource/deployment/helm-controller.yaml

@@ -2,9 +2,10 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   labels:
+    app.kubernetes.io/instance: flux-system
     control-plane: controller
   name: helm-controller
-  namespace: vela-system
+  namespace: flux-system
 spec:
   replicas: 1
   selector:
@@ -60,8 +61,8 @@ spec:
           volumeMounts:
             - mountPath: /tmp
               name: temp
-      serviceAccountName: helm-controller-serviceaccount
+      serviceAccountName: sa-helm-controller
       terminationGracePeriodSeconds: 600
       volumes:
-        - emptyDir: {}
-          name: temp
+        - emptyDir: { }
+          name: temp

vela-templates/addons/fluxcd/resource/deployment/image-automation-controller.yaml

@@ -0,0 +1,70 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+    control-plane: controller
+  name: image-automation-controller
+  namespace: flux-system
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: image-automation-controller
+  template:
+    metadata:
+      annotations:
+        prometheus.io/port: "8080"
+        prometheus.io/scrape: "true"
+      labels:
+        app: image-automation-controller
+    spec:
+      containers:
+        - args:
+            - --events-addr=http://notification-controller/
+            - --watch-all-namespaces
+            - --log-level=info
+            - --log-encoding=json
+            - --enable-leader-election
+          env:
+            - name: RUNTIME_NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
+          image: fluxcd/image-automation-controller:v0.14.0
+          imagePullPolicy: IfNotPresent
+          livenessProbe:
+            httpGet:
+              path: /healthz
+              port: healthz
+          name: manager
+          ports:
+            - containerPort: 8080
+              name: http-prom
+            - containerPort: 9440
+              name: healthz
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              path: /readyz
+              port: healthz
+          resources:
+            limits:
+              cpu: 1000m
+              memory: 1Gi
+            requests:
+              cpu: 100m
+              memory: 64Mi
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+          volumeMounts:
+            - mountPath: /tmp
+              name: temp
+      securityContext:
+        fsGroup: 1337
+      serviceAccountName: sa-image-automation-controller
+      terminationGracePeriodSeconds: 10
+      volumes:
+        - emptyDir: { }
+          name: temp

vela-templates/addons/fluxcd/resource/deployment/image-reflector-controller.yaml

@@ -0,0 +1,74 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+    control-plane: controller
+  name: image-reflector-controller
+  namespace: flux-system
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: image-reflector-controller
+  template:
+    metadata:
+      annotations:
+        prometheus.io/port: "8080"
+        prometheus.io/scrape: "true"
+      labels:
+        app: image-reflector-controller
+    spec:
+      containers:
+        - args:
+            - --events-addr=http://notification-controller/
+            - --watch-all-namespaces
+            - --log-level=info
+            - --log-encoding=json
+            - --enable-leader-election
+          env:
+            - name: RUNTIME_NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
+          image: fluxcd/image-reflector-controller:v0.11.0
+          imagePullPolicy: IfNotPresent
+          livenessProbe:
+            httpGet:
+              path: /healthz
+              port: healthz
+          name: manager
+          ports:
+            - containerPort: 8080
+              name: http-prom
+            - containerPort: 9440
+              name: healthz
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              path: /readyz
+              port: healthz
+          resources:
+            limits:
+              cpu: 1000m
+              memory: 1Gi
+            requests:
+              cpu: 100m
+              memory: 64Mi
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+          volumeMounts:
+            - mountPath: /tmp
+              name: temp
+            - mountPath: /data
+              name: data
+      securityContext:
+        fsGroup: 1337
+      serviceAccountName: sa-image-reflector-controller
+      terminationGracePeriodSeconds: 10
+      volumes:
+        - emptyDir: { }
+          name: temp
+        - emptyDir: { }
+          name: data

vela-templates/addons/fluxcd/resource/deployment/kustomize-controller.yaml

@@ -2,8 +2,10 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   labels:
+    app.kubernetes.io/instance: flux-system
     control-plane: controller
   name: kustomize-controller
+  namespace: flux-system
 spec:
   replicas: 1
   selector:
@@ -29,7 +31,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: fluxcd/kustomize-controller:v0.13.0
+          image: fluxcd/kustomize-controller:v0.13.1
           imagePullPolicy: IfNotPresent
           livenessProbe:
             httpGet:
@@ -61,8 +63,8 @@ spec:
               name: temp
       securityContext:
         fsGroup: 1337
-      serviceAccountName: kustomize-controller-serviceaccount
+      serviceAccountName: sa-kustomize-controller
       terminationGracePeriodSeconds: 60
       volumes:
         - emptyDir: { }
-          name: temp
+          name: temp

vela-templates/addons/fluxcd/resource/deployment/notification-controller.yaml

@@ -0,0 +1,71 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+    control-plane: controller
+  name: flux-notification-controller
+  namespace: flux-system
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: notification-controller
+  template:
+    metadata:
+      annotations:
+        prometheus.io/port: "8080"
+        prometheus.io/scrape: "true"
+      labels:
+        app: notification-controller
+    spec:
+      containers:
+        - args:
+            - --watch-all-namespaces
+            - --log-level=info
+            - --log-encoding=json
+            - --enable-leader-election
+          env:
+            - name: RUNTIME_NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
+          image: fluxcd/notification-controller:v0.15.0
+          imagePullPolicy: IfNotPresent
+          livenessProbe:
+            httpGet:
+              path: /healthz
+              port: healthz
+          name: manager
+          ports:
+            - containerPort: 9090
+              name: http
+            - containerPort: 9292
+              name: http-webhook
+            - containerPort: 8080
+              name: http-prom
+            - containerPort: 9440
+              name: healthz
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              path: /readyz
+              port: healthz
+          resources:
+            limits:
+              cpu: 1000m
+              memory: 1Gi
+            requests:
+              cpu: 100m
+              memory: 64Mi
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+          volumeMounts:
+            - mountPath: /tmp
+              name: temp
+      serviceAccountName: sa-notification-controller
+      terminationGracePeriodSeconds: 10
+      volumes:
+        - emptyDir: { }
+          name: temp

vela-templates/addons/fluxcd/resource/deployment/source-controller.yaml

@@ -2,9 +2,10 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   labels:
+    app.kubernetes.io/instance: flux-system
     control-plane: controller
   name: flux-source-controller
-  namespace: vela-system
+  namespace: flux-system
 spec:
   replicas: 1
   selector:
@@ -69,10 +70,10 @@ spec:
               name: tmp
       securityContext:
         fsGroup: 1337
-      serviceAccountName: source-controller-serviceaccount
+      serviceAccountName: sa-source-controller
       terminationGracePeriodSeconds: 10
       volumes:
-        - emptyDir: {}
+        - emptyDir: { }
           name: data
-        - emptyDir: {}
-          name: tmp
+        - emptyDir: { }
+          name: tmp

vela-templates/addons/fluxcd/resource/network-policy/allow-egress.yaml

@@ -0,0 +1,17 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: allow-egress
+  namespace: flux-system
+spec:
+  egress:
+    - { }
+  ingress:
+    - from:
+        - podSelector: { }
+  podSelector: { }
+  policyTypes:
+    - Ingress
+    - Egress

vela-templates/addons/fluxcd/resource/network-policy/allow-scraping.yaml

@@ -0,0 +1,17 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: allow-scraping
+  namespace: flux-system
+spec:
+  ingress:
+    - from:
+        - namespaceSelector: { }
+      ports:
+        - port: 8080
+          protocol: TCP
+  podSelector: { }
+  policyTypes:
+    - Ingress

vela-templates/addons/fluxcd/resource/network-policy/allow-webhooks.yaml

@@ -0,0 +1,16 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: allow-webhooks
+  namespace: flux-system
+spec:
+  ingress:
+    - from:
+        - namespaceSelector: { }
+  podSelector:
+    matchLabels:
+      app: notification-controller
+  policyTypes:
+    - Ingress

vela-templates/addons/fluxcd/resource/rbac/binding-cluster-admin.yaml

@@ -1,6 +1,8 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
   name: cluster-reconciler
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -8,8 +10,8 @@ roleRef:
   name: cluster-admin
 subjects:
   - kind: ServiceAccount
-    name: kustomize-controller-serviceaccount
-    namespace: vela-system
+    name: sa-kustomize-controller
+    namespace: flux-system
   - kind: ServiceAccount
-    name: helm-controller-serviceaccount
-    namespace: vela-system
+    name: sa-helm-controller
+    namespace: flux-system

vela-templates/addons/fluxcd/resource/rbac/binding-crd-controller.yaml

@@ -0,0 +1,29 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: crd-controller
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cr-crd-controller
+subjects:
+  - kind: ServiceAccount
+    name: sa-kustomize-controller
+    namespace: flux-system
+  - kind: ServiceAccount
+    name: sa-helm-controller
+    namespace: flux-system
+  - kind: ServiceAccount
+    name: sa-source-controller
+    namespace: flux-system
+  - kind: ServiceAccount
+    name: sa-notification-controller
+    namespace: flux-system
+  - kind: ServiceAccount
+    name: sa-image-reflector-controller
+    namespace: flux-system
+  - kind: ServiceAccount
+    name: sa-image-automation-controller
+    namespace: flux-system

vela-templates/addons/fluxcd/resource/rbac/crd-controller.yaml

@@ -1,38 +1,40 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  name: crd-controller
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: cr-crd-controller
 rules:
   - apiGroups:
       - source.toolkit.fluxcd.io
     resources:
-      - "*"
+      - '*'
     verbs:
-      - "*"
+      - '*'
   - apiGroups:
       - kustomize.toolkit.fluxcd.io
     resources:
-      - "*"
+      - '*'
     verbs:
-      - "*"
+      - '*'
   - apiGroups:
       - helm.toolkit.fluxcd.io
     resources:
-      - "*"
+      - '*'
     verbs:
-      - "*"
+      - '*'
   - apiGroups:
       - notification.toolkit.fluxcd.io
     resources:
-      - "*"
+      - '*'
     verbs:
-      - "*"
+      - '*'
   - apiGroups:
       - image.toolkit.fluxcd.io
     resources:
-      - "*"
+      - '*'
     verbs:
-      - "*"
+      - '*'
   - apiGroups:
       - ""
     resources:

vela-templates/addons/fluxcd/resource/rbac/helm-controller.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: sa-helm-controller
+  namespace: flux-system

vela-templates/addons/fluxcd/resource/rbac/image-automation-controller.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: sa-image-automation-controller
+  namespace: flux-system

vela-templates/addons/fluxcd/resource/rbac/image-reflector-controller.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: sa-image-reflector-controller
+  namespace: flux-system

vela-templates/addons/fluxcd/resource/rbac/kustomize-controller.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: sa-kustomize-controller
+  namespace: flux-system

vela-templates/addons/fluxcd/resource/rbac/notification-controller.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: sa-notification-controller
+  namespace: flux-system

vela-templates/addons/fluxcd/resource/rbac/source-controller.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+  name: sa-source-controller
+  namespace: flux-system

vela-templates/addons/fluxcd/resource/service/notification-controller.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+    control-plane: controller
+  name: notification-controller
+  namespace: flux-system
+spec:
+  ports:
+    - name: http
+      port: 80
+      protocol: TCP
+      targetPort: http
+  selector:
+    app: notification-controller
+  type: ClusterIP

vela-templates/addons/fluxcd/resource/service/source-controller.yaml

@@ -2,9 +2,10 @@ apiVersion: v1
 kind: Service
 metadata:
   labels:
+    app.kubernetes.io/instance: flux-system
     control-plane: controller
   name: source-controller
-  namespace: vela-system
+  namespace: flux-system
 spec:
   ports:
     - name: http
@@ -13,4 +14,4 @@ spec:
       targetPort: http
   selector:
     app: source-controller
-  type: ClusterIP
+  type: ClusterIP

vela-templates/addons/fluxcd/resource/service/webhook-receiver.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+    control-plane: controller
+  name: webhook-receiver
+  namespace: flux-system
+spec:
+  ports:
+    - name: http
+      port: 80
+      protocol: TCP
+      targetPort: http-webhook
+  selector:
+    app: notification-controller
+  type: ClusterIP

vela-templates/addons/fluxcd/template.yaml

@@ -4,12 +4,12 @@ metadata:
   annotations:
     addons.oam.dev/description: "Flux is a set of continuous and progressive delivery solutions for Kubernetes"
   name: fluxcd
-  namespace: vela-system
+  namespace: flux-system
 spec:
   appTemplate:
     spec:
-      components: {{  range .Files  }}
-      - name: {{ .Name }}
-        type: raw
-        properties:
+      components: {{  range .ResourceFiles  }}
+        - name: {{ .Name }}
+          type: raw
+          properties:
 {{ .Content }} {{ end }}

vela-templates/gen_addons.go

@@ -24,6 +24,7 @@ import (
 	"io/fs"
 	"io/ioutil"
 	"os"
+	"path"
 	"path/filepath"
 	"regexp"
 	"strings"
@@ -38,11 +39,23 @@ import (
 )
 
 const (
-	// InitializerFileName represents the Initializer file of addons
-	InitializerFileName = "initializer.yaml"
+	// InitializerTemplateName represents the Initializer template file of addons
+	InitializerTemplateName = "template.yaml"
+
+	// InitializerFileDir is where we store generated initializer & component definition
+	InitializerFileDir = "auto-gen"
+
+	// ComponentDefDir is where we store correspond componentDefinition for addon
+	ComponentDefDir = "definitions"
+
+	// ResourceDir is where we store correspond componentDefinition for addon
+	ResourceDir = "resource"
 
 	// DescAnnotation records the description of addon
 	DescAnnotation = "addons.oam.dev/description"
+
+	// MarkLabel is annotation key marks configMap as an addon
+	MarkLabel = "addons.oam.dev/type"
 )
 
 type velaFile struct {
@@ -53,11 +66,12 @@ type velaFile struct {
 
 // AddonInfo records addon's metadata
 type AddonInfo struct {
-	Files        []velaFile
-	Name         string
-	Namespace    string
-	Description  string
-	TemplatePath string
+	ResourceFiles   []velaFile
+	DefinitionFiles []velaFile
+	Name            string
+	Namespace       string
+	Description     string
+	TemplatePath    string
 }
 
 func walkAllAddons(path string) ([]string, error) {
@@ -68,7 +82,7 @@ func walkAllAddons(path string) ([]string, error) {
 
 	addons := make([]string, 0, len(files))
 	for _, file := range files {
-		if file.IsDir() {
+		if file.IsDir() && file.Name() != InitializerFileDir {
 			addons = append(addons, file.Name())
 		}
 	}
@@ -90,12 +104,15 @@ func indentedContent(content string, indent int) string {
 
 func getAddonInfo(addon string, addonsPath string) (*AddonInfo, error) {
 	addonRoot := filepath.Clean(addonsPath + "/" + addon)
-	velaFiles := make([]velaFile, 0, 2)
+	resourceRoot := filepath.Clean(addonRoot + "/" + ResourceDir)
+	defRoot := filepath.Clean(addonRoot + "/" + ComponentDefDir)
+	resourcesFiles := make([]velaFile, 0, 2)
+	defFiles := make([]velaFile, 0, 2)
 	addInfo := &AddonInfo{
-		Name: addon,
+		Name:         addon,
+		TemplatePath: filepath.Join(addonRoot, InitializerTemplateName),
 	}
-
-	if err := filepath.Walk(addonRoot, func(path string, info fs.FileInfo, _ error) error {
+	if err := filepath.Walk(resourceRoot, func(path string, info fs.FileInfo, _ error) error {
 		if info.IsDir() {
 			return nil
 		}
@@ -104,27 +121,44 @@ func getAddonInfo(addon string, addonsPath string) (*AddonInfo, error) {
 			return err
 		}
 
-		if info.Name() == InitializerFileName {
-			addInfo.TemplatePath = path
+		obj := new(unstructured.Unstructured)
+		if err = yaml.Unmarshal(content, obj); err != nil {
+			return err
+		}
+		resourcesFiles = append(resourcesFiles, velaFile{
+			RelativePath: path,
+			Name:         obj.GetName(),
+			Content:      indentedContent(string(content), 12),
+		})
+		return nil
+	}); err != nil {
+		return nil, err
+	}
+
+	addInfo.ResourceFiles = resourcesFiles
+	if err := filepath.Walk(defRoot, func(path string, info fs.FileInfo, _ error) error {
+		if info.IsDir() {
 			return nil
 		}
+		content, err := ioutil.ReadFile(filepath.Clean(path))
+		if err != nil {
+			return err
+		}
 
 		obj := new(unstructured.Unstructured)
 		if err = yaml.Unmarshal(content, obj); err != nil {
 			return err
 		}
-		velaFiles = append(velaFiles, velaFile{
+		defFiles = append(defFiles, velaFile{
 			RelativePath: path,
 			Name:         obj.GetName(),
-			Content:      indentedContent(string(content), 10),
+			Content:      string(content),
 		})
-
 		return nil
 	}); err != nil {
 		return nil, err
 	}
-
-	addInfo.Files = velaFiles
+	addInfo.DefinitionFiles = defFiles
 	return addInfo, nil
 }
 
@@ -166,11 +200,21 @@ func generateInitializer(addon *AddonInfo) (*v1beta1.Initializer, error) {
 	return init, err
 }
 
+func setConfigMapLabels(addonInfo *AddonInfo) map[string]string {
+	return map[string]string{
+		MarkLabel: addonInfo.Name,
+	}
+}
 func setConfigMapAnnotations(addonInfo *AddonInfo) map[string]string {
 	return map[string]string{
 		DescAnnotation: addonInfo.Description,
 	}
 }
+func removeTimestampInplace(s *string) {
+	clearStr := "(\n.*?metadata:.*?)?\n.*?creationTimestamp:.*?null"
+	var re = regexp.MustCompile(clearStr)
+	*s = re.ReplaceAllString(*s, "")
+}
 
 func storeConfigMap(addonInfo *AddonInfo, initializer *v1beta1.Initializer, storePath string) error {
 	configMap := &corev1.ConfigMap{
@@ -183,6 +227,7 @@ func storeConfigMap(addonInfo *AddonInfo, initializer *v1beta1.Initializer, stor
 	configMap.SetName(addonInfo.Name)
 	configMap.SetNamespace(addonInfo.Namespace)
 	configMap.SetAnnotations(setConfigMapAnnotations(addonInfo))
+	configMap.SetLabels(setConfigMapLabels(addonInfo))
 
 	data := make(map[string]string, 1)
 	initContent, err := yaml.Marshal(initializer)
@@ -195,14 +240,44 @@ func storeConfigMap(addonInfo *AddonInfo, initializer *v1beta1.Initializer, stor
 	if err != nil {
 		return err
 	}
-	clearStr := "\n.*?creationTimestamp:.*?null"
-	var re = regexp.MustCompile(clearStr)
-	raw := re.ReplaceAllString(string(content), "")
-
+	raw := string(content)
+	removeTimestampInplace(&raw)
 	filename := storePath + "/" + addonInfo.Name + ".yaml"
 	return WriteToFile(filename, raw)
 }
 
+func storeInitAndDef(init *v1beta1.Initializer, cds []*v1beta1.ComponentDefinition, addonPath string, addonName string) error {
+	initContent, err := yaml.Marshal(init)
+	if err != nil {
+		return err
+	}
+	filename := path.Join(addonPath, InitializerFileDir, addonName+".yaml")
+	spliter := "---\n"
+	cdContents := make([]string, 0, len(cds))
+	for _, cd := range cds {
+		cdContent, err := yaml.Marshal(cd)
+		if err != nil {
+			return err
+		}
+		cdContents = append(cdContents, string(cdContent))
+	}
+	fileContent := strings.Join(append(cdContents, string(initContent)), spliter)
+	return WriteToFile(filename, fileContent)
+}
+
+func getComponentDefs(info *AddonInfo) ([]*v1beta1.ComponentDefinition, error) {
+	cds := make([]*v1beta1.ComponentDefinition, 0)
+	for _, file := range info.DefinitionFiles {
+		cd := v1beta1.ComponentDefinition{}
+		err := yaml.Unmarshal([]byte(file.Content), &cd)
+		if err != nil {
+			return nil, err
+		}
+		cds = append(cds, &cd)
+	}
+	return cds, nil
+
+}
 func main() {
 	var addonsPath string
 	var storePath string
@@ -212,24 +287,26 @@ func main() {
 	flag.Parse()
 
 	addons, err := walkAllAddons(addonsPath)
+	dealErr := func(err error) {
+		if err != nil {
+			fmt.Println(err)
+			os.Exit(1)
+		}
+	}
 	if err != nil {
 		fmt.Println(err)
 		os.Exit(1)
 	}
 	for _, addon := range addons {
-		var addInfo *AddonInfo
-		if addInfo, err = getAddonInfo(addon, addonsPath); err != nil {
-			fmt.Println(err)
-			os.Exit(1)
-		}
+		addInfo, err := getAddonInfo(addon, addonsPath)
+		dealErr(err)
 		init, err := generateInitializer(addInfo)
-		if err != nil {
-			fmt.Println(err)
-			os.Exit(1)
-		}
-		if err = storeConfigMap(addInfo, init, storePath); err != nil {
-			fmt.Println(err)
-			os.Exit(1)
-		}
+		dealErr(err)
+		cds, err := getComponentDefs(addInfo)
+		dealErr(err)
+		err = storeInitAndDef(init, cds, addonsPath, addInfo.Name)
+		dealErr(err)
+		err = storeConfigMap(addInfo, init, storePath)
+		dealErr(err)
 	}
 }