Merge pull request #194 from stefanprodan/release-v6.1.4

Release v6.1.4

.github/workflows/test.yml

@@ -22,10 +22,12 @@ jobs:
         uses: actions/setup-go@v2
         with:
           go-version: 1.17.x
-      - name: Run unit tests
-        run: make test
       - name: Setup CUE
         uses: cue-lang/setup-cue@main
+      - name: Run unit tests
+        run: make test
+      - name: Generate CUE definitions
+        run: make cue-mod
       - name: Verify CUE formatting
         working-directory: ./cue
         run: |

.gitignore

@@ -19,4 +19,5 @@ release/
 build/
 gcloud/
 dist/
-bin/
+bin/
+cue/cue.mod/gen/

Makefile

@@ -90,7 +90,11 @@ swagger:
 	go get github.com/swaggo/swag/cmd/swag
 	cd pkg/api && $$(go env GOPATH)/bin/swag init -g server.go
 
-.PHONY: cue
-cue:
+.PHONY: cue-mod
+cue-mod:
+	@cd cue && cue get go k8s.io/api/...
+
+.PHONY: cue-gen
+cue-gen:
 	@cd cue && cue fmt ./... && cue vet --all-errors --concrete ./...
 	@cd cue && cue gen

README.md

@@ -20,7 +20,7 @@ Specifications:
 * 12-factor app with viper
 * Fault injection (random errors and latency)
 * Swagger docs
-* Helm and Kustomize installers
+* CUE, Helm and Kustomize installers
 * End-to-End testing with Kubernetes Kind and Helm
 * Kustomize testing with GitHub Actions and Open Policy Agent
 * Multi-arch container image with Docker buildx and Github Actions

charts/podinfo/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
-version: 6.1.3
-appVersion: 6.1.3
+version: 6.1.4
+appVersion: 6.1.4
 name: podinfo
 engine: gotpl
 description: Podinfo Helm chart for Kubernetes

charts/podinfo/values-prod.yaml

@@ -8,7 +8,7 @@ backends: []
 
 image:
   repository: ghcr.io/stefanprodan/podinfo
-  tag: 6.1.3
+  tag: 6.1.4
   pullPolicy: IfNotPresent
 
 ui:

charts/podinfo/values.yaml

@@ -8,7 +8,7 @@ backends: []
 
 image:
   repository: ghcr.io/stefanprodan/podinfo
-  tag: 6.1.3
+  tag: 6.1.4
   pullPolicy: IfNotPresent
 
 ui:

cue/README.md

@@ -1,12 +1,55 @@
-# CUE Demo
+# Podinfo CUE module
 
-This directory contains a [cuelang module](https://cuelang.org/docs/) and tooling to generate podinfo resources.
+This directory contains a [CUE](https://cuelang.org/docs/) module and tooling
+for generating podinfo's Kubernetes resources.
 
-It defines a `podinfo.#Application` definition which takes a `podinfo.#Config` as input. The `podinfo.#Config` definition is modelled on the `podinfo` Helm chart `values.yaml` file.
+The module contains a `podinfo.#Application` definition which takes `podinfo.#Config` as input.
+
+## Prerequisites
+
+Install CUE with:
+
+```shell
+brew install cue
+```
+
+Generate the Kubernetes API definitions required by this module with:
+
+```shell
+cue get go k8s.io/api/...
+```
 
 ## Configuration
 
-Configure the application in `main.cue`.
+Configure the application in `main.cue`:
+
+```cue
+app: podinfo.#Application & {
+	config: {
+		meta: {
+			name:      "podinfo"
+			namespace: "default"
+		}
+		image: tag: "6.1.3"
+		resources: requests: {
+			cpu:    "100m"
+			memory: "16Mi"
+		}
+		hpa: {
+			enabled:     true
+			maxReplicas: 3
+		}
+		ingress: {
+			enabled:   true
+			className: "nginx"
+			host:      "podinfo.example.com"
+			tls:       true
+			annotations: "cert-manager.io/cluster-issuer": "letsencrypt"
+		}
+		serviceMonitor: enabled: true
+	}
+}
+```
 
 ## Generate the manifests
 

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/acme/v1/const_go_gen.cue

@@ -1,7 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/acme/v1
-
-package v1
-
-#ACMEFinalizer: "finalizer.acme.cert-manager.io"

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/acme/v1/doc_go_gen.cue

@@ -1,8 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/acme/v1
-
-// Package v1 is the v1 version of the API.
-// +k8s:deepcopy-gen=package,register
-// +groupName=acme.cert-manager.io
-package v1

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/acme/v1/types_challenge_go_gen.cue

@@ -1,128 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/acme/v1
-
-package v1
-
-import (
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	cmmeta "github.com/jetstack/cert-manager/pkg/apis/meta/v1"
-)
-
-// Challenge is a type to represent a Challenge request with an ACME server
-// +k8s:openapi-gen=true
-// +kubebuilder:printcolumn:name="State",type="string",JSONPath=".status.state"
-// +kubebuilder:printcolumn:name="Domain",type="string",JSONPath=".spec.dnsName"
-// +kubebuilder:printcolumn:name="Reason",type="string",JSONPath=".status.reason",description="",priority=1
-// +kubebuilder:printcolumn:name="Age",type="date",JSONPath=".metadata.creationTimestamp",description="CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC."
-// +kubebuilder:subresource:status
-// +kubebuilder:resource:path=challenges
-#Challenge: {
-	metav1.#TypeMeta
-	metadata: metav1.#ObjectMeta @go(ObjectMeta)
-	spec:     #ChallengeSpec     @go(Spec)
-
-	// +optional
-	status: #ChallengeStatus @go(Status)
-}
-
-// ChallengeList is a list of Challenges
-#ChallengeList: {
-	metav1.#TypeMeta
-	metadata: metav1.#ListMeta @go(ListMeta)
-	items: [...#Challenge] @go(Items,[]Challenge)
-}
-
-#ChallengeSpec: {
-	// The URL of the ACME Challenge resource for this challenge.
-	// This can be used to lookup details about the status of this challenge.
-	url: string @go(URL)
-
-	// The URL to the ACME Authorization resource that this
-	// challenge is a part of.
-	authorizationURL: string @go(AuthorizationURL)
-
-	// dnsName is the identifier that this challenge is for, e.g. example.com.
-	// If the requested DNSName is a 'wildcard', this field MUST be set to the
-	// non-wildcard domain, e.g. for `*.example.com`, it must be `example.com`.
-	dnsName: string @go(DNSName)
-
-	// wildcard will be true if this challenge is for a wildcard identifier,
-	// for example '*.example.com'.
-	// +optional
-	wildcard: bool @go(Wildcard)
-
-	// The type of ACME challenge this resource represents.
-	// One of "HTTP-01" or "DNS-01".
-	type: #ACMEChallengeType @go(Type)
-
-	// The ACME challenge token for this challenge.
-	// This is the raw value returned from the ACME server.
-	token: string @go(Token)
-
-	// The ACME challenge key for this challenge
-	// For HTTP01 challenges, this is the value that must be responded with to
-	// complete the HTTP01 challenge in the format:
-	// `<private key JWK thumbprint>.<key from acme server for challenge>`.
-	// For DNS01 challenges, this is the base64 encoded SHA256 sum of the
-	// `<private key JWK thumbprint>.<key from acme server for challenge>`
-	// text that must be set as the TXT record content.
-	key: string @go(Key)
-
-	// Contains the domain solving configuration that should be used to
-	// solve this challenge resource.
-	solver: #ACMEChallengeSolver @go(Solver)
-
-	// References a properly configured ACME-type Issuer which should
-	// be used to create this Challenge.
-	// If the Issuer does not exist, processing will be retried.
-	// If the Issuer is not an 'ACME' Issuer, an error will be returned and the
-	// Challenge will be marked as failed.
-	issuerRef: cmmeta.#ObjectReference @go(IssuerRef)
-}
-
-// The type of ACME challenge. Only HTTP-01 and DNS-01 are supported.
-// +kubebuilder:validation:Enum=HTTP-01;DNS-01
-#ACMEChallengeType: string // #enumACMEChallengeType
-
-#enumACMEChallengeType:
-	#ACMEChallengeTypeHTTP01 |
-	#ACMEChallengeTypeDNS01
-
-// ACMEChallengeTypeHTTP01 denotes a Challenge is of type http-01
-// More info: https://letsencrypt.org/docs/challenge-types/#http-01-challenge
-#ACMEChallengeTypeHTTP01: #ACMEChallengeType & "HTTP-01"
-
-// ACMEChallengeTypeDNS01 denotes a Challenge is of type dns-01
-// More info: https://letsencrypt.org/docs/challenge-types/#dns-01-challenge
-#ACMEChallengeTypeDNS01: #ACMEChallengeType & "DNS-01"
-
-#ChallengeStatus: {
-	// Used to denote whether this challenge should be processed or not.
-	// This field will only be set to true by the 'scheduling' component.
-	// It will only be set to false by the 'challenges' controller, after the
-	// challenge has reached a final state or timed out.
-	// If this field is set to false, the challenge controller will not take
-	// any more action.
-	// +optional
-	processing: bool @go(Processing)
-
-	// presented will be set to true if the challenge values for this challenge
-	// are currently 'presented'.
-	// This *does not* imply the self check is passing. Only that the values
-	// have been 'submitted' for the appropriate challenge mechanism (i.e. the
-	// DNS01 TXT record has been presented, or the HTTP01 configuration has been
-	// configured).
-	// +optional
-	presented: bool @go(Presented)
-
-	// Contains human readable information on why the Challenge is in the
-	// current state.
-	// +optional
-	reason?: string @go(Reason)
-
-	// Contains the current 'state' of the challenge.
-	// If not set, the state of the challenge is unknown.
-	// +optional
-	state?: #State @go(State)
-}

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/acme/v1/types_go_gen.cue

@@ -1,41 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/acme/v1
-
-package v1
-
-// ACMECertificateHTTP01IngressNameOverride is annotation to override ingress name.
-// If this annotation is specified on a Certificate or Order resource when
-// using the HTTP01 solver type, the ingress.name field of the HTTP01
-// solver's configuration will be set to the value given here.
-// This is especially useful for users of Ingress controllers that maintain
-// a 1:1 mapping between endpoint IP and Ingress resource.
-#ACMECertificateHTTP01IngressNameOverride: "acme.cert-manager.io/http01-override-ingress-name"
-
-// ACMECertificateHTTP01IngressClassOverride is annotation to override ingress class.
-// If this annotation is specified on a Certificate or Order resource when
-// using the HTTP01 solver type, the ingress.class field of the HTTP01
-// solver's configuration will be set to the value given here.
-// This is especially useful for users deploying many different ingress
-// classes into a single cluster that want to be able to re-use a single
-// solver for each ingress class.
-#ACMECertificateHTTP01IngressClassOverride: "acme.cert-manager.io/http01-override-ingress-class"
-
-// IngressEditInPlaceAnnotationKey is used to toggle the use of ingressClass instead
-// of ingress on the created Certificate resource
-#IngressEditInPlaceAnnotationKey: "acme.cert-manager.io/http01-edit-in-place"
-
-// DomainLabelKey is added to the labels of a Pod serving an ACME challenge.
-// Its value will be the hash of the domain name that is being verified.
-#DomainLabelKey: "acme.cert-manager.io/http-domain"
-
-// TokenLabelKey is added to the labels of a Pod serving an ACME challenge.
-// Its value will be the hash of the challenge token that is being served by the pod.
-#TokenLabelKey: "acme.cert-manager.io/http-token"
-
-// SolverIdentificationLabelKey is added to the labels of a Pod serving an ACME challenge.
-// Its value will be the "true" if the Pod is an HTTP-01 solver.
-#SolverIdentificationLabelKey: "acme.cert-manager.io/http01-solver"
-
-#OrderKind:     "Order"
-#ChallengeKind: "Challenge"

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/acme/v1/types_issuer_go_gen.cue

@@ -1,591 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/acme/v1
-
-package v1
-
-import (
-	cmmeta "github.com/jetstack/cert-manager/pkg/apis/meta/v1"
-	corev1 "k8s.io/api/core/v1"
-	apiextensionsv1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
-)
-
-// ACMEIssuer contains the specification for an ACME issuer.
-// This uses the RFC8555 specification to obtain certificates by completing
-// 'challenges' to prove ownership of domain identifiers.
-// Earlier draft versions of the ACME specification are not supported.
-#ACMEIssuer: {
-	// Email is the email address to be associated with the ACME account.
-	// This field is optional, but it is strongly recommended to be set.
-	// It will be used to contact you in case of issues with your account or
-	// certificates, including expiry notification emails.
-	// This field may be updated after the account is initially registered.
-	// +optional
-	email?: string @go(Email)
-
-	// Server is the URL used to access the ACME server's 'directory' endpoint.
-	// For example, for Let's Encrypt's staging endpoint, you would use:
-	// "https://acme-staging-v02.api.letsencrypt.org/directory".
-	// Only ACME v2 endpoints (i.e. RFC 8555) are supported.
-	server: string @go(Server)
-
-	// PreferredChain is the chain to use if the ACME server outputs multiple.
-	// PreferredChain is no guarantee that this one gets delivered by the ACME
-	// endpoint.
-	// For example, for Let's Encrypt's DST crosssign you would use:
-	// "DST Root CA X3" or "ISRG Root X1" for the newer Let's Encrypt root CA.
-	// This value picks the first certificate bundle in the ACME alternative
-	// chains that has a certificate with this value as its issuer's CN
-	// +optional
-	// +kubebuilder:validation:MaxLength=64
-	preferredChain: string @go(PreferredChain)
-
-	// Enables or disables validation of the ACME server TLS certificate.
-	// If true, requests to the ACME server will not have their TLS certificate
-	// validated (i.e. insecure connections will be allowed).
-	// Only enable this option in development environments.
-	// The cert-manager system installed roots will be used to verify connections
-	// to the ACME server if this is false.
-	// Defaults to false.
-	// +optional
-	skipTLSVerify?: bool @go(SkipTLSVerify)
-
-	// ExternalAccountBinding is a reference to a CA external account of the ACME
-	// server.
-	// If set, upon registration cert-manager will attempt to associate the given
-	// external account credentials with the registered ACME account.
-	// +optional
-	externalAccountBinding?: null | #ACMEExternalAccountBinding @go(ExternalAccountBinding,*ACMEExternalAccountBinding)
-
-	// PrivateKey is the name of a Kubernetes Secret resource that will be used to
-	// store the automatically generated ACME account private key.
-	// Optionally, a `key` may be specified to select a specific entry within
-	// the named Secret resource.
-	// If `key` is not specified, a default of `tls.key` will be used.
-	privateKeySecretRef: cmmeta.#SecretKeySelector @go(PrivateKey)
-
-	// Solvers is a list of challenge solvers that will be used to solve
-	// ACME challenges for the matching domains.
-	// Solver configurations must be provided in order to obtain certificates
-	// from an ACME server.
-	// For more information, see: https://cert-manager.io/docs/configuration/acme/
-	// +optional
-	solvers?: [...#ACMEChallengeSolver] @go(Solvers,[]ACMEChallengeSolver)
-
-	// Enables or disables generating a new ACME account key.
-	// If true, the Issuer resource will *not* request a new account but will expect
-	// the account key to be supplied via an existing secret.
-	// If false, the cert-manager system will generate a new ACME account key
-	// for the Issuer.
-	// Defaults to false.
-	// +optional
-	disableAccountKeyGeneration?: bool @go(DisableAccountKeyGeneration)
-
-	// Enables requesting a Not After date on certificates that matches the
-	// duration of the certificate. This is not supported by all ACME servers
-	// like Let's Encrypt. If set to true when the ACME server does not support
-	// it it will create an error on the Order.
-	// Defaults to false.
-	// +optional
-	enableDurationFeature?: bool @go(EnableDurationFeature)
-}
-
-// ACMEExternalAccountBinding is a reference to a CA external account of the ACME
-// server.
-#ACMEExternalAccountBinding: {
-	// keyID is the ID of the CA key that the External Account is bound to.
-	keyID: string @go(KeyID)
-
-	// keySecretRef is a Secret Key Selector referencing a data item in a Kubernetes
-	// Secret which holds the symmetric MAC key of the External Account Binding.
-	// The `key` is the index string that is paired with the key data in the
-	// Secret and should not be confused with the key data itself, or indeed with
-	// the External Account Binding keyID above.
-	// The secret key stored in the Secret **must** be un-padded, base64 URL
-	// encoded data.
-	keySecretRef: cmmeta.#SecretKeySelector @go(Key)
-
-	// Deprecated: keyAlgorithm field exists for historical compatibility
-	// reasons and should not be used. The algorithm is now hardcoded to HS256
-	// in golang/x/crypto/acme.
-	// +optional
-	keyAlgorithm?: #HMACKeyAlgorithm @go(KeyAlgorithm)
-}
-
-// HMACKeyAlgorithm is the name of a key algorithm used for HMAC encryption
-// +kubebuilder:validation:Enum=HS256;HS384;HS512
-#HMACKeyAlgorithm: string // #enumHMACKeyAlgorithm
-
-#enumHMACKeyAlgorithm:
-	#HS256 |
-	#HS384 |
-	#HS512
-
-#HS256: #HMACKeyAlgorithm & "HS256"
-#HS384: #HMACKeyAlgorithm & "HS384"
-#HS512: #HMACKeyAlgorithm & "HS512"
-
-// An ACMEChallengeSolver describes how to solve ACME challenges for the issuer it is part of.
-// A selector may be provided to use different solving strategies for different DNS names.
-// Only one of HTTP01 or DNS01 must be provided.
-#ACMEChallengeSolver: {
-	// Selector selects a set of DNSNames on the Certificate resource that
-	// should be solved using this challenge solver.
-	// If not specified, the solver will be treated as the 'default' solver
-	// with the lowest priority, i.e. if any other solver has a more specific
-	// match, it will be used instead.
-	// +optional
-	selector?: null | #CertificateDNSNameSelector @go(Selector,*CertificateDNSNameSelector)
-
-	// Configures cert-manager to attempt to complete authorizations by
-	// performing the HTTP01 challenge flow.
-	// It is not possible to obtain certificates for wildcard domain names
-	// (e.g. `*.example.com`) using the HTTP01 challenge mechanism.
-	// +optional
-	http01?: null | #ACMEChallengeSolverHTTP01 @go(HTTP01,*ACMEChallengeSolverHTTP01)
-
-	// Configures cert-manager to attempt to complete authorizations by
-	// performing the DNS01 challenge flow.
-	// +optional
-	dns01?: null | #ACMEChallengeSolverDNS01 @go(DNS01,*ACMEChallengeSolverDNS01)
-}
-
-// CertificateDNSNameSelector selects certificates using a label selector, and
-// can optionally select individual DNS names within those certificates.
-// If both MatchLabels and DNSNames are empty, this selector will match all
-// certificates and DNS names within them.
-#CertificateDNSNameSelector: {
-	// A label selector that is used to refine the set of certificate's that
-	// this challenge solver will apply to.
-	// +optional
-	matchLabels?: {[string]: string} @go(MatchLabels,map[string]string)
-
-	// List of DNSNames that this solver will be used to solve.
-	// If specified and a match is found, a dnsNames selector will take
-	// precedence over a dnsZones selector.
-	// If multiple solvers match with the same dnsNames value, the solver
-	// with the most matching labels in matchLabels will be selected.
-	// If neither has more matches, the solver defined earlier in the list
-	// will be selected.
-	// +optional
-	dnsNames?: [...string] @go(DNSNames,[]string)
-
-	// List of DNSZones that this solver will be used to solve.
-	// The most specific DNS zone match specified here will take precedence
-	// over other DNS zone matches, so a solver specifying sys.example.com
-	// will be selected over one specifying example.com for the domain
-	// www.sys.example.com.
-	// If multiple solvers match with the same dnsZones value, the solver
-	// with the most matching labels in matchLabels will be selected.
-	// If neither has more matches, the solver defined earlier in the list
-	// will be selected.
-	// +optional
-	dnsZones?: [...string] @go(DNSZones,[]string)
-}
-
-// ACMEChallengeSolverHTTP01 contains configuration detailing how to solve
-// HTTP01 challenges within a Kubernetes cluster.
-// Typically this is accomplished through creating 'routes' of some description
-// that configure ingress controllers to direct traffic to 'solver pods', which
-// are responsible for responding to the ACME server's HTTP requests.
-// Only one of Ingress / Gateway can be specified.
-#ACMEChallengeSolverHTTP01: {
-	// The ingress based HTTP01 challenge solver will solve challenges by
-	// creating or modifying Ingress resources in order to route requests for
-	// '/.well-known/acme-challenge/XYZ' to 'challenge solver' pods that are
-	// provisioned by cert-manager for each Challenge to be completed.
-	// +optional
-	ingress?: null | #ACMEChallengeSolverHTTP01Ingress @go(Ingress,*ACMEChallengeSolverHTTP01Ingress)
-
-	// The Gateway API is a sig-network community API that models service networking
-	// in Kubernetes (https://gateway-api.sigs.k8s.io/). The Gateway solver will
-	// create HTTPRoutes with the specified labels in the same namespace as the challenge.
-	// This solver is experimental, and fields / behaviour may change in the future.
-	// +optional
-	gatewayHTTPRoute?: null | #ACMEChallengeSolverHTTP01GatewayHTTPRoute @go(GatewayHTTPRoute,*ACMEChallengeSolverHTTP01GatewayHTTPRoute)
-}
-
-#ACMEChallengeSolverHTTP01Ingress: {
-	// Optional service type for Kubernetes solver service. Supported values
-	// are NodePort or ClusterIP. If unset, defaults to NodePort.
-	// +optional
-	serviceType?: corev1.#ServiceType @go(ServiceType)
-
-	// The ingress class to use when creating Ingress resources to solve ACME
-	// challenges that use this challenge solver.
-	// Only one of 'class' or 'name' may be specified.
-	// +optional
-	class?: null | string @go(Class,*string)
-
-	// The name of the ingress resource that should have ACME challenge solving
-	// routes inserted into it in order to solve HTTP01 challenges.
-	// This is typically used in conjunction with ingress controllers like
-	// ingress-gce, which maintains a 1:1 mapping between external IPs and
-	// ingress resources.
-	// +optional
-	name?: string @go(Name)
-
-	// Optional pod template used to configure the ACME challenge solver pods
-	// used for HTTP01 challenges.
-	// +optional
-	podTemplate?: null | #ACMEChallengeSolverHTTP01IngressPodTemplate @go(PodTemplate,*ACMEChallengeSolverHTTP01IngressPodTemplate)
-
-	// Optional ingress template used to configure the ACME challenge solver
-	// ingress used for HTTP01 challenges.
-	// +optional
-	ingressTemplate?: null | #ACMEChallengeSolverHTTP01IngressTemplate @go(IngressTemplate,*ACMEChallengeSolverHTTP01IngressTemplate)
-}
-
-// The ACMEChallengeSolverHTTP01GatewayHTTPRoute solver will create HTTPRoute objects for a Gateway class
-// routing to an ACME challenge solver pod.
-#ACMEChallengeSolverHTTP01GatewayHTTPRoute: {
-	// Optional service type for Kubernetes solver service. Supported values
-	// are NodePort or ClusterIP. If unset, defaults to NodePort.
-	// +optional
-	serviceType?: corev1.#ServiceType @go(ServiceType)
-
-	// The labels that cert-manager will use when creating the temporary
-	// HTTPRoute needed for solving the HTTP-01 challenge. These labels
-	// must match the label selector of at least one Gateway.
-	labels?: {[string]: string} @go(Labels,map[string]string)
-}
-
-#ACMEChallengeSolverHTTP01IngressPodTemplate: {
-	// ObjectMeta overrides for the pod used to solve HTTP01 challenges.
-	// Only the 'labels' and 'annotations' fields may be set.
-	// If labels or annotations overlap with in-built values, the values here
-	// will override the in-built values.
-	// +optional
-	metadata: #ACMEChallengeSolverHTTP01IngressPodObjectMeta @go(ACMEChallengeSolverHTTP01IngressPodObjectMeta)
-
-	// PodSpec defines overrides for the HTTP01 challenge solver pod.
-	// Only the 'priorityClassName', 'nodeSelector', 'affinity',
-	// 'serviceAccountName' and 'tolerations' fields are supported currently.
-	// All other fields will be ignored.
-	// +optional
-	spec: #ACMEChallengeSolverHTTP01IngressPodSpec @go(Spec)
-}
-
-#ACMEChallengeSolverHTTP01IngressPodObjectMeta: {
-	// Annotations that should be added to the create ACME HTTP01 solver pods.
-	// +optional
-	annotations?: {[string]: string} @go(Annotations,map[string]string)
-
-	// Labels that should be added to the created ACME HTTP01 solver pods.
-	// +optional
-	labels?: {[string]: string} @go(Labels,map[string]string)
-}
-
-#ACMEChallengeSolverHTTP01IngressPodSpec: {
-	// NodeSelector is a selector which must be true for the pod to fit on a node.
-	// Selector which must match a node's labels for the pod to be scheduled on that node.
-	// More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
-	// +optional
-	nodeSelector?: {[string]: string} @go(NodeSelector,map[string]string)
-
-	// If specified, the pod's scheduling constraints
-	// +optional
-	affinity?: null | corev1.#Affinity @go(Affinity,*corev1.Affinity)
-
-	// If specified, the pod's tolerations.
-	// +optional
-	tolerations?: [...corev1.#Toleration] @go(Tolerations,[]corev1.Toleration)
-
-	// If specified, the pod's priorityClassName.
-	// +optional
-	priorityClassName?: string @go(PriorityClassName)
-
-	// If specified, the pod's service account
-	// +optional
-	serviceAccountName?: string @go(ServiceAccountName)
-}
-
-#ACMEChallengeSolverHTTP01IngressTemplate: {
-	// ObjectMeta overrides for the ingress used to solve HTTP01 challenges.
-	// Only the 'labels' and 'annotations' fields may be set.
-	// If labels or annotations overlap with in-built values, the values here
-	// will override the in-built values.
-	// +optional
-	metadata: #ACMEChallengeSolverHTTP01IngressObjectMeta @go(ACMEChallengeSolverHTTP01IngressObjectMeta)
-}
-
-#ACMEChallengeSolverHTTP01IngressObjectMeta: {
-	// Annotations that should be added to the created ACME HTTP01 solver ingress.
-	// +optional
-	annotations?: {[string]: string} @go(Annotations,map[string]string)
-
-	// Labels that should be added to the created ACME HTTP01 solver ingress.
-	// +optional
-	labels?: {[string]: string} @go(Labels,map[string]string)
-}
-
-// Used to configure a DNS01 challenge provider to be used when solving DNS01
-// challenges.
-// Only one DNS provider may be configured per solver.
-#ACMEChallengeSolverDNS01: {
-	// CNAMEStrategy configures how the DNS01 provider should handle CNAME
-	// records when found in DNS zones.
-	// +optional
-	cnameStrategy?: #CNAMEStrategy @go(CNAMEStrategy)
-
-	// Use the Akamai DNS zone management API to manage DNS01 challenge records.
-	// +optional
-	akamai?: null | #ACMEIssuerDNS01ProviderAkamai @go(Akamai,*ACMEIssuerDNS01ProviderAkamai)
-
-	// Use the Google Cloud DNS API to manage DNS01 challenge records.
-	// +optional
-	cloudDNS?: null | #ACMEIssuerDNS01ProviderCloudDNS @go(CloudDNS,*ACMEIssuerDNS01ProviderCloudDNS)
-
-	// Use the Cloudflare API to manage DNS01 challenge records.
-	// +optional
-	cloudflare?: null | #ACMEIssuerDNS01ProviderCloudflare @go(Cloudflare,*ACMEIssuerDNS01ProviderCloudflare)
-
-	// Use the AWS Route53 API to manage DNS01 challenge records.
-	// +optional
-	route53?: null | #ACMEIssuerDNS01ProviderRoute53 @go(Route53,*ACMEIssuerDNS01ProviderRoute53)
-
-	// Use the Microsoft Azure DNS API to manage DNS01 challenge records.
-	// +optional
-	azureDNS?: null | #ACMEIssuerDNS01ProviderAzureDNS @go(AzureDNS,*ACMEIssuerDNS01ProviderAzureDNS)
-
-	// Use the DigitalOcean DNS API to manage DNS01 challenge records.
-	// +optional
-	digitalocean?: null | #ACMEIssuerDNS01ProviderDigitalOcean @go(DigitalOcean,*ACMEIssuerDNS01ProviderDigitalOcean)
-
-	// Use the 'ACME DNS' (https://github.com/joohoi/acme-dns) API to manage
-	// DNS01 challenge records.
-	// +optional
-	acmeDNS?: null | #ACMEIssuerDNS01ProviderAcmeDNS @go(AcmeDNS,*ACMEIssuerDNS01ProviderAcmeDNS)
-
-	// Use RFC2136 ("Dynamic Updates in the Domain Name System") (https://datatracker.ietf.org/doc/rfc2136/)
-	// to manage DNS01 challenge records.
-	// +optional
-	rfc2136?: null | #ACMEIssuerDNS01ProviderRFC2136 @go(RFC2136,*ACMEIssuerDNS01ProviderRFC2136)
-
-	// Configure an external webhook based DNS01 challenge solver to manage
-	// DNS01 challenge records.
-	// +optional
-	webhook?: null | #ACMEIssuerDNS01ProviderWebhook @go(Webhook,*ACMEIssuerDNS01ProviderWebhook)
-}
-
-// CNAMEStrategy configures how the DNS01 provider should handle CNAME records
-// when found in DNS zones.
-// By default, the None strategy will be applied (i.e. do not follow CNAMEs).
-// +kubebuilder:validation:Enum=None;Follow
-#CNAMEStrategy: string
-
-// NoneStrategy indicates that no CNAME resolution strategy should be used
-// when determining which DNS zone to update during DNS01 challenges.
-#NoneStrategy: "None"
-
-// FollowStrategy will cause cert-manager to recurse through CNAMEs in
-// order to determine which DNS zone to update during DNS01 challenges.
-// This is useful if you do not want to grant cert-manager access to your
-// root DNS zone, and instead delegate the _acme-challenge.example.com
-// subdomain to some other, less privileged domain.
-#FollowStrategy: "Follow"
-
-// ACMEIssuerDNS01ProviderAkamai is a structure containing the DNS
-// configuration for Akamai DNS—Zone Record Management API
-#ACMEIssuerDNS01ProviderAkamai: {
-	serviceConsumerDomain: string                    @go(ServiceConsumerDomain)
-	clientTokenSecretRef:  cmmeta.#SecretKeySelector @go(ClientToken)
-	clientSecretSecretRef: cmmeta.#SecretKeySelector @go(ClientSecret)
-	accessTokenSecretRef:  cmmeta.#SecretKeySelector @go(AccessToken)
-}
-
-// ACMEIssuerDNS01ProviderCloudDNS is a structure containing the DNS
-// configuration for Google Cloud DNS
-#ACMEIssuerDNS01ProviderCloudDNS: {
-	// +optional
-	serviceAccountSecretRef?: null | cmmeta.#SecretKeySelector @go(ServiceAccount,*cmmeta.SecretKeySelector)
-	project:                  string                           @go(Project)
-
-	// HostedZoneName is an optional field that tells cert-manager in which
-	// Cloud DNS zone the challenge record has to be created.
-	// If left empty cert-manager will automatically choose a zone.
-	// +optional
-	hostedZoneName?: string @go(HostedZoneName)
-}
-
-// ACMEIssuerDNS01ProviderCloudflare is a structure containing the DNS
-// configuration for Cloudflare.
-// One of `apiKeySecretRef` or `apiTokenSecretRef` must be provided.
-#ACMEIssuerDNS01ProviderCloudflare: {
-	// Email of the account, only required when using API key based authentication.
-	// +optional
-	email?: string @go(Email)
-
-	// API key to use to authenticate with Cloudflare.
-	// Note: using an API token to authenticate is now the recommended method
-	// as it allows greater control of permissions.
-	// +optional
-	apiKeySecretRef?: null | cmmeta.#SecretKeySelector @go(APIKey,*cmmeta.SecretKeySelector)
-
-	// API token used to authenticate with Cloudflare.
-	// +optional
-	apiTokenSecretRef?: null | cmmeta.#SecretKeySelector @go(APIToken,*cmmeta.SecretKeySelector)
-}
-
-// ACMEIssuerDNS01ProviderDigitalOcean is a structure containing the DNS
-// configuration for DigitalOcean Domains
-#ACMEIssuerDNS01ProviderDigitalOcean: {
-	tokenSecretRef: cmmeta.#SecretKeySelector @go(Token)
-}
-
-// ACMEIssuerDNS01ProviderRoute53 is a structure containing the Route 53
-// configuration for AWS
-#ACMEIssuerDNS01ProviderRoute53: {
-	// The AccessKeyID is used for authentication. If not set we fall-back to using env vars, shared credentials file or AWS Instance metadata
-	// see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials
-	// +optional
-	accessKeyID?: string @go(AccessKeyID)
-
-	// The SecretAccessKey is used for authentication. If not set we fall-back to using env vars, shared credentials file or AWS Instance metadata
-	// https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials
-	// +optional
-	secretAccessKeySecretRef: cmmeta.#SecretKeySelector @go(SecretAccessKey)
-
-	// Role is a Role ARN which the Route53 provider will assume using either the explicit credentials AccessKeyID/SecretAccessKey
-	// or the inferred credentials from environment variables, shared credentials file or AWS Instance metadata
-	// +optional
-	role?: string @go(Role)
-
-	// If set, the provider will manage only this zone in Route53 and will not do an lookup using the route53:ListHostedZonesByName api call.
-	// +optional
-	hostedZoneID?: string @go(HostedZoneID)
-
-	// Always set the region when using AccessKeyID and SecretAccessKey
-	region: string @go(Region)
-}
-
-// ACMEIssuerDNS01ProviderAzureDNS is a structure containing the
-// configuration for Azure DNS
-#ACMEIssuerDNS01ProviderAzureDNS: {
-	// if both this and ClientSecret are left unset MSI will be used
-	// +optional
-	clientID?: string @go(ClientID)
-
-	// if both this and ClientID are left unset MSI will be used
-	// +optional
-	clientSecretSecretRef?: null | cmmeta.#SecretKeySelector @go(ClientSecret,*cmmeta.SecretKeySelector)
-
-	// ID of the Azure subscription
-	subscriptionID: string @go(SubscriptionID)
-
-	// when specifying ClientID and ClientSecret then this field is also needed
-	// +optional
-	tenantID?: string @go(TenantID)
-
-	// resource group the DNS zone is located in
-	resourceGroupName: string @go(ResourceGroupName)
-
-	// name of the DNS zone that should be used
-	// +optional
-	hostedZoneName?: string @go(HostedZoneName)
-
-	// name of the Azure environment (default AzurePublicCloud)
-	// +optional
-	environment?: #AzureDNSEnvironment @go(Environment)
-
-	// managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
-	// +optional
-	managedIdentity?: null | #AzureManagedIdentity @go(ManagedIdentity,*AzureManagedIdentity)
-}
-
-#AzureManagedIdentity: {
-	// client ID of the managed identity, can not be used at the same time as resourceID
-	// +optional
-	clientID?: string @go(ClientID)
-
-	// resource ID of the managed identity, can not be used at the same time as clientID
-	// +optional
-	resourceID?: string @go(ResourceID)
-}
-
-// +kubebuilder:validation:Enum=AzurePublicCloud;AzureChinaCloud;AzureGermanCloud;AzureUSGovernmentCloud
-#AzureDNSEnvironment: string // #enumAzureDNSEnvironment
-
-#enumAzureDNSEnvironment:
-	#AzurePublicCloud |
-	#AzureChinaCloud |
-	#AzureGermanCloud |
-	#AzureUSGovernmentCloud
-
-#AzurePublicCloud:       #AzureDNSEnvironment & "AzurePublicCloud"
-#AzureChinaCloud:        #AzureDNSEnvironment & "AzureChinaCloud"
-#AzureGermanCloud:       #AzureDNSEnvironment & "AzureGermanCloud"
-#AzureUSGovernmentCloud: #AzureDNSEnvironment & "AzureUSGovernmentCloud"
-
-// ACMEIssuerDNS01ProviderAcmeDNS is a structure containing the
-// configuration for ACME-DNS servers
-#ACMEIssuerDNS01ProviderAcmeDNS: {
-	host:             string                    @go(Host)
-	accountSecretRef: cmmeta.#SecretKeySelector @go(AccountSecret)
-}
-
-// ACMEIssuerDNS01ProviderRFC2136 is a structure containing the
-// configuration for RFC2136 DNS
-#ACMEIssuerDNS01ProviderRFC2136: {
-	// The IP address or hostname of an authoritative DNS server supporting
-	// RFC2136 in the form host:port. If the host is an IPv6 address it must be
-	// enclosed in square brackets (e.g [2001:db8::1]) ; port is optional.
-	// This field is required.
-	nameserver: string @go(Nameserver)
-
-	// The name of the secret containing the TSIG value.
-	// If ``tsigKeyName`` is defined, this field is required.
-	// +optional
-	tsigSecretSecretRef?: cmmeta.#SecretKeySelector @go(TSIGSecret)
-
-	// The TSIG Key name configured in the DNS.
-	// If ``tsigSecretSecretRef`` is defined, this field is required.
-	// +optional
-	tsigKeyName?: string @go(TSIGKeyName)
-
-	// The TSIG Algorithm configured in the DNS supporting RFC2136. Used only
-	// when ``tsigSecretSecretRef`` and ``tsigKeyName`` are defined.
-	// Supported values are (case-insensitive): ``HMACMD5`` (default),
-	// ``HMACSHA1``, ``HMACSHA256`` or ``HMACSHA512``.
-	// +optional
-	tsigAlgorithm?: string @go(TSIGAlgorithm)
-}
-
-// ACMEIssuerDNS01ProviderWebhook specifies configuration for a webhook DNS01
-// provider, including where to POST ChallengePayload resources.
-#ACMEIssuerDNS01ProviderWebhook: {
-	// The API group name that should be used when POSTing ChallengePayload
-	// resources to the webhook apiserver.
-	// This should be the same as the GroupName specified in the webhook
-	// provider implementation.
-	groupName: string @go(GroupName)
-
-	// The name of the solver to use, as defined in the webhook provider
-	// implementation.
-	// This will typically be the name of the provider, e.g. 'cloudflare'.
-	solverName: string @go(SolverName)
-
-	// Additional configuration that should be passed to the webhook apiserver
-	// when challenges are processed.
-	// This can contain arbitrary JSON data.
-	// Secret values should not be specified in this stanza.
-	// If secret values are needed (e.g. credentials for a DNS service), you
-	// should use a SecretKeySelector to reference a Secret resource.
-	// For details on the schema of this field, consult the webhook provider
-	// implementation's documentation.
-	// +optional
-	config?: null | apiextensionsv1.#JSON @go(Config,*apiextensionsv1.JSON)
-}
-
-#ACMEIssuerStatus: {
-	// URI is the unique account identifier, which can also be used to retrieve
-	// account details from the CA
-	// +optional
-	uri?: string @go(URI)
-
-	// LastRegisteredEmail is the email associated with the latest registered
-	// ACME account, in order to track changes made to registered account
-	// associated with the  Issuer
-	// +optional
-	lastRegisteredEmail?: string @go(LastRegisteredEmail)
-}

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/acme/v1/types_order_go_gen.cue

@@ -1,228 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/acme/v1
-
-package v1
-
-import (
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	cmmeta "github.com/jetstack/cert-manager/pkg/apis/meta/v1"
-)
-
-// Order is a type to represent an Order with an ACME server
-// +k8s:openapi-gen=true
-#Order: {
-	metav1.#TypeMeta
-	metadata: metav1.#ObjectMeta @go(ObjectMeta)
-	spec:     #OrderSpec         @go(Spec)
-
-	// +optional
-	status: #OrderStatus @go(Status)
-}
-
-// OrderList is a list of Orders
-#OrderList: {
-	metav1.#TypeMeta
-	metadata: metav1.#ListMeta @go(ListMeta)
-	items: [...#Order] @go(Items,[]Order)
-}
-
-#OrderSpec: {
-	// Certificate signing request bytes in DER encoding.
-	// This will be used when finalizing the order.
-	// This field must be set on the order.
-	request: bytes @go(Request,[]byte)
-
-	// IssuerRef references a properly configured ACME-type Issuer which should
-	// be used to create this Order.
-	// If the Issuer does not exist, processing will be retried.
-	// If the Issuer is not an 'ACME' Issuer, an error will be returned and the
-	// Order will be marked as failed.
-	issuerRef: cmmeta.#ObjectReference @go(IssuerRef)
-
-	// CommonName is the common name as specified on the DER encoded CSR.
-	// If specified, this value must also be present in `dnsNames` or `ipAddresses`.
-	// This field must match the corresponding field on the DER encoded CSR.
-	// +optional
-	commonName?: string @go(CommonName)
-
-	// DNSNames is a list of DNS names that should be included as part of the Order
-	// validation process.
-	// This field must match the corresponding field on the DER encoded CSR.
-	//+optional
-	dnsNames?: [...string] @go(DNSNames,[]string)
-
-	// IPAddresses is a list of IP addresses that should be included as part of the Order
-	// validation process.
-	// This field must match the corresponding field on the DER encoded CSR.
-	// +optional
-	ipAddresses?: [...string] @go(IPAddresses,[]string)
-
-	// Duration is the duration for the not after date for the requested certificate.
-	// this is set on order creation as pe the ACME spec.
-	// +optional
-	duration?: null | metav1.#Duration @go(Duration,*metav1.Duration)
-}
-
-#OrderStatus: {
-	// URL of the Order.
-	// This will initially be empty when the resource is first created.
-	// The Order controller will populate this field when the Order is first processed.
-	// This field will be immutable after it is initially set.
-	// +optional
-	url?: string @go(URL)
-
-	// FinalizeURL of the Order.
-	// This is used to obtain certificates for this order once it has been completed.
-	// +optional
-	finalizeURL?: string @go(FinalizeURL)
-
-	// Authorizations contains data returned from the ACME server on what
-	// authorizations must be completed in order to validate the DNS names
-	// specified on the Order.
-	// +optional
-	authorizations?: [...#ACMEAuthorization] @go(Authorizations,[]ACMEAuthorization)
-
-	// Certificate is a copy of the PEM encoded certificate for this Order.
-	// This field will be populated after the order has been successfully
-	// finalized with the ACME server, and the order has transitioned to the
-	// 'valid' state.
-	// +optional
-	certificate?: bytes @go(Certificate,[]byte)
-
-	// State contains the current state of this Order resource.
-	// States 'success' and 'expired' are 'final'
-	// +optional
-	state?: #State @go(State)
-
-	// Reason optionally provides more information about a why the order is in
-	// the current state.
-	// +optional
-	reason?: string @go(Reason)
-
-	// FailureTime stores the time that this order failed.
-	// This is used to influence garbage collection and back-off.
-	// +optional
-	failureTime?: null | metav1.#Time @go(FailureTime,*metav1.Time)
-}
-
-// ACMEAuthorization contains data returned from the ACME server on an
-// authorization that must be completed in order validate a DNS name on an ACME
-// Order resource.
-#ACMEAuthorization: {
-	// URL is the URL of the Authorization that must be completed
-	url: string @go(URL)
-
-	// Identifier is the DNS name to be validated as part of this authorization
-	// +optional
-	identifier?: string @go(Identifier)
-
-	// Wildcard will be true if this authorization is for a wildcard DNS name.
-	// If this is true, the identifier will be the *non-wildcard* version of
-	// the DNS name.
-	// For example, if '*.example.com' is the DNS name being validated, this
-	// field will be 'true' and the 'identifier' field will be 'example.com'.
-	// +optional
-	wildcard?: null | bool @go(Wildcard,*bool)
-
-	// InitialState is the initial state of the ACME authorization when first
-	// fetched from the ACME server.
-	// If an Authorization is already 'valid', the Order controller will not
-	// create a Challenge resource for the authorization. This will occur when
-	// working with an ACME server that enables 'authz reuse' (such as Let's
-	// Encrypt's production endpoint).
-	// If not set and 'identifier' is set, the state is assumed to be pending
-	// and a Challenge will be created.
-	// +optional
-	initialState?: #State @go(InitialState)
-
-	// Challenges specifies the challenge types offered by the ACME server.
-	// One of these challenge types will be selected when validating the DNS
-	// name and an appropriate Challenge resource will be created to perform
-	// the ACME challenge process.
-	// +optional
-	challenges?: [...#ACMEChallenge] @go(Challenges,[]ACMEChallenge)
-}
-
-// Challenge specifies a challenge offered by the ACME server for an Order.
-// An appropriate Challenge resource can be created to perform the ACME
-// challenge process.
-#ACMEChallenge: {
-	// URL is the URL of this challenge. It can be used to retrieve additional
-	// metadata about the Challenge from the ACME server.
-	url: string @go(URL)
-
-	// Token is the token that must be presented for this challenge.
-	// This is used to compute the 'key' that must also be presented.
-	token: string @go(Token)
-
-	// Type is the type of challenge being offered, e.g. 'http-01', 'dns-01',
-	// 'tls-sni-01', etc.
-	// This is the raw value retrieved from the ACME server.
-	// Only 'http-01' and 'dns-01' are supported by cert-manager, other values
-	// will be ignored.
-	type: string @go(Type)
-}
-
-// State represents the state of an ACME resource, such as an Order.
-// The possible options here map to the corresponding values in the
-// ACME specification.
-// Full details of these values can be found here: https://tools.ietf.org/html/draft-ietf-acme-acme-15#section-7.1.6
-// Clients utilising this type must also gracefully handle unknown
-// values, as the contents of this enumeration may be added to over time.
-// +kubebuilder:validation:Enum=valid;ready;pending;processing;invalid;expired;errored
-#State: string // #enumState
-
-#enumState:
-	#Unknown |
-	#Valid |
-	#Ready |
-	#Pending |
-	#Processing |
-	#Invalid |
-	#Expired |
-	#Errored
-
-// Unknown is not a real state as part of the ACME spec.
-// It is used to represent an unrecognised value.
-#Unknown: #State & ""
-
-// Valid signifies that an ACME resource is in a valid state.
-// If an order is 'valid', it has been finalized with the ACME server and
-// the certificate can be retrieved from the ACME server using the
-// certificate URL stored in the Order's status subresource.
-// This is a final state.
-#Valid: #State & "valid"
-
-// Ready signifies that an ACME resource is in a ready state.
-// If an order is 'ready', all of its challenges have been completed
-// successfully and the order is ready to be finalized.
-// Once finalized, it will transition to the Valid state.
-// This is a transient state.
-#Ready: #State & "ready"
-
-// Pending signifies that an ACME resource is still pending and is not yet ready.
-// If an Order is marked 'Pending', the validations for that Order are still in progress.
-// This is a transient state.
-#Pending: #State & "pending"
-
-// Processing signifies that an ACME resource is being processed by the server.
-// If an Order is marked 'Processing', the validations for that Order are currently being processed.
-// This is a transient state.
-#Processing: #State & "processing"
-
-// Invalid signifies that an ACME resource is invalid for some reason.
-// If an Order is marked 'invalid', one of its validations be have invalid for some reason.
-// This is a final state.
-#Invalid: #State & "invalid"
-
-// Expired signifies that an ACME resource has expired.
-// If an Order is marked 'Expired', one of its validations may have expired or the Order itself.
-// This is a final state.
-#Expired: #State & "expired"
-
-// Errored signifies that the ACME resource has errored for some reason.
-// This is a catch-all state, and is used for marking internal cert-manager
-// errors such as validation failures.
-// This is a final state.
-#Errored: #State & "errored"

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/certmanager/v1/const_go_gen.cue

@@ -1,27 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/certmanager/v1
-
-package v1
-
-import "time"
-
-// minimum permitted certificate duration by cert-manager
-#MinimumCertificateDuration: time.#Duration & 3600000000000
-
-// default certificate duration if Issuer.spec.duration is not set
-#DefaultCertificateDuration: time.#Duration & 7776000000000000
-
-// minimum certificate duration before certificate expiration
-#MinimumRenewBefore: time.#Duration & 300000000000
-
-// Deprecated: the default is now 2/3 of Certificate's duration
-#DefaultRenewBefore: time.#Duration & 2592000000000000
-
-// Default index key for the Secret reference for Token authentication
-#DefaultVaultTokenAuthSecretKey: "token"
-
-// Default mount path location for Kubernetes ServiceAccount authentication
-// (/v1/auth/kubernetes). The endpoint will then be called at `/login`, so
-// left as the default, `/v1/auth/kubernetes/login` will be called.
-#DefaultVaultKubernetesAuthMountPath: "/v1/auth/kubernetes"

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/certmanager/v1/doc_go_gen.cue

@@ -1,9 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/certmanager/v1
-
-// Package v1 is the v1 version of the API.
-// +k8s:deepcopy-gen=package,register
-// +groupName=cert-manager.io
-// +groupGoName=Certmanager
-package v1

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/certmanager/v1/generic_issuer_go_gen.cue

@@ -1,7 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/certmanager/v1
-
-package v1
-
-#GenericIssuer: _

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/certmanager/v1/types_certificate_go_gen.cue

@@ -1,496 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/certmanager/v1
-
-package v1
-
-import (
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	cmmeta "github.com/jetstack/cert-manager/pkg/apis/meta/v1"
-)
-
-// A Certificate resource should be created to ensure an up to date and signed
-// x509 certificate is stored in the Kubernetes Secret resource named in `spec.secretName`.
-//
-// The stored certificate will be renewed before it expires (as configured by `spec.renewBefore`).
-// +k8s:openapi-gen=true
-#Certificate: {
-	metav1.#TypeMeta
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta)
-
-	// Desired state of the Certificate resource.
-	spec: #CertificateSpec @go(Spec)
-
-	// Status of the Certificate. This is set and managed automatically.
-	// +optional
-	status: #CertificateStatus @go(Status)
-}
-
-// CertificateList is a list of Certificates
-#CertificateList: {
-	metav1.#TypeMeta
-	metadata: metav1.#ListMeta @go(ListMeta)
-	items: [...#Certificate] @go(Items,[]Certificate)
-}
-
-// +kubebuilder:validation:Enum=RSA;ECDSA;Ed25519
-#PrivateKeyAlgorithm: string // #enumPrivateKeyAlgorithm
-
-#enumPrivateKeyAlgorithm:
-	#RSAKeyAlgorithm |
-	#ECDSAKeyAlgorithm |
-	#Ed25519KeyAlgorithm
-
-// Denotes the RSA private key type.
-#RSAKeyAlgorithm: #PrivateKeyAlgorithm & "RSA"
-
-// Denotes the ECDSA private key type.
-#ECDSAKeyAlgorithm: #PrivateKeyAlgorithm & "ECDSA"
-
-// Denotes the Ed25519 private key type.
-#Ed25519KeyAlgorithm: #PrivateKeyAlgorithm & "Ed25519"
-
-// +kubebuilder:validation:Enum=PKCS1;PKCS8
-#PrivateKeyEncoding: string // #enumPrivateKeyEncoding
-
-#enumPrivateKeyEncoding:
-	#PKCS1 |
-	#PKCS8
-
-// PKCS1 key encoding will produce PEM files that include the type of
-// private key as part of the PEM header, e.g. `BEGIN RSA PRIVATE KEY`.
-// If the keyAlgorithm is set to 'ECDSA', this will produce private keys
-// that use the `BEGIN EC PRIVATE KEY` header.
-#PKCS1: #PrivateKeyEncoding & "PKCS1"
-
-// PKCS8 key encoding will produce PEM files with the `BEGIN PRIVATE KEY`
-// header. It encodes the keyAlgorithm of the private key as part of the
-// DER encoded PEM block.
-#PKCS8: #PrivateKeyEncoding & "PKCS8"
-
-// CertificateSpec defines the desired state of Certificate.
-// A valid Certificate requires at least one of a CommonName, DNSName, or
-// URISAN to be valid.
-#CertificateSpec: {
-	// Full X509 name specification (https://golang.org/pkg/crypto/x509/pkix/#Name).
-	// +optional
-	subject?: null | #X509Subject @go(Subject,*X509Subject)
-
-	// CommonName is a common name to be used on the Certificate.
-	// The CommonName should have a length of 64 characters or fewer to avoid
-	// generating invalid CSRs.
-	// This value is ignored by TLS clients when any subject alt name is set.
-	// This is x509 behaviour: https://tools.ietf.org/html/rfc6125#section-6.4.4
-	// +optional
-	commonName?: string @go(CommonName)
-
-	// The requested 'duration' (i.e. lifetime) of the Certificate. This option
-	// may be ignored/overridden by some issuer types. If unset this defaults to
-	// 90 days. Certificate will be renewed either 2/3 through its duration or
-	// `renewBefore` period before its expiry, whichever is later. Minimum
-	// accepted duration is 1 hour. Value must be in units accepted by Go
-	// time.ParseDuration https://golang.org/pkg/time/#ParseDuration
-	// +optional
-	duration?: null | metav1.#Duration @go(Duration,*metav1.Duration)
-
-	// How long before the currently issued certificate's expiry
-	// cert-manager should renew the certificate. The default is 2/3 of the
-	// issued certificate's duration. Minimum accepted value is 5 minutes.
-	// Value must be in units accepted by Go time.ParseDuration
-	// https://golang.org/pkg/time/#ParseDuration
-	// +optional
-	renewBefore?: null | metav1.#Duration @go(RenewBefore,*metav1.Duration)
-
-	// DNSNames is a list of DNS subjectAltNames to be set on the Certificate.
-	// +optional
-	dnsNames?: [...string] @go(DNSNames,[]string)
-
-	// IPAddresses is a list of IP address subjectAltNames to be set on the Certificate.
-	// +optional
-	ipAddresses?: [...string] @go(IPAddresses,[]string)
-
-	// URIs is a list of URI subjectAltNames to be set on the Certificate.
-	// +optional
-	uris?: [...string] @go(URIs,[]string)
-
-	// EmailAddresses is a list of email subjectAltNames to be set on the Certificate.
-	// +optional
-	emailAddresses?: [...string] @go(EmailAddresses,[]string)
-
-	// SecretName is the name of the secret resource that will be automatically
-	// created and managed by this Certificate resource.
-	// It will be populated with a private key and certificate, signed by the
-	// denoted issuer.
-	secretName: string @go(SecretName)
-
-	// SecretTemplate defines annotations and labels to be copied to the
-	// Certificate's Secret. Labels and annotations on the Secret will be changed
-	// as they appear on the SecretTemplate when added or removed. SecretTemplate
-	// annotations are added in conjunction with, and cannot overwrite, the base
-	// set of annotations cert-manager sets on the Certificate's Secret.
-	// +optional
-	secretTemplate?: null | #CertificateSecretTemplate @go(SecretTemplate,*CertificateSecretTemplate)
-
-	// Keystores configures additional keystore output formats stored in the
-	// `secretName` Secret resource.
-	// +optional
-	keystores?: null | #CertificateKeystores @go(Keystores,*CertificateKeystores)
-
-	// IssuerRef is a reference to the issuer for this certificate.
-	// If the `kind` field is not set, or set to `Issuer`, an Issuer resource
-	// with the given name in the same namespace as the Certificate will be used.
-	// If the `kind` field is set to `ClusterIssuer`, a ClusterIssuer with the
-	// provided name will be used.
-	// The `name` field in this stanza is required at all times.
-	issuerRef: cmmeta.#ObjectReference @go(IssuerRef)
-
-	// IsCA will mark this Certificate as valid for certificate signing.
-	// This will automatically add the `cert sign` usage to the list of `usages`.
-	// +optional
-	isCA?: bool @go(IsCA)
-
-	// Usages is the set of x509 usages that are requested for the certificate.
-	// Defaults to `digital signature` and `key encipherment` if not specified.
-	// +optional
-	usages?: [...#KeyUsage] @go(Usages,[]KeyUsage)
-
-	// Options to control private keys used for the Certificate.
-	// +optional
-	privateKey?: null | #CertificatePrivateKey @go(PrivateKey,*CertificatePrivateKey)
-
-	// EncodeUsagesInRequest controls whether key usages should be present
-	// in the CertificateRequest
-	// +optional
-	encodeUsagesInRequest?: null | bool @go(EncodeUsagesInRequest,*bool)
-
-	// revisionHistoryLimit is the maximum number of CertificateRequest revisions
-	// that are maintained in the Certificate's history. Each revision represents
-	// a single `CertificateRequest` created by this Certificate, either when it
-	// was created, renewed, or Spec was changed. Revisions will be removed by
-	// oldest first if the number of revisions exceeds this number. If set,
-	// revisionHistoryLimit must be a value of `1` or greater. If unset (`nil`),
-	// revisions will not be garbage collected. Default value is `nil`.
-	// +kubebuilder:validation:ExclusiveMaximum=false
-	// +optional
-	revisionHistoryLimit?: null | int32 @go(RevisionHistoryLimit,*int32)
-
-	// AdditionalOutputFormats defines extra output formats of the private key
-	// and signed certificate chain to be written to this Certificate's target
-	// Secret. This is an Alpha Feature and is only enabled with the
-	// `--feature-gates=AdditionalCertificateOutputFormats=true` option on both
-	// the controller and webhook components.
-	// +optional
-	additionalOutputFormats?: [...#CertificateAdditionalOutputFormat] @go(AdditionalOutputFormats,[]CertificateAdditionalOutputFormat)
-}
-
-// CertificatePrivateKey contains configuration options for private keys
-// used by the Certificate controller.
-// This allows control of how private keys are rotated.
-#CertificatePrivateKey: {
-	// RotationPolicy controls how private keys should be regenerated when a
-	// re-issuance is being processed.
-	// If set to Never, a private key will only be generated if one does not
-	// already exist in the target `spec.secretName`. If one does exists but it
-	// does not have the correct algorithm or size, a warning will be raised
-	// to await user intervention.
-	// If set to Always, a private key matching the specified requirements
-	// will be generated whenever a re-issuance occurs.
-	// Default is 'Never' for backward compatibility.
-	// +optional
-	rotationPolicy?: #PrivateKeyRotationPolicy @go(RotationPolicy)
-
-	// The private key cryptography standards (PKCS) encoding for this
-	// certificate's private key to be encoded in.
-	// If provided, allowed values are `PKCS1` and `PKCS8` standing for PKCS#1
-	// and PKCS#8, respectively.
-	// Defaults to `PKCS1` if not specified.
-	// +optional
-	encoding?: #PrivateKeyEncoding @go(Encoding)
-
-	// Algorithm is the private key algorithm of the corresponding private key
-	// for this certificate. If provided, allowed values are either `RSA`,`Ed25519` or `ECDSA`
-	// If `algorithm` is specified and `size` is not provided,
-	// key size of 256 will be used for `ECDSA` key algorithm and
-	// key size of 2048 will be used for `RSA` key algorithm.
-	// key size is ignored when using the `Ed25519` key algorithm.
-	// +optional
-	algorithm?: #PrivateKeyAlgorithm @go(Algorithm)
-
-	// Size is the key bit size of the corresponding private key for this certificate.
-	// If `algorithm` is set to `RSA`, valid values are `2048`, `4096` or `8192`,
-	// and will default to `2048` if not specified.
-	// If `algorithm` is set to `ECDSA`, valid values are `256`, `384` or `521`,
-	// and will default to `256` if not specified.
-	// If `algorithm` is set to `Ed25519`, Size is ignored.
-	// No other values are allowed.
-	// +optional
-	size?: int @go(Size)
-}
-
-// Denotes how private keys should be generated or sourced when a Certificate
-// is being issued.
-#PrivateKeyRotationPolicy: string
-
-// CertificateOutputFormatType specifies which additional output formats should
-// be written to the Certificate's target Secret.
-// Allowed values are `DER` or `CombinedPEM`.
-// When Type is set to `DER` an additional entry `key.der` will be written to
-// the Secret, containing the binary format of the private key.
-// When Type is set to `CombinedPEM` an additional entry `tls-combined.pem`
-// will be written to the Secret, containing the PEM formatted private key and
-// signed certificate chain (tls.key + tls.crt concatenated).
-// +kubebuilder:validation:Enum=DER;CombinedPEM
-#CertificateOutputFormatType: string // #enumCertificateOutputFormatType
-
-#enumCertificateOutputFormatType:
-	#CertificateOutputFormatDER |
-	#CertificateOutputFormatCombinedPEM
-
-// CertificateOutputFormatDERKey is the name of the data entry in the Secret
-// resource used to store the DER formatted private key.
-#CertificateOutputFormatDERKey: "key.der"
-
-// CertificateOutputFormatDER  writes the Certificate's private key in DER
-// binary format to the `key.der` target Secret Data key.
-#CertificateOutputFormatDER: #CertificateOutputFormatType & "DER"
-
-// CertificateOutputFormatCombinedPEMKey is the name of the data entry in the Secret
-// resource used to store the combined PEM (key + signed certificate).
-#CertificateOutputFormatCombinedPEMKey: "tls-combined.pem"
-
-// CertificateOutputFormatCombinedPEM  writes the Certificate's signed
-// certificate chain and private key, in PEM format, to the
-// `tls-combined.pem` target Secret Data key. The value at this key will
-// include the private key PEM document, followed by at least one new line
-// character, followed by the chain of signed certificate PEM documents
-// (`<private key> + \n + <signed certificate chain>`).
-#CertificateOutputFormatCombinedPEM: #CertificateOutputFormatType & "CombinedPEM"
-
-// CertificateAdditionalOutputFormat defines an additional output format of a
-// Certificate resource. These contain supplementary data formats of the signed
-// certificate chain and paired private key.
-#CertificateAdditionalOutputFormat: {
-	// Type is the name of the format type that should be written to the
-	// Certificate's target Secret.
-	type: #CertificateOutputFormatType @go(Type)
-}
-
-// X509Subject Full X509 name specification
-#X509Subject: {
-	// Organizations to be used on the Certificate.
-	// +optional
-	organizations?: [...string] @go(Organizations,[]string)
-
-	// Countries to be used on the Certificate.
-	// +optional
-	countries?: [...string] @go(Countries,[]string)
-
-	// Organizational Units to be used on the Certificate.
-	// +optional
-	organizationalUnits?: [...string] @go(OrganizationalUnits,[]string)
-
-	// Cities to be used on the Certificate.
-	// +optional
-	localities?: [...string] @go(Localities,[]string)
-
-	// State/Provinces to be used on the Certificate.
-	// +optional
-	provinces?: [...string] @go(Provinces,[]string)
-
-	// Street addresses to be used on the Certificate.
-	// +optional
-	streetAddresses?: [...string] @go(StreetAddresses,[]string)
-
-	// Postal codes to be used on the Certificate.
-	// +optional
-	postalCodes?: [...string] @go(PostalCodes,[]string)
-
-	// Serial number to be used on the Certificate.
-	// +optional
-	serialNumber?: string @go(SerialNumber)
-}
-
-// CertificateKeystores configures additional keystore output formats to be
-// created in the Certificate's output Secret.
-#CertificateKeystores: {
-	// JKS configures options for storing a JKS keystore in the
-	// `spec.secretName` Secret resource.
-	// +optional
-	jks?: null | #JKSKeystore @go(JKS,*JKSKeystore)
-
-	// PKCS12 configures options for storing a PKCS12 keystore in the
-	// `spec.secretName` Secret resource.
-	// +optional
-	pkcs12?: null | #PKCS12Keystore @go(PKCS12,*PKCS12Keystore)
-}
-
-// JKS configures options for storing a JKS keystore in the `spec.secretName`
-// Secret resource.
-#JKSKeystore: {
-	// Create enables JKS keystore creation for the Certificate.
-	// If true, a file named `keystore.jks` will be created in the target
-	// Secret resource, encrypted using the password stored in
-	// `passwordSecretRef`.
-	// The keystore file will only be updated upon re-issuance.
-	// A file named `truststore.jks` will also be created in the target
-	// Secret resource, encrypted using the password stored in
-	// `passwordSecretRef` containing the issuing Certificate Authority
-	create: bool @go(Create)
-
-	// PasswordSecretRef is a reference to a key in a Secret resource
-	// containing the password used to encrypt the JKS keystore.
-	passwordSecretRef: cmmeta.#SecretKeySelector @go(PasswordSecretRef)
-}
-
-// PKCS12 configures options for storing a PKCS12 keystore in the
-// `spec.secretName` Secret resource.
-#PKCS12Keystore: {
-	// Create enables PKCS12 keystore creation for the Certificate.
-	// If true, a file named `keystore.p12` will be created in the target
-	// Secret resource, encrypted using the password stored in
-	// `passwordSecretRef`.
-	// The keystore file will only be updated upon re-issuance.
-	// A file named `truststore.p12` will also be created in the target
-	// Secret resource, encrypted using the password stored in
-	// `passwordSecretRef` containing the issuing Certificate Authority
-	create: bool @go(Create)
-
-	// PasswordSecretRef is a reference to a key in a Secret resource
-	// containing the password used to encrypt the PKCS12 keystore.
-	passwordSecretRef: cmmeta.#SecretKeySelector @go(PasswordSecretRef)
-}
-
-// CertificateStatus defines the observed state of Certificate
-#CertificateStatus: {
-	// List of status conditions to indicate the status of certificates.
-	// Known condition types are `Ready` and `Issuing`.
-	// +optional
-	conditions?: [...#CertificateCondition] @go(Conditions,[]CertificateCondition)
-
-	// LastFailureTime is the time as recorded by the Certificate controller
-	// of the most recent failure to complete a CertificateRequest for this
-	// Certificate resource.
-	// If set, cert-manager will not re-request another Certificate until
-	// 1 hour has elapsed from this time.
-	// +optional
-	lastFailureTime?: null | metav1.#Time @go(LastFailureTime,*metav1.Time)
-
-	// The time after which the certificate stored in the secret named
-	// by this resource in spec.secretName is valid.
-	// +optional
-	notBefore?: null | metav1.#Time @go(NotBefore,*metav1.Time)
-
-	// The expiration time of the certificate stored in the secret named
-	// by this resource in `spec.secretName`.
-	// +optional
-	notAfter?: null | metav1.#Time @go(NotAfter,*metav1.Time)
-
-	// RenewalTime is the time at which the certificate will be next
-	// renewed.
-	// If not set, no upcoming renewal is scheduled.
-	// +optional
-	renewalTime?: null | metav1.#Time @go(RenewalTime,*metav1.Time)
-
-	// The current 'revision' of the certificate as issued.
-	//
-	// When a CertificateRequest resource is created, it will have the
-	// `cert-manager.io/certificate-revision` set to one greater than the
-	// current value of this field.
-	//
-	// Upon issuance, this field will be set to the value of the annotation
-	// on the CertificateRequest resource used to issue the certificate.
-	//
-	// Persisting the value on the CertificateRequest resource allows the
-	// certificates controller to know whether a request is part of an old
-	// issuance or if it is part of the ongoing revision's issuance by
-	// checking if the revision value in the annotation is greater than this
-	// field.
-	// +optional
-	revision?: null | int @go(Revision,*int)
-
-	// The name of the Secret resource containing the private key to be used
-	// for the next certificate iteration.
-	// The keymanager controller will automatically set this field if the
-	// `Issuing` condition is set to `True`.
-	// It will automatically unset this field when the Issuing condition is
-	// not set or False.
-	// +optional
-	nextPrivateKeySecretName?: null | string @go(NextPrivateKeySecretName,*string)
-}
-
-// CertificateCondition contains condition information for an Certificate.
-#CertificateCondition: {
-	// Type of the condition, known values are (`Ready`, `Issuing`).
-	type: #CertificateConditionType @go(Type)
-
-	// Status of the condition, one of (`True`, `False`, `Unknown`).
-	status: cmmeta.#ConditionStatus @go(Status)
-
-	// LastTransitionTime is the timestamp corresponding to the last status
-	// change of this condition.
-	// +optional
-	lastTransitionTime?: null | metav1.#Time @go(LastTransitionTime,*metav1.Time)
-
-	// Reason is a brief machine readable explanation for the condition's last
-	// transition.
-	// +optional
-	reason?: string @go(Reason)
-
-	// Message is a human readable description of the details of the last
-	// transition, complementing reason.
-	// +optional
-	message?: string @go(Message)
-
-	// If set, this represents the .metadata.generation that the condition was
-	// set based upon.
-	// For instance, if .metadata.generation is currently 12, but the
-	// .status.condition[x].observedGeneration is 9, the condition is out of date
-	// with respect to the current state of the Certificate.
-	// +optional
-	observedGeneration?: int64 @go(ObservedGeneration)
-}
-
-// CertificateConditionType represents an Certificate condition value.
-#CertificateConditionType: string // #enumCertificateConditionType
-
-#enumCertificateConditionType:
-	#CertificateConditionReady |
-	#CertificateConditionIssuing
-
-// CertificateConditionReady indicates that a certificate is ready for use.
-// This is defined as:
-// - The target secret exists
-// - The target secret contains a certificate that has not expired
-// - The target secret contains a private key valid for the certificate
-// - The commonName and dnsNames attributes match those specified on the Certificate
-#CertificateConditionReady: #CertificateConditionType & "Ready"
-
-// A condition added to Certificate resources when an issuance is required.
-// This condition will be automatically added and set to true if:
-//   * No keypair data exists in the target Secret
-//   * The data stored in the Secret cannot be decoded
-//   * The private key and certificate do not have matching public keys
-//   * If a CertificateRequest for the current revision exists and the
-//     certificate data stored in the Secret does not match the
-//    `status.certificate` on the CertificateRequest.
-//   * If no CertificateRequest resource exists for the current revision,
-//     the options on the Certificate resource are compared against the
-//     x509 data in the Secret, similar to what's done in earlier versions.
-//     If there is a mismatch, an issuance is triggered.
-// This condition may also be added by external API consumers to trigger
-// a re-issuance manually for any other reason.
-//
-// It will be removed by the 'issuing' controller upon completing issuance.
-#CertificateConditionIssuing: #CertificateConditionType & "Issuing"
-
-// CertificateSecretTemplate defines the default labels and annotations
-// to be copied to the Kubernetes Secret resource named in `CertificateSpec.secretName`.
-#CertificateSecretTemplate: {
-	// Annotations is a key value map to be copied to the target Kubernetes Secret.
-	// +optional
-	annotations?: {[string]: string} @go(Annotations,map[string]string)
-
-	// Labels is a key value map to be copied to the target Kubernetes Secret.
-	// +optional
-	labels?: {[string]: string} @go(Labels,map[string]string)
-}

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/certmanager/v1/types_certificaterequest_go_gen.cue

@@ -1,195 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/certmanager/v1
-
-package v1
-
-import (
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	cmmeta "github.com/jetstack/cert-manager/pkg/apis/meta/v1"
-)
-
-// Pending indicates that a CertificateRequest is still in progress.
-#CertificateRequestReasonPending: "Pending"
-
-// Failed indicates that a CertificateRequest has failed, either due to
-// timing out or some other critical failure.
-#CertificateRequestReasonFailed: "Failed"
-
-// Issued indicates that a CertificateRequest has been completed, and that
-// the `status.certificate` field is set.
-#CertificateRequestReasonIssued: "Issued"
-
-// Denied is a Ready condition reason that indicates that a
-// CertificateRequest has been denied, and the CertificateRequest will never
-// be issued.
-#CertificateRequestReasonDenied: "Denied"
-
-// A CertificateRequest is used to request a signed certificate from one of the
-// configured issuers.
-//
-// All fields within the CertificateRequest's `spec` are immutable after creation.
-// A CertificateRequest will either succeed or fail, as denoted by its `status.state`
-// field.
-//
-// A CertificateRequest is a one-shot resource, meaning it represents a single
-// point in time request for a certificate and cannot be re-used.
-// +k8s:openapi-gen=true
-#CertificateRequest: {
-	metav1.#TypeMeta
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta)
-
-	// Desired state of the CertificateRequest resource.
-	spec: #CertificateRequestSpec @go(Spec)
-
-	// Status of the CertificateRequest. This is set and managed automatically.
-	// +optional
-	status: #CertificateRequestStatus @go(Status)
-}
-
-// CertificateRequestList is a list of Certificates
-#CertificateRequestList: {
-	metav1.#TypeMeta
-	metadata: metav1.#ListMeta @go(ListMeta)
-	items: [...#CertificateRequest] @go(Items,[]CertificateRequest)
-}
-
-// CertificateRequestSpec defines the desired state of CertificateRequest
-#CertificateRequestSpec: {
-	// The requested 'duration' (i.e. lifetime) of the Certificate.
-	// This option may be ignored/overridden by some issuer types.
-	// +optional
-	duration?: null | metav1.#Duration @go(Duration,*metav1.Duration)
-
-	// IssuerRef is a reference to the issuer for this CertificateRequest.  If
-	// the `kind` field is not set, or set to `Issuer`, an Issuer resource with
-	// the given name in the same namespace as the CertificateRequest will be
-	// used.  If the `kind` field is set to `ClusterIssuer`, a ClusterIssuer with
-	// the provided name will be used. The `name` field in this stanza is
-	// required at all times. The group field refers to the API group of the
-	// issuer which defaults to `cert-manager.io` if empty.
-	issuerRef: cmmeta.#ObjectReference @go(IssuerRef)
-
-	// The PEM-encoded x509 certificate signing request to be submitted to the
-	// CA for signing.
-	request: bytes @go(Request,[]byte)
-
-	// IsCA will request to mark the certificate as valid for certificate signing
-	// when submitting to the issuer.
-	// This will automatically add the `cert sign` usage to the list of `usages`.
-	// +optional
-	isCA?: bool @go(IsCA)
-
-	// Usages is the set of x509 usages that are requested for the certificate.
-	// If usages are set they SHOULD be encoded inside the CSR spec
-	// Defaults to `digital signature` and `key encipherment` if not specified.
-	// +optional
-	usages?: [...#KeyUsage] @go(Usages,[]KeyUsage)
-
-	// Username contains the name of the user that created the CertificateRequest.
-	// Populated by the cert-manager webhook on creation and immutable.
-	// +optional
-	username?: string @go(Username)
-
-	// UID contains the uid of the user that created the CertificateRequest.
-	// Populated by the cert-manager webhook on creation and immutable.
-	// +optional
-	uid?: string @go(UID)
-
-	// Groups contains group membership of the user that created the CertificateRequest.
-	// Populated by the cert-manager webhook on creation and immutable.
-	// +listType=atomic
-	// +optional
-	groups?: [...string] @go(Groups,[]string)
-
-	// Extra contains extra attributes of the user that created the CertificateRequest.
-	// Populated by the cert-manager webhook on creation and immutable.
-	// +optional
-	extra?: {[string]: [...string]} @go(Extra,map[string][]string)
-}
-
-// CertificateRequestStatus defines the observed state of CertificateRequest and
-// resulting signed certificate.
-#CertificateRequestStatus: {
-	// List of status conditions to indicate the status of a CertificateRequest.
-	// Known condition types are `Ready` and `InvalidRequest`.
-	// +optional
-	conditions?: [...#CertificateRequestCondition] @go(Conditions,[]CertificateRequestCondition)
-
-	// The PEM encoded x509 certificate resulting from the certificate
-	// signing request.
-	// If not set, the CertificateRequest has either not been completed or has
-	// failed. More information on failure can be found by checking the
-	// `conditions` field.
-	// +optional
-	certificate?: bytes @go(Certificate,[]byte)
-
-	// The PEM encoded x509 certificate of the signer, also known as the CA
-	// (Certificate Authority).
-	// This is set on a best-effort basis by different issuers.
-	// If not set, the CA is assumed to be unknown/not available.
-	// +optional
-	ca?: bytes @go(CA,[]byte)
-
-	// FailureTime stores the time that this CertificateRequest failed. This is
-	// used to influence garbage collection and back-off.
-	// +optional
-	failureTime?: null | metav1.#Time @go(FailureTime,*metav1.Time)
-}
-
-// CertificateRequestCondition contains condition information for a CertificateRequest.
-#CertificateRequestCondition: {
-	// Type of the condition, known values are (`Ready`, `InvalidRequest`,
-	// `Approved`, `Denied`).
-	type: #CertificateRequestConditionType @go(Type)
-
-	// Status of the condition, one of (`True`, `False`, `Unknown`).
-	status: cmmeta.#ConditionStatus @go(Status)
-
-	// LastTransitionTime is the timestamp corresponding to the last status
-	// change of this condition.
-	// +optional
-	lastTransitionTime?: null | metav1.#Time @go(LastTransitionTime,*metav1.Time)
-
-	// Reason is a brief machine readable explanation for the condition's last
-	// transition.
-	// +optional
-	reason?: string @go(Reason)
-
-	// Message is a human readable description of the details of the last
-	// transition, complementing reason.
-	// +optional
-	message?: string @go(Message)
-}
-
-// CertificateRequestConditionType represents an Certificate condition value.
-#CertificateRequestConditionType: string // #enumCertificateRequestConditionType
-
-#enumCertificateRequestConditionType:
-	#CertificateRequestConditionReady |
-	#CertificateRequestConditionInvalidRequest |
-	#CertificateRequestConditionApproved |
-	#CertificateRequestConditionDenied
-
-// CertificateRequestConditionReady indicates that a certificate is ready for use.
-// This is defined as:
-// - The target certificate exists in CertificateRequest.Status
-#CertificateRequestConditionReady: #CertificateRequestConditionType & "Ready"
-
-// CertificateRequestConditionInvalidRequest indicates that a certificate
-// signer has refused to sign the request due to at least one of the input
-// parameters being invalid. Additional information about why the request
-// was rejected can be found in the `reason` and `message` fields.
-#CertificateRequestConditionInvalidRequest: #CertificateRequestConditionType & "InvalidRequest"
-
-// CertificateRequestConditionApproved indicates that a certificate request
-// is approved and ready for signing. Condition must never have a status of
-// `False`, and cannot be modified once set. Cannot be set alongside
-// `Denied`.
-#CertificateRequestConditionApproved: #CertificateRequestConditionType & "Approved"
-
-// CertificateRequestConditionDenied indicates that a certificate request is
-// denied, and must never be signed. Condition must never have a status of
-// `False`, and cannot be modified once set. Cannot be set alongside
-// `Approved`.
-#CertificateRequestConditionDenied: #CertificateRequestConditionType & "Denied"

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/certmanager/v1/types_go_gen.cue

@@ -1,195 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/certmanager/v1
-
-package v1
-
-// Annotation key for DNS subjectAltNames.
-#AltNamesAnnotationKey: "cert-manager.io/alt-names"
-
-// Annotation key for IP subjectAltNames.
-#IPSANAnnotationKey: "cert-manager.io/ip-sans"
-
-// Annotation key for URI subjectAltNames.
-#URISANAnnotationKey: "cert-manager.io/uri-sans"
-
-// Annotation key for certificate common name.
-#CommonNameAnnotationKey: "cert-manager.io/common-name"
-
-// Duration key for certificate duration.
-#DurationAnnotationKey: "cert-manager.io/duration"
-
-// Annotation key for certificate renewBefore.
-#RenewBeforeAnnotationKey: "cert-manager.io/renew-before"
-
-// Annotation key for certificate key usages.
-#UsagesAnnotationKey: "cert-manager.io/usages"
-
-// Annotation key the 'name' of the Issuer resource.
-#IssuerNameAnnotationKey: "cert-manager.io/issuer-name"
-
-// Annotation key for the 'kind' of the Issuer resource.
-#IssuerKindAnnotationKey: "cert-manager.io/issuer-kind"
-
-// Annotation key for the 'group' of the Issuer resource.
-#IssuerGroupAnnotationKey: "cert-manager.io/issuer-group"
-
-// Annotation key for the name of the certificate that a resource is related to.
-#CertificateNameKey: "cert-manager.io/certificate-name"
-
-// Annotation key used to denote whether a Secret is named on a Certificate
-// as a 'next private key' Secret resource.
-#IsNextPrivateKeySecretLabelKey: "cert-manager.io/next-private-key"
-
-// IngressIssuerNameAnnotationKey holds the issuerNameAnnotation value which can be
-// used to override the issuer specified on the created Certificate resource.
-#IngressIssuerNameAnnotationKey: "cert-manager.io/issuer"
-
-// IngressClusterIssuerNameAnnotationKey holds the clusterIssuerNameAnnotation value which
-// can be used to override the issuer specified on the created Certificate resource. The Certificate
-// will reference the specified *ClusterIssuer* instead of normal issuer.
-#IngressClusterIssuerNameAnnotationKey: "cert-manager.io/cluster-issuer"
-
-// IngressACMEIssuerHTTP01IngressClassAnnotationKey holds the acmeIssuerHTTP01IngressClassAnnotation value
-// which can be used to override the http01 ingressClass if the challenge type is set to http01
-#IngressACMEIssuerHTTP01IngressClassAnnotationKey: "acme.cert-manager.io/http01-ingress-class"
-
-// IngressClassAnnotationKey picks a specific "class" for the Ingress. The
-// controller only processes Ingresses with this annotation either unset, or
-// set to either the configured value or the empty string.
-#IngressClassAnnotationKey: "kubernetes.io/ingress.class"
-
-// Annotation added to CertificateRequest resources to denote the name of
-// a Secret resource containing the private key used to sign the CSR stored
-// on the resource.
-// This annotation *may* not be present, and is used by the 'self signing'
-// issuer type to self-sign certificates.
-#CertificateRequestPrivateKeyAnnotationKey: "cert-manager.io/private-key-secret-name"
-
-// Annotation to declare the CertificateRequest "revision", belonging to a Certificate Resource
-#CertificateRequestRevisionAnnotationKey: "cert-manager.io/certificate-revision"
-
-// IssueTemporaryCertificateAnnotation is an annotation that can be added to
-// Certificate resources.
-// If it is present, a temporary internally signed certificate will be
-// stored in the target Secret resource whilst the real Issuer is processing
-// the certificate request.
-#IssueTemporaryCertificateAnnotation: "cert-manager.io/issue-temporary-certificate"
-
-#ClusterIssuerKind:      "ClusterIssuer"
-#IssuerKind:             "Issuer"
-#CertificateKind:        "Certificate"
-#CertificateRequestKind: "CertificateRequest"
-
-// WantInjectAnnotation is the annotation that specifies that a particular
-// object wants injection of CAs.  It takes the form of a reference to a certificate
-// as namespace/name.  The certificate is expected to have the is-serving-for annotations.
-#WantInjectAnnotation: "cert-manager.io/inject-ca-from"
-
-// WantInjectAPIServerCAAnnotation will - if set to "true" - make the cainjector
-// inject the CA certificate for the Kubernetes apiserver into the resource.
-// It discovers the apiserver's CA by inspecting the service account credentials
-// mounted into the cainjector pod.
-#WantInjectAPIServerCAAnnotation: "cert-manager.io/inject-apiserver-ca"
-
-// WantInjectFromSecretAnnotation is the annotation that specifies that a particular
-// object wants injection of CAs.  It takes the form of a reference to a Secret
-// as namespace/name.
-#WantInjectFromSecretAnnotation: "cert-manager.io/inject-ca-from-secret"
-
-// AllowsInjectionFromSecretAnnotation is an annotation that must be added
-// to Secret resource that want to denote that they can be directly
-// injected into injectables that have a `inject-ca-from-secret` annotation.
-// If an injectable references a Secret that does NOT have this annotation,
-// the cainjector will refuse to inject the secret.
-#AllowsInjectionFromSecretAnnotation: "cert-manager.io/allow-direct-injection"
-
-// VenafiCustomFieldsAnnotationKey is the annotation that passes on JSON encoded custom fields to the Venafi issuer
-// This will only work with Venafi TPP v19.3 and higher
-// The value is an array with objects containing the name and value keys
-// for example: `[{"name": "custom-field", "value": "custom-value"}]`
-#VenafiCustomFieldsAnnotationKey: "venafi.cert-manager.io/custom-fields"
-
-// VenafiPickupIDAnnotationKey is the annotation key used to record the
-// Venafi Pickup ID of a certificate signing request that has been submitted
-// to the Venafi API for collection later.
-#VenafiPickupIDAnnotationKey: "venafi.cert-manager.io/pickup-id"
-
-// KeyUsage specifies valid usage contexts for keys.
-// See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3
-//      https://tools.ietf.org/html/rfc5280#section-4.2.1.12
-// Valid KeyUsage values are as follows:
-// "signing",
-// "digital signature",
-// "content commitment",
-// "key encipherment",
-// "key agreement",
-// "data encipherment",
-// "cert sign",
-// "crl sign",
-// "encipher only",
-// "decipher only",
-// "any",
-// "server auth",
-// "client auth",
-// "code signing",
-// "email protection",
-// "s/mime",
-// "ipsec end system",
-// "ipsec tunnel",
-// "ipsec user",
-// "timestamping",
-// "ocsp signing",
-// "microsoft sgc",
-// "netscape sgc"
-// +kubebuilder:validation:Enum="signing";"digital signature";"content commitment";"key encipherment";"key agreement";"data encipherment";"cert sign";"crl sign";"encipher only";"decipher only";"any";"server auth";"client auth";"code signing";"email protection";"s/mime";"ipsec end system";"ipsec tunnel";"ipsec user";"timestamping";"ocsp signing";"microsoft sgc";"netscape sgc"
-#KeyUsage: string // #enumKeyUsage
-
-#enumKeyUsage:
-	#UsageSigning |
-	#UsageDigitalSignature |
-	#UsageContentCommitment |
-	#UsageKeyEncipherment |
-	#UsageKeyAgreement |
-	#UsageDataEncipherment |
-	#UsageCertSign |
-	#UsageCRLSign |
-	#UsageEncipherOnly |
-	#UsageDecipherOnly |
-	#UsageAny |
-	#UsageServerAuth |
-	#UsageClientAuth |
-	#UsageCodeSigning |
-	#UsageEmailProtection |
-	#UsageSMIME |
-	#UsageIPsecEndSystem |
-	#UsageIPsecTunnel |
-	#UsageIPsecUser |
-	#UsageTimestamping |
-	#UsageOCSPSigning |
-	#UsageMicrosoftSGC |
-	#UsageNetscapeSGC
-
-#UsageSigning:           #KeyUsage & "signing"
-#UsageDigitalSignature:  #KeyUsage & "digital signature"
-#UsageContentCommitment: #KeyUsage & "content commitment"
-#UsageKeyEncipherment:   #KeyUsage & "key encipherment"
-#UsageKeyAgreement:      #KeyUsage & "key agreement"
-#UsageDataEncipherment:  #KeyUsage & "data encipherment"
-#UsageCertSign:          #KeyUsage & "cert sign"
-#UsageCRLSign:           #KeyUsage & "crl sign"
-#UsageEncipherOnly:      #KeyUsage & "encipher only"
-#UsageDecipherOnly:      #KeyUsage & "decipher only"
-#UsageAny:               #KeyUsage & "any"
-#UsageServerAuth:        #KeyUsage & "server auth"
-#UsageClientAuth:        #KeyUsage & "client auth"
-#UsageCodeSigning:       #KeyUsage & "code signing"
-#UsageEmailProtection:   #KeyUsage & "email protection"
-#UsageSMIME:             #KeyUsage & "s/mime"
-#UsageIPsecEndSystem:    #KeyUsage & "ipsec end system"
-#UsageIPsecTunnel:       #KeyUsage & "ipsec tunnel"
-#UsageIPsecUser:         #KeyUsage & "ipsec user"
-#UsageTimestamping:      #KeyUsage & "timestamping"
-#UsageOCSPSigning:       #KeyUsage & "ocsp signing"
-#UsageMicrosoftSGC:      #KeyUsage & "microsoft sgc"
-#UsageNetscapeSGC:       #KeyUsage & "netscape sgc"

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/certmanager/v1/types_issuer_go_gen.cue

@@ -1,316 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/certmanager/v1
-
-package v1
-
-import (
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	cmacme "github.com/jetstack/cert-manager/pkg/apis/acme/v1"
-	cmmeta "github.com/jetstack/cert-manager/pkg/apis/meta/v1"
-)
-
-// A ClusterIssuer represents a certificate issuing authority which can be
-// referenced as part of `issuerRef` fields.
-// It is similar to an Issuer, however it is cluster-scoped and therefore can
-// be referenced by resources that exist in *any* namespace, not just the same
-// namespace as the referent.
-#ClusterIssuer: {
-	metav1.#TypeMeta
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta)
-
-	// Desired state of the ClusterIssuer resource.
-	spec: #IssuerSpec @go(Spec)
-
-	// Status of the ClusterIssuer. This is set and managed automatically.
-	// +optional
-	status: #IssuerStatus @go(Status)
-}
-
-// ClusterIssuerList is a list of Issuers
-#ClusterIssuerList: {
-	metav1.#TypeMeta
-	metadata: metav1.#ListMeta @go(ListMeta)
-	items: [...#ClusterIssuer] @go(Items,[]ClusterIssuer)
-}
-
-// An Issuer represents a certificate issuing authority which can be
-// referenced as part of `issuerRef` fields.
-// It is scoped to a single namespace and can therefore only be referenced by
-// resources within the same namespace.
-#Issuer: {
-	metav1.#TypeMeta
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta)
-
-	// Desired state of the Issuer resource.
-	spec: #IssuerSpec @go(Spec)
-
-	// Status of the Issuer. This is set and managed automatically.
-	// +optional
-	status: #IssuerStatus @go(Status)
-}
-
-// IssuerList is a list of Issuers
-#IssuerList: {
-	metav1.#TypeMeta
-	metadata: metav1.#ListMeta @go(ListMeta)
-	items: [...#Issuer] @go(Items,[]Issuer)
-}
-
-// IssuerSpec is the specification of an Issuer. This includes any
-// configuration required for the issuer.
-#IssuerSpec: {
-	#IssuerConfig
-}
-
-// The configuration for the issuer.
-// Only one of these can be set.
-#IssuerConfig: {
-	// ACME configures this issuer to communicate with a RFC8555 (ACME) server
-	// to obtain signed x509 certificates.
-	// +optional
-	acme?: null | cmacme.#ACMEIssuer @go(ACME,*cmacme.ACMEIssuer)
-
-	// CA configures this issuer to sign certificates using a signing CA keypair
-	// stored in a Secret resource.
-	// This is used to build internal PKIs that are managed by cert-manager.
-	// +optional
-	ca?: null | #CAIssuer @go(CA,*CAIssuer)
-
-	// Vault configures this issuer to sign certificates using a HashiCorp Vault
-	// PKI backend.
-	// +optional
-	vault?: null | #VaultIssuer @go(Vault,*VaultIssuer)
-
-	// SelfSigned configures this issuer to 'self sign' certificates using the
-	// private key used to create the CertificateRequest object.
-	// +optional
-	selfSigned?: null | #SelfSignedIssuer @go(SelfSigned,*SelfSignedIssuer)
-
-	// Venafi configures this issuer to sign certificates using a Venafi TPP
-	// or Venafi Cloud policy zone.
-	// +optional
-	venafi?: null | #VenafiIssuer @go(Venafi,*VenafiIssuer)
-}
-
-// Configures an issuer to sign certificates using a Venafi TPP
-// or Cloud policy zone.
-#VenafiIssuer: {
-	// Zone is the Venafi Policy Zone to use for this issuer.
-	// All requests made to the Venafi platform will be restricted by the named
-	// zone policy.
-	// This field is required.
-	zone: string @go(Zone)
-
-	// TPP specifies Trust Protection Platform configuration settings.
-	// Only one of TPP or Cloud may be specified.
-	// +optional
-	tpp?: null | #VenafiTPP @go(TPP,*VenafiTPP)
-
-	// Cloud specifies the Venafi cloud configuration settings.
-	// Only one of TPP or Cloud may be specified.
-	// +optional
-	cloud?: null | #VenafiCloud @go(Cloud,*VenafiCloud)
-}
-
-// VenafiTPP defines connection configuration details for a Venafi TPP instance
-#VenafiTPP: {
-	// URL is the base URL for the vedsdk endpoint of the Venafi TPP instance,
-	// for example: "https://tpp.example.com/vedsdk".
-	url: string @go(URL)
-
-	// CredentialsRef is a reference to a Secret containing the username and
-	// password for the TPP server.
-	// The secret must contain two keys, 'username' and 'password'.
-	credentialsRef: cmmeta.#LocalObjectReference @go(CredentialsRef)
-
-	// CABundle is a PEM encoded TLS certificate to use to verify connections to
-	// the TPP instance.
-	// If specified, system roots will not be used and the issuing CA for the
-	// TPP instance must be verifiable using the provided root.
-	// If not specified, the connection will be verified using the cert-manager
-	// system root certificates.
-	// +optional
-	caBundle?: bytes @go(CABundle,[]byte)
-}
-
-// VenafiCloud defines connection configuration details for Venafi Cloud
-#VenafiCloud: {
-	// URL is the base URL for Venafi Cloud.
-	// Defaults to "https://api.venafi.cloud/v1".
-	// +optional
-	url?: string @go(URL)
-
-	// APITokenSecretRef is a secret key selector for the Venafi Cloud API token.
-	apiTokenSecretRef: cmmeta.#SecretKeySelector @go(APITokenSecretRef)
-}
-
-// Configures an issuer to 'self sign' certificates using the
-// private key used to create the CertificateRequest object.
-#SelfSignedIssuer: {
-	// The CRL distribution points is an X.509 v3 certificate extension which identifies
-	// the location of the CRL from which the revocation of this certificate can be checked.
-	// If not set certificate will be issued without CDP. Values are strings.
-	// +optional
-	crlDistributionPoints?: [...string] @go(CRLDistributionPoints,[]string)
-}
-
-// Configures an issuer to sign certificates using a HashiCorp Vault
-// PKI backend.
-#VaultIssuer: {
-	// Auth configures how cert-manager authenticates with the Vault server.
-	auth: #VaultAuth @go(Auth)
-
-	// Server is the connection address for the Vault server, e.g: "https://vault.example.com:8200".
-	server: string @go(Server)
-
-	// Path is the mount path of the Vault PKI backend's `sign` endpoint, e.g:
-	// "my_pki_mount/sign/my-role-name".
-	path: string @go(Path)
-
-	// Name of the vault namespace. Namespaces is a set of features within Vault Enterprise that allows Vault environments to support Secure Multi-tenancy. e.g: "ns1"
-	// More about namespaces can be found here https://www.vaultproject.io/docs/enterprise/namespaces
-	// +optional
-	namespace?: string @go(Namespace)
-
-	// PEM-encoded CA bundle (base64-encoded) used to validate Vault server
-	// certificate. Only used if the Server URL is using HTTPS protocol. This
-	// parameter is ignored for plain HTTP protocol connection. If not set the
-	// system root certificates are used to validate the TLS connection.
-	// +optional
-	caBundle?: bytes @go(CABundle,[]byte)
-}
-
-// Configuration used to authenticate with a Vault server.
-// Only one of `tokenSecretRef`, `appRole` or `kubernetes` may be specified.
-#VaultAuth: {
-	// TokenSecretRef authenticates with Vault by presenting a token.
-	// +optional
-	tokenSecretRef?: null | cmmeta.#SecretKeySelector @go(TokenSecretRef,*cmmeta.SecretKeySelector)
-
-	// AppRole authenticates with Vault using the App Role auth mechanism,
-	// with the role and secret stored in a Kubernetes Secret resource.
-	// +optional
-	appRole?: null | #VaultAppRole @go(AppRole,*VaultAppRole)
-
-	// Kubernetes authenticates with Vault by passing the ServiceAccount
-	// token stored in the named Secret resource to the Vault server.
-	// +optional
-	kubernetes?: null | #VaultKubernetesAuth @go(Kubernetes,*VaultKubernetesAuth)
-}
-
-// VaultAppRole authenticates with Vault using the App Role auth mechanism,
-// with the role and secret stored in a Kubernetes Secret resource.
-#VaultAppRole: {
-	// Path where the App Role authentication backend is mounted in Vault, e.g:
-	// "approle"
-	path: string @go(Path)
-
-	// RoleID configured in the App Role authentication backend when setting
-	// up the authentication backend in Vault.
-	roleId: string @go(RoleId)
-
-	// Reference to a key in a Secret that contains the App Role secret used
-	// to authenticate with Vault.
-	// The `key` field must be specified and denotes which entry within the Secret
-	// resource is used as the app role secret.
-	secretRef: cmmeta.#SecretKeySelector @go(SecretRef)
-}
-
-// Authenticate against Vault using a Kubernetes ServiceAccount token stored in
-// a Secret.
-#VaultKubernetesAuth: {
-	// The Vault mountPath here is the mount path to use when authenticating with
-	// Vault. For example, setting a value to `/v1/auth/foo`, will use the path
-	// `/v1/auth/foo/login` to authenticate with Vault. If unspecified, the
-	// default value "/v1/auth/kubernetes" will be used.
-	// +optional
-	mountPath?: string @go(Path)
-
-	// The required Secret field containing a Kubernetes ServiceAccount JWT used
-	// for authenticating with Vault. Use of 'ambient credentials' is not
-	// supported.
-	secretRef: cmmeta.#SecretKeySelector @go(SecretRef)
-
-	// A required field containing the Vault Role to assume. A Role binds a
-	// Kubernetes ServiceAccount with a set of Vault policies.
-	role: string @go(Role)
-}
-
-#CAIssuer: {
-	// SecretName is the name of the secret used to sign Certificates issued
-	// by this Issuer.
-	secretName: string @go(SecretName)
-
-	// The CRL distribution points is an X.509 v3 certificate extension which identifies
-	// the location of the CRL from which the revocation of this certificate can be checked.
-	// If not set, certificates will be issued without distribution points set.
-	// +optional
-	crlDistributionPoints?: [...string] @go(CRLDistributionPoints,[]string)
-
-	// The OCSP server list is an X.509 v3 extension that defines a list of
-	// URLs of OCSP responders. The OCSP responders can be queried for the
-	// revocation status of an issued certificate. If not set, the
-	// certificate will be issued with no OCSP servers set. For example, an
-	// OCSP server URL could be "http://ocsp.int-x3.letsencrypt.org".
-	// +optional
-	ocspServers?: [...string] @go(OCSPServers,[]string)
-}
-
-// IssuerStatus contains status information about an Issuer
-#IssuerStatus: {
-	// List of status conditions to indicate the status of a CertificateRequest.
-	// Known condition types are `Ready`.
-	// +optional
-	conditions?: [...#IssuerCondition] @go(Conditions,[]IssuerCondition)
-
-	// ACME specific status options.
-	// This field should only be set if the Issuer is configured to use an ACME
-	// server to issue certificates.
-	// +optional
-	acme?: null | cmacme.#ACMEIssuerStatus @go(ACME,*cmacme.ACMEIssuerStatus)
-}
-
-// IssuerCondition contains condition information for an Issuer.
-#IssuerCondition: {
-	// Type of the condition, known values are (`Ready`).
-	type: #IssuerConditionType @go(Type)
-
-	// Status of the condition, one of (`True`, `False`, `Unknown`).
-	status: cmmeta.#ConditionStatus @go(Status)
-
-	// LastTransitionTime is the timestamp corresponding to the last status
-	// change of this condition.
-	// +optional
-	lastTransitionTime?: null | metav1.#Time @go(LastTransitionTime,*metav1.Time)
-
-	// Reason is a brief machine readable explanation for the condition's last
-	// transition.
-	// +optional
-	reason?: string @go(Reason)
-
-	// Message is a human readable description of the details of the last
-	// transition, complementing reason.
-	// +optional
-	message?: string @go(Message)
-
-	// If set, this represents the .metadata.generation that the condition was
-	// set based upon.
-	// For instance, if .metadata.generation is currently 12, but the
-	// .status.condition[x].observedGeneration is 9, the condition is out of date
-	// with respect to the current state of the Issuer.
-	// +optional
-	observedGeneration?: int64 @go(ObservedGeneration)
-}
-
-// IssuerConditionType represents an Issuer condition value.
-#IssuerConditionType: string // #enumIssuerConditionType
-
-#enumIssuerConditionType:
-	#IssuerConditionReady
-
-// IssuerConditionReady represents the fact that a given Issuer condition
-// is in ready state and able to issue certificates.
-// If the `status` of this condition is `False`, CertificateRequest controllers
-// should prevent attempts to sign certificates.
-#IssuerConditionReady: #IssuerConditionType & "Ready"

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/meta/v1/doc_go_gen.cue

@@ -1,9 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/meta/v1
-
-// Package v1 contains meta types for cert-manager APIs
-// +k8s:deepcopy-gen=package
-// +gencrdrefdocs:force
-// +groupName=meta.cert-manager.io
-package v1

cue/cue.mod/gen/github.com/jetstack/cert-manager/pkg/apis/meta/v1/types_go_gen.cue

@@ -1,64 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go github.com/jetstack/cert-manager/pkg/apis/meta/v1
-
-package v1
-
-// ConditionStatus represents a condition's status.
-// +kubebuilder:validation:Enum=True;False;Unknown
-#ConditionStatus: string // #enumConditionStatus
-
-#enumConditionStatus:
-	#ConditionTrue |
-	#ConditionFalse |
-	#ConditionUnknown
-
-// ConditionTrue represents the fact that a given condition is true
-#ConditionTrue: #ConditionStatus & "True"
-
-// ConditionFalse represents the fact that a given condition is false
-#ConditionFalse: #ConditionStatus & "False"
-
-// ConditionUnknown represents the fact that a given condition is unknown
-#ConditionUnknown: #ConditionStatus & "Unknown"
-
-// A reference to an object in the same namespace as the referent.
-// If the referent is a cluster-scoped resource (e.g. a ClusterIssuer),
-// the reference instead refers to the resource with the given name in the
-// configured 'cluster resource namespace', which is set as a flag on the
-// controller component (and defaults to the namespace that cert-manager
-// runs in).
-#LocalObjectReference: {
-	// Name of the resource being referred to.
-	// More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-	name: string @go(Name)
-}
-
-// ObjectReference is a reference to an object with a given name, kind and group.
-#ObjectReference: {
-	// Name of the resource being referred to.
-	name: string @go(Name)
-
-	// Kind of the resource being referred to.
-	// +optional
-	kind?: string @go(Kind)
-
-	// Group of the resource being referred to.
-	// +optional
-	group?: string @go(Group)
-}
-
-// A reference to a specific 'key' within a Secret resource.
-// In some instances, `key` is a required field.
-#SecretKeySelector: {
-	#LocalObjectReference
-
-	// The key of the entry in the Secret resource's `data` field to be used.
-	// Some instances of this field may be defaulted, in others it may be
-	// required.
-	// +optional
-	key?: string @go(Key)
-}
-
-// Used as a data key in Secret resources to store a CA certificate.
-#TLSCAKey: "ca.crt"

cue/cue.mod/gen/k8s.io/api/apps/v1/register_go_gen.cue

@@ -1,7 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/api/apps/v1
-
-package v1
-
-#GroupName: "apps"

cue/cue.mod/gen/k8s.io/api/apps/v1/types_go_gen.cue

@@ -1,907 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/api/apps/v1
-
-package v1
-
-import (
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/api/core/v1"
-	"k8s.io/apimachinery/pkg/util/intstr"
-	"k8s.io/apimachinery/pkg/runtime"
-)
-
-#ControllerRevisionHashLabelKey: "controller-revision-hash"
-#StatefulSetRevisionLabel:       "controller-revision-hash"
-#DeprecatedRollbackTo:           "deprecated.deployment.rollback.to"
-#DeprecatedTemplateGeneration:   "deprecated.daemonset.template.generation"
-#StatefulSetPodNameLabel:        "statefulset.kubernetes.io/pod-name"
-
-// StatefulSet represents a set of pods with consistent identities.
-// Identities are defined as:
-//  - Network: A single stable DNS and hostname.
-//  - Storage: As many VolumeClaims as requested.
-// The StatefulSet guarantees that a given network identity will always
-// map to the same storage identity.
-#StatefulSet: {
-	metav1.#TypeMeta
-
-	// Standard object's metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta) @protobuf(1,bytes,opt)
-
-	// Spec defines the desired identities of pods in this set.
-	// +optional
-	spec?: #StatefulSetSpec @go(Spec) @protobuf(2,bytes,opt)
-
-	// Status is the current status of Pods in this StatefulSet. This data
-	// may be out of date by some window of time.
-	// +optional
-	status?: #StatefulSetStatus @go(Status) @protobuf(3,bytes,opt)
-}
-
-// PodManagementPolicyType defines the policy for creating pods under a stateful set.
-// +enum
-#PodManagementPolicyType: string // #enumPodManagementPolicyType
-
-#enumPodManagementPolicyType:
-	#OrderedReadyPodManagement |
-	#ParallelPodManagement
-
-// OrderedReadyPodManagement will create pods in strictly increasing order on
-// scale up and strictly decreasing order on scale down, progressing only when
-// the previous pod is ready or terminated. At most one pod will be changed
-// at any time.
-#OrderedReadyPodManagement: #PodManagementPolicyType & "OrderedReady"
-
-// ParallelPodManagement will create and delete pods as soon as the stateful set
-// replica count is changed, and will not wait for pods to be ready or complete
-// termination.
-#ParallelPodManagement: #PodManagementPolicyType & "Parallel"
-
-// StatefulSetUpdateStrategy indicates the strategy that the StatefulSet
-// controller will use to perform updates. It includes any additional parameters
-// necessary to perform the update for the indicated strategy.
-#StatefulSetUpdateStrategy: {
-	// Type indicates the type of the StatefulSetUpdateStrategy.
-	// Default is RollingUpdate.
-	// +optional
-	type?: #StatefulSetUpdateStrategyType @go(Type) @protobuf(1,bytes,opt,casttype=StatefulSetStrategyType)
-
-	// RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.
-	// +optional
-	rollingUpdate?: null | #RollingUpdateStatefulSetStrategy @go(RollingUpdate,*RollingUpdateStatefulSetStrategy) @protobuf(2,bytes,opt)
-}
-
-// StatefulSetUpdateStrategyType is a string enumeration type that enumerates
-// all possible update strategies for the StatefulSet controller.
-// +enum
-#StatefulSetUpdateStrategyType: string // #enumStatefulSetUpdateStrategyType
-
-#enumStatefulSetUpdateStrategyType:
-	#RollingUpdateStatefulSetStrategyType |
-	#OnDeleteStatefulSetStrategyType
-
-// RollingUpdateStatefulSetStrategyType indicates that update will be
-// applied to all Pods in the StatefulSet with respect to the StatefulSet
-// ordering constraints. When a scale operation is performed with this
-// strategy, new Pods will be created from the specification version indicated
-// by the StatefulSet's updateRevision.
-#RollingUpdateStatefulSetStrategyType: #StatefulSetUpdateStrategyType & "RollingUpdate"
-
-// OnDeleteStatefulSetStrategyType triggers the legacy behavior. Version
-// tracking and ordered rolling restarts are disabled. Pods are recreated
-// from the StatefulSetSpec when they are manually deleted. When a scale
-// operation is performed with this strategy,specification version indicated
-// by the StatefulSet's currentRevision.
-#OnDeleteStatefulSetStrategyType: #StatefulSetUpdateStrategyType & "OnDelete"
-
-// RollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdateStatefulSetStrategyType.
-#RollingUpdateStatefulSetStrategy: {
-	// Partition indicates the ordinal at which the StatefulSet should be
-	// partitioned.
-	// Default value is 0.
-	// +optional
-	partition?: null | int32 @go(Partition,*int32) @protobuf(1,varint,opt)
-}
-
-// PersistentVolumeClaimRetentionPolicyType is a string enumeration of the policies that will determine
-// when volumes from the VolumeClaimTemplates will be deleted when the controlling StatefulSet is
-// deleted or scaled down.
-#PersistentVolumeClaimRetentionPolicyType: string // #enumPersistentVolumeClaimRetentionPolicyType
-
-#enumPersistentVolumeClaimRetentionPolicyType:
-	#RetainPersistentVolumeClaimRetentionPolicyType |
-	#DeletePersistentVolumeClaimRetentionPolicyType
-
-// RetainPersistentVolumeClaimRetentionPolicyType is the default
-// PersistentVolumeClaimRetentionPolicy and specifies that
-// PersistentVolumeClaims associated with StatefulSet VolumeClaimTemplates
-// will not be deleted.
-#RetainPersistentVolumeClaimRetentionPolicyType: #PersistentVolumeClaimRetentionPolicyType & "Retain"
-
-// RetentionPersistentVolumeClaimRetentionPolicyType specifies that
-// PersistentVolumeClaims associated with StatefulSet VolumeClaimTemplates
-// will be deleted in the scenario specified in
-// StatefulSetPersistentVolumeClaimRetentionPolicy.
-#DeletePersistentVolumeClaimRetentionPolicyType: #PersistentVolumeClaimRetentionPolicyType & "Delete"
-
-// StatefulSetPersistentVolumeClaimRetentionPolicy describes the policy used for PVCs
-// created from the StatefulSet VolumeClaimTemplates.
-#StatefulSetPersistentVolumeClaimRetentionPolicy: {
-	// WhenDeleted specifies what happens to PVCs created from StatefulSet
-	// VolumeClaimTemplates when the StatefulSet is deleted. The default policy
-	// of `Retain` causes PVCs to not be affected by StatefulSet deletion. The
-	// `Delete` policy causes those PVCs to be deleted.
-	whenDeleted?: #PersistentVolumeClaimRetentionPolicyType @go(WhenDeleted) @protobuf(1,bytes,opt,casttype=PersistentVolumeClaimRetentionPolicyType)
-
-	// WhenScaled specifies what happens to PVCs created from StatefulSet
-	// VolumeClaimTemplates when the StatefulSet is scaled down. The default
-	// policy of `Retain` causes PVCs to not be affected by a scaledown. The
-	// `Delete` policy causes the associated PVCs for any excess pods above
-	// the replica count to be deleted.
-	whenScaled?: #PersistentVolumeClaimRetentionPolicyType @go(WhenScaled) @protobuf(2,bytes,opt,casttype=PersistentVolumeClaimRetentionPolicyType)
-}
-
-// A StatefulSetSpec is the specification of a StatefulSet.
-#StatefulSetSpec: {
-	// replicas is the desired number of replicas of the given Template.
-	// These are replicas in the sense that they are instantiations of the
-	// same Template, but individual replicas also have a consistent identity.
-	// If unspecified, defaults to 1.
-	// TODO: Consider a rename of this field.
-	// +optional
-	replicas?: null | int32 @go(Replicas,*int32) @protobuf(1,varint,opt)
-
-	// selector is a label query over pods that should match the replica count.
-	// It must match the pod template's labels.
-	// More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
-	selector?: null | metav1.#LabelSelector @go(Selector,*metav1.LabelSelector) @protobuf(2,bytes,opt)
-
-	// template is the object that describes the pod that will be created if
-	// insufficient replicas are detected. Each pod stamped out by the StatefulSet
-	// will fulfill this Template, but have a unique identity from the rest
-	// of the StatefulSet.
-	template: v1.#PodTemplateSpec @go(Template) @protobuf(3,bytes,opt)
-
-	// volumeClaimTemplates is a list of claims that pods are allowed to reference.
-	// The StatefulSet controller is responsible for mapping network identities to
-	// claims in a way that maintains the identity of a pod. Every claim in
-	// this list must have at least one matching (by name) volumeMount in one
-	// container in the template. A claim in this list takes precedence over
-	// any volumes in the template, with the same name.
-	// TODO: Define the behavior if a claim already exists with the same name.
-	// +optional
-	volumeClaimTemplates?: [...v1.#PersistentVolumeClaim] @go(VolumeClaimTemplates,[]v1.PersistentVolumeClaim) @protobuf(4,bytes,rep)
-
-	// serviceName is the name of the service that governs this StatefulSet.
-	// This service must exist before the StatefulSet, and is responsible for
-	// the network identity of the set. Pods get DNS/hostnames that follow the
-	// pattern: pod-specific-string.serviceName.default.svc.cluster.local
-	// where "pod-specific-string" is managed by the StatefulSet controller.
-	serviceName: string @go(ServiceName) @protobuf(5,bytes,opt)
-
-	// podManagementPolicy controls how pods are created during initial scale up,
-	// when replacing pods on nodes, or when scaling down. The default policy is
-	// `OrderedReady`, where pods are created in increasing order (pod-0, then
-	// pod-1, etc) and the controller will wait until each pod is ready before
-	// continuing. When scaling down, the pods are removed in the opposite order.
-	// The alternative policy is `Parallel` which will create pods in parallel
-	// to match the desired scale without waiting, and on scale down will delete
-	// all pods at once.
-	// +optional
-	podManagementPolicy?: #PodManagementPolicyType @go(PodManagementPolicy) @protobuf(6,bytes,opt,casttype=PodManagementPolicyType)
-
-	// updateStrategy indicates the StatefulSetUpdateStrategy that will be
-	// employed to update Pods in the StatefulSet when a revision is made to
-	// Template.
-	updateStrategy?: #StatefulSetUpdateStrategy @go(UpdateStrategy) @protobuf(7,bytes,opt)
-
-	// revisionHistoryLimit is the maximum number of revisions that will
-	// be maintained in the StatefulSet's revision history. The revision history
-	// consists of all revisions not represented by a currently applied
-	// StatefulSetSpec version. The default value is 10.
-	revisionHistoryLimit?: null | int32 @go(RevisionHistoryLimit,*int32) @protobuf(8,varint,opt)
-
-	// Minimum number of seconds for which a newly created pod should be ready
-	// without any of its container crashing for it to be considered available.
-	// Defaults to 0 (pod will be considered available as soon as it is ready)
-	// This is an alpha field and requires enabling StatefulSetMinReadySeconds feature gate.
-	// +optional
-	minReadySeconds?: int32 @go(MinReadySeconds) @protobuf(9,varint,opt)
-
-	// persistentVolumeClaimRetentionPolicy describes the lifecycle of persistent
-	// volume claims created from volumeClaimTemplates. By default, all persistent
-	// volume claims are created as needed and retained until manually deleted. This
-	// policy allows the lifecycle to be altered, for example by deleting persistent
-	// volume claims when their stateful set is deleted, or when their pod is scaled
-	// down. This requires the StatefulSetAutoDeletePVC feature gate to be enabled,
-	// which is alpha.  +optional
-	persistentVolumeClaimRetentionPolicy?: null | #StatefulSetPersistentVolumeClaimRetentionPolicy @go(PersistentVolumeClaimRetentionPolicy,*StatefulSetPersistentVolumeClaimRetentionPolicy) @protobuf(10,bytes,opt)
-}
-
-// StatefulSetStatus represents the current state of a StatefulSet.
-#StatefulSetStatus: {
-	// observedGeneration is the most recent generation observed for this StatefulSet. It corresponds to the
-	// StatefulSet's generation, which is updated on mutation by the API Server.
-	// +optional
-	observedGeneration?: int64 @go(ObservedGeneration) @protobuf(1,varint,opt)
-
-	// replicas is the number of Pods created by the StatefulSet controller.
-	replicas: int32 @go(Replicas) @protobuf(2,varint,opt)
-
-	// readyReplicas is the number of pods created for this StatefulSet with a Ready Condition.
-	readyReplicas?: int32 @go(ReadyReplicas) @protobuf(3,varint,opt)
-
-	// currentReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version
-	// indicated by currentRevision.
-	currentReplicas?: int32 @go(CurrentReplicas) @protobuf(4,varint,opt)
-
-	// updatedReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version
-	// indicated by updateRevision.
-	updatedReplicas?: int32 @go(UpdatedReplicas) @protobuf(5,varint,opt)
-
-	// currentRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the
-	// sequence [0,currentReplicas).
-	currentRevision?: string @go(CurrentRevision) @protobuf(6,bytes,opt)
-
-	// updateRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence
-	// [replicas-updatedReplicas,replicas)
-	updateRevision?: string @go(UpdateRevision) @protobuf(7,bytes,opt)
-
-	// collisionCount is the count of hash collisions for the StatefulSet. The StatefulSet controller
-	// uses this field as a collision avoidance mechanism when it needs to create the name for the
-	// newest ControllerRevision.
-	// +optional
-	collisionCount?: null | int32 @go(CollisionCount,*int32) @protobuf(9,varint,opt)
-
-	// Represents the latest available observations of a statefulset's current state.
-	// +optional
-	// +patchMergeKey=type
-	// +patchStrategy=merge
-	conditions?: [...#StatefulSetCondition] @go(Conditions,[]StatefulSetCondition) @protobuf(10,bytes,rep)
-
-	// Total number of available pods (ready for at least minReadySeconds) targeted by this statefulset.
-	// This is a beta field and enabled/disabled by StatefulSetMinReadySeconds feature gate.
-	availableReplicas: int32 @go(AvailableReplicas) @protobuf(11,varint,opt)
-}
-
-#StatefulSetConditionType: string
-
-// StatefulSetCondition describes the state of a statefulset at a certain point.
-#StatefulSetCondition: {
-	// Type of statefulset condition.
-	type: #StatefulSetConditionType @go(Type) @protobuf(1,bytes,opt,casttype=StatefulSetConditionType)
-
-	// Status of the condition, one of True, False, Unknown.
-	status: v1.#ConditionStatus @go(Status) @protobuf(2,bytes,opt,casttype=k8s.io/api/core/v1.ConditionStatus)
-
-	// Last time the condition transitioned from one status to another.
-	// +optional
-	lastTransitionTime?: metav1.#Time @go(LastTransitionTime) @protobuf(3,bytes,opt)
-
-	// The reason for the condition's last transition.
-	// +optional
-	reason?: string @go(Reason) @protobuf(4,bytes,opt)
-
-	// A human readable message indicating details about the transition.
-	// +optional
-	message?: string @go(Message) @protobuf(5,bytes,opt)
-}
-
-// StatefulSetList is a collection of StatefulSets.
-#StatefulSetList: {
-	metav1.#TypeMeta
-
-	// Standard list's metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ListMeta @go(ListMeta) @protobuf(1,bytes,opt)
-
-	// Items is the list of stateful sets.
-	items: [...#StatefulSet] @go(Items,[]StatefulSet) @protobuf(2,bytes,rep)
-}
-
-// Deployment enables declarative updates for Pods and ReplicaSets.
-#Deployment: {
-	metav1.#TypeMeta
-
-	// Standard object's metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta) @protobuf(1,bytes,opt)
-
-	// Specification of the desired behavior of the Deployment.
-	// +optional
-	spec?: #DeploymentSpec @go(Spec) @protobuf(2,bytes,opt)
-
-	// Most recently observed status of the Deployment.
-	// +optional
-	status?: #DeploymentStatus @go(Status) @protobuf(3,bytes,opt)
-}
-
-// DeploymentSpec is the specification of the desired behavior of the Deployment.
-#DeploymentSpec: {
-	// Number of desired pods. This is a pointer to distinguish between explicit
-	// zero and not specified. Defaults to 1.
-	// +optional
-	replicas?: null | int32 @go(Replicas,*int32) @protobuf(1,varint,opt)
-
-	// Label selector for pods. Existing ReplicaSets whose pods are
-	// selected by this will be the ones affected by this deployment.
-	// It must match the pod template's labels.
-	selector?: null | metav1.#LabelSelector @go(Selector,*metav1.LabelSelector) @protobuf(2,bytes,opt)
-
-	// Template describes the pods that will be created.
-	template: v1.#PodTemplateSpec @go(Template) @protobuf(3,bytes,opt)
-
-	// The deployment strategy to use to replace existing pods with new ones.
-	// +optional
-	// +patchStrategy=retainKeys
-	strategy?: #DeploymentStrategy @go(Strategy) @protobuf(4,bytes,opt)
-
-	// Minimum number of seconds for which a newly created pod should be ready
-	// without any of its container crashing, for it to be considered available.
-	// Defaults to 0 (pod will be considered available as soon as it is ready)
-	// +optional
-	minReadySeconds?: int32 @go(MinReadySeconds) @protobuf(5,varint,opt)
-
-	// The number of old ReplicaSets to retain to allow rollback.
-	// This is a pointer to distinguish between explicit zero and not specified.
-	// Defaults to 10.
-	// +optional
-	revisionHistoryLimit?: null | int32 @go(RevisionHistoryLimit,*int32) @protobuf(6,varint,opt)
-
-	// Indicates that the deployment is paused.
-	// +optional
-	paused?: bool @go(Paused) @protobuf(7,varint,opt)
-
-	// The maximum time in seconds for a deployment to make progress before it
-	// is considered to be failed. The deployment controller will continue to
-	// process failed deployments and a condition with a ProgressDeadlineExceeded
-	// reason will be surfaced in the deployment status. Note that progress will
-	// not be estimated during the time a deployment is paused. Defaults to 600s.
-	progressDeadlineSeconds?: null | int32 @go(ProgressDeadlineSeconds,*int32) @protobuf(9,varint,opt)
-}
-
-// DefaultDeploymentUniqueLabelKey is the default key of the selector that is added
-// to existing ReplicaSets (and label key that is added to its pods) to prevent the existing ReplicaSets
-// to select new pods (and old pods being select by new ReplicaSet).
-#DefaultDeploymentUniqueLabelKey: "pod-template-hash"
-
-// DeploymentStrategy describes how to replace existing pods with new ones.
-#DeploymentStrategy: {
-	// Type of deployment. Can be "Recreate" or "RollingUpdate". Default is RollingUpdate.
-	// +optional
-	type?: #DeploymentStrategyType @go(Type) @protobuf(1,bytes,opt,casttype=DeploymentStrategyType)
-
-	// Rolling update config params. Present only if DeploymentStrategyType =
-	// RollingUpdate.
-	//---
-	// TODO: Update this to follow our convention for oneOf, whatever we decide it
-	// to be.
-	// +optional
-	rollingUpdate?: null | #RollingUpdateDeployment @go(RollingUpdate,*RollingUpdateDeployment) @protobuf(2,bytes,opt)
-}
-
-// +enum
-#DeploymentStrategyType: string // #enumDeploymentStrategyType
-
-#enumDeploymentStrategyType:
-	#RecreateDeploymentStrategyType |
-	#RollingUpdateDeploymentStrategyType
-
-// Kill all existing pods before creating new ones.
-#RecreateDeploymentStrategyType: #DeploymentStrategyType & "Recreate"
-
-// Replace the old ReplicaSets by new one using rolling update i.e gradually scale down the old ReplicaSets and scale up the new one.
-#RollingUpdateDeploymentStrategyType: #DeploymentStrategyType & "RollingUpdate"
-
-// Spec to control the desired behavior of rolling update.
-#RollingUpdateDeployment: {
-	// The maximum number of pods that can be unavailable during the update.
-	// Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).
-	// Absolute number is calculated from percentage by rounding down.
-	// This can not be 0 if MaxSurge is 0.
-	// Defaults to 25%.
-	// Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods
-	// immediately when the rolling update starts. Once new pods are ready, old ReplicaSet
-	// can be scaled down further, followed by scaling up the new ReplicaSet, ensuring
-	// that the total number of pods available at all times during the update is at
-	// least 70% of desired pods.
-	// +optional
-	maxUnavailable?: null | intstr.#IntOrString @go(MaxUnavailable,*intstr.IntOrString) @protobuf(1,bytes,opt)
-
-	// The maximum number of pods that can be scheduled above the desired number of
-	// pods.
-	// Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).
-	// This can not be 0 if MaxUnavailable is 0.
-	// Absolute number is calculated from percentage by rounding up.
-	// Defaults to 25%.
-	// Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when
-	// the rolling update starts, such that the total number of old and new pods do not exceed
-	// 130% of desired pods. Once old pods have been killed,
-	// new ReplicaSet can be scaled up further, ensuring that total number of pods running
-	// at any time during the update is at most 130% of desired pods.
-	// +optional
-	maxSurge?: null | intstr.#IntOrString @go(MaxSurge,*intstr.IntOrString) @protobuf(2,bytes,opt)
-}
-
-// DeploymentStatus is the most recently observed status of the Deployment.
-#DeploymentStatus: {
-	// The generation observed by the deployment controller.
-	// +optional
-	observedGeneration?: int64 @go(ObservedGeneration) @protobuf(1,varint,opt)
-
-	// Total number of non-terminated pods targeted by this deployment (their labels match the selector).
-	// +optional
-	replicas?: int32 @go(Replicas) @protobuf(2,varint,opt)
-
-	// Total number of non-terminated pods targeted by this deployment that have the desired template spec.
-	// +optional
-	updatedReplicas?: int32 @go(UpdatedReplicas) @protobuf(3,varint,opt)
-
-	// readyReplicas is the number of pods targeted by this Deployment with a Ready Condition.
-	// +optional
-	readyReplicas?: int32 @go(ReadyReplicas) @protobuf(7,varint,opt)
-
-	// Total number of available pods (ready for at least minReadySeconds) targeted by this deployment.
-	// +optional
-	availableReplicas?: int32 @go(AvailableReplicas) @protobuf(4,varint,opt)
-
-	// Total number of unavailable pods targeted by this deployment. This is the total number of
-	// pods that are still required for the deployment to have 100% available capacity. They may
-	// either be pods that are running but not yet available or pods that still have not been created.
-	// +optional
-	unavailableReplicas?: int32 @go(UnavailableReplicas) @protobuf(5,varint,opt)
-
-	// Represents the latest available observations of a deployment's current state.
-	// +patchMergeKey=type
-	// +patchStrategy=merge
-	conditions?: [...#DeploymentCondition] @go(Conditions,[]DeploymentCondition) @protobuf(6,bytes,rep)
-
-	// Count of hash collisions for the Deployment. The Deployment controller uses this
-	// field as a collision avoidance mechanism when it needs to create the name for the
-	// newest ReplicaSet.
-	// +optional
-	collisionCount?: null | int32 @go(CollisionCount,*int32) @protobuf(8,varint,opt)
-}
-
-#DeploymentConditionType: string // #enumDeploymentConditionType
-
-#enumDeploymentConditionType:
-	#DeploymentAvailable |
-	#DeploymentProgressing |
-	#DeploymentReplicaFailure
-
-// Available means the deployment is available, ie. at least the minimum available
-// replicas required are up and running for at least minReadySeconds.
-#DeploymentAvailable: #DeploymentConditionType & "Available"
-
-// Progressing means the deployment is progressing. Progress for a deployment is
-// considered when a new replica set is created or adopted, and when new pods scale
-// up or old pods scale down. Progress is not estimated for paused deployments or
-// when progressDeadlineSeconds is not specified.
-#DeploymentProgressing: #DeploymentConditionType & "Progressing"
-
-// ReplicaFailure is added in a deployment when one of its pods fails to be created
-// or deleted.
-#DeploymentReplicaFailure: #DeploymentConditionType & "ReplicaFailure"
-
-// DeploymentCondition describes the state of a deployment at a certain point.
-#DeploymentCondition: {
-	// Type of deployment condition.
-	type: #DeploymentConditionType @go(Type) @protobuf(1,bytes,opt,casttype=DeploymentConditionType)
-
-	// Status of the condition, one of True, False, Unknown.
-	status: v1.#ConditionStatus @go(Status) @protobuf(2,bytes,opt,casttype=k8s.io/api/core/v1.ConditionStatus)
-
-	// The last time this condition was updated.
-	lastUpdateTime?: metav1.#Time @go(LastUpdateTime) @protobuf(6,bytes,opt)
-
-	// Last time the condition transitioned from one status to another.
-	lastTransitionTime?: metav1.#Time @go(LastTransitionTime) @protobuf(7,bytes,opt)
-
-	// The reason for the condition's last transition.
-	reason?: string @go(Reason) @protobuf(4,bytes,opt)
-
-	// A human readable message indicating details about the transition.
-	message?: string @go(Message) @protobuf(5,bytes,opt)
-}
-
-// DeploymentList is a list of Deployments.
-#DeploymentList: {
-	metav1.#TypeMeta
-
-	// Standard list metadata.
-	// +optional
-	metadata?: metav1.#ListMeta @go(ListMeta) @protobuf(1,bytes,opt)
-
-	// Items is the list of Deployments.
-	items: [...#Deployment] @go(Items,[]Deployment) @protobuf(2,bytes,rep)
-}
-
-// DaemonSetUpdateStrategy is a struct used to control the update strategy for a DaemonSet.
-#DaemonSetUpdateStrategy: {
-	// Type of daemon set update. Can be "RollingUpdate" or "OnDelete". Default is RollingUpdate.
-	// +optional
-	type?: #DaemonSetUpdateStrategyType @go(Type) @protobuf(1,bytes,opt)
-
-	// Rolling update config params. Present only if type = "RollingUpdate".
-	//---
-	// TODO: Update this to follow our convention for oneOf, whatever we decide it
-	// to be. Same as Deployment `strategy.rollingUpdate`.
-	// See https://github.com/kubernetes/kubernetes/issues/35345
-	// +optional
-	rollingUpdate?: null | #RollingUpdateDaemonSet @go(RollingUpdate,*RollingUpdateDaemonSet) @protobuf(2,bytes,opt)
-}
-
-// +enum
-#DaemonSetUpdateStrategyType: string // #enumDaemonSetUpdateStrategyType
-
-#enumDaemonSetUpdateStrategyType:
-	#RollingUpdateDaemonSetStrategyType |
-	#OnDeleteDaemonSetStrategyType
-
-// Replace the old daemons by new ones using rolling update i.e replace them on each node one after the other.
-#RollingUpdateDaemonSetStrategyType: #DaemonSetUpdateStrategyType & "RollingUpdate"
-
-// Replace the old daemons only when it's killed
-#OnDeleteDaemonSetStrategyType: #DaemonSetUpdateStrategyType & "OnDelete"
-
-// Spec to control the desired behavior of daemon set rolling update.
-#RollingUpdateDaemonSet: {
-	// The maximum number of DaemonSet pods that can be unavailable during the
-	// update. Value can be an absolute number (ex: 5) or a percentage of total
-	// number of DaemonSet pods at the start of the update (ex: 10%). Absolute
-	// number is calculated from percentage by rounding up.
-	// This cannot be 0 if MaxSurge is 0
-	// Default value is 1.
-	// Example: when this is set to 30%, at most 30% of the total number of nodes
-	// that should be running the daemon pod (i.e. status.desiredNumberScheduled)
-	// can have their pods stopped for an update at any given time. The update
-	// starts by stopping at most 30% of those DaemonSet pods and then brings
-	// up new DaemonSet pods in their place. Once the new pods are available,
-	// it then proceeds onto other DaemonSet pods, thus ensuring that at least
-	// 70% of original number of DaemonSet pods are available at all times during
-	// the update.
-	// +optional
-	maxUnavailable?: null | intstr.#IntOrString @go(MaxUnavailable,*intstr.IntOrString) @protobuf(1,bytes,opt)
-
-	// The maximum number of nodes with an existing available DaemonSet pod that
-	// can have an updated DaemonSet pod during during an update.
-	// Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%).
-	// This can not be 0 if MaxUnavailable is 0.
-	// Absolute number is calculated from percentage by rounding up to a minimum of 1.
-	// Default value is 0.
-	// Example: when this is set to 30%, at most 30% of the total number of nodes
-	// that should be running the daemon pod (i.e. status.desiredNumberScheduled)
-	// can have their a new pod created before the old pod is marked as deleted.
-	// The update starts by launching new pods on 30% of nodes. Once an updated
-	// pod is available (Ready for at least minReadySeconds) the old DaemonSet pod
-	// on that node is marked deleted. If the old pod becomes unavailable for any
-	// reason (Ready transitions to false, is evicted, or is drained) an updated
-	// pod is immediatedly created on that node without considering surge limits.
-	// Allowing surge implies the possibility that the resources consumed by the
-	// daemonset on any given node can double if the readiness check fails, and
-	// so resource intensive daemonsets should take into account that they may
-	// cause evictions during disruption.
-	// This is beta field and enabled/disabled by DaemonSetUpdateSurge feature gate.
-	// +optional
-	maxSurge?: null | intstr.#IntOrString @go(MaxSurge,*intstr.IntOrString) @protobuf(2,bytes,opt)
-}
-
-// DaemonSetSpec is the specification of a daemon set.
-#DaemonSetSpec: {
-	// A label query over pods that are managed by the daemon set.
-	// Must match in order to be controlled.
-	// It must match the pod template's labels.
-	// More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
-	selector?: null | metav1.#LabelSelector @go(Selector,*metav1.LabelSelector) @protobuf(1,bytes,opt)
-
-	// An object that describes the pod that will be created.
-	// The DaemonSet will create exactly one copy of this pod on every node
-	// that matches the template's node selector (or on every node if no node
-	// selector is specified).
-	// More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
-	template: v1.#PodTemplateSpec @go(Template) @protobuf(2,bytes,opt)
-
-	// An update strategy to replace existing DaemonSet pods with new pods.
-	// +optional
-	updateStrategy?: #DaemonSetUpdateStrategy @go(UpdateStrategy) @protobuf(3,bytes,opt)
-
-	// The minimum number of seconds for which a newly created DaemonSet pod should
-	// be ready without any of its container crashing, for it to be considered
-	// available. Defaults to 0 (pod will be considered available as soon as it
-	// is ready).
-	// +optional
-	minReadySeconds?: int32 @go(MinReadySeconds) @protobuf(4,varint,opt)
-
-	// The number of old history to retain to allow rollback.
-	// This is a pointer to distinguish between explicit zero and not specified.
-	// Defaults to 10.
-	// +optional
-	revisionHistoryLimit?: null | int32 @go(RevisionHistoryLimit,*int32) @protobuf(6,varint,opt)
-}
-
-// DaemonSetStatus represents the current status of a daemon set.
-#DaemonSetStatus: {
-	// The number of nodes that are running at least 1
-	// daemon pod and are supposed to run the daemon pod.
-	// More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/
-	currentNumberScheduled: int32 @go(CurrentNumberScheduled) @protobuf(1,varint,opt)
-
-	// The number of nodes that are running the daemon pod, but are
-	// not supposed to run the daemon pod.
-	// More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/
-	numberMisscheduled: int32 @go(NumberMisscheduled) @protobuf(2,varint,opt)
-
-	// The total number of nodes that should be running the daemon
-	// pod (including nodes correctly running the daemon pod).
-	// More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/
-	desiredNumberScheduled: int32 @go(DesiredNumberScheduled) @protobuf(3,varint,opt)
-
-	// numberReady is the number of nodes that should be running the daemon pod and have one
-	// or more of the daemon pod running with a Ready Condition.
-	numberReady: int32 @go(NumberReady) @protobuf(4,varint,opt)
-
-	// The most recent generation observed by the daemon set controller.
-	// +optional
-	observedGeneration?: int64 @go(ObservedGeneration) @protobuf(5,varint,opt)
-
-	// The total number of nodes that are running updated daemon pod
-	// +optional
-	updatedNumberScheduled?: int32 @go(UpdatedNumberScheduled) @protobuf(6,varint,opt)
-
-	// The number of nodes that should be running the
-	// daemon pod and have one or more of the daemon pod running and
-	// available (ready for at least spec.minReadySeconds)
-	// +optional
-	numberAvailable?: int32 @go(NumberAvailable) @protobuf(7,varint,opt)
-
-	// The number of nodes that should be running the
-	// daemon pod and have none of the daemon pod running and available
-	// (ready for at least spec.minReadySeconds)
-	// +optional
-	numberUnavailable?: int32 @go(NumberUnavailable) @protobuf(8,varint,opt)
-
-	// Count of hash collisions for the DaemonSet. The DaemonSet controller
-	// uses this field as a collision avoidance mechanism when it needs to
-	// create the name for the newest ControllerRevision.
-	// +optional
-	collisionCount?: null | int32 @go(CollisionCount,*int32) @protobuf(9,varint,opt)
-
-	// Represents the latest available observations of a DaemonSet's current state.
-	// +optional
-	// +patchMergeKey=type
-	// +patchStrategy=merge
-	conditions?: [...#DaemonSetCondition] @go(Conditions,[]DaemonSetCondition) @protobuf(10,bytes,rep)
-}
-
-#DaemonSetConditionType: string
-
-// DaemonSetCondition describes the state of a DaemonSet at a certain point.
-#DaemonSetCondition: {
-	// Type of DaemonSet condition.
-	type: #DaemonSetConditionType @go(Type) @protobuf(1,bytes,opt,casttype=DaemonSetConditionType)
-
-	// Status of the condition, one of True, False, Unknown.
-	status: v1.#ConditionStatus @go(Status) @protobuf(2,bytes,opt,casttype=k8s.io/api/core/v1.ConditionStatus)
-
-	// Last time the condition transitioned from one status to another.
-	// +optional
-	lastTransitionTime?: metav1.#Time @go(LastTransitionTime) @protobuf(3,bytes,opt)
-
-	// The reason for the condition's last transition.
-	// +optional
-	reason?: string @go(Reason) @protobuf(4,bytes,opt)
-
-	// A human readable message indicating details about the transition.
-	// +optional
-	message?: string @go(Message) @protobuf(5,bytes,opt)
-}
-
-// DaemonSet represents the configuration of a daemon set.
-#DaemonSet: {
-	metav1.#TypeMeta
-
-	// Standard object's metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta) @protobuf(1,bytes,opt)
-
-	// The desired behavior of this daemon set.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-	// +optional
-	spec?: #DaemonSetSpec @go(Spec) @protobuf(2,bytes,opt)
-
-	// The current status of this daemon set. This data may be
-	// out of date by some window of time.
-	// Populated by the system.
-	// Read-only.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-	// +optional
-	status?: #DaemonSetStatus @go(Status) @protobuf(3,bytes,opt)
-}
-
-// DefaultDaemonSetUniqueLabelKey is the default label key that is added
-// to existing DaemonSet pods to distinguish between old and new
-// DaemonSet pods during DaemonSet template updates.
-#DefaultDaemonSetUniqueLabelKey: "controller-revision-hash"
-
-// DaemonSetList is a collection of daemon sets.
-#DaemonSetList: {
-	metav1.#TypeMeta
-
-	// Standard list metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ListMeta @go(ListMeta) @protobuf(1,bytes,opt)
-
-	// A list of daemon sets.
-	items: [...#DaemonSet] @go(Items,[]DaemonSet) @protobuf(2,bytes,rep)
-}
-
-// ReplicaSet ensures that a specified number of pod replicas are running at any given time.
-#ReplicaSet: {
-	metav1.#TypeMeta
-
-	// If the Labels of a ReplicaSet are empty, they are defaulted to
-	// be the same as the Pod(s) that the ReplicaSet manages.
-	// Standard object's metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta) @protobuf(1,bytes,opt)
-
-	// Spec defines the specification of the desired behavior of the ReplicaSet.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-	// +optional
-	spec?: #ReplicaSetSpec @go(Spec) @protobuf(2,bytes,opt)
-
-	// Status is the most recently observed status of the ReplicaSet.
-	// This data may be out of date by some window of time.
-	// Populated by the system.
-	// Read-only.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-	// +optional
-	status?: #ReplicaSetStatus @go(Status) @protobuf(3,bytes,opt)
-}
-
-// ReplicaSetList is a collection of ReplicaSets.
-#ReplicaSetList: {
-	metav1.#TypeMeta
-
-	// Standard list metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-	// +optional
-	metadata?: metav1.#ListMeta @go(ListMeta) @protobuf(1,bytes,opt)
-
-	// List of ReplicaSets.
-	// More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller
-	items: [...#ReplicaSet] @go(Items,[]ReplicaSet) @protobuf(2,bytes,rep)
-}
-
-// ReplicaSetSpec is the specification of a ReplicaSet.
-#ReplicaSetSpec: {
-	// Replicas is the number of desired replicas.
-	// This is a pointer to distinguish between explicit zero and unspecified.
-	// Defaults to 1.
-	// More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller
-	// +optional
-	replicas?: null | int32 @go(Replicas,*int32) @protobuf(1,varint,opt)
-
-	// Minimum number of seconds for which a newly created pod should be ready
-	// without any of its container crashing, for it to be considered available.
-	// Defaults to 0 (pod will be considered available as soon as it is ready)
-	// +optional
-	minReadySeconds?: int32 @go(MinReadySeconds) @protobuf(4,varint,opt)
-
-	// Selector is a label query over pods that should match the replica count.
-	// Label keys and values that must match in order to be controlled by this replica set.
-	// It must match the pod template's labels.
-	// More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
-	selector?: null | metav1.#LabelSelector @go(Selector,*metav1.LabelSelector) @protobuf(2,bytes,opt)
-
-	// Template is the object that describes the pod that will be created if
-	// insufficient replicas are detected.
-	// More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
-	// +optional
-	template?: v1.#PodTemplateSpec @go(Template) @protobuf(3,bytes,opt)
-}
-
-// ReplicaSetStatus represents the current status of a ReplicaSet.
-#ReplicaSetStatus: {
-	// Replicas is the most recently oberved number of replicas.
-	// More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller
-	replicas: int32 @go(Replicas) @protobuf(1,varint,opt)
-
-	// The number of pods that have labels matching the labels of the pod template of the replicaset.
-	// +optional
-	fullyLabeledReplicas?: int32 @go(FullyLabeledReplicas) @protobuf(2,varint,opt)
-
-	// readyReplicas is the number of pods targeted by this ReplicaSet with a Ready Condition.
-	// +optional
-	readyReplicas?: int32 @go(ReadyReplicas) @protobuf(4,varint,opt)
-
-	// The number of available replicas (ready for at least minReadySeconds) for this replica set.
-	// +optional
-	availableReplicas?: int32 @go(AvailableReplicas) @protobuf(5,varint,opt)
-
-	// ObservedGeneration reflects the generation of the most recently observed ReplicaSet.
-	// +optional
-	observedGeneration?: int64 @go(ObservedGeneration) @protobuf(3,varint,opt)
-
-	// Represents the latest available observations of a replica set's current state.
-	// +optional
-	// +patchMergeKey=type
-	// +patchStrategy=merge
-	conditions?: [...#ReplicaSetCondition] @go(Conditions,[]ReplicaSetCondition) @protobuf(6,bytes,rep)
-}
-
-#ReplicaSetConditionType: string // #enumReplicaSetConditionType
-
-#enumReplicaSetConditionType:
-	#ReplicaSetReplicaFailure
-
-// ReplicaSetReplicaFailure is added in a replica set when one of its pods fails to be created
-// due to insufficient quota, limit ranges, pod security policy, node selectors, etc. or deleted
-// due to kubelet being down or finalizers are failing.
-#ReplicaSetReplicaFailure: #ReplicaSetConditionType & "ReplicaFailure"
-
-// ReplicaSetCondition describes the state of a replica set at a certain point.
-#ReplicaSetCondition: {
-	// Type of replica set condition.
-	type: #ReplicaSetConditionType @go(Type) @protobuf(1,bytes,opt,casttype=ReplicaSetConditionType)
-
-	// Status of the condition, one of True, False, Unknown.
-	status: v1.#ConditionStatus @go(Status) @protobuf(2,bytes,opt,casttype=k8s.io/api/core/v1.ConditionStatus)
-
-	// The last time the condition transitioned from one status to another.
-	// +optional
-	lastTransitionTime?: metav1.#Time @go(LastTransitionTime) @protobuf(3,bytes,opt)
-
-	// The reason for the condition's last transition.
-	// +optional
-	reason?: string @go(Reason) @protobuf(4,bytes,opt)
-
-	// A human readable message indicating details about the transition.
-	// +optional
-	message?: string @go(Message) @protobuf(5,bytes,opt)
-}
-
-// ControllerRevision implements an immutable snapshot of state data. Clients
-// are responsible for serializing and deserializing the objects that contain
-// their internal state.
-// Once a ControllerRevision has been successfully created, it can not be updated.
-// The API Server will fail validation of all requests that attempt to mutate
-// the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both
-// the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However,
-// it may be subject to name and representation changes in future releases, and clients should not
-// depend on its stability. It is primarily for internal use by controllers.
-#ControllerRevision: {
-	metav1.#TypeMeta
-
-	// Standard object's metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta) @protobuf(1,bytes,opt)
-
-	// Data is the serialized representation of the state.
-	data?: runtime.#RawExtension @go(Data) @protobuf(2,bytes,opt)
-
-	// Revision indicates the revision of the state represented by Data.
-	revision: int64 @go(Revision) @protobuf(3,varint,opt)
-}
-
-// ControllerRevisionList is a resource containing a list of ControllerRevision objects.
-#ControllerRevisionList: {
-	metav1.#TypeMeta
-
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ListMeta @go(ListMeta) @protobuf(1,bytes,opt)
-
-	// Items is the list of ControllerRevisions
-	items: [...#ControllerRevision] @go(Items,[]ControllerRevision) @protobuf(2,bytes,rep)
-}

cue/cue.mod/gen/k8s.io/api/autoscaling/v2beta2/register_go_gen.cue

@@ -1,7 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/api/autoscaling/v2beta2
-
-package v2beta2
-
-#GroupName: "autoscaling"

cue/cue.mod/gen/k8s.io/api/autoscaling/v2beta2/types_go_gen.cue

@@ -1,586 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/api/autoscaling/v2beta2
-
-package v2beta2
-
-import (
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/api/core/v1"
-	"k8s.io/apimachinery/pkg/api/resource"
-)
-
-// HorizontalPodAutoscaler is the configuration for a horizontal pod
-// autoscaler, which automatically manages the replica count of any resource
-// implementing the scale subresource based on the metrics specified.
-#HorizontalPodAutoscaler: {
-	metav1.#TypeMeta
-
-	// metadata is the standard object metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta) @protobuf(1,bytes,opt)
-
-	// spec is the specification for the behaviour of the autoscaler.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.
-	// +optional
-	spec?: #HorizontalPodAutoscalerSpec @go(Spec) @protobuf(2,bytes,opt)
-
-	// status is the current information about the autoscaler.
-	// +optional
-	status?: #HorizontalPodAutoscalerStatus @go(Status) @protobuf(3,bytes,opt)
-}
-
-// HorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.
-#HorizontalPodAutoscalerSpec: {
-	// scaleTargetRef points to the target resource to scale, and is used to the pods for which metrics
-	// should be collected, as well as to actually change the replica count.
-	scaleTargetRef: #CrossVersionObjectReference @go(ScaleTargetRef) @protobuf(1,bytes,opt)
-
-	// minReplicas is the lower limit for the number of replicas to which the autoscaler
-	// can scale down.  It defaults to 1 pod.  minReplicas is allowed to be 0 if the
-	// alpha feature gate HPAScaleToZero is enabled and at least one Object or External
-	// metric is configured.  Scaling is active as long as at least one metric value is
-	// available.
-	// +optional
-	minReplicas?: null | int32 @go(MinReplicas,*int32) @protobuf(2,varint,opt)
-
-	// maxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up.
-	// It cannot be less that minReplicas.
-	maxReplicas: int32 @go(MaxReplicas) @protobuf(3,varint,opt)
-
-	// metrics contains the specifications for which to use to calculate the
-	// desired replica count (the maximum replica count across all metrics will
-	// be used).  The desired replica count is calculated multiplying the
-	// ratio between the target value and the current value by the current
-	// number of pods.  Ergo, metrics used must decrease as the pod count is
-	// increased, and vice-versa.  See the individual metric source types for
-	// more information about how each type of metric must respond.
-	// If not set, the default metric will be set to 80% average CPU utilization.
-	// +optional
-	metrics?: [...#MetricSpec] @go(Metrics,[]MetricSpec) @protobuf(4,bytes,rep)
-
-	// behavior configures the scaling behavior of the target
-	// in both Up and Down directions (scaleUp and scaleDown fields respectively).
-	// If not set, the default HPAScalingRules for scale up and scale down are used.
-	// +optional
-	behavior?: null | #HorizontalPodAutoscalerBehavior @go(Behavior,*HorizontalPodAutoscalerBehavior) @protobuf(5,bytes,opt)
-}
-
-// CrossVersionObjectReference contains enough information to let you identify the referred resource.
-#CrossVersionObjectReference: {
-	// Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
-	kind: string @go(Kind) @protobuf(1,bytes,opt)
-
-	// Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names
-	name: string @go(Name) @protobuf(2,bytes,opt)
-
-	// API version of the referent
-	// +optional
-	apiVersion?: string @go(APIVersion) @protobuf(3,bytes,opt)
-}
-
-// MetricSpec specifies how to scale based on a single metric
-// (only `type` and one other matching field should be set at once).
-#MetricSpec: {
-	// type is the type of metric source.  It should be one of "ContainerResource", "External",
-	// "Object", "Pods" or "Resource", each mapping to a matching field in the object.
-	// Note: "ContainerResource" type is available on when the feature-gate
-	// HPAContainerMetrics is enabled
-	type: #MetricSourceType @go(Type) @protobuf(1,bytes)
-
-	// object refers to a metric describing a single kubernetes object
-	// (for example, hits-per-second on an Ingress object).
-	// +optional
-	object?: null | #ObjectMetricSource @go(Object,*ObjectMetricSource) @protobuf(2,bytes,opt)
-
-	// pods refers to a metric describing each pod in the current scale target
-	// (for example, transactions-processed-per-second).  The values will be
-	// averaged together before being compared to the target value.
-	// +optional
-	pods?: null | #PodsMetricSource @go(Pods,*PodsMetricSource) @protobuf(3,bytes,opt)
-
-	// resource refers to a resource metric (such as those specified in
-	// requests and limits) known to Kubernetes describing each pod in the
-	// current scale target (e.g. CPU or memory). Such metrics are built in to
-	// Kubernetes, and have special scaling options on top of those available
-	// to normal per-pod metrics using the "pods" source.
-	// +optional
-	resource?: null | #ResourceMetricSource @go(Resource,*ResourceMetricSource) @protobuf(4,bytes,opt)
-
-	// container resource refers to a resource metric (such as those specified in
-	// requests and limits) known to Kubernetes describing a single container in
-	// each pod of the current scale target (e.g. CPU or memory). Such metrics are
-	// built in to Kubernetes, and have special scaling options on top of those
-	// available to normal per-pod metrics using the "pods" source.
-	// This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag.
-	// +optional
-	containerResource?: null | #ContainerResourceMetricSource @go(ContainerResource,*ContainerResourceMetricSource) @protobuf(7,bytes,opt)
-
-	// external refers to a global metric that is not associated
-	// with any Kubernetes object. It allows autoscaling based on information
-	// coming from components running outside of cluster
-	// (for example length of queue in cloud messaging service, or
-	// QPS from loadbalancer running outside of cluster).
-	// +optional
-	external?: null | #ExternalMetricSource @go(External,*ExternalMetricSource) @protobuf(5,bytes,opt)
-}
-
-// HorizontalPodAutoscalerBehavior configures the scaling behavior of the target
-// in both Up and Down directions (scaleUp and scaleDown fields respectively).
-#HorizontalPodAutoscalerBehavior: {
-	// scaleUp is scaling policy for scaling Up.
-	// If not set, the default value is the higher of:
-	//   * increase no more than 4 pods per 60 seconds
-	//   * double the number of pods per 60 seconds
-	// No stabilization is used.
-	// +optional
-	scaleUp?: null | #HPAScalingRules @go(ScaleUp,*HPAScalingRules) @protobuf(1,bytes,opt)
-
-	// scaleDown is scaling policy for scaling Down.
-	// If not set, the default value is to allow to scale down to minReplicas pods, with a
-	// 300 second stabilization window (i.e., the highest recommendation for
-	// the last 300sec is used).
-	// +optional
-	scaleDown?: null | #HPAScalingRules @go(ScaleDown,*HPAScalingRules) @protobuf(2,bytes,opt)
-}
-
-// ScalingPolicySelect is used to specify which policy should be used while scaling in a certain direction
-#ScalingPolicySelect: string // #enumScalingPolicySelect
-
-#enumScalingPolicySelect:
-	#MaxPolicySelect |
-	#MinPolicySelect |
-	#DisabledPolicySelect
-
-// MaxPolicySelect selects the policy with the highest possible change.
-#MaxPolicySelect: #ScalingPolicySelect & "Max"
-
-// MinPolicySelect selects the policy with the lowest possible change.
-#MinPolicySelect: #ScalingPolicySelect & "Min"
-
-// DisabledPolicySelect disables the scaling in this direction.
-#DisabledPolicySelect: #ScalingPolicySelect & "Disabled"
-
-// HPAScalingRules configures the scaling behavior for one direction.
-// These Rules are applied after calculating DesiredReplicas from metrics for the HPA.
-// They can limit the scaling velocity by specifying scaling policies.
-// They can prevent flapping by specifying the stabilization window, so that the
-// number of replicas is not set instantly, instead, the safest value from the stabilization
-// window is chosen.
-#HPAScalingRules: {
-	// StabilizationWindowSeconds is the number of seconds for which past recommendations should be
-	// considered while scaling up or scaling down.
-	// StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour).
-	// If not set, use the default values:
-	// - For scale up: 0 (i.e. no stabilization is done).
-	// - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
-	// +optional
-	stabilizationWindowSeconds?: null | int32 @go(StabilizationWindowSeconds,*int32) @protobuf(3,varint,opt)
-
-	// selectPolicy is used to specify which policy should be used.
-	// If not set, the default value MaxPolicySelect is used.
-	// +optional
-	selectPolicy?: null | #ScalingPolicySelect @go(SelectPolicy,*ScalingPolicySelect) @protobuf(1,bytes,opt)
-
-	// policies is a list of potential scaling polices which can be used during scaling.
-	// At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid
-	// +optional
-	policies?: [...#HPAScalingPolicy] @go(Policies,[]HPAScalingPolicy) @protobuf(2,bytes,rep)
-}
-
-// HPAScalingPolicyType is the type of the policy which could be used while making scaling decisions.
-#HPAScalingPolicyType: string // #enumHPAScalingPolicyType
-
-#enumHPAScalingPolicyType:
-	#PodsScalingPolicy |
-	#PercentScalingPolicy
-
-// PodsScalingPolicy is a policy used to specify a change in absolute number of pods.
-#PodsScalingPolicy: #HPAScalingPolicyType & "Pods"
-
-// PercentScalingPolicy is a policy used to specify a relative amount of change with respect to
-// the current number of pods.
-#PercentScalingPolicy: #HPAScalingPolicyType & "Percent"
-
-// HPAScalingPolicy is a single policy which must hold true for a specified past interval.
-#HPAScalingPolicy: {
-	// Type is used to specify the scaling policy.
-	type: #HPAScalingPolicyType @go(Type) @protobuf(1,bytes,opt,casttype=HPAScalingPolicyType)
-
-	// Value contains the amount of change which is permitted by the policy.
-	// It must be greater than zero
-	value: int32 @go(Value) @protobuf(2,varint,opt)
-
-	// PeriodSeconds specifies the window of time for which the policy should hold true.
-	// PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).
-	periodSeconds: int32 @go(PeriodSeconds) @protobuf(3,varint,opt)
-}
-
-// MetricSourceType indicates the type of metric.
-#MetricSourceType: string // #enumMetricSourceType
-
-#enumMetricSourceType:
-	#ObjectMetricSourceType |
-	#PodsMetricSourceType |
-	#ResourceMetricSourceType |
-	#ContainerResourceMetricSourceType |
-	#ExternalMetricSourceType
-
-// ObjectMetricSourceType is a metric describing a kubernetes object
-// (for example, hits-per-second on an Ingress object).
-#ObjectMetricSourceType: #MetricSourceType & "Object"
-
-// PodsMetricSourceType is a metric describing each pod in the current scale
-// target (for example, transactions-processed-per-second).  The values
-// will be averaged together before being compared to the target value.
-#PodsMetricSourceType: #MetricSourceType & "Pods"
-
-// ResourceMetricSourceType is a resource metric known to Kubernetes, as
-// specified in requests and limits, describing each pod in the current
-// scale target (e.g. CPU or memory).  Such metrics are built in to
-// Kubernetes, and have special scaling options on top of those available
-// to normal per-pod metrics (the "pods" source).
-#ResourceMetricSourceType: #MetricSourceType & "Resource"
-
-// ContainerResourceMetricSourceType is a resource metric known to Kubernetes, as
-// specified in requests and limits, describing a single container in each pod in the current
-// scale target (e.g. CPU or memory).  Such metrics are built in to
-// Kubernetes, and have special scaling options on top of those available
-// to normal per-pod metrics (the "pods" source).
-#ContainerResourceMetricSourceType: #MetricSourceType & "ContainerResource"
-
-// ExternalMetricSourceType is a global metric that is not associated
-// with any Kubernetes object. It allows autoscaling based on information
-// coming from components running outside of cluster
-// (for example length of queue in cloud messaging service, or
-// QPS from loadbalancer running outside of cluster).
-#ExternalMetricSourceType: #MetricSourceType & "External"
-
-// ObjectMetricSource indicates how to scale on a metric describing a
-// kubernetes object (for example, hits-per-second on an Ingress object).
-#ObjectMetricSource: {
-	describedObject: #CrossVersionObjectReference @go(DescribedObject) @protobuf(1,bytes)
-
-	// target specifies the target value for the given metric
-	target: #MetricTarget @go(Target) @protobuf(2,bytes)
-
-	// metric identifies the target metric by name and selector
-	metric: #MetricIdentifier @go(Metric) @protobuf(3,bytes)
-}
-
-// PodsMetricSource indicates how to scale on a metric describing each pod in
-// the current scale target (for example, transactions-processed-per-second).
-// The values will be averaged together before being compared to the target
-// value.
-#PodsMetricSource: {
-	// metric identifies the target metric by name and selector
-	metric: #MetricIdentifier @go(Metric) @protobuf(1,bytes)
-
-	// target specifies the target value for the given metric
-	target: #MetricTarget @go(Target) @protobuf(2,bytes)
-}
-
-// ResourceMetricSource indicates how to scale on a resource metric known to
-// Kubernetes, as specified in requests and limits, describing each pod in the
-// current scale target (e.g. CPU or memory).  The values will be averaged
-// together before being compared to the target.  Such metrics are built in to
-// Kubernetes, and have special scaling options on top of those available to
-// normal per-pod metrics using the "pods" source.  Only one "target" type
-// should be set.
-#ResourceMetricSource: {
-	// name is the name of the resource in question.
-	name: v1.#ResourceName @go(Name) @protobuf(1,bytes)
-
-	// target specifies the target value for the given metric
-	target: #MetricTarget @go(Target) @protobuf(2,bytes)
-}
-
-// ContainerResourceMetricSource indicates how to scale on a resource metric known to
-// Kubernetes, as specified in requests and limits, describing each pod in the
-// current scale target (e.g. CPU or memory).  The values will be averaged
-// together before being compared to the target.  Such metrics are built in to
-// Kubernetes, and have special scaling options on top of those available to
-// normal per-pod metrics using the "pods" source.  Only one "target" type
-// should be set.
-#ContainerResourceMetricSource: {
-	// name is the name of the resource in question.
-	name: v1.#ResourceName @go(Name) @protobuf(1,bytes)
-
-	// target specifies the target value for the given metric
-	target: #MetricTarget @go(Target) @protobuf(2,bytes)
-
-	// container is the name of the container in the pods of the scaling target
-	container: string @go(Container) @protobuf(3,bytes,opt)
-}
-
-// ExternalMetricSource indicates how to scale on a metric not associated with
-// any Kubernetes object (for example length of queue in cloud
-// messaging service, or QPS from loadbalancer running outside of cluster).
-#ExternalMetricSource: {
-	// metric identifies the target metric by name and selector
-	metric: #MetricIdentifier @go(Metric) @protobuf(1,bytes)
-
-	// target specifies the target value for the given metric
-	target: #MetricTarget @go(Target) @protobuf(2,bytes)
-}
-
-// MetricIdentifier defines the name and optionally selector for a metric
-#MetricIdentifier: {
-	// name is the name of the given metric
-	name: string @go(Name) @protobuf(1,bytes)
-
-	// selector is the string-encoded form of a standard kubernetes label selector for the given metric
-	// When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping.
-	// When unset, just the metricName will be used to gather metrics.
-	// +optional
-	selector?: null | metav1.#LabelSelector @go(Selector,*metav1.LabelSelector) @protobuf(2,bytes)
-}
-
-// MetricTarget defines the target value, average value, or average utilization of a specific metric
-#MetricTarget: {
-	// type represents whether the metric type is Utilization, Value, or AverageValue
-	type: #MetricTargetType @go(Type) @protobuf(1,bytes)
-
-	// value is the target value of the metric (as a quantity).
-	// +optional
-	value?: null | resource.#Quantity @go(Value,*resource.Quantity) @protobuf(2,bytes,opt)
-
-	// averageValue is the target value of the average of the
-	// metric across all relevant pods (as a quantity)
-	// +optional
-	averageValue?: null | resource.#Quantity @go(AverageValue,*resource.Quantity) @protobuf(3,bytes,opt)
-
-	// averageUtilization is the target value of the average of the
-	// resource metric across all relevant pods, represented as a percentage of
-	// the requested value of the resource for the pods.
-	// Currently only valid for Resource metric source type
-	// +optional
-	averageUtilization?: null | int32 @go(AverageUtilization,*int32) @protobuf(4,bytes,opt)
-}
-
-// MetricTargetType specifies the type of metric being targeted, and should be either
-// "Value", "AverageValue", or "Utilization"
-#MetricTargetType: string // #enumMetricTargetType
-
-#enumMetricTargetType:
-	#UtilizationMetricType |
-	#ValueMetricType |
-	#AverageValueMetricType
-
-// UtilizationMetricType declares a MetricTarget is an AverageUtilization value
-#UtilizationMetricType: #MetricTargetType & "Utilization"
-
-// ValueMetricType declares a MetricTarget is a raw value
-#ValueMetricType: #MetricTargetType & "Value"
-
-// AverageValueMetricType declares a MetricTarget is an
-#AverageValueMetricType: #MetricTargetType & "AverageValue"
-
-// HorizontalPodAutoscalerStatus describes the current status of a horizontal pod autoscaler.
-#HorizontalPodAutoscalerStatus: {
-	// observedGeneration is the most recent generation observed by this autoscaler.
-	// +optional
-	observedGeneration?: null | int64 @go(ObservedGeneration,*int64) @protobuf(1,varint,opt)
-
-	// lastScaleTime is the last time the HorizontalPodAutoscaler scaled the number of pods,
-	// used by the autoscaler to control how often the number of pods is changed.
-	// +optional
-	lastScaleTime?: null | metav1.#Time @go(LastScaleTime,*metav1.Time) @protobuf(2,bytes,opt)
-
-	// currentReplicas is current number of replicas of pods managed by this autoscaler,
-	// as last seen by the autoscaler.
-	currentReplicas: int32 @go(CurrentReplicas) @protobuf(3,varint,opt)
-
-	// desiredReplicas is the desired number of replicas of pods managed by this autoscaler,
-	// as last calculated by the autoscaler.
-	desiredReplicas: int32 @go(DesiredReplicas) @protobuf(4,varint,opt)
-
-	// currentMetrics is the last read state of the metrics used by this autoscaler.
-	// +optional
-	currentMetrics: [...#MetricStatus] @go(CurrentMetrics,[]MetricStatus) @protobuf(5,bytes,rep)
-
-	// conditions is the set of conditions required for this autoscaler to scale its target,
-	// and indicates whether or not those conditions are met.
-	// +optional
-	conditions: [...#HorizontalPodAutoscalerCondition] @go(Conditions,[]HorizontalPodAutoscalerCondition) @protobuf(6,bytes,rep)
-}
-
-// HorizontalPodAutoscalerConditionType are the valid conditions of
-// a HorizontalPodAutoscaler.
-#HorizontalPodAutoscalerConditionType: string // #enumHorizontalPodAutoscalerConditionType
-
-#enumHorizontalPodAutoscalerConditionType:
-	#ScalingActive |
-	#AbleToScale |
-	#ScalingLimited
-
-// ScalingActive indicates that the HPA controller is able to scale if necessary:
-// it's correctly configured, can fetch the desired metrics, and isn't disabled.
-#ScalingActive: #HorizontalPodAutoscalerConditionType & "ScalingActive"
-
-// AbleToScale indicates a lack of transient issues which prevent scaling from occurring,
-// such as being in a backoff window, or being unable to access/update the target scale.
-#AbleToScale: #HorizontalPodAutoscalerConditionType & "AbleToScale"
-
-// ScalingLimited indicates that the calculated scale based on metrics would be above or
-// below the range for the HPA, and has thus been capped.
-#ScalingLimited: #HorizontalPodAutoscalerConditionType & "ScalingLimited"
-
-// HorizontalPodAutoscalerCondition describes the state of
-// a HorizontalPodAutoscaler at a certain point.
-#HorizontalPodAutoscalerCondition: {
-	// type describes the current condition
-	type: #HorizontalPodAutoscalerConditionType @go(Type) @protobuf(1,bytes)
-
-	// status is the status of the condition (True, False, Unknown)
-	status: v1.#ConditionStatus @go(Status) @protobuf(2,bytes)
-
-	// lastTransitionTime is the last time the condition transitioned from
-	// one status to another
-	// +optional
-	lastTransitionTime?: metav1.#Time @go(LastTransitionTime) @protobuf(3,bytes,opt)
-
-	// reason is the reason for the condition's last transition.
-	// +optional
-	reason?: string @go(Reason) @protobuf(4,bytes,opt)
-
-	// message is a human-readable explanation containing details about
-	// the transition
-	// +optional
-	message?: string @go(Message) @protobuf(5,bytes,opt)
-}
-
-// MetricStatus describes the last-read state of a single metric.
-#MetricStatus: {
-	// type is the type of metric source.  It will be one of "ContainerResource", "External",
-	// "Object", "Pods" or "Resource", each corresponds to a matching field in the object.
-	// Note: "ContainerResource" type is available on when the feature-gate
-	// HPAContainerMetrics is enabled
-	type: #MetricSourceType @go(Type) @protobuf(1,bytes)
-
-	// object refers to a metric describing a single kubernetes object
-	// (for example, hits-per-second on an Ingress object).
-	// +optional
-	object?: null | #ObjectMetricStatus @go(Object,*ObjectMetricStatus) @protobuf(2,bytes,opt)
-
-	// pods refers to a metric describing each pod in the current scale target
-	// (for example, transactions-processed-per-second).  The values will be
-	// averaged together before being compared to the target value.
-	// +optional
-	pods?: null | #PodsMetricStatus @go(Pods,*PodsMetricStatus) @protobuf(3,bytes,opt)
-
-	// resource refers to a resource metric (such as those specified in
-	// requests and limits) known to Kubernetes describing each pod in the
-	// current scale target (e.g. CPU or memory). Such metrics are built in to
-	// Kubernetes, and have special scaling options on top of those available
-	// to normal per-pod metrics using the "pods" source.
-	// +optional
-	resource?: null | #ResourceMetricStatus @go(Resource,*ResourceMetricStatus) @protobuf(4,bytes,opt)
-
-	// container resource refers to a resource metric (such as those specified in
-	// requests and limits) known to Kubernetes describing a single container in each pod in the
-	// current scale target (e.g. CPU or memory). Such metrics are built in to
-	// Kubernetes, and have special scaling options on top of those available
-	// to normal per-pod metrics using the "pods" source.
-	// +optional
-	containerResource?: null | #ContainerResourceMetricStatus @go(ContainerResource,*ContainerResourceMetricStatus) @protobuf(7,bytes,opt)
-
-	// external refers to a global metric that is not associated
-	// with any Kubernetes object. It allows autoscaling based on information
-	// coming from components running outside of cluster
-	// (for example length of queue in cloud messaging service, or
-	// QPS from loadbalancer running outside of cluster).
-	// +optional
-	external?: null | #ExternalMetricStatus @go(External,*ExternalMetricStatus) @protobuf(5,bytes,opt)
-}
-
-// ObjectMetricStatus indicates the current value of a metric describing a
-// kubernetes object (for example, hits-per-second on an Ingress object).
-#ObjectMetricStatus: {
-	// metric identifies the target metric by name and selector
-	metric: #MetricIdentifier @go(Metric) @protobuf(1,bytes)
-
-	// current contains the current value for the given metric
-	current:         #MetricValueStatus           @go(Current) @protobuf(2,bytes)
-	describedObject: #CrossVersionObjectReference @go(DescribedObject) @protobuf(3,bytes)
-}
-
-// PodsMetricStatus indicates the current value of a metric describing each pod in
-// the current scale target (for example, transactions-processed-per-second).
-#PodsMetricStatus: {
-	// metric identifies the target metric by name and selector
-	metric: #MetricIdentifier @go(Metric) @protobuf(1,bytes)
-
-	// current contains the current value for the given metric
-	current: #MetricValueStatus @go(Current) @protobuf(2,bytes)
-}
-
-// ResourceMetricStatus indicates the current value of a resource metric known to
-// Kubernetes, as specified in requests and limits, describing each pod in the
-// current scale target (e.g. CPU or memory).  Such metrics are built in to
-// Kubernetes, and have special scaling options on top of those available to
-// normal per-pod metrics using the "pods" source.
-#ResourceMetricStatus: {
-	// Name is the name of the resource in question.
-	name: v1.#ResourceName @go(Name) @protobuf(1,bytes)
-
-	// current contains the current value for the given metric
-	current: #MetricValueStatus @go(Current) @protobuf(2,bytes)
-}
-
-// ContainerResourceMetricStatus indicates the current value of a resource metric known to
-// Kubernetes, as specified in requests and limits, describing a single container in each pod in the
-// current scale target (e.g. CPU or memory).  Such metrics are built in to
-// Kubernetes, and have special scaling options on top of those available to
-// normal per-pod metrics using the "pods" source.
-#ContainerResourceMetricStatus: {
-	// Name is the name of the resource in question.
-	name: v1.#ResourceName @go(Name) @protobuf(1,bytes)
-
-	// current contains the current value for the given metric
-	current: #MetricValueStatus @go(Current) @protobuf(2,bytes)
-
-	// Container is the name of the container in the pods of the scaling target
-	container: string @go(Container) @protobuf(3,bytes,opt)
-}
-
-// ExternalMetricStatus indicates the current value of a global metric
-// not associated with any Kubernetes object.
-#ExternalMetricStatus: {
-	// metric identifies the target metric by name and selector
-	metric: #MetricIdentifier @go(Metric) @protobuf(1,bytes)
-
-	// current contains the current value for the given metric
-	current: #MetricValueStatus @go(Current) @protobuf(2,bytes)
-}
-
-// MetricValueStatus holds the current value for a metric
-#MetricValueStatus: {
-	// value is the current value of the metric (as a quantity).
-	// +optional
-	value?: null | resource.#Quantity @go(Value,*resource.Quantity) @protobuf(1,bytes,opt)
-
-	// averageValue is the current value of the average of the
-	// metric across all relevant pods (as a quantity)
-	// +optional
-	averageValue?: null | resource.#Quantity @go(AverageValue,*resource.Quantity) @protobuf(2,bytes,opt)
-
-	// currentAverageUtilization is the current value of the average of the
-	// resource metric across all relevant pods, represented as a percentage of
-	// the requested value of the resource for the pods.
-	// +optional
-	averageUtilization?: null | int32 @go(AverageUtilization,*int32) @protobuf(3,bytes,opt)
-}
-
-// HorizontalPodAutoscalerList is a list of horizontal pod autoscaler objects.
-#HorizontalPodAutoscalerList: {
-	metav1.#TypeMeta
-
-	// metadata is the standard list metadata.
-	// +optional
-	metadata?: metav1.#ListMeta @go(ListMeta) @protobuf(1,bytes,opt)
-
-	// items is the list of horizontal pod autoscaler objects.
-	items: [...#HorizontalPodAutoscaler] @go(Items,[]HorizontalPodAutoscaler) @protobuf(2,bytes,rep)
-}

cue/cue.mod/gen/k8s.io/api/core/v1/annotation_key_constants_go_gen.cue

@@ -1,136 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/api/core/v1
-
-package v1
-
-// ImagePolicyFailedOpenKey is added to pods created by failing open when the image policy
-// webhook backend fails.
-#ImagePolicyFailedOpenKey: "alpha.image-policy.k8s.io/failed-open"
-
-// MirrorAnnotationKey represents the annotation key set by kubelets when creating mirror pods
-#MirrorPodAnnotationKey: "kubernetes.io/config.mirror"
-
-// TolerationsAnnotationKey represents the key of tolerations data (json serialized)
-// in the Annotations of a Pod.
-#TolerationsAnnotationKey: "scheduler.alpha.kubernetes.io/tolerations"
-
-// TaintsAnnotationKey represents the key of taints data (json serialized)
-// in the Annotations of a Node.
-#TaintsAnnotationKey: "scheduler.alpha.kubernetes.io/taints"
-
-// SeccompPodAnnotationKey represents the key of a seccomp profile applied
-// to all containers of a pod.
-// Deprecated: set a pod security context `seccompProfile` field.
-#SeccompPodAnnotationKey: "seccomp.security.alpha.kubernetes.io/pod"
-
-// SeccompContainerAnnotationKeyPrefix represents the key of a seccomp profile applied
-// to one container of a pod.
-// Deprecated: set a container security context `seccompProfile` field.
-#SeccompContainerAnnotationKeyPrefix: "container.seccomp.security.alpha.kubernetes.io/"
-
-// SeccompProfileRuntimeDefault represents the default seccomp profile used by container runtime.
-// Deprecated: set a pod or container security context `seccompProfile` of type "RuntimeDefault" instead.
-#SeccompProfileRuntimeDefault: "runtime/default"
-
-// SeccompProfileNameUnconfined is the unconfined seccomp profile.
-#SeccompProfileNameUnconfined: "unconfined"
-
-// SeccompLocalhostProfileNamePrefix is the prefix for specifying profiles loaded from the node's disk.
-#SeccompLocalhostProfileNamePrefix: "localhost/"
-
-// AppArmorBetaContainerAnnotationKeyPrefix is the prefix to an annotation key specifying a container's apparmor profile.
-#AppArmorBetaContainerAnnotationKeyPrefix: "container.apparmor.security.beta.kubernetes.io/"
-
-// AppArmorBetaDefaultProfileAnnotatoinKey is the annotation key specifying the default AppArmor profile.
-#AppArmorBetaDefaultProfileAnnotationKey: "apparmor.security.beta.kubernetes.io/defaultProfileName"
-
-// AppArmorBetaAllowedProfileAnnotationKey is the annotation key specifying the allowed AppArmor profiles.
-#AppArmorBetaAllowedProfilesAnnotationKey: "apparmor.security.beta.kubernetes.io/allowedProfileNames"
-
-// AppArmorBetaProfileRuntimeDefault is the profile specifying the runtime default.
-#AppArmorBetaProfileRuntimeDefault: "runtime/default"
-
-// AppArmorBetaProfileNamePrefix is the prefix for specifying profiles loaded on the node.
-#AppArmorBetaProfileNamePrefix: "localhost/"
-
-// AppArmorBetaProfileNameUnconfined is the Unconfined AppArmor profile
-#AppArmorBetaProfileNameUnconfined: "unconfined"
-
-// DeprecatedSeccompProfileDockerDefault represents the default seccomp profile used by docker.
-// Deprecated: set a pod or container security context `seccompProfile` of type "RuntimeDefault" instead.
-#DeprecatedSeccompProfileDockerDefault: "docker/default"
-
-// PreferAvoidPodsAnnotationKey represents the key of preferAvoidPods data (json serialized)
-// in the Annotations of a Node.
-#PreferAvoidPodsAnnotationKey: "scheduler.alpha.kubernetes.io/preferAvoidPods"
-
-// ObjectTTLAnnotations represents a suggestion for kubelet for how long it can cache
-// an object (e.g. secret, config map) before fetching it again from apiserver.
-// This annotation can be attached to node.
-#ObjectTTLAnnotationKey: "node.alpha.kubernetes.io/ttl"
-
-// annotation key prefix used to identify non-convertible json paths.
-#NonConvertibleAnnotationPrefix: "non-convertible.kubernetes.io"
-_#kubectlPrefix:                 "kubectl.kubernetes.io/"
-
-// LastAppliedConfigAnnotation is the annotation used to store the previous
-// configuration of a resource for use in a three way diff by UpdateApplyAnnotation.
-#LastAppliedConfigAnnotation: "kubectl.kubernetes.io/last-applied-configuration"
-
-// AnnotationLoadBalancerSourceRangesKey is the key of the annotation on a service to set allowed ingress ranges on their LoadBalancers
-//
-// It should be a comma-separated list of CIDRs, e.g. `0.0.0.0/0` to
-// allow full access (the default) or `18.0.0.0/8,56.0.0.0/8` to allow
-// access only from the CIDRs currently allocated to MIT & the USPS.
-//
-// Not all cloud providers support this annotation, though AWS & GCE do.
-#AnnotationLoadBalancerSourceRangesKey: "service.beta.kubernetes.io/load-balancer-source-ranges"
-
-// EndpointsLastChangeTriggerTime is the annotation key, set for endpoints objects, that
-// represents the timestamp (stored as RFC 3339 date-time string, e.g. '2018-10-22T19:32:52.1Z')
-// of the last change, of some Pod or Service object, that triggered the endpoints object change.
-// In other words, if a Pod / Service changed at time T0, that change was observed by endpoints
-// controller at T1, and the Endpoints object was changed at T2, the
-// EndpointsLastChangeTriggerTime would be set to T0.
-//
-// The "endpoints change trigger" here means any Pod or Service change that resulted in the
-// Endpoints object change.
-//
-// Given the definition of the "endpoints change trigger", please note that this annotation will
-// be set ONLY for endpoints object changes triggered by either Pod or Service change. If the
-// Endpoints object changes due to other reasons, this annotation won't be set (or updated if it's
-// already set).
-//
-// This annotation will be used to compute the in-cluster network programming latency SLI, see
-// https://github.com/kubernetes/community/blob/master/sig-scalability/slos/network_programming_latency.md
-#EndpointsLastChangeTriggerTime: "endpoints.kubernetes.io/last-change-trigger-time"
-
-// EndpointsOverCapacity will be set on an Endpoints resource when it
-// exceeds the maximum capacity of 1000 addresses. Initially the Endpoints
-// controller will set this annotation with a value of "warning". In a
-// future release, the controller may set this annotation with a value of
-// "truncated" to indicate that any addresses exceeding the limit of 1000
-// have been truncated from the Endpoints resource.
-#EndpointsOverCapacity: "endpoints.kubernetes.io/over-capacity"
-
-// MigratedPluginsAnnotationKey is the annotation key, set for CSINode objects, that is a comma-separated
-// list of in-tree plugins that will be serviced by the CSI backend on the Node represented by CSINode.
-// This annotation is used by the Attach Detach Controller to determine whether to use the in-tree or
-// CSI Backend for a volume plugin on a specific node.
-#MigratedPluginsAnnotationKey: "storage.alpha.kubernetes.io/migrated-plugins"
-
-// PodDeletionCost can be used to set to an int32 that represent the cost of deleting
-// a pod compared to other pods belonging to the same ReplicaSet. Pods with lower
-// deletion cost are preferred to be deleted before pods with higher deletion cost.
-// Note that this is honored on a best-effort basis, and so it does not offer guarantees on
-// pod deletion order.
-// The implicit deletion cost for pods that don't set the annotation is 0, negative values are permitted.
-//
-// This annotation is beta-level and is only honored when PodDeletionCost feature is enabled.
-#PodDeletionCost: "controller.kubernetes.io/pod-deletion-cost"
-
-// AnnotationTopologyAwareHints can be used to enable or disable Topology
-// Aware Hints for a Service. This may be set to "Auto" or "Disabled". Any
-// other value is treated as "Disabled".
-#AnnotationTopologyAwareHints: "service.kubernetes.io/topology-aware-hints"

cue/cue.mod/gen/k8s.io/api/core/v1/doc_go_gen.cue

@@ -1,6 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/api/core/v1
-
-// Package v1 is the v1 version of the core API.
-package v1

cue/cue.mod/gen/k8s.io/api/core/v1/register_go_gen.cue

@@ -1,7 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/api/core/v1
-
-package v1
-
-#GroupName: ""

cue/cue.mod/gen/k8s.io/api/core/v1/well_known_labels_go_gen.cue

@@ -1,55 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/api/core/v1
-
-package v1
-
-#LabelHostname:       "kubernetes.io/hostname"
-#LabelTopologyZone:   "topology.kubernetes.io/zone"
-#LabelTopologyRegion: "topology.kubernetes.io/region"
-
-// These label have been deprecated since 1.17, but will be supported for
-// the foreseeable future, to accommodate things like long-lived PVs that
-// use them.  New users should prefer the "topology.kubernetes.io/*"
-// equivalents.
-#LabelFailureDomainBetaZone:   "failure-domain.beta.kubernetes.io/zone"
-#LabelFailureDomainBetaRegion: "failure-domain.beta.kubernetes.io/region"
-
-// Retained for compat when vendored.  Do not use these consts in new code.
-#LabelZoneFailureDomain:       "failure-domain.beta.kubernetes.io/zone"
-#LabelZoneRegion:              "failure-domain.beta.kubernetes.io/region"
-#LabelZoneFailureDomainStable: "topology.kubernetes.io/zone"
-#LabelZoneRegionStable:        "topology.kubernetes.io/region"
-#LabelInstanceType:            "beta.kubernetes.io/instance-type"
-#LabelInstanceTypeStable:      "node.kubernetes.io/instance-type"
-#LabelOSStable:                "kubernetes.io/os"
-#LabelArchStable:              "kubernetes.io/arch"
-
-// LabelWindowsBuild is used on Windows nodes to specify the Windows build number starting with v1.17.0.
-// It's in the format MajorVersion.MinorVersion.BuildNumber (for ex: 10.0.17763)
-#LabelWindowsBuild: "node.kubernetes.io/windows-build"
-
-// LabelNamespaceSuffixKubelet is an allowed label namespace suffix kubelets can self-set ([*.]kubelet.kubernetes.io/*)
-#LabelNamespaceSuffixKubelet: "kubelet.kubernetes.io"
-
-// LabelNamespaceSuffixNode is an allowed label namespace suffix kubelets can self-set ([*.]node.kubernetes.io/*)
-#LabelNamespaceSuffixNode: "node.kubernetes.io"
-
-// LabelNamespaceNodeRestriction is a forbidden label namespace that kubelets may not self-set when the NodeRestriction admission plugin is enabled
-#LabelNamespaceNodeRestriction: "node-restriction.kubernetes.io"
-
-// IsHeadlessService is added by Controller to an Endpoint denoting if its parent
-// Service is Headless. The existence of this label can be used further by other
-// controllers and kube-proxy to check if the Endpoint objects should be replicated when
-// using Headless Services
-#IsHeadlessService: "service.kubernetes.io/headless"
-
-// LabelNodeExcludeBalancers specifies that the node should not be considered as a target
-// for external load-balancers which use nodes as a second hop (e.g. many cloud LBs which only
-// understand nodes). For services that use externalTrafficPolicy=Local, this may mean that
-// any backends on excluded nodes are not reachable by those external load-balancers.
-// Implementations of this exclusion may vary based on provider.
-#LabelNodeExcludeBalancers: "node.kubernetes.io/exclude-from-external-load-balancers"
-
-// LabelMetadataName is the label name which, in-tree, is used to automatically label namespaces, so they can be selected easily by tools which require definitive labels
-#LabelMetadataName: "kubernetes.io/metadata.name"

cue/cue.mod/gen/k8s.io/api/core/v1/well_known_taints_go_gen.cue

@@ -1,34 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/api/core/v1
-
-package v1
-
-// TaintNodeNotReady will be added when node is not ready
-// and removed when node becomes ready.
-#TaintNodeNotReady: "node.kubernetes.io/not-ready"
-
-// TaintNodeUnreachable will be added when node becomes unreachable
-// (corresponding to NodeReady status ConditionUnknown)
-// and removed when node becomes reachable (NodeReady status ConditionTrue).
-#TaintNodeUnreachable: "node.kubernetes.io/unreachable"
-
-// TaintNodeUnschedulable will be added when node becomes unschedulable
-// and removed when node becomes schedulable.
-#TaintNodeUnschedulable: "node.kubernetes.io/unschedulable"
-
-// TaintNodeMemoryPressure will be added when node has memory pressure
-// and removed when node has enough memory.
-#TaintNodeMemoryPressure: "node.kubernetes.io/memory-pressure"
-
-// TaintNodeDiskPressure will be added when node has disk pressure
-// and removed when node has enough disk.
-#TaintNodeDiskPressure: "node.kubernetes.io/disk-pressure"
-
-// TaintNodeNetworkUnavailable will be added when node's network is unavailable
-// and removed when network becomes ready.
-#TaintNodeNetworkUnavailable: "node.kubernetes.io/network-unavailable"
-
-// TaintNodePIDPressure will be added when node has pid pressure
-// and removed when node has enough pid.
-#TaintNodePIDPressure: "node.kubernetes.io/pid-pressure"

cue/cue.mod/gen/k8s.io/api/networking/v1/register_go_gen.cue

@@ -1,7 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/api/networking/v1
-
-package v1
-
-#GroupName: "networking.k8s.io"

cue/cue.mod/gen/k8s.io/api/networking/v1/types_go_gen.cue

@@ -1,543 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/api/networking/v1
-
-package v1
-
-import (
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/api/core/v1"
-	"k8s.io/apimachinery/pkg/util/intstr"
-)
-
-// NetworkPolicy describes what network traffic is allowed for a set of Pods
-#NetworkPolicy: {
-	metav1.#TypeMeta
-
-	// Standard object's metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta) @protobuf(1,bytes,opt)
-
-	// Specification of the desired behavior for this NetworkPolicy.
-	// +optional
-	spec?: #NetworkPolicySpec @go(Spec) @protobuf(2,bytes,opt)
-}
-
-// PolicyType string describes the NetworkPolicy type
-// This type is beta-level in 1.8
-// +enum
-#PolicyType: string // #enumPolicyType
-
-#enumPolicyType:
-	#PolicyTypeIngress |
-	#PolicyTypeEgress
-
-// PolicyTypeIngress is a NetworkPolicy that affects ingress traffic on selected pods
-#PolicyTypeIngress: #PolicyType & "Ingress"
-
-// PolicyTypeEgress is a NetworkPolicy that affects egress traffic on selected pods
-#PolicyTypeEgress: #PolicyType & "Egress"
-
-// NetworkPolicySpec provides the specification of a NetworkPolicy
-#NetworkPolicySpec: {
-	// Selects the pods to which this NetworkPolicy object applies. The array of
-	// ingress rules is applied to any pods selected by this field. Multiple network
-	// policies can select the same set of pods. In this case, the ingress rules for
-	// each are combined additively. This field is NOT optional and follows standard
-	// label selector semantics. An empty podSelector matches all pods in this
-	// namespace.
-	podSelector: metav1.#LabelSelector @go(PodSelector) @protobuf(1,bytes,opt)
-
-	// List of ingress rules to be applied to the selected pods. Traffic is allowed to
-	// a pod if there are no NetworkPolicies selecting the pod
-	// (and cluster policy otherwise allows the traffic), OR if the traffic source is
-	// the pod's local node, OR if the traffic matches at least one ingress rule
-	// across all of the NetworkPolicy objects whose podSelector matches the pod. If
-	// this field is empty then this NetworkPolicy does not allow any traffic (and serves
-	// solely to ensure that the pods it selects are isolated by default)
-	// +optional
-	ingress?: [...#NetworkPolicyIngressRule] @go(Ingress,[]NetworkPolicyIngressRule) @protobuf(2,bytes,rep)
-
-	// List of egress rules to be applied to the selected pods. Outgoing traffic is
-	// allowed if there are no NetworkPolicies selecting the pod (and cluster policy
-	// otherwise allows the traffic), OR if the traffic matches at least one egress rule
-	// across all of the NetworkPolicy objects whose podSelector matches the pod. If
-	// this field is empty then this NetworkPolicy limits all outgoing traffic (and serves
-	// solely to ensure that the pods it selects are isolated by default).
-	// This field is beta-level in 1.8
-	// +optional
-	egress?: [...#NetworkPolicyEgressRule] @go(Egress,[]NetworkPolicyEgressRule) @protobuf(3,bytes,rep)
-
-	// List of rule types that the NetworkPolicy relates to.
-	// Valid options are ["Ingress"], ["Egress"], or ["Ingress", "Egress"].
-	// If this field is not specified, it will default based on the existence of Ingress or Egress rules;
-	// policies that contain an Egress section are assumed to affect Egress, and all policies
-	// (whether or not they contain an Ingress section) are assumed to affect Ingress.
-	// If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ].
-	// Likewise, if you want to write a policy that specifies that no egress is allowed,
-	// you must specify a policyTypes value that include "Egress" (since such a policy would not include
-	// an Egress section and would otherwise default to just [ "Ingress" ]).
-	// This field is beta-level in 1.8
-	// +optional
-	policyTypes?: [...#PolicyType] @go(PolicyTypes,[]PolicyType) @protobuf(4,bytes,rep,casttype=PolicyType)
-}
-
-// NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods
-// matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.
-#NetworkPolicyIngressRule: {
-	// List of ports which should be made accessible on the pods selected for this
-	// rule. Each item in this list is combined using a logical OR. If this field is
-	// empty or missing, this rule matches all ports (traffic not restricted by port).
-	// If this field is present and contains at least one item, then this rule allows
-	// traffic only if the traffic matches at least one port in the list.
-	// +optional
-	ports?: [...#NetworkPolicyPort] @go(Ports,[]NetworkPolicyPort) @protobuf(1,bytes,rep)
-
-	// List of sources which should be able to access the pods selected for this rule.
-	// Items in this list are combined using a logical OR operation. If this field is
-	// empty or missing, this rule matches all sources (traffic not restricted by
-	// source). If this field is present and contains at least one item, this rule
-	// allows traffic only if the traffic matches at least one item in the from list.
-	// +optional
-	from?: [...#NetworkPolicyPeer] @go(From,[]NetworkPolicyPeer) @protobuf(2,bytes,rep)
-}
-
-// NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods
-// matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to.
-// This type is beta-level in 1.8
-#NetworkPolicyEgressRule: {
-	// List of destination ports for outgoing traffic.
-	// Each item in this list is combined using a logical OR. If this field is
-	// empty or missing, this rule matches all ports (traffic not restricted by port).
-	// If this field is present and contains at least one item, then this rule allows
-	// traffic only if the traffic matches at least one port in the list.
-	// +optional
-	ports?: [...#NetworkPolicyPort] @go(Ports,[]NetworkPolicyPort) @protobuf(1,bytes,rep)
-
-	// List of destinations for outgoing traffic of pods selected for this rule.
-	// Items in this list are combined using a logical OR operation. If this field is
-	// empty or missing, this rule matches all destinations (traffic not restricted by
-	// destination). If this field is present and contains at least one item, this rule
-	// allows traffic only if the traffic matches at least one item in the to list.
-	// +optional
-	to?: [...#NetworkPolicyPeer] @go(To,[]NetworkPolicyPeer) @protobuf(2,bytes,rep)
-}
-
-// NetworkPolicyPort describes a port to allow traffic on
-#NetworkPolicyPort: {
-	// The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this
-	// field defaults to TCP.
-	// +optional
-	protocol?: null | v1.#Protocol @go(Protocol,*v1.Protocol) @protobuf(1,bytes,opt,casttype=k8s.io/api/core/v1.Protocol)
-
-	// The port on the given protocol. This can either be a numerical or named
-	// port on a pod. If this field is not provided, this matches all port names and
-	// numbers.
-	// If present, only traffic on the specified protocol AND port will be matched.
-	// +optional
-	port?: null | intstr.#IntOrString @go(Port,*intstr.IntOrString) @protobuf(2,bytes,opt)
-
-	// If set, indicates that the range of ports from port to endPort, inclusive,
-	// should be allowed by the policy. This field cannot be defined if the port field
-	// is not defined or if the port field is defined as a named (string) port.
-	// The endPort must be equal or greater than port.
-	// This feature is in Beta state and is enabled by default.
-	// It can be disabled using the Feature Gate "NetworkPolicyEndPort".
-	// +optional
-	endPort?: null | int32 @go(EndPort,*int32) @protobuf(3,bytes,opt)
-}
-
-// IPBlock describes a particular CIDR (Ex. "192.168.1.1/24","2001:db9::/64") that is allowed
-// to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs
-// that should not be included within this rule.
-#IPBlock: {
-	// CIDR is a string representing the IP Block
-	// Valid examples are "192.168.1.1/24" or "2001:db9::/64"
-	cidr: string @go(CIDR) @protobuf(1,bytes)
-
-	// Except is a slice of CIDRs that should not be included within an IP Block
-	// Valid examples are "192.168.1.1/24" or "2001:db9::/64"
-	// Except values will be rejected if they are outside the CIDR range
-	// +optional
-	except?: [...string] @go(Except,[]string) @protobuf(2,bytes,rep)
-}
-
-// NetworkPolicyPeer describes a peer to allow traffic to/from. Only certain combinations of
-// fields are allowed
-#NetworkPolicyPeer: {
-	// This is a label selector which selects Pods. This field follows standard label
-	// selector semantics; if present but empty, it selects all pods.
-	//
-	// If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects
-	// the Pods matching PodSelector in the Namespaces selected by NamespaceSelector.
-	// Otherwise it selects the Pods matching PodSelector in the policy's own Namespace.
-	// +optional
-	podSelector?: null | metav1.#LabelSelector @go(PodSelector,*metav1.LabelSelector) @protobuf(1,bytes,opt)
-
-	// Selects Namespaces using cluster-scoped labels. This field follows standard label
-	// selector semantics; if present but empty, it selects all namespaces.
-	//
-	// If PodSelector is also set, then the NetworkPolicyPeer as a whole selects
-	// the Pods matching PodSelector in the Namespaces selected by NamespaceSelector.
-	// Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.
-	// +optional
-	namespaceSelector?: null | metav1.#LabelSelector @go(NamespaceSelector,*metav1.LabelSelector) @protobuf(2,bytes,opt)
-
-	// IPBlock defines policy on a particular IPBlock. If this field is set then
-	// neither of the other fields can be.
-	// +optional
-	ipBlock?: null | #IPBlock @go(IPBlock,*IPBlock) @protobuf(3,bytes,rep)
-}
-
-// NetworkPolicyList is a list of NetworkPolicy objects.
-#NetworkPolicyList: {
-	metav1.#TypeMeta
-
-	// Standard list metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ListMeta @go(ListMeta) @protobuf(1,bytes,opt)
-
-	// Items is a list of schema objects.
-	items: [...#NetworkPolicy] @go(Items,[]NetworkPolicy) @protobuf(2,bytes,rep)
-}
-
-// Ingress is a collection of rules that allow inbound connections to reach the
-// endpoints defined by a backend. An Ingress can be configured to give services
-// externally-reachable urls, load balance traffic, terminate SSL, offer name
-// based virtual hosting etc.
-#Ingress: {
-	metav1.#TypeMeta
-
-	// Standard object's metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta) @protobuf(1,bytes,opt)
-
-	// Spec is the desired state of the Ingress.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-	// +optional
-	spec?: #IngressSpec @go(Spec) @protobuf(2,bytes,opt)
-
-	// Status is the current state of the Ingress.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-	// +optional
-	status?: #IngressStatus @go(Status) @protobuf(3,bytes,opt)
-}
-
-// IngressList is a collection of Ingress.
-#IngressList: {
-	metav1.#TypeMeta
-
-	// Standard object's metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ListMeta @go(ListMeta) @protobuf(1,bytes,opt)
-
-	// Items is the list of Ingress.
-	items: [...#Ingress] @go(Items,[]Ingress) @protobuf(2,bytes,rep)
-}
-
-// IngressSpec describes the Ingress the user wishes to exist.
-#IngressSpec: {
-	// IngressClassName is the name of the IngressClass cluster resource. The
-	// associated IngressClass defines which controller will implement the
-	// resource. This replaces the deprecated `kubernetes.io/ingress.class`
-	// annotation. For backwards compatibility, when that annotation is set, it
-	// must be given precedence over this field. The controller may emit a
-	// warning if the field and annotation have different values.
-	// Implementations of this API should ignore Ingresses without a class
-	// specified. An IngressClass resource may be marked as default, which can
-	// be used to set a default value for this field. For more information,
-	// refer to the IngressClass documentation.
-	// +optional
-	ingressClassName?: null | string @go(IngressClassName,*string) @protobuf(4,bytes,opt)
-
-	// DefaultBackend is the backend that should handle requests that don't
-	// match any rule. If Rules are not specified, DefaultBackend must be specified.
-	// If DefaultBackend is not set, the handling of requests that do not match any
-	// of the rules will be up to the Ingress controller.
-	// +optional
-	defaultBackend?: null | #IngressBackend @go(DefaultBackend,*IngressBackend) @protobuf(1,bytes,opt)
-
-	// TLS configuration. Currently the Ingress only supports a single TLS
-	// port, 443. If multiple members of this list specify different hosts, they
-	// will be multiplexed on the same port according to the hostname specified
-	// through the SNI TLS extension, if the ingress controller fulfilling the
-	// ingress supports SNI.
-	// +listType=atomic
-	// +optional
-	tls?: [...#IngressTLS] @go(TLS,[]IngressTLS) @protobuf(2,bytes,rep)
-
-	// A list of host rules used to configure the Ingress. If unspecified, or
-	// no rule matches, all traffic is sent to the default backend.
-	// +listType=atomic
-	// +optional
-	rules?: [...#IngressRule] @go(Rules,[]IngressRule) @protobuf(3,bytes,rep)
-}
-
-// IngressTLS describes the transport layer security associated with an Ingress.
-#IngressTLS: {
-	// Hosts are a list of hosts included in the TLS certificate. The values in
-	// this list must match the name/s used in the tlsSecret. Defaults to the
-	// wildcard host setting for the loadbalancer controller fulfilling this
-	// Ingress, if left unspecified.
-	// +listType=atomic
-	// +optional
-	hosts?: [...string] @go(Hosts,[]string) @protobuf(1,bytes,rep)
-
-	// SecretName is the name of the secret used to terminate TLS traffic on
-	// port 443. Field is left optional to allow TLS routing based on SNI
-	// hostname alone. If the SNI host in a listener conflicts with the "Host"
-	// header field used by an IngressRule, the SNI host is used for termination
-	// and value of the Host header is used for routing.
-	// +optional
-	secretName?: string @go(SecretName) @protobuf(2,bytes,opt)
-}
-
-// IngressStatus describe the current state of the Ingress.
-#IngressStatus: {
-	// LoadBalancer contains the current status of the load-balancer.
-	// +optional
-	loadBalancer?: v1.#LoadBalancerStatus @go(LoadBalancer) @protobuf(1,bytes,opt)
-}
-
-// IngressRule represents the rules mapping the paths under a specified host to
-// the related backend services. Incoming requests are first evaluated for a host
-// match, then routed to the backend associated with the matching IngressRuleValue.
-#IngressRule: {
-	// Host is the fully qualified domain name of a network host, as defined by RFC 3986.
-	// Note the following deviations from the "host" part of the
-	// URI as defined in RFC 3986:
-	// 1. IPs are not allowed. Currently an IngressRuleValue can only apply to
-	//    the IP in the Spec of the parent Ingress.
-	// 2. The `:` delimiter is not respected because ports are not allowed.
-	//   Currently the port of an Ingress is implicitly :80 for http and
-	//   :443 for https.
-	// Both these may change in the future.
-	// Incoming requests are matched against the host before the
-	// IngressRuleValue. If the host is unspecified, the Ingress routes all
-	// traffic based on the specified IngressRuleValue.
-	//
-	// Host can be "precise" which is a domain name without the terminating dot of
-	// a network host (e.g. "foo.bar.com") or "wildcard", which is a domain name
-	// prefixed with a single wildcard label (e.g. "*.foo.com").
-	// The wildcard character '*' must appear by itself as the first DNS label and
-	// matches only a single label. You cannot have a wildcard label by itself (e.g. Host == "*").
-	// Requests will be matched against the Host field in the following way:
-	// 1. If Host is precise, the request matches this rule if the http host header is equal to Host.
-	// 2. If Host is a wildcard, then the request matches this rule if the http host header
-	// is to equal to the suffix (removing the first label) of the wildcard rule.
-	// +optional
-	host?: string @go(Host) @protobuf(1,bytes,opt)
-
-	#IngressRuleValue
-}
-
-// IngressRuleValue represents a rule to apply against incoming requests. If the
-// rule is satisfied, the request is routed to the specified backend. Currently
-// mixing different types of rules in a single Ingress is disallowed, so exactly
-// one of the following must be set.
-#IngressRuleValue: {
-	// +optional
-	http?: null | #HTTPIngressRuleValue @go(HTTP,*HTTPIngressRuleValue) @protobuf(1,bytes,opt)
-}
-
-// HTTPIngressRuleValue is a list of http selectors pointing to backends.
-// In the example: http://<host>/<path>?<searchpart> -> backend where
-// where parts of the url correspond to RFC 3986, this resource will be used
-// to match against everything after the last '/' and before the first '?'
-// or '#'.
-#HTTPIngressRuleValue: {
-	// A collection of paths that map requests to backends.
-	// +listType=atomic
-	paths: [...#HTTPIngressPath] @go(Paths,[]HTTPIngressPath) @protobuf(1,bytes,rep)
-}
-
-// PathType represents the type of path referred to by a HTTPIngressPath.
-// +enum
-#PathType: string // #enumPathType
-
-#enumPathType:
-	#PathTypeExact |
-	#PathTypePrefix |
-	#PathTypeImplementationSpecific
-
-// PathTypeExact matches the URL path exactly and with case sensitivity.
-#PathTypeExact: #PathType & "Exact"
-
-// PathTypePrefix matches based on a URL path prefix split by '/'. Matching
-// is case sensitive and done on a path element by element basis. A path
-// element refers to the list of labels in the path split by the '/'
-// separator. A request is a match for path p if every p is an element-wise
-// prefix of p of the request path. Note that if the last element of the
-// path is a substring of the last element in request path, it is not a
-// match (e.g. /foo/bar matches /foo/bar/baz, but does not match
-// /foo/barbaz). If multiple matching paths exist in an Ingress spec, the
-// longest matching path is given priority.
-// Examples:
-// - /foo/bar does not match requests to /foo/barbaz
-// - /foo/bar matches request to /foo/bar and /foo/bar/baz
-// - /foo and /foo/ both match requests to /foo and /foo/. If both paths are
-//   present in an Ingress spec, the longest matching path (/foo/) is given
-//   priority.
-#PathTypePrefix: #PathType & "Prefix"
-
-// PathTypeImplementationSpecific matching is up to the IngressClass.
-// Implementations can treat this as a separate PathType or treat it
-// identically to Prefix or Exact path types.
-#PathTypeImplementationSpecific: #PathType & "ImplementationSpecific"
-
-// HTTPIngressPath associates a path with a backend. Incoming urls matching the
-// path are forwarded to the backend.
-#HTTPIngressPath: {
-	// Path is matched against the path of an incoming request. Currently it can
-	// contain characters disallowed from the conventional "path" part of a URL
-	// as defined by RFC 3986. Paths must begin with a '/' and must be present
-	// when using PathType with value "Exact" or "Prefix".
-	// +optional
-	path?: string @go(Path) @protobuf(1,bytes,opt)
-
-	// PathType determines the interpretation of the Path matching. PathType can
-	// be one of the following values:
-	// * Exact: Matches the URL path exactly.
-	// * Prefix: Matches based on a URL path prefix split by '/'. Matching is
-	//   done on a path element by element basis. A path element refers is the
-	//   list of labels in the path split by the '/' separator. A request is a
-	//   match for path p if every p is an element-wise prefix of p of the
-	//   request path. Note that if the last element of the path is a substring
-	//   of the last element in request path, it is not a match (e.g. /foo/bar
-	//   matches /foo/bar/baz, but does not match /foo/barbaz).
-	// * ImplementationSpecific: Interpretation of the Path matching is up to
-	//   the IngressClass. Implementations can treat this as a separate PathType
-	//   or treat it identically to Prefix or Exact path types.
-	// Implementations are required to support all path types.
-	pathType?: null | #PathType @go(PathType,*PathType) @protobuf(3,bytes,opt)
-
-	// Backend defines the referenced service endpoint to which the traffic
-	// will be forwarded to.
-	backend: #IngressBackend @go(Backend) @protobuf(2,bytes,opt)
-}
-
-// IngressBackend describes all endpoints for a given service and port.
-#IngressBackend: {
-	// Service references a Service as a Backend.
-	// This is a mutually exclusive setting with "Resource".
-	// +optional
-	service?: null | #IngressServiceBackend @go(Service,*IngressServiceBackend) @protobuf(4,bytes,opt)
-
-	// Resource is an ObjectRef to another Kubernetes resource in the namespace
-	// of the Ingress object. If resource is specified, a service.Name and
-	// service.Port must not be specified.
-	// This is a mutually exclusive setting with "Service".
-	// +optional
-	resource?: null | v1.#TypedLocalObjectReference @go(Resource,*v1.TypedLocalObjectReference) @protobuf(3,bytes,opt)
-}
-
-// IngressServiceBackend references a Kubernetes Service as a Backend.
-#IngressServiceBackend: {
-	// Name is the referenced service. The service must exist in
-	// the same namespace as the Ingress object.
-	name: string @go(Name) @protobuf(1,bytes,opt)
-
-	// Port of the referenced service. A port name or port number
-	// is required for a IngressServiceBackend.
-	port?: #ServiceBackendPort @go(Port) @protobuf(2,bytes,opt)
-}
-
-// ServiceBackendPort is the service port being referenced.
-#ServiceBackendPort: {
-	// Name is the name of the port on the Service.
-	// This is a mutually exclusive setting with "Number".
-	// +optional
-	name?: string @go(Name) @protobuf(1,bytes,opt)
-
-	// Number is the numerical port number (e.g. 80) on the Service.
-	// This is a mutually exclusive setting with "Name".
-	// +optional
-	number?: int32 @go(Number) @protobuf(2,bytes,opt)
-}
-
-// IngressClass represents the class of the Ingress, referenced by the Ingress
-// Spec. The `ingressclass.kubernetes.io/is-default-class` annotation can be
-// used to indicate that an IngressClass should be considered default. When a
-// single IngressClass resource has this annotation set to true, new Ingress
-// resources without a class specified will be assigned this default class.
-#IngressClass: {
-	metav1.#TypeMeta
-
-	// Standard object's metadata.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta) @protobuf(1,bytes,opt)
-
-	// Spec is the desired state of the IngressClass.
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-	// +optional
-	spec?: #IngressClassSpec @go(Spec) @protobuf(2,bytes,opt)
-}
-
-// IngressClassSpec provides information about the class of an Ingress.
-#IngressClassSpec: {
-	// Controller refers to the name of the controller that should handle this
-	// class. This allows for different "flavors" that are controlled by the
-	// same controller. For example, you may have different Parameters for the
-	// same implementing controller. This should be specified as a
-	// domain-prefixed path no more than 250 characters in length, e.g.
-	// "acme.io/ingress-controller". This field is immutable.
-	controller?: string @go(Controller) @protobuf(1,bytes,opt)
-
-	// Parameters is a link to a custom resource containing additional
-	// configuration for the controller. This is optional if the controller does
-	// not require extra parameters.
-	// +optional
-	parameters?: null | #IngressClassParametersReference @go(Parameters,*IngressClassParametersReference) @protobuf(2,bytes,opt)
-}
-
-// IngressClassParametersReferenceScopeNamespace indicates that the
-// referenced Parameters resource is namespace-scoped.
-#IngressClassParametersReferenceScopeNamespace: "Namespace"
-
-// IngressClassParametersReferenceScopeNamespace indicates that the
-// referenced Parameters resource is cluster-scoped.
-#IngressClassParametersReferenceScopeCluster: "Cluster"
-
-// IngressClassParametersReference identifies an API object. This can be used
-// to specify a cluster or namespace-scoped resource.
-#IngressClassParametersReference: {
-	// APIGroup is the group for the resource being referenced. If APIGroup is
-	// not specified, the specified Kind must be in the core API group. For any
-	// other third-party types, APIGroup is required.
-	// +optional
-	apiGroup?: null | string @go(APIGroup,*string) @protobuf(1,bytes,opt,name=aPIGroup)
-
-	// Kind is the type of resource being referenced.
-	kind: string @go(Kind) @protobuf(2,bytes,opt)
-
-	// Name is the name of resource being referenced.
-	name: string @go(Name) @protobuf(3,bytes,opt)
-
-	// Scope represents if this refers to a cluster or namespace scoped resource.
-	// This may be set to "Cluster" (default) or "Namespace".
-	// +optional
-	scope?: null | string @go(Scope,*string) @protobuf(4,bytes,opt)
-
-	// Namespace is the namespace of the resource being referenced. This field is
-	// required when scope is set to "Namespace" and must be unset when scope is set to
-	// "Cluster".
-	// +optional
-	namespace?: null | string @go(Namespace,*string) @protobuf(5,bytes,opt)
-}
-
-// IngressClassList is a collection of IngressClasses.
-#IngressClassList: {
-	metav1.#TypeMeta
-
-	// Standard list metadata.
-	// +optional
-	metadata?: metav1.#ListMeta @go(ListMeta) @protobuf(1,bytes,opt)
-
-	// Items is the list of IngressClasses.
-	items: [...#IngressClass] @go(Items,[]IngressClass) @protobuf(2,bytes,rep)
-}

cue/cue.mod/gen/k8s.io/api/networking/v1/well_known_annotations_go_gen.cue

@@ -1,11 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/api/networking/v1
-
-package v1
-
-// AnnotationIsDefaultIngressClass can be used to indicate that an
-// IngressClass should be considered default. When a single IngressClass
-// resource has this annotation set to true, new Ingress resources without a
-// class specified will be assigned this default class.
-#AnnotationIsDefaultIngressClass: "ingressclass.kubernetes.io/is-default-class"

cue/cue.mod/gen/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/doc_go_gen.cue

@@ -1,6 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1
-
-// Package v1 is the v1 version of the API.
-package v1

cue/cue.mod/gen/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/register_go_gen.cue

@@ -1,7 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1
-
-package v1
-
-#GroupName: "apiextensions.k8s.io"

cue/cue.mod/gen/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/types_go_gen.cue

@@ -1,513 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1
-
-package v1
-
-import (
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/apimachinery/pkg/types"
-	"k8s.io/apimachinery/pkg/runtime"
-)
-
-// ConversionStrategyType describes different conversion types.
-#ConversionStrategyType: string // #enumConversionStrategyType
-
-#enumConversionStrategyType:
-	#NoneConverter |
-	#WebhookConverter
-
-// KubeAPIApprovedAnnotation is an annotation that must be set to create a CRD for the k8s.io, *.k8s.io, kubernetes.io, or *.kubernetes.io namespaces.
-// The value should be a link to a URL where the current spec was approved, so updates to the spec should also update the URL.
-// If the API is unapproved, you may set the annotation to a string starting with `"unapproved"`.  For instance, `"unapproved, temporarily squatting"` or `"unapproved, experimental-only"`.  This is discouraged.
-#KubeAPIApprovedAnnotation: "api-approved.kubernetes.io"
-
-// NoneConverter is a converter that only sets apiversion of the CR and leave everything else unchanged.
-#NoneConverter: #ConversionStrategyType & "None"
-
-// WebhookConverter is a converter that calls to an external webhook to convert the CR.
-#WebhookConverter: #ConversionStrategyType & "Webhook"
-
-// CustomResourceDefinitionSpec describes how a user wants their resource to appear
-#CustomResourceDefinitionSpec: {
-	// group is the API group of the defined custom resource.
-	// The custom resources are served under `/apis/<group>/...`.
-	// Must match the name of the CustomResourceDefinition (in the form `<names.plural>.<group>`).
-	group: string @go(Group) @protobuf(1,bytes,opt)
-
-	// names specify the resource and kind names for the custom resource.
-	names: #CustomResourceDefinitionNames @go(Names) @protobuf(3,bytes,opt)
-
-	// scope indicates whether the defined custom resource is cluster- or namespace-scoped.
-	// Allowed values are `Cluster` and `Namespaced`.
-	scope: #ResourceScope @go(Scope) @protobuf(4,bytes,opt,casttype=ResourceScope)
-
-	// versions is the list of all API versions of the defined custom resource.
-	// Version names are used to compute the order in which served versions are listed in API discovery.
-	// If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered
-	// lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version),
-	// then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first
-	// by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing
-	// major version, then minor version. An example sorted list of versions:
-	// v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.
-	versions: [...#CustomResourceDefinitionVersion] @go(Versions,[]CustomResourceDefinitionVersion) @protobuf(7,bytes,rep)
-
-	// conversion defines conversion settings for the CRD.
-	// +optional
-	conversion?: null | #CustomResourceConversion @go(Conversion,*CustomResourceConversion) @protobuf(9,bytes,opt)
-
-	// preserveUnknownFields indicates that object fields which are not specified
-	// in the OpenAPI schema should be preserved when persisting to storage.
-	// apiVersion, kind, metadata and known fields inside metadata are always preserved.
-	// This field is deprecated in favor of setting `x-preserve-unknown-fields` to true in `spec.versions[*].schema.openAPIV3Schema`.
-	// See https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#pruning-versus-preserving-unknown-fields for details.
-	// +optional
-	preserveUnknownFields?: bool @go(PreserveUnknownFields) @protobuf(10,varint,opt)
-}
-
-// CustomResourceConversion describes how to convert different versions of a CR.
-#CustomResourceConversion: {
-	// strategy specifies how custom resources are converted between versions. Allowed values are:
-	// - `None`: The converter only change the apiVersion and would not touch any other field in the custom resource.
-	// - `Webhook`: API Server will call to an external webhook to do the conversion. Additional information
-	//   is needed for this option. This requires spec.preserveUnknownFields to be false, and spec.conversion.webhook to be set.
-	strategy: #ConversionStrategyType @go(Strategy) @protobuf(1,bytes)
-
-	// webhook describes how to call the conversion webhook. Required when `strategy` is set to `Webhook`.
-	// +optional
-	webhook?: null | #WebhookConversion @go(Webhook,*WebhookConversion) @protobuf(2,bytes,opt)
-}
-
-// WebhookConversion describes how to call a conversion webhook
-#WebhookConversion: {
-	// clientConfig is the instructions for how to call the webhook if strategy is `Webhook`.
-	// +optional
-	clientConfig?: null | #WebhookClientConfig @go(ClientConfig,*WebhookClientConfig) @protobuf(2,bytes)
-
-	// conversionReviewVersions is an ordered list of preferred `ConversionReview`
-	// versions the Webhook expects. The API server will use the first version in
-	// the list which it supports. If none of the versions specified in this list
-	// are supported by API server, conversion will fail for the custom resource.
-	// If a persisted Webhook configuration specifies allowed versions and does not
-	// include any versions known to the API Server, calls to the webhook will fail.
-	conversionReviewVersions: [...string] @go(ConversionReviewVersions,[]string) @protobuf(3,bytes,rep)
-}
-
-// WebhookClientConfig contains the information to make a TLS connection with the webhook.
-#WebhookClientConfig: {
-	// url gives the location of the webhook, in standard URL form
-	// (`scheme://host:port/path`). Exactly one of `url` or `service`
-	// must be specified.
-	//
-	// The `host` should not refer to a service running in the cluster; use
-	// the `service` field instead. The host might be resolved via external
-	// DNS in some apiservers (e.g., `kube-apiserver` cannot resolve
-	// in-cluster DNS as that would be a layering violation). `host` may
-	// also be an IP address.
-	//
-	// Please note that using `localhost` or `127.0.0.1` as a `host` is
-	// risky unless you take great care to run this webhook on all hosts
-	// which run an apiserver which might need to make calls to this
-	// webhook. Such installs are likely to be non-portable, i.e., not easy
-	// to turn up in a new cluster.
-	//
-	// The scheme must be "https"; the URL must begin with "https://".
-	//
-	// A path is optional, and if present may be any string permissible in
-	// a URL. You may use the path to pass an arbitrary string to the
-	// webhook, for example, a cluster identifier.
-	//
-	// Attempting to use a user or basic auth e.g. "user:password@" is not
-	// allowed. Fragments ("#...") and query parameters ("?...") are not
-	// allowed, either.
-	//
-	// +optional
-	url?: null | string @go(URL,*string) @protobuf(3,bytes,opt)
-
-	// service is a reference to the service for this webhook. Either
-	// service or url must be specified.
-	//
-	// If the webhook is running within the cluster, then you should use `service`.
-	//
-	// +optional
-	service?: null | #ServiceReference @go(Service,*ServiceReference) @protobuf(1,bytes,opt)
-
-	// caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate.
-	// If unspecified, system trust roots on the apiserver are used.
-	// +optional
-	caBundle?: bytes @go(CABundle,[]byte) @protobuf(2,bytes,opt)
-}
-
-// ServiceReference holds a reference to Service.legacy.k8s.io
-#ServiceReference: {
-	// namespace is the namespace of the service.
-	// Required
-	namespace: string @go(Namespace) @protobuf(1,bytes,opt)
-
-	// name is the name of the service.
-	// Required
-	name: string @go(Name) @protobuf(2,bytes,opt)
-
-	// path is an optional URL path at which the webhook will be contacted.
-	// +optional
-	path?: null | string @go(Path,*string) @protobuf(3,bytes,opt)
-
-	// port is an optional service port at which the webhook will be contacted.
-	// `port` should be a valid port number (1-65535, inclusive).
-	// Defaults to 443 for backward compatibility.
-	// +optional
-	port?: null | int32 @go(Port,*int32) @protobuf(4,varint,opt)
-}
-
-// CustomResourceDefinitionVersion describes a version for CRD.
-#CustomResourceDefinitionVersion: {
-	// name is the version name, e.g. “v1”, “v2beta1”, etc.
-	// The custom resources are served under this version at `/apis/<group>/<version>/...` if `served` is true.
-	name: string @go(Name) @protobuf(1,bytes,opt)
-
-	// served is a flag enabling/disabling this version from being served via REST APIs
-	served: bool @go(Served) @protobuf(2,varint,opt)
-
-	// storage indicates this version should be used when persisting custom resources to storage.
-	// There must be exactly one version with storage=true.
-	storage: bool @go(Storage) @protobuf(3,varint,opt)
-
-	// deprecated indicates this version of the custom resource API is deprecated.
-	// When set to true, API requests to this version receive a warning header in the server response.
-	// Defaults to false.
-	// +optional
-	deprecated?: bool @go(Deprecated) @protobuf(7,varint,opt)
-
-	// deprecationWarning overrides the default warning returned to API clients.
-	// May only be set when `deprecated` is true.
-	// The default warning indicates this version is deprecated and recommends use
-	// of the newest served version of equal or greater stability, if one exists.
-	// +optional
-	deprecationWarning?: null | string @go(DeprecationWarning,*string) @protobuf(8,bytes,opt)
-
-	// schema describes the schema used for validation, pruning, and defaulting of this version of the custom resource.
-	// +optional
-	schema?: null | #CustomResourceValidation @go(Schema,*CustomResourceValidation) @protobuf(4,bytes,opt)
-
-	// subresources specify what subresources this version of the defined custom resource have.
-	// +optional
-	subresources?: null | #CustomResourceSubresources @go(Subresources,*CustomResourceSubresources) @protobuf(5,bytes,opt)
-
-	// additionalPrinterColumns specifies additional columns returned in Table output.
-	// See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details.
-	// If no columns are specified, a single column displaying the age of the custom resource is used.
-	// +optional
-	additionalPrinterColumns?: [...#CustomResourceColumnDefinition] @go(AdditionalPrinterColumns,[]CustomResourceColumnDefinition) @protobuf(6,bytes,rep)
-}
-
-// CustomResourceColumnDefinition specifies a column for server side printing.
-#CustomResourceColumnDefinition: {
-	// name is a human readable name for the column.
-	name: string @go(Name) @protobuf(1,bytes,opt)
-
-	// type is an OpenAPI type definition for this column.
-	// See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.
-	type: string @go(Type) @protobuf(2,bytes,opt)
-
-	// format is an optional OpenAPI type definition for this column. The 'name' format is applied
-	// to the primary identifier column to assist in clients identifying column is the resource name.
-	// See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.
-	// +optional
-	format?: string @go(Format) @protobuf(3,bytes,opt)
-
-	// description is a human readable description of this column.
-	// +optional
-	description?: string @go(Description) @protobuf(4,bytes,opt)
-
-	// priority is an integer defining the relative importance of this column compared to others. Lower
-	// numbers are considered higher priority. Columns that may be omitted in limited space scenarios
-	// should be given a priority greater than 0.
-	// +optional
-	priority?: int32 @go(Priority) @protobuf(5,bytes,opt)
-
-	// jsonPath is a simple JSON path (i.e. with array notation) which is evaluated against
-	// each custom resource to produce the value for this column.
-	jsonPath: string @go(JSONPath) @protobuf(6,bytes,opt)
-}
-
-// CustomResourceDefinitionNames indicates the names to serve this CustomResourceDefinition
-#CustomResourceDefinitionNames: {
-	// plural is the plural name of the resource to serve.
-	// The custom resources are served under `/apis/<group>/<version>/.../<plural>`.
-	// Must match the name of the CustomResourceDefinition (in the form `<names.plural>.<group>`).
-	// Must be all lowercase.
-	plural: string @go(Plural) @protobuf(1,bytes,opt)
-
-	// singular is the singular name of the resource. It must be all lowercase. Defaults to lowercased `kind`.
-	// +optional
-	singular?: string @go(Singular) @protobuf(2,bytes,opt)
-
-	// shortNames are short names for the resource, exposed in API discovery documents,
-	// and used by clients to support invocations like `kubectl get <shortname>`.
-	// It must be all lowercase.
-	// +optional
-	shortNames?: [...string] @go(ShortNames,[]string) @protobuf(3,bytes,opt)
-
-	// kind is the serialized kind of the resource. It is normally CamelCase and singular.
-	// Custom resource instances will use this value as the `kind` attribute in API calls.
-	kind: string @go(Kind) @protobuf(4,bytes,opt)
-
-	// listKind is the serialized kind of the list for this resource. Defaults to "`kind`List".
-	// +optional
-	listKind?: string @go(ListKind) @protobuf(5,bytes,opt)
-
-	// categories is a list of grouped resources this custom resource belongs to (e.g. 'all').
-	// This is published in API discovery documents, and used by clients to support invocations like
-	// `kubectl get all`.
-	// +optional
-	categories?: [...string] @go(Categories,[]string) @protobuf(6,bytes,rep)
-}
-
-// ResourceScope is an enum defining the different scopes available to a custom resource
-#ResourceScope: string // #enumResourceScope
-
-#enumResourceScope:
-	#ClusterScoped |
-	#NamespaceScoped
-
-#ClusterScoped:   #ResourceScope & "Cluster"
-#NamespaceScoped: #ResourceScope & "Namespaced"
-
-#ConditionStatus: string // #enumConditionStatus
-
-#enumConditionStatus:
-	#ConditionTrue |
-	#ConditionFalse |
-	#ConditionUnknown
-
-#ConditionTrue:    #ConditionStatus & "True"
-#ConditionFalse:   #ConditionStatus & "False"
-#ConditionUnknown: #ConditionStatus & "Unknown"
-
-// CustomResourceDefinitionConditionType is a valid value for CustomResourceDefinitionCondition.Type
-#CustomResourceDefinitionConditionType: string // #enumCustomResourceDefinitionConditionType
-
-#enumCustomResourceDefinitionConditionType:
-	#Established |
-	#NamesAccepted |
-	#NonStructuralSchema |
-	#Terminating |
-	#KubernetesAPIApprovalPolicyConformant
-
-// Established means that the resource has become active. A resource is established when all names are
-// accepted without a conflict for the first time. A resource stays established until deleted, even during
-// a later NamesAccepted due to changed names. Note that not all names can be changed.
-#Established: #CustomResourceDefinitionConditionType & "Established"
-
-// NamesAccepted means the names chosen for this CustomResourceDefinition do not conflict with others in
-// the group and are therefore accepted.
-#NamesAccepted: #CustomResourceDefinitionConditionType & "NamesAccepted"
-
-// NonStructuralSchema means that one or more OpenAPI schema is not structural.
-//
-// A schema is structural if it specifies types for all values, with the only exceptions of those with
-// - x-kubernetes-int-or-string: true — for fields which can be integer or string
-// - x-kubernetes-preserve-unknown-fields: true — for raw, unspecified JSON values
-// and there is no type, additionalProperties, default, nullable or x-kubernetes-* vendor extenions
-// specified under allOf, anyOf, oneOf or not.
-//
-// Non-structural schemas will not be allowed anymore in v1 API groups. Moreover, new features will not be
-// available for non-structural CRDs:
-// - pruning
-// - defaulting
-// - read-only
-// - OpenAPI publishing
-// - webhook conversion
-#NonStructuralSchema: #CustomResourceDefinitionConditionType & "NonStructuralSchema"
-
-// Terminating means that the CustomResourceDefinition has been deleted and is cleaning up.
-#Terminating: #CustomResourceDefinitionConditionType & "Terminating"
-
-// KubernetesAPIApprovalPolicyConformant indicates that an API in *.k8s.io or *.kubernetes.io is or is not approved.  For CRDs
-// outside those groups, this condition will not be set.  For CRDs inside those groups, the condition will
-// be true if .metadata.annotations["api-approved.kubernetes.io"] is set to a URL, otherwise it will be false.
-// See https://github.com/kubernetes/enhancements/pull/1111 for more details.
-#KubernetesAPIApprovalPolicyConformant: #CustomResourceDefinitionConditionType & "KubernetesAPIApprovalPolicyConformant"
-
-// CustomResourceDefinitionCondition contains details for the current condition of this pod.
-#CustomResourceDefinitionCondition: {
-	// type is the type of the condition. Types include Established, NamesAccepted and Terminating.
-	type: #CustomResourceDefinitionConditionType @go(Type) @protobuf(1,bytes,opt,casttype=CustomResourceDefinitionConditionType)
-
-	// status is the status of the condition.
-	// Can be True, False, Unknown.
-	status: #ConditionStatus @go(Status) @protobuf(2,bytes,opt,casttype=ConditionStatus)
-
-	// lastTransitionTime last time the condition transitioned from one status to another.
-	// +optional
-	lastTransitionTime?: metav1.#Time @go(LastTransitionTime) @protobuf(3,bytes,opt)
-
-	// reason is a unique, one-word, CamelCase reason for the condition's last transition.
-	// +optional
-	reason?: string @go(Reason) @protobuf(4,bytes,opt)
-
-	// message is a human-readable message indicating details about last transition.
-	// +optional
-	message?: string @go(Message) @protobuf(5,bytes,opt)
-}
-
-// CustomResourceDefinitionStatus indicates the state of the CustomResourceDefinition
-#CustomResourceDefinitionStatus: {
-	// conditions indicate state for particular aspects of a CustomResourceDefinition
-	// +optional
-	// +listType=map
-	// +listMapKey=type
-	conditions: [...#CustomResourceDefinitionCondition] @go(Conditions,[]CustomResourceDefinitionCondition) @protobuf(1,bytes,opt)
-
-	// acceptedNames are the names that are actually being used to serve discovery.
-	// They may be different than the names in spec.
-	// +optional
-	acceptedNames: #CustomResourceDefinitionNames @go(AcceptedNames) @protobuf(2,bytes,opt)
-
-	// storedVersions lists all versions of CustomResources that were ever persisted. Tracking these
-	// versions allows a migration path for stored versions in etcd. The field is mutable
-	// so a migration controller can finish a migration to another version (ensuring
-	// no old objects are left in storage), and then remove the rest of the
-	// versions from this list.
-	// Versions may not be removed from `spec.versions` while they exist in this list.
-	// +optional
-	storedVersions: [...string] @go(StoredVersions,[]string) @protobuf(3,bytes,rep)
-}
-
-#CustomResourceCleanupFinalizer: "customresourcecleanup.apiextensions.k8s.io"
-
-// CustomResourceDefinition represents a resource that should be exposed on the API server.  Its name MUST be in the format
-// <.spec.name>.<.spec.group>.
-#CustomResourceDefinition: {
-	metav1.#TypeMeta
-
-	// Standard object's metadata
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ObjectMeta @go(ObjectMeta) @protobuf(1,bytes,opt)
-
-	// spec describes how the user wants the resources to appear
-	spec: #CustomResourceDefinitionSpec @go(Spec) @protobuf(2,bytes,opt)
-
-	// status indicates the actual state of the CustomResourceDefinition
-	// +optional
-	status?: #CustomResourceDefinitionStatus @go(Status) @protobuf(3,bytes,opt)
-}
-
-// CustomResourceDefinitionList is a list of CustomResourceDefinition objects.
-#CustomResourceDefinitionList: {
-	metav1.#TypeMeta
-
-	// Standard object's metadata
-	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-	// +optional
-	metadata?: metav1.#ListMeta @go(ListMeta) @protobuf(1,bytes,opt)
-
-	// items list individual CustomResourceDefinition objects
-	items: [...#CustomResourceDefinition] @go(Items,[]CustomResourceDefinition) @protobuf(2,bytes,rep)
-}
-
-// CustomResourceValidation is a list of validation methods for CustomResources.
-#CustomResourceValidation: {
-	// openAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning.
-	// +optional
-	openAPIV3Schema?: null | #JSONSchemaProps @go(OpenAPIV3Schema,*JSONSchemaProps) @protobuf(1,bytes,opt)
-}
-
-// CustomResourceSubresources defines the status and scale subresources for CustomResources.
-#CustomResourceSubresources: {
-	// status indicates the custom resource should serve a `/status` subresource.
-	// When enabled:
-	// 1. requests to the custom resource primary endpoint ignore changes to the `status` stanza of the object.
-	// 2. requests to the custom resource `/status` subresource ignore changes to anything other than the `status` stanza of the object.
-	// +optional
-	status?: null | #CustomResourceSubresourceStatus @go(Status,*CustomResourceSubresourceStatus) @protobuf(1,bytes,opt)
-
-	// scale indicates the custom resource should serve a `/scale` subresource that returns an `autoscaling/v1` Scale object.
-	// +optional
-	scale?: null | #CustomResourceSubresourceScale @go(Scale,*CustomResourceSubresourceScale) @protobuf(2,bytes,opt)
-}
-
-// CustomResourceSubresourceStatus defines how to serve the status subresource for CustomResources.
-// Status is represented by the `.status` JSON path inside of a CustomResource. When set,
-// * exposes a /status subresource for the custom resource
-// * PUT requests to the /status subresource take a custom resource object, and ignore changes to anything except the status stanza
-// * PUT/POST/PATCH requests to the custom resource ignore changes to the status stanza
-#CustomResourceSubresourceStatus: {
-}
-
-// CustomResourceSubresourceScale defines how to serve the scale subresource for CustomResources.
-#CustomResourceSubresourceScale: {
-	// specReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`.
-	// Only JSON paths without the array notation are allowed.
-	// Must be a JSON Path under `.spec`.
-	// If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET.
-	specReplicasPath: string @go(SpecReplicasPath) @protobuf(1,bytes)
-
-	// statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`.
-	// Only JSON paths without the array notation are allowed.
-	// Must be a JSON Path under `.status`.
-	// If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource
-	// will default to 0.
-	statusReplicasPath: string @go(StatusReplicasPath) @protobuf(2,bytes,opt)
-
-	// labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`.
-	// Only JSON paths without the array notation are allowed.
-	// Must be a JSON Path under `.status` or `.spec`.
-	// Must be set to work with HorizontalPodAutoscaler.
-	// The field pointed by this JSON path must be a string field (not a complex selector struct)
-	// which contains a serialized label selector in string form.
-	// More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource
-	// If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale`
-	// subresource will default to the empty string.
-	// +optional
-	labelSelectorPath?: null | string @go(LabelSelectorPath,*string) @protobuf(3,bytes,opt)
-}
-
-// ConversionReview describes a conversion request/response.
-#ConversionReview: {
-	metav1.#TypeMeta
-
-	// request describes the attributes for the conversion request.
-	// +optional
-	request?: null | #ConversionRequest @go(Request,*ConversionRequest) @protobuf(1,bytes,opt)
-
-	// response describes the attributes for the conversion response.
-	// +optional
-	response?: null | #ConversionResponse @go(Response,*ConversionResponse) @protobuf(2,bytes,opt)
-}
-
-// ConversionRequest describes the conversion request parameters.
-#ConversionRequest: {
-	// uid is an identifier for the individual request/response. It allows distinguishing instances of requests which are
-	// otherwise identical (parallel requests, etc).
-	// The UID is meant to track the round trip (request/response) between the Kubernetes API server and the webhook, not the user request.
-	// It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging.
-	uid: types.#UID @go(UID) @protobuf(1,bytes)
-
-	// desiredAPIVersion is the version to convert given objects to. e.g. "myapi.example.com/v1"
-	desiredAPIVersion: string @go(DesiredAPIVersion) @protobuf(2,bytes)
-
-	// objects is the list of custom resource objects to be converted.
-	objects: [...runtime.#RawExtension] @go(Objects,[]runtime.RawExtension) @protobuf(3,bytes,rep)
-}
-
-// ConversionResponse describes a conversion response.
-#ConversionResponse: {
-	// uid is an identifier for the individual request/response.
-	// This should be copied over from the corresponding `request.uid`.
-	uid: types.#UID @go(UID) @protobuf(1,bytes)
-
-	// convertedObjects is the list of converted version of `request.objects` if the `result` is successful, otherwise empty.
-	// The webhook is expected to set `apiVersion` of these objects to the `request.desiredAPIVersion`. The list
-	// must also have the same size as the input list with the same objects in the same order (equal kind, metadata.uid, metadata.name and metadata.namespace).
-	// The webhook is allowed to mutate labels and annotations. Any other change to the metadata is silently ignored.
-	convertedObjects: [...runtime.#RawExtension] @go(ConvertedObjects,[]runtime.RawExtension) @protobuf(2,bytes,rep)
-
-	// result contains the result of conversion with extra details if the conversion failed. `result.status` determines if
-	// the conversion failed or succeeded. The `result.status` field is required and represents the success or failure of the
-	// conversion. A successful conversion must set `result.status` to `Success`. A failed conversion must set
-	// `result.status` to `Failure` and provide more details in `result.message` and return http status 200. The `result.message`
-	// will be used to construct an error message for the end user.
-	result: metav1.#Status @go(Result) @protobuf(3,bytes)
-}

cue/cue.mod/gen/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/types_jsonschema_go_gen.cue

@@ -1,257 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1
-
-package v1
-
-// JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema.org/).
-#JSONSchemaProps: {
-	id?:          string         @go(ID) @protobuf(1,bytes,opt)
-	$schema?:     #JSONSchemaURL @go(Schema) @protobuf(2,bytes,opt,name=schema)
-	$ref?:        null | string  @go(Ref,*string) @protobuf(3,bytes,opt,name=ref)
-	description?: string         @go(Description) @protobuf(4,bytes,opt)
-	type?:        string         @go(Type) @protobuf(5,bytes,opt)
-
-	// format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:
-	//
-	// - bsonobjectid: a bson object ID, i.e. a 24 characters hex string
-	// - uri: an URI as parsed by Golang net/url.ParseRequestURI
-	// - email: an email address as parsed by Golang net/mail.ParseAddress
-	// - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034].
-	// - ipv4: an IPv4 IP as parsed by Golang net.ParseIP
-	// - ipv6: an IPv6 IP as parsed by Golang net.ParseIP
-	// - cidr: a CIDR as parsed by Golang net.ParseCIDR
-	// - mac: a MAC address as parsed by Golang net.ParseMAC
-	// - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$
-	// - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$
-	// - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$
-	// - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$
-	// - isbn: an ISBN10 or ISBN13 number string like "0321751043" or "978-0321751041"
-	// - isbn10: an ISBN10 number string like "0321751043"
-	// - isbn13: an ISBN13 number string like "978-0321751041"
-	// - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35\\d{3})\\d{11})$ with any non digit characters mixed in
-	// - ssn: a U.S. social security number following the regex ^\\d{3}[- ]?\\d{2}[- ]?\\d{4}$
-	// - hexcolor: an hexadecimal color code like "#FFFFFF: following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$
-	// - rgbcolor: an RGB color code like rgb like "rgb(255,255,2559"
-	// - byte: base64 encoded binary data
-	// - password: any kind of string
-	// - date: a date string like "2006-01-02" as defined by full-date in RFC3339
-	// - duration: a duration string like "22 ns" as parsed by Golang time.ParseDuration or compatible with Scala duration format
-	// - datetime: a date time string like "2014-12-15T19:30:20.000Z" as defined by date-time in RFC3339.
-	format?: string @go(Format) @protobuf(6,bytes,opt)
-	title?:  string @go(Title) @protobuf(7,bytes,opt)
-
-	// default is a default value for undefined object fields.
-	// Defaulting is a beta feature under the CustomResourceDefaulting feature gate.
-	// Defaulting requires spec.preserveUnknownFields to be false.
-	default?:          null | #JSON   @go(Default,*JSON) @protobuf(8,bytes,opt)
-	maximum?:          null | float64 @go(Maximum,*float64) @protobuf(9,bytes,opt)
-	exclusiveMaximum?: bool           @go(ExclusiveMaximum) @protobuf(10,bytes,opt)
-	minimum?:          null | float64 @go(Minimum,*float64) @protobuf(11,bytes,opt)
-	exclusiveMinimum?: bool           @go(ExclusiveMinimum) @protobuf(12,bytes,opt)
-	maxLength?:        null | int64   @go(MaxLength,*int64) @protobuf(13,bytes,opt)
-	minLength?:        null | int64   @go(MinLength,*int64) @protobuf(14,bytes,opt)
-	pattern?:          string         @go(Pattern) @protobuf(15,bytes,opt)
-	maxItems?:         null | int64   @go(MaxItems,*int64) @protobuf(16,bytes,opt)
-	minItems?:         null | int64   @go(MinItems,*int64) @protobuf(17,bytes,opt)
-	uniqueItems?:      bool           @go(UniqueItems) @protobuf(18,bytes,opt)
-	multipleOf?:       null | float64 @go(MultipleOf,*float64) @protobuf(19,bytes,opt)
-	enum?: [...#JSON] @go(Enum,[]JSON) @protobuf(20,bytes,rep)
-	maxProperties?: null | int64 @go(MaxProperties,*int64) @protobuf(21,bytes,opt)
-	minProperties?: null | int64 @go(MinProperties,*int64) @protobuf(22,bytes,opt)
-	required?: [...string] @go(Required,[]string) @protobuf(23,bytes,rep)
-	items?: null | #JSONSchemaPropsOrArray @go(Items,*JSONSchemaPropsOrArray) @protobuf(24,bytes,opt)
-	allOf?: [...#JSONSchemaProps] @go(AllOf,[]JSONSchemaProps) @protobuf(25,bytes,rep)
-	oneOf?: [...#JSONSchemaProps] @go(OneOf,[]JSONSchemaProps) @protobuf(26,bytes,rep)
-	anyOf?: [...#JSONSchemaProps] @go(AnyOf,[]JSONSchemaProps) @protobuf(27,bytes,rep)
-	not?: null | #JSONSchemaProps @go(Not,*JSONSchemaProps) @protobuf(28,bytes,opt)
-	properties?: {[string]: #JSONSchemaProps} @go(Properties,map[string]JSONSchemaProps) @protobuf(29,bytes,rep)
-	additionalProperties?: null | #JSONSchemaPropsOrBool @go(AdditionalProperties,*JSONSchemaPropsOrBool) @protobuf(30,bytes,opt)
-	patternProperties?: {[string]: #JSONSchemaProps} @go(PatternProperties,map[string]JSONSchemaProps) @protobuf(31,bytes,rep)
-	dependencies?:    #JSONSchemaDependencies       @go(Dependencies) @protobuf(32,bytes,opt)
-	additionalItems?: null | #JSONSchemaPropsOrBool @go(AdditionalItems,*JSONSchemaPropsOrBool) @protobuf(33,bytes,opt)
-	definitions?:     #JSONSchemaDefinitions        @go(Definitions) @protobuf(34,bytes,opt)
-	externalDocs?:    null | #ExternalDocumentation @go(ExternalDocs,*ExternalDocumentation) @protobuf(35,bytes,opt)
-	example?:         null | #JSON                  @go(Example,*JSON) @protobuf(36,bytes,opt)
-	nullable?:        bool                          @go(Nullable) @protobuf(37,bytes,opt)
-
-	// x-kubernetes-preserve-unknown-fields stops the API server
-	// decoding step from pruning fields which are not specified
-	// in the validation schema. This affects fields recursively,
-	// but switches back to normal pruning behaviour if nested
-	// properties or additionalProperties are specified in the schema.
-	// This can either be true or undefined. False is forbidden.
-	"x-kubernetes-preserve-unknown-fields"?: null | bool @go(XPreserveUnknownFields,*bool) @protobuf(38,bytes,opt,name=xKubernetesPreserveUnknownFields)
-
-	// x-kubernetes-embedded-resource defines that the value is an
-	// embedded Kubernetes runtime.Object, with TypeMeta and
-	// ObjectMeta. The type must be object. It is allowed to further
-	// restrict the embedded object. kind, apiVersion and metadata
-	// are validated automatically. x-kubernetes-preserve-unknown-fields
-	// is allowed to be true, but does not have to be if the object
-	// is fully specified (up to kind, apiVersion, metadata).
-	"x-kubernetes-embedded-resource"?: bool @go(XEmbeddedResource) @protobuf(39,bytes,opt,name=xKubernetesEmbeddedResource)
-
-	// x-kubernetes-int-or-string specifies that this value is
-	// either an integer or a string. If this is true, an empty
-	// type is allowed and type as child of anyOf is permitted
-	// if following one of the following patterns:
-	//
-	// 1) anyOf:
-	//    - type: integer
-	//    - type: string
-	// 2) allOf:
-	//    - anyOf:
-	//      - type: integer
-	//      - type: string
-	//    - ... zero or more
-	"x-kubernetes-int-or-string"?: bool @go(XIntOrString) @protobuf(40,bytes,opt,name=xKubernetesIntOrString)
-
-	// x-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used
-	// as the index of the map.
-	//
-	// This tag MUST only be used on lists that have the "x-kubernetes-list-type"
-	// extension set to "map". Also, the values specified for this attribute must
-	// be a scalar typed field of the child structure (no nesting is supported).
-	//
-	// The properties specified must either be required or have a default value,
-	// to ensure those properties are present for all list items.
-	//
-	// +optional
-	"x-kubernetes-list-map-keys"?: [...string] @go(XListMapKeys,[]string) @protobuf(41,bytes,rep,name=xKubernetesListMapKeys)
-
-	// x-kubernetes-list-type annotates an array to further describe its topology.
-	// This extension must only be used on lists and may have 3 possible values:
-	//
-	// 1) `atomic`: the list is treated as a single entity, like a scalar.
-	//      Atomic lists will be entirely replaced when updated. This extension
-	//      may be used on any type of list (struct, scalar, ...).
-	// 2) `set`:
-	//      Sets are lists that must not have multiple items with the same value. Each
-	//      value must be a scalar, an object with x-kubernetes-map-type `atomic` or an
-	//      array with x-kubernetes-list-type `atomic`.
-	// 3) `map`:
-	//      These lists are like maps in that their elements have a non-index key
-	//      used to identify them. Order is preserved upon merge. The map tag
-	//      must only be used on a list with elements of type object.
-	// Defaults to atomic for arrays.
-	// +optional
-	"x-kubernetes-list-type"?: null | string @go(XListType,*string) @protobuf(42,bytes,opt,name=xKubernetesListType)
-
-	// x-kubernetes-map-type annotates an object to further describe its topology.
-	// This extension must only be used when type is object and may have 2 possible values:
-	//
-	// 1) `granular`:
-	//      These maps are actual maps (key-value pairs) and each fields are independent
-	//      from each other (they can each be manipulated by separate actors). This is
-	//      the default behaviour for all maps.
-	// 2) `atomic`: the list is treated as a single entity, like a scalar.
-	//      Atomic maps will be entirely replaced when updated.
-	// +optional
-	"x-kubernetes-map-type"?: null | string @go(XMapType,*string) @protobuf(43,bytes,opt,name=xKubernetesMapType)
-
-	// x-kubernetes-validations describes a list of validation rules written in the CEL expression language.
-	// This field is an alpha-level. Using this field requires the feature gate `CustomResourceValidationExpressions` to be enabled.
-	// +patchMergeKey=rule
-	// +patchStrategy=merge
-	// +listType=map
-	// +listMapKey=rule
-	"x-kubernetes-validations"?: #ValidationRules @go(XValidations) @protobuf(44,bytes,rep,name=xKubernetesValidations)
-}
-
-// ValidationRules describes a list of validation rules written in the CEL expression language.
-#ValidationRules: [...#ValidationRule]
-
-// ValidationRule describes a validation rule written in the CEL expression language.
-#ValidationRule: {
-	// Rule represents the expression which will be evaluated by CEL.
-	// ref: https://github.com/google/cel-spec
-	// The Rule is scoped to the location of the x-kubernetes-validations extension in the schema.
-	// The `self` variable in the CEL expression is bound to the scoped value.
-	// Example:
-	// - Rule scoped to the root of a resource with a status subresource: {"rule": "self.status.actual <= self.spec.maxDesired"}
-	//
-	// If the Rule is scoped to an object with properties, the accessible properties of the object are field selectable
-	// via `self.field` and field presence can be checked via `has(self.field)`. Null valued fields are treated as
-	// absent fields in CEL expressions.
-	// If the Rule is scoped to an object with additionalProperties (i.e. a map) the value of the map
-	// are accessible via `self[mapKey]`, map containment can be checked via `mapKey in self` and all entries of the map
-	// are accessible via CEL macros and functions such as `self.all(...)`.
-	// If the Rule is scoped to an array, the elements of the array are accessible via `self[i]` and also by macros and
-	// functions.
-	// If the Rule is scoped to a scalar, `self` is bound to the scalar value.
-	// Examples:
-	// - Rule scoped to a map of objects: {"rule": "self.components['Widget'].priority < 10"}
-	// - Rule scoped to a list of integers: {"rule": "self.values.all(value, value >= 0 && value < 100)"}
-	// - Rule scoped to a string value: {"rule": "self.startsWith('kube')"}
-	//
-	// The `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are always accessible from the root of the
-	// object and from any x-kubernetes-embedded-resource annotated objects. No other metadata properties are accessible.
-	//
-	// Unknown data preserved in custom resources via x-kubernetes-preserve-unknown-fields is not accessible in CEL
-	// expressions. This includes:
-	// - Unknown field values that are preserved by object schemas with x-kubernetes-preserve-unknown-fields.
-	// - Object properties where the property schema is of an "unknown type". An "unknown type" is recursively defined as:
-	//   - A schema with no type and x-kubernetes-preserve-unknown-fields set to true
-	//   - An array where the items schema is of an "unknown type"
-	//   - An object where the additionalProperties schema is of an "unknown type"
-	//
-	// Only property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible.
-	// Accessible property names are escaped according to the following rules when accessed in the expression:
-	// - '__' escapes to '__underscores__'
-	// - '.' escapes to '__dot__'
-	// - '-' escapes to '__dash__'
-	// - '/' escapes to '__slash__'
-	// - Property names that exactly match a CEL RESERVED keyword escape to '__{keyword}__'. The keywords are:
-	//   "true", "false", "null", "in", "as", "break", "const", "continue", "else", "for", "function", "if",
-	//   "import", "let", "loop", "package", "namespace", "return".
-	// Examples:
-	//   - Rule accessing a property named "namespace": {"rule": "self.__namespace__ > 0"}
-	//   - Rule accessing a property named "x-prop": {"rule": "self.x__dash__prop > 0"}
-	//   - Rule accessing a property named "redact__d": {"rule": "self.redact__underscores__d > 0"}
-	//
-	// Equality on arrays with x-kubernetes-list-type of 'set' or 'map' ignores element order, i.e. [1, 2] == [2, 1].
-	// Concatenation on arrays with x-kubernetes-list-type use the semantics of the list type:
-	//   - 'set': `X + Y` performs a union where the array positions of all elements in `X` are preserved and
-	//     non-intersecting elements in `Y` are appended, retaining their partial order.
-	//   - 'map': `X + Y` performs a merge where the array positions of all keys in `X` are preserved but the values
-	//     are overwritten by values in `Y` when the key sets of `X` and `Y` intersect. Elements in `Y` with
-	//     non-intersecting keys are appended, retaining their partial order.
-	rule: string @go(Rule) @protobuf(1,bytes,opt)
-
-	// Message represents the message displayed when validation fails. The message is required if the Rule contains
-	// line breaks. The message must not contain line breaks.
-	// If unset, the message is "failed rule: {Rule}".
-	// e.g. "must be a URL with the host matching spec.host"
-	message?: string @go(Message) @protobuf(2,bytes,opt)
-}
-
-// JSON represents any valid JSON value.
-// These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
-#JSON: _
-
-// JSONSchemaURL represents a schema url.
-#JSONSchemaURL: string
-
-// JSONSchemaPropsOrArray represents a value that can either be a JSONSchemaProps
-// or an array of JSONSchemaProps. Mainly here for serialization purposes.
-#JSONSchemaPropsOrArray: _
-
-// JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value.
-// Defaults to true for the boolean property.
-#JSONSchemaPropsOrBool: _
-
-// JSONSchemaDependencies represent a dependencies property.
-#JSONSchemaDependencies: {[string]: #JSONSchemaPropsOrStringArray}
-
-// JSONSchemaPropsOrStringArray represents a JSONSchemaProps or a string array.
-#JSONSchemaPropsOrStringArray: _
-
-// JSONSchemaDefinitions contains the models explicitly defined in this spec.
-#JSONSchemaDefinitions: {[string]: #JSONSchemaProps}
-
-// ExternalDocumentation allows referencing an external resource for extended documentation.
-#ExternalDocumentation: {
-	description?: string @go(Description) @protobuf(1,bytes,opt)
-	url?:         string @go(URL) @protobuf(2,bytes,opt)
-}

cue/cue.mod/gen/k8s.io/apimachinery/pkg/api/resource/amount_go_gen.cue

@@ -1,47 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/api/resource
-
-package resource
-
-// Scale is used for getting and setting the base-10 scaled value.
-// Base-2 scales are omitted for mathematical simplicity.
-// See Quantity.ScaledValue for more details.
-#Scale: int32 // #enumScale
-
-#enumScale:
-	#Nano |
-	#Micro |
-	#Milli |
-	#Kilo |
-	#Mega |
-	#Giga |
-	#Tera |
-	#Peta |
-	#Exa
-
-#values_Scale: {
-	Nano:  #Nano
-	Micro: #Micro
-	Milli: #Milli
-	Kilo:  #Kilo
-	Mega:  #Mega
-	Giga:  #Giga
-	Tera:  #Tera
-	Peta:  #Peta
-	Exa:   #Exa
-}
-
-#Nano:  #Scale & -9
-#Micro: #Scale & -6
-#Milli: #Scale & -3
-#Kilo:  #Scale & 3
-#Mega:  #Scale & 6
-#Giga:  #Scale & 9
-#Tera:  #Scale & 12
-#Peta:  #Scale & 15
-#Exa:   #Scale & 18
-
-// infDecAmount implements common operations over an inf.Dec that are specific to the quantity
-// representation.
-_#infDecAmount: string

cue/cue.mod/gen/k8s.io/apimachinery/pkg/api/resource/math_go_gen.cue

@@ -1,13 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/api/resource
-
-package resource
-
-// maxInt64Factors is the highest value that will be checked when removing factors of 10 from an int64.
-// It is also the maximum decimal digits that can be represented with an int64.
-_#maxInt64Factors: 18
-
-_#mostNegative: -9223372036854775808
-
-_#mostPositive: 9223372036854775807

cue/cue.mod/gen/k8s.io/apimachinery/pkg/api/resource/quantity_go_gen.cue

@@ -1,96 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/api/resource
-
-package resource
-
-// Quantity is a fixed-point representation of a number.
-// It provides convenient marshaling/unmarshaling in JSON and YAML,
-// in addition to String() and AsInt64() accessors.
-//
-// The serialization format is:
-//
-// <quantity>        ::= <signedNumber><suffix>
-//   (Note that <suffix> may be empty, from the "" case in <decimalSI>.)
-// <digit>           ::= 0 | 1 | ... | 9
-// <digits>          ::= <digit> | <digit><digits>
-// <number>          ::= <digits> | <digits>.<digits> | <digits>. | .<digits>
-// <sign>            ::= "+" | "-"
-// <signedNumber>    ::= <number> | <sign><number>
-// <suffix>          ::= <binarySI> | <decimalExponent> | <decimalSI>
-// <binarySI>        ::= Ki | Mi | Gi | Ti | Pi | Ei
-//   (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)
-// <decimalSI>       ::= m | "" | k | M | G | T | P | E
-//   (Note that 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)
-// <decimalExponent> ::= "e" <signedNumber> | "E" <signedNumber>
-//
-// No matter which of the three exponent forms is used, no quantity may represent
-// a number greater than 2^63-1 in magnitude, nor may it have more than 3 decimal
-// places. Numbers larger or more precise will be capped or rounded up.
-// (E.g.: 0.1m will rounded up to 1m.)
-// This may be extended in the future if we require larger or smaller quantities.
-//
-// When a Quantity is parsed from a string, it will remember the type of suffix
-// it had, and will use the same type again when it is serialized.
-//
-// Before serializing, Quantity will be put in "canonical form".
-// This means that Exponent/suffix will be adjusted up or down (with a
-// corresponding increase or decrease in Mantissa) such that:
-//   a. No precision is lost
-//   b. No fractional digits will be emitted
-//   c. The exponent (or suffix) is as large as possible.
-// The sign will be omitted unless the number is negative.
-//
-// Examples:
-//   1.5 will be serialized as "1500m"
-//   1.5Gi will be serialized as "1536Mi"
-//
-// Note that the quantity will NEVER be internally represented by a
-// floating point number. That is the whole point of this exercise.
-//
-// Non-canonical values will still parse as long as they are well formed,
-// but will be re-emitted in their canonical form. (So always use canonical
-// form, or don't diff.)
-//
-// This format is intended to make it difficult to use these numbers without
-// writing some sort of special handling code in the hopes that that will
-// cause implementors to also use a fixed point implementation.
-//
-// +protobuf=true
-// +protobuf.embed=string
-// +protobuf.options.marshal=false
-// +protobuf.options.(gogoproto.goproto_stringer)=false
-// +k8s:deepcopy-gen=true
-// +k8s:openapi-gen=true
-#Quantity: _
-
-// CanonicalValue allows a quantity amount to be converted to a string.
-#CanonicalValue: _
-
-// Format lists the three possible formattings of a quantity.
-#Format: string // #enumFormat
-
-#enumFormat:
-	#DecimalExponent |
-	#BinarySI |
-	#DecimalSI
-
-#DecimalExponent: #Format & "DecimalExponent"
-#BinarySI:        #Format & "BinarySI"
-#DecimalSI:       #Format & "DecimalSI"
-
-// splitREString is used to separate a number from its suffix; as such,
-// this is overly permissive, but that's OK-- it will be checked later.
-_#splitREString: "^([+-]?[0-9.]+)([eEinumkKMGTP]*[-+]?[0-9]*)$"
-
-_#int64QuantityExpectedBytes: 18
-
-// QuantityValue makes it possible to use a Quantity as value for a command
-// line parameter.
-//
-// +protobuf=true
-// +protobuf.embed=string
-// +protobuf.options.marshal=false
-// +protobuf.options.(gogoproto.goproto_stringer)=false
-// +k8s:deepcopy-gen=true
-#QuantityValue: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/api/resource/suffix_go_gen.cue

@@ -1,10 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/api/resource
-
-package resource
-
-_#suffix: string
-
-// suffixer can interpret and construct suffixes.
-_#suffixer: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/duration_go_gen.cue

@@ -1,10 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/apis/meta/v1
-
-package v1
-
-// Duration is a wrapper around time.Duration which supports correct
-// marshaling to YAML and JSON. In particular, it marshals into strings, which
-// can be used as map keys in json.
-#Duration: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/group_version_go_gen.cue

@@ -1,48 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/apis/meta/v1
-
-package v1
-
-// GroupResource specifies a Group and a Resource, but does not force a version.  This is useful for identifying
-// concepts during lookup stages without having partially valid types
-//
-// +protobuf.options.(gogoproto.goproto_stringer)=false
-#GroupResource: {
-	group:    string @go(Group) @protobuf(1,bytes,opt)
-	resource: string @go(Resource) @protobuf(2,bytes,opt)
-}
-
-// GroupVersionResource unambiguously identifies a resource.  It doesn't anonymously include GroupVersion
-// to avoid automatic coercion.  It doesn't use a GroupVersion to avoid custom marshalling
-//
-// +protobuf.options.(gogoproto.goproto_stringer)=false
-#GroupVersionResource: {
-	group:    string @go(Group) @protobuf(1,bytes,opt)
-	version:  string @go(Version) @protobuf(2,bytes,opt)
-	resource: string @go(Resource) @protobuf(3,bytes,opt)
-}
-
-// GroupKind specifies a Group and a Kind, but does not force a version.  This is useful for identifying
-// concepts during lookup stages without having partially valid types
-//
-// +protobuf.options.(gogoproto.goproto_stringer)=false
-#GroupKind: {
-	group: string @go(Group) @protobuf(1,bytes,opt)
-	kind:  string @go(Kind) @protobuf(2,bytes,opt)
-}
-
-// GroupVersionKind unambiguously identifies a kind.  It doesn't anonymously include GroupVersion
-// to avoid automatic coercion.  It doesn't use a GroupVersion to avoid custom marshalling
-//
-// +protobuf.options.(gogoproto.goproto_stringer)=false
-#GroupVersionKind: {
-	group:   string @go(Group) @protobuf(1,bytes,opt)
-	version: string @go(Version) @protobuf(2,bytes,opt)
-	kind:    string @go(Kind) @protobuf(3,bytes,opt)
-}
-
-// GroupVersion contains the "group" and the "version", which uniquely identifies the API.
-//
-// +protobuf.options.(gogoproto.goproto_stringer)=false
-#GroupVersion: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/meta_go_gen.cue

@@ -1,33 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/apis/meta/v1
-
-package v1
-
-// TODO: move this, Object, List, and Type to a different package
-#ObjectMetaAccessor: _
-
-// Object lets you work with object metadata from any of the versioned or
-// internal API objects. Attempting to set or retrieve a field on an object that does
-// not support that field (Name, UID, Namespace on lists) will be a no-op and return
-// a default value.
-#Object: _
-
-// ListMetaAccessor retrieves the list interface from an object
-#ListMetaAccessor: _
-
-// Common lets you work with core metadata from any of the versioned or
-// internal API objects. Attempting to set or retrieve a field on an object that does
-// not support that field will be a no-op and return a default value.
-// TODO: move this, and TypeMeta and ListMeta, to a different package
-#Common: _
-
-// ListInterface lets you work with list metadata from any of the versioned or
-// internal API objects. Attempting to set or retrieve a field on an object that does
-// not support that field will be a no-op and return a default value.
-// TODO: move this, and TypeMeta and ListMeta, to a different package
-#ListInterface: _
-
-// Type exposes the type and APIVersion of versioned or internal API objects.
-// TODO: move this, and TypeMeta and ListMeta, to a different package
-#Type: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/micro_time_go_gen.cue

@@ -1,14 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/apis/meta/v1
-
-package v1
-
-#RFC3339Micro: "2006-01-02T15:04:05.000000Z07:00"
-
-// MicroTime is version of Time with microsecond level precision.
-//
-// +protobuf.options.marshal=false
-// +protobuf.as=Timestamp
-// +protobuf.options.(gogoproto.goproto_stringer)=false
-#MicroTime: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/register_go_gen.cue

@@ -1,9 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/apis/meta/v1
-
-package v1
-
-#GroupName: "meta.k8s.io"
-
-#WatchEventKind: "WatchEvent"

cue/cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/time_go_gen.cue

@@ -1,14 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/apis/meta/v1
-
-package v1
-
-// Time is a wrapper around time.Time which supports correct
-// marshaling to YAML and JSON.  Wrappers are provided for many
-// of the factory methods that the time package offers.
-//
-// +protobuf.options.marshal=false
-// +protobuf.as=Timestamp
-// +protobuf.options.(gogoproto.goproto_stringer)=false
-#Time: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/time_proto_go_gen.cue

@@ -1,21 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/apis/meta/v1
-
-package v1
-
-// Timestamp is a struct that is equivalent to Time, but intended for
-// protobuf marshalling/unmarshalling. It is generated into a serialization
-// that matches Time. Do not use in Go structs.
-#Timestamp: {
-	// Represents seconds of UTC time since Unix epoch
-	// 1970-01-01T00:00:00Z. Must be from 0001-01-01T00:00:00Z to
-	// 9999-12-31T23:59:59Z inclusive.
-	seconds: int64 @go(Seconds) @protobuf(1,varint,opt)
-
-	// Non-negative fractions of a second at nanosecond resolution. Negative
-	// second values with fractions must still have non-negative nanos values
-	// that count forward in time. Must be from 0 to 999,999,999
-	// inclusive. This field may be limited in precision depending on context.
-	nanos: int32 @go(Nanos) @protobuf(2,varint,opt)
-}

cue/cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/watch_go_gen.cue

@@ -1,30 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/apis/meta/v1
-
-package v1
-
-import (
-	"k8s.io/apimachinery/pkg/runtime"
-	"k8s.io/apimachinery/pkg/watch"
-)
-
-// Event represents a single event to a watched resource.
-//
-// +protobuf=true
-// +k8s:deepcopy-gen=true
-// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
-#WatchEvent: {
-	type: string @go(Type) @protobuf(1,bytes,opt)
-
-	// Object is:
-	//  * If Type is Added or Modified: the new state of the object.
-	//  * If Type is Deleted: the state of the object immediately before deletion.
-	//  * If Type is Error: *Status is recommended; other types may make sense
-	//    depending on context.
-	object: runtime.#RawExtension @go(Object) @protobuf(2,bytes,opt)
-}
-
-// InternalEvent makes watch.Event versioned
-// +protobuf=false
-#InternalEvent: watch.#Event

cue/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/codec_go_gen.cue

@@ -1,37 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/runtime
-
-package runtime
-
-// codec binds an encoder and decoder.
-_#codec: {
-	Encoder: #Encoder
-	Decoder: #Decoder
-}
-
-// NoopEncoder converts an Decoder to a Serializer or Codec for code that expects them but only uses decoding.
-#NoopEncoder: {
-	Decoder: #Decoder
-}
-
-_#noopEncoderIdentifier: #Identifier & "noop"
-
-// NoopDecoder converts an Encoder to a Serializer or Codec for code that expects them but only uses encoding.
-#NoopDecoder: {
-	Encoder: #Encoder
-}
-
-_#base64Serializer: {
-	Encoder: #Encoder
-	Decoder: #Decoder
-}
-
-_#internalGroupVersionerIdentifier: "internal"
-_#disabledGroupVersionerIdentifier: "disabled"
-
-_#internalGroupVersioner: {
-}
-
-_#disabledGroupVersioner: {
-}

cue/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/conversion_go_gen.cue

@@ -1,7 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/runtime
-
-// Package runtime defines conversions between generic types and structs to map query strings
-// to struct objects.
-package runtime

cue/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/converter_go_gen.cue

@@ -1,9 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/runtime
-
-package runtime
-
-// UnstructuredConverter is an interface for converting between interface{}
-// and map[string]interface representation.
-#UnstructuredConverter: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/doc_go_gen.cue

@@ -1,39 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/runtime
-
-// Package runtime includes helper functions for working with API objects
-// that follow the kubernetes API object conventions, which are:
-//
-// 0. Your API objects have a common metadata struct member, TypeMeta.
-//
-// 1. Your code refers to an internal set of API objects.
-//
-// 2. In a separate package, you have an external set of API objects.
-//
-// 3. The external set is considered to be versioned, and no breaking
-// changes are ever made to it (fields may be added but not changed
-// or removed).
-//
-// 4. As your api evolves, you'll make an additional versioned package
-// with every major change.
-//
-// 5. Versioned packages have conversion functions which convert to
-// and from the internal version.
-//
-// 6. You'll continue to support older versions according to your
-// deprecation policy, and you can easily provide a program/library
-// to update old versions into new versions because of 5.
-//
-// 7. All of your serializations and deserializations are handled in a
-// centralized place.
-//
-// Package runtime provides a conversion helper to make 5 easy, and the
-// Encode/Decode/DecodeInto trio to accomplish 7. You can also register
-// additional "codecs" which use a version of your choice. It's
-// recommended that you register your types with runtime in your
-// package's init function.
-//
-// As a bonus, a few common types useful from all api objects and versions
-// are provided in types.go.
-package runtime

cue/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/embedded_go_gen.cue

@@ -1,7 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/runtime
-
-package runtime
-
-_#encodable: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/helper_go_gen.cue

@@ -1,23 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/runtime
-
-package runtime
-
-// MultiObjectTyper returns the types of objects across multiple schemes in order.
-#MultiObjectTyper: [...#ObjectTyper]
-
-_#defaultFramer: {
-}
-
-// WithVersionEncoder serializes an object and ensures the GVK is set.
-#WithVersionEncoder: {
-	Version:     #GroupVersioner
-	Encoder:     #Encoder
-	ObjectTyper: #ObjectTyper
-}
-
-// WithoutVersionDecoder clears the group version kind of a deserialized object.
-#WithoutVersionDecoder: {
-	Decoder: #Decoder
-}

cue/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/interfaces_go_gen.cue

@@ -1,151 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/runtime
-
-package runtime
-
-// APIVersionInternal may be used if you are registering a type that should not
-// be considered stable or serialized - it is a convention only and has no
-// special behavior in this package.
-#APIVersionInternal: "__internal"
-
-// GroupVersioner refines a set of possible conversion targets into a single option.
-#GroupVersioner: _
-
-// Identifier represents an identifier.
-// Identitier of two different objects should be equal if and only if for every
-// input the output they produce is exactly the same.
-#Identifier: string // #enumIdentifier
-
-#enumIdentifier:
-	_#noopEncoderIdentifier
-
-// Encoder writes objects to a serialized form
-#Encoder: _
-
-// Decoder attempts to load an object from data.
-#Decoder: _
-
-// Serializer is the core interface for transforming objects into a serialized format and back.
-// Implementations may choose to perform conversion of the object, but no assumptions should be made.
-#Serializer: _
-
-// Codec is a Serializer that deals with the details of versioning objects. It offers the same
-// interface as Serializer, so this is a marker to consumers that care about the version of the objects
-// they receive.
-#Codec: #Serializer
-
-// ParameterCodec defines methods for serializing and deserializing API objects to url.Values and
-// performing any necessary conversion. Unlike the normal Codec, query parameters are not self describing
-// and the desired version must be specified.
-#ParameterCodec: _
-
-// Framer is a factory for creating readers and writers that obey a particular framing pattern.
-#Framer: _
-
-// SerializerInfo contains information about a specific serialization format
-#SerializerInfo: {
-	// MediaType is the value that represents this serializer over the wire.
-	MediaType: string
-
-	// MediaTypeType is the first part of the MediaType ("application" in "application/json").
-	MediaTypeType: string
-
-	// MediaTypeSubType is the second part of the MediaType ("json" in "application/json").
-	MediaTypeSubType: string
-
-	// EncodesAsText indicates this serializer can be encoded to UTF-8 safely.
-	EncodesAsText: bool
-
-	// Serializer is the individual object serializer for this media type.
-	Serializer: #Serializer
-
-	// PrettySerializer, if set, can serialize this object in a form biased towards
-	// readability.
-	PrettySerializer: #Serializer
-
-	// StrictSerializer, if set, deserializes this object strictly,
-	// erring on unknown fields.
-	StrictSerializer: #Serializer
-
-	// StreamSerializer, if set, describes the streaming serialization format
-	// for this media type.
-	StreamSerializer?: null | #StreamSerializerInfo @go(,*StreamSerializerInfo)
-}
-
-// StreamSerializerInfo contains information about a specific stream serialization format
-#StreamSerializerInfo: {
-	// EncodesAsText indicates this serializer can be encoded to UTF-8 safely.
-	EncodesAsText: bool
-
-	// Serializer is the top level object serializer for this type when streaming
-	Serializer: #Serializer
-
-	// Framer is the factory for retrieving streams that separate objects on the wire
-	Framer: #Framer
-}
-
-// NegotiatedSerializer is an interface used for obtaining encoders, decoders, and serializers
-// for multiple supported media types. This would commonly be accepted by a server component
-// that performs HTTP content negotiation to accept multiple formats.
-#NegotiatedSerializer: _
-
-// ClientNegotiator handles turning an HTTP content type into the appropriate encoder.
-// Use NewClientNegotiator or NewVersionedClientNegotiator to create this interface from
-// a NegotiatedSerializer.
-#ClientNegotiator: _
-
-// StorageSerializer is an interface used for obtaining encoders, decoders, and serializers
-// that can read and write data at rest. This would commonly be used by client tools that must
-// read files, or server side storage interfaces that persist restful objects.
-#StorageSerializer: _
-
-// NestedObjectEncoder is an optional interface that objects may implement to be given
-// an opportunity to encode any nested Objects / RawExtensions during serialization.
-#NestedObjectEncoder: _
-
-// NestedObjectDecoder is an optional interface that objects may implement to be given
-// an opportunity to decode any nested Objects / RawExtensions during serialization.
-#NestedObjectDecoder: _
-
-#ObjectDefaulter: _
-
-#ObjectVersioner: _
-
-// ObjectConvertor converts an object to a different version.
-#ObjectConvertor: _
-
-// ObjectTyper contains methods for extracting the APIVersion and Kind
-// of objects.
-#ObjectTyper: _
-
-// ObjectCreater contains methods for instantiating an object by kind and version.
-#ObjectCreater: _
-
-// EquivalentResourceMapper provides information about resources that address the same underlying data as a specified resource
-#EquivalentResourceMapper: _
-
-// EquivalentResourceRegistry provides an EquivalentResourceMapper interface,
-// and allows registering known resource[/subresource] -> kind
-#EquivalentResourceRegistry: _
-
-// ResourceVersioner provides methods for setting and retrieving
-// the resource version from an API object.
-#ResourceVersioner: _
-
-// SelfLinker provides methods for setting and retrieving the SelfLink field of an API object.
-#SelfLinker: _
-
-// Object interface must be supported by all API types registered with Scheme. Since objects in a scheme are
-// expected to be serialized to the wire, the interface an Object must provide to the Scheme allows
-// serializers to set the kind, version, and group the object is represented as. An Object may choose
-// to return a no-op ObjectKindAccessor in cases where it is not expected to be serialized.
-#Object: _
-
-// CacheableObject allows an object to cache its different serializations
-// to avoid performing the same serialization multiple times.
-#CacheableObject: _
-
-// Unstructured objects store values as map[string]interface{}, with only values that can be serialized
-// to JSON allowed.
-#Unstructured: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/negotiate_go_gen.cue

@@ -1,12 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/runtime
-
-package runtime
-
-// NegotiateError is returned when a ClientNegotiator is unable to locate
-// a serializer for the requested operation.
-#NegotiateError: {
-	ContentType: string
-	Stream:      bool
-}

cue/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/swagger_doc_generator_go_gen.cue

@@ -1,14 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/runtime
-
-package runtime
-
-// Pair of strings. We keed the name of fields and the doc
-#Pair: {
-	Name: string
-	Doc:  string
-}
-
-// KubeTypes is an array to represent all available types in a parsed file. [0] is for the type itself
-#KubeTypes: [...#Pair]

cue/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/types_go_gen.cue

@@ -1,90 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/runtime
-
-package runtime
-
-// TypeMeta is shared by all top level objects. The proper way to use it is to inline it in your type,
-// like this:
-// type MyAwesomeAPIObject struct {
-//      runtime.TypeMeta    `json:",inline"`
-//      ... // other fields
-// }
-// func (obj *MyAwesomeAPIObject) SetGroupVersionKind(gvk *metav1.GroupVersionKind) { metav1.UpdateTypeMeta(obj,gvk) }; GroupVersionKind() *GroupVersionKind
-//
-// TypeMeta is provided here for convenience. You may use it directly from this package or define
-// your own with the same fields.
-//
-// +k8s:deepcopy-gen=false
-// +protobuf=true
-// +k8s:openapi-gen=true
-#TypeMeta: {
-	// +optional
-	apiVersion?: string @go(APIVersion) @protobuf(1,bytes,opt)
-
-	// +optional
-	kind?: string @go(Kind) @protobuf(2,bytes,opt)
-}
-
-#ContentTypeJSON:     "application/json"
-#ContentTypeYAML:     "application/yaml"
-#ContentTypeProtobuf: "application/vnd.kubernetes.protobuf"
-
-// RawExtension is used to hold extensions in external versions.
-//
-// To use this, make a field which has RawExtension as its type in your external, versioned
-// struct, and Object in your internal struct. You also need to register your
-// various plugin types.
-//
-// // Internal package:
-// type MyAPIObject struct {
-//  runtime.TypeMeta `json:",inline"`
-//  MyPlugin runtime.Object `json:"myPlugin"`
-// }
-// type PluginA struct {
-// AOption string `json:"aOption"`
-// }
-//
-// // External package:
-// type MyAPIObject struct {
-//  runtime.TypeMeta `json:",inline"`
-//  MyPlugin runtime.RawExtension `json:"myPlugin"`
-// }
-// type PluginA struct {
-// AOption string `json:"aOption"`
-// }
-//
-// // On the wire, the JSON will look something like this:
-// {
-// "kind":"MyAPIObject",
-// "apiVersion":"v1",
-// "myPlugin": {
-//  "kind":"PluginA",
-//  "aOption":"foo",
-// },
-// }
-//
-// So what happens? Decode first uses json or yaml to unmarshal the serialized data into
-// your external MyAPIObject. That causes the raw JSON to be stored, but not unpacked.
-// The next step is to copy (using pkg/conversion) into the internal struct. The runtime
-// package's DefaultScheme has conversion functions installed which will unpack the
-// JSON stored in RawExtension, turning it into the correct object type, and storing it
-// in the Object. (TODO: In the case where the object is of an unknown type, a
-// runtime.Unknown object will be created and stored.)
-//
-// +k8s:deepcopy-gen=true
-// +protobuf=true
-// +k8s:openapi-gen=true
-#RawExtension: _
-
-// Unknown allows api objects with unknown types to be passed-through. This can be used
-// to deal with the API objects from a plug-in. Unknown objects still have functioning
-// TypeMeta features-- kind, version, etc.
-// TODO: Make this object have easy access to field based accessors and settors for
-// metadata and field mutatation.
-//
-// +k8s:deepcopy-gen=true
-// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
-// +protobuf=true
-// +k8s:openapi-gen=true
-#Unknown: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/runtime/types_proto_go_gen.cue

@@ -1,9 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/runtime
-
-package runtime
-
-#ProtobufMarshaller: _
-
-#ProtobufReverseMarshaller: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/types/doc_go_gen.cue

@@ -1,6 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/types
-
-// Package types implements various generic types used throughout kubernetes.
-package types

cue/cue.mod/gen/k8s.io/apimachinery/pkg/types/namespacedname_go_gen.cue

@@ -1,12 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/types
-
-package types
-
-#NamespacedName: {
-	Namespace: string
-	Name:      string
-}
-
-#Separator: 47 // '/'

cue/cue.mod/gen/k8s.io/apimachinery/pkg/types/nodename_go_gen.cue

@@ -1,31 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/types
-
-package types
-
-// NodeName is a type that holds a api.Node's Name identifier.
-// Being a type captures intent and helps make sure that the node name
-// is not confused with similar concepts (the hostname, the cloud provider id,
-// the cloud provider name etc)
-//
-// To clarify the various types:
-//
-// * Node.Name is the Name field of the Node in the API.  This should be stored in a NodeName.
-//   Unfortunately, because Name is part of ObjectMeta, we can't store it as a NodeName at the API level.
-//
-// * Hostname is the hostname of the local machine (from uname -n).
-//   However, some components allow the user to pass in a --hostname-override flag,
-//   which will override this in most places. In the absence of anything more meaningful,
-//   kubelet will use Hostname as the Node.Name when it creates the Node.
-//
-// * The cloudproviders have the own names: GCE has InstanceName, AWS has InstanceId.
-//
-//   For GCE, InstanceName is the Name of an Instance object in the GCE API.  On GCE, Instance.Name becomes the
-//   Hostname, and thus it makes sense also to use it as the Node.Name.  But that is GCE specific, and it is up
-//   to the cloudprovider how to do this mapping.
-//
-//   For AWS, the InstanceID is not yet suitable for use as a Node.Name, so we actually use the
-//   PrivateDnsName for the Node.Name.  And this is _not_ always the same as the hostname: if
-//   we are using a custom DHCP domain it won't be.
-#NodeName: string

cue/cue.mod/gen/k8s.io/apimachinery/pkg/types/patch_go_gen.cue

@@ -1,21 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/types
-
-package types
-
-// Similarly to above, these are constants to support HTTP PATCH utilized by
-// both the client and server that didn't make sense for a whole package to be
-// dedicated to.
-#PatchType: string // #enumPatchType
-
-#enumPatchType:
-	#JSONPatchType |
-	#MergePatchType |
-	#StrategicMergePatchType |
-	#ApplyPatchType
-
-#JSONPatchType:           #PatchType & "application/json-patch+json"
-#MergePatchType:          #PatchType & "application/merge-patch+json"
-#StrategicMergePatchType: #PatchType & "application/strategic-merge-patch+json"
-#ApplyPatchType:          #PatchType & "application/apply-patch+yaml"

cue/cue.mod/gen/k8s.io/apimachinery/pkg/types/uid_go_gen.cue

@@ -1,10 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/types
-
-package types
-
-// UID is a type that holds unique ID values, including UUIDs.  Because we
-// don't ONLY use UUIDs, this is an alias to string.  Being a type captures
-// intent and helps make sure that UIDs and names do not get conflated.
-#UID: string

cue/cue.mod/gen/k8s.io/apimachinery/pkg/util/intstr/intstr_go_gen.cue

@@ -1,31 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/util/intstr
-
-package intstr
-
-// IntOrString is a type that can hold an int32 or a string.  When used in
-// JSON or YAML marshalling and unmarshalling, it produces or consumes the
-// inner type.  This allows you to have, for example, a JSON field that can
-// accept a name or number.
-// TODO: Rename to Int32OrString
-//
-// +protobuf=true
-// +protobuf.options.(gogoproto.goproto_stringer)=false
-// +k8s:openapi-gen=true
-#IntOrString: _
-
-// Type represents the stored type of IntOrString.
-#Type: int64 // #enumType
-
-#enumType:
-	#Int |
-	#String
-
-#values_Type: {
-	Int:    #Int
-	String: #String
-}
-
-#Int:    #Type & 0
-#String: #Type & 1

cue/cue.mod/gen/k8s.io/apimachinery/pkg/watch/doc_go_gen.cue

@@ -1,7 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/watch
-
-// Package watch contains a generic watchable interface, and a fake for
-// testing code that uses the watch interface.
-package watch

cue/cue.mod/gen/k8s.io/apimachinery/pkg/watch/filter_go_gen.cue

@@ -1,10 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/watch
-
-package watch
-
-// Recorder records all events that are sent from the watch until it is closed.
-#Recorder: {
-	Interface: #Interface
-}

cue/cue.mod/gen/k8s.io/apimachinery/pkg/watch/mux_go_gen.cue

@@ -1,25 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/watch
-
-package watch
-
-// FullChannelBehavior controls how the Broadcaster reacts if a watcher's watch
-// channel is full.
-#FullChannelBehavior: int // #enumFullChannelBehavior
-
-#enumFullChannelBehavior:
-	#WaitIfChannelFull |
-	#DropIfChannelFull
-
-#values_FullChannelBehavior: {
-	WaitIfChannelFull: #WaitIfChannelFull
-	DropIfChannelFull: #DropIfChannelFull
-}
-
-#WaitIfChannelFull: #FullChannelBehavior & 0
-#DropIfChannelFull: #FullChannelBehavior & 1
-
-_#incomingQueueLength: 25
-
-_#internalRunFunctionMarker: "internal-do-function"

cue/cue.mod/gen/k8s.io/apimachinery/pkg/watch/streamwatcher_go_gen.cue

@@ -1,12 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/watch
-
-package watch
-
-// Decoder allows StreamWatcher to watch any stream for which a Decoder can be written.
-#Decoder: _
-
-// Reporter hides the details of how an error is turned into a runtime.Object for
-// reporting on a watch stream since this package may not import a higher level report.
-#Reporter: _

cue/cue.mod/gen/k8s.io/apimachinery/pkg/watch/watch_go_gen.cue

@@ -1,48 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go k8s.io/apimachinery/pkg/watch
-
-package watch
-
-import "k8s.io/apimachinery/pkg/runtime"
-
-// Interface can be implemented by anything that knows how to watch and report changes.
-#Interface: _
-
-// EventType defines the possible types of events.
-#EventType: string // #enumEventType
-
-#enumEventType:
-	#Added |
-	#Modified |
-	#Deleted |
-	#Bookmark |
-	#Error
-
-#Added:    #EventType & "ADDED"
-#Modified: #EventType & "MODIFIED"
-#Deleted:  #EventType & "DELETED"
-#Bookmark: #EventType & "BOOKMARK"
-#Error:    #EventType & "ERROR"
-
-// Event represents a single event to a watched resource.
-// +k8s:deepcopy-gen=true
-#Event: {
-	Type: #EventType
-
-	// Object is:
-	//  * If Type is Added or Modified: the new state of the object.
-	//  * If Type is Deleted: the state of the object immediately before deletion.
-	//  * If Type is Bookmark: the object (instance of a type being watched) where
-	//    only ResourceVersion field is set. On successful restart of watch from a
-	//    bookmark resourceVersion, client is guaranteed to not get repeat event
-	//    nor miss any events.
-	//  * If Type is Error: *api.Status is recommended; other types may make sense
-	//    depending on context.
-	Object: runtime.#Object
-}
-
-// RaceFreeFakeWatcher lets you test anything that consumes a watch.Interface; threadsafe.
-#RaceFreeFakeWatcher: {
-	Stopped: bool
-}

cue/cue.mod/gen/time/format_go_gen.cue

@@ -1,68 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go time
-
-package time
-
-#Layout:      "01/02 03:04:05PM '06 -0700"
-#ANSIC:       "Mon Jan _2 15:04:05 2006"
-#UnixDate:    "Mon Jan _2 15:04:05 MST 2006"
-#RubyDate:    "Mon Jan 02 15:04:05 -0700 2006"
-#RFC822:      "02 Jan 06 15:04 MST"
-#RFC822Z:     "02 Jan 06 15:04 -0700"
-#RFC850:      "Monday, 02-Jan-06 15:04:05 MST"
-#RFC1123:     "Mon, 02 Jan 2006 15:04:05 MST"
-#RFC1123Z:    "Mon, 02 Jan 2006 15:04:05 -0700"
-#RFC3339:     "2006-01-02T15:04:05Z07:00"
-#RFC3339Nano: "2006-01-02T15:04:05.999999999Z07:00"
-#Kitchen:     "3:04PM"
-
-// Handy time stamps.
-#Stamp:                     "Jan _2 15:04:05"
-#StampMilli:                "Jan _2 15:04:05.000"
-#StampMicro:                "Jan _2 15:04:05.000000"
-#StampNano:                 "Jan _2 15:04:05.000000000"
-_#stdLongMonth:             257
-_#stdMonth:                 258
-_#stdNumMonth:              259
-_#stdZeroMonth:             260
-_#stdLongWeekDay:           261
-_#stdWeekDay:               262
-_#stdDay:                   263
-_#stdUnderDay:              264
-_#stdZeroDay:               265
-_#stdUnderYearDay:          266
-_#stdZeroYearDay:           267
-_#stdHour:                  524
-_#stdHour12:                525
-_#stdZeroHour12:            526
-_#stdMinute:                527
-_#stdZeroMinute:            528
-_#stdSecond:                529
-_#stdZeroSecond:            530
-_#stdLongYear:              275
-_#stdYear:                  276
-_#stdPM:                    533
-_#stdpm:                    534
-_#stdTZ:                    23
-_#stdISO8601TZ:             24
-_#stdISO8601SecondsTZ:      25
-_#stdISO8601ShortTZ:        26
-_#stdISO8601ColonTZ:        27
-_#stdISO8601ColonSecondsTZ: 28
-_#stdNumTZ:                 29
-_#stdNumSecondsTz:          30
-_#stdNumShortTZ:            31
-_#stdNumColonTZ:            32
-_#stdNumColonSecondsTZ:     33
-_#stdFracSecond0:           34
-_#stdFracSecond9:           35
-_#stdNeedDate:              256
-_#stdNeedClock:             512
-_#stdArgShift:              16
-_#stdSeparatorShift:        28
-_#stdMask:                  65535
-
-_#lowerhex:  "0123456789abcdef"
-_#runeSelf:  0x80
-_#runeError: 65533 // '\uFFFD'

cue/cue.mod/gen/time/time_go_gen.cue

@@ -1,266 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go time
-
-// Package time provides functionality for measuring and displaying time.
-//
-// The calendrical calculations always assume a Gregorian calendar, with
-// no leap seconds.
-//
-// Monotonic Clocks
-//
-// Operating systems provide both a “wall clock,” which is subject to
-// changes for clock synchronization, and a “monotonic clock,” which is
-// not. The general rule is that the wall clock is for telling time and
-// the monotonic clock is for measuring time. Rather than split the API,
-// in this package the Time returned by time.Now contains both a wall
-// clock reading and a monotonic clock reading; later time-telling
-// operations use the wall clock reading, but later time-measuring
-// operations, specifically comparisons and subtractions, use the
-// monotonic clock reading.
-//
-// For example, this code always computes a positive elapsed time of
-// approximately 20 milliseconds, even if the wall clock is changed during
-// the operation being timed:
-//
-// start := time.Now()
-// ... operation that takes 20 milliseconds ...
-// t := time.Now()
-// elapsed := t.Sub(start)
-//
-// Other idioms, such as time.Since(start), time.Until(deadline), and
-// time.Now().Before(deadline), are similarly robust against wall clock
-// resets.
-//
-// The rest of this section gives the precise details of how operations
-// use monotonic clocks, but understanding those details is not required
-// to use this package.
-//
-// The Time returned by time.Now contains a monotonic clock reading.
-// If Time t has a monotonic clock reading, t.Add adds the same duration to
-// both the wall clock and monotonic clock readings to compute the result.
-// Because t.AddDate(y, m, d), t.Round(d), and t.Truncate(d) are wall time
-// computations, they always strip any monotonic clock reading from their results.
-// Because t.In, t.Local, and t.UTC are used for their effect on the interpretation
-// of the wall time, they also strip any monotonic clock reading from their results.
-// The canonical way to strip a monotonic clock reading is to use t = t.Round(0).
-//
-// If Times t and u both contain monotonic clock readings, the operations
-// t.After(u), t.Before(u), t.Equal(u), and t.Sub(u) are carried out
-// using the monotonic clock readings alone, ignoring the wall clock
-// readings. If either t or u contains no monotonic clock reading, these
-// operations fall back to using the wall clock readings.
-//
-// On some systems the monotonic clock will stop if the computer goes to sleep.
-// On such a system, t.Sub(u) may not accurately reflect the actual
-// time that passed between t and u.
-//
-// Because the monotonic clock reading has no meaning outside
-// the current process, the serialized forms generated by t.GobEncode,
-// t.MarshalBinary, t.MarshalJSON, and t.MarshalText omit the monotonic
-// clock reading, and t.Format provides no format for it. Similarly, the
-// constructors time.Date, time.Parse, time.ParseInLocation, and time.Unix,
-// as well as the unmarshalers t.GobDecode, t.UnmarshalBinary.
-// t.UnmarshalJSON, and t.UnmarshalText always create times with
-// no monotonic clock reading.
-//
-// Note that the Go == operator compares not just the time instant but
-// also the Location and the monotonic clock reading. See the
-// documentation for the Time type for a discussion of equality
-// testing for Time values.
-//
-// For debugging, the result of t.String does include the monotonic
-// clock reading if present. If t != u because of different monotonic clock readings,
-// that difference will be visible when printing t.String() and u.String().
-//
-package time
-
-// A Time represents an instant in time with nanosecond precision.
-//
-// Programs using times should typically store and pass them as values,
-// not pointers. That is, time variables and struct fields should be of
-// type time.Time, not *time.Time.
-//
-// A Time value can be used by multiple goroutines simultaneously except
-// that the methods GobDecode, UnmarshalBinary, UnmarshalJSON and
-// UnmarshalText are not concurrency-safe.
-//
-// Time instants can be compared using the Before, After, and Equal methods.
-// The Sub method subtracts two instants, producing a Duration.
-// The Add method adds a Time and a Duration, producing a Time.
-//
-// The zero value of type Time is January 1, year 1, 00:00:00.000000000 UTC.
-// As this time is unlikely to come up in practice, the IsZero method gives
-// a simple way of detecting a time that has not been initialized explicitly.
-//
-// Each Time has associated with it a Location, consulted when computing the
-// presentation form of the time, such as in the Format, Hour, and Year methods.
-// The methods Local, UTC, and In return a Time with a specific location.
-// Changing the location in this way changes only the presentation; it does not
-// change the instant in time being denoted and therefore does not affect the
-// computations described in earlier paragraphs.
-//
-// Representations of a Time value saved by the GobEncode, MarshalBinary,
-// MarshalJSON, and MarshalText methods store the Time.Location's offset, but not
-// the location name. They therefore lose information about Daylight Saving Time.
-//
-// In addition to the required “wall clock” reading, a Time may contain an optional
-// reading of the current process's monotonic clock, to provide additional precision
-// for comparison or subtraction.
-// See the “Monotonic Clocks” section in the package documentation for details.
-//
-// Note that the Go == operator compares not just the time instant but also the
-// Location and the monotonic clock reading. Therefore, Time values should not
-// be used as map or database keys without first guaranteeing that the
-// identical Location has been set for all values, which can be achieved
-// through use of the UTC or Local method, and that the monotonic clock reading
-// has been stripped by setting t = t.Round(0). In general, prefer t.Equal(u)
-// to t == u, since t.Equal uses the most accurate comparison available and
-// correctly handles the case when only one of its arguments has a monotonic
-// clock reading.
-//
-#Time: _
-
-_#hasMonotonic: 9223372036854775808
-_#maxWall:      int64 & 68043243391
-_#minWall:      int64 & 59453308800
-_#nsecMask:     1073741823
-_#nsecShift:    30
-
-// A Month specifies a month of the year (January = 1, ...).
-#Month: int // #enumMonth
-
-#enumMonth:
-	#January |
-	#February |
-	#March |
-	#April |
-	#May |
-	#June |
-	#July |
-	#August |
-	#September |
-	#October |
-	#November |
-	#December
-
-#values_Month: {
-	January:   #January
-	February:  #February
-	March:     #March
-	April:     #April
-	May:       #May
-	June:      #June
-	July:      #July
-	August:    #August
-	September: #September
-	October:   #October
-	November:  #November
-	December:  #December
-}
-
-#January:   #Month & 1
-#February:  #Month & 2
-#March:     #Month & 3
-#April:     #Month & 4
-#May:       #Month & 5
-#June:      #Month & 6
-#July:      #Month & 7
-#August:    #Month & 8
-#September: #Month & 9
-#October:   #Month & 10
-#November:  #Month & 11
-#December:  #Month & 12
-
-// A Weekday specifies a day of the week (Sunday = 0, ...).
-#Weekday: int // #enumWeekday
-
-#enumWeekday:
-	#Sunday |
-	#Monday |
-	#Tuesday |
-	#Wednesday |
-	#Thursday |
-	#Friday |
-	#Saturday
-
-#values_Weekday: {
-	Sunday:    #Sunday
-	Monday:    #Monday
-	Tuesday:   #Tuesday
-	Wednesday: #Wednesday
-	Thursday:  #Thursday
-	Friday:    #Friday
-	Saturday:  #Saturday
-}
-
-#Sunday:    #Weekday & 0
-#Monday:    #Weekday & 1
-#Tuesday:   #Weekday & 2
-#Wednesday: #Weekday & 3
-#Thursday:  #Weekday & 4
-#Friday:    #Weekday & 5
-#Saturday:  #Weekday & 6
-
-// The unsigned zero year for internal calculations.
-// Must be 1 mod 400, and times before it will not compute correctly,
-// but otherwise can be changed at will.
-_#absoluteZeroYear: -292277022399
-
-// The year of the zero Time.
-// Assumed by the unixToInternal computation below.
-_#internalYear: 1
-
-// Offsets to convert between internal and absolute or Unix times.
-_#absoluteToInternal: int64 & -9223371966579724800
-_#internalToAbsolute: int64 & 9223371966579724800
-_#unixToInternal:     int64 & 62135596800
-_#internalToUnix:     int64 & -62135596800
-_#wallToInternal:     int64 & 59453308800
-_#internalToWall:     int64 & -59453308800
-
-// A Duration represents the elapsed time between two instants
-// as an int64 nanosecond count. The representation limits the
-// largest representable duration to approximately 290 years.
-#Duration: int64 // #enumDuration
-
-#enumDuration:
-	_#minDuration |
-	_#maxDuration |
-	#Nanosecond |
-	#Microsecond |
-	#Millisecond |
-	#Second |
-	#Minute |
-	#Hour
-
-#values_Duration: {
-	minDuration: _#minDuration
-	maxDuration: _#maxDuration
-	Nanosecond:  #Nanosecond
-	Microsecond: #Microsecond
-	Millisecond: #Millisecond
-	Second:      #Second
-	Minute:      #Minute
-	Hour:        #Hour
-}
-
-_#minDuration: #Duration & -9223372036854775808
-_#maxDuration: #Duration & 9223372036854775807
-
-#Nanosecond:  #Duration & 1
-#Microsecond: #Duration & 1000
-#Millisecond: #Duration & 1000000
-#Second:      #Duration & 1000000000
-#Minute:      #Duration & 60000000000
-#Hour:        #Duration & 3600000000000
-
-_#secondsPerMinute: 60
-_#secondsPerHour:   3600
-_#secondsPerDay:    86400
-_#secondsPerWeek:   604800
-_#daysPer400Years:  146097
-_#daysPer100Years:  36524
-_#daysPer4Years:    1461
-
-_#timeBinaryVersion: 1

cue/cue.mod/gen/time/zoneinfo_go_gen.cue

@@ -1,19 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go time
-
-package time
-
-// A Location maps time instants to the zone in use at that time.
-// Typically, the Location represents the collection of time offsets
-// in use in a geographical area. For many Locations the time offset varies
-// depending on whether daylight savings time is in use at the time instant.
-#Location: {
-}
-
-_#alpha: -9223372036854775808
-_#omega: 9223372036854775807
-
-_#ruleJulian:       _#ruleKind & 0
-_#ruleDOY:          _#ruleKind & 1
-_#ruleMonthWeekDay: _#ruleKind & 2

cue/cue.mod/gen/time/zoneinfo_read_go_gen.cue

@@ -1,11 +0,0 @@
-// Code generated by cue get go. DO NOT EDIT.
-
-//cue:generate cue get go time
-
-package time
-
-_#maxFileSize: 10485760
-
-_#seekStart:   0
-_#seekCurrent: 1
-_#seekEnd:     2

cue/main.cue

@@ -4,24 +4,30 @@ import (
 	podinfo "github.com/stefanprodan/podinfo/cue/podinfo"
 )
 
-resources: (podinfo.#Application & {
-	input: {
+app: podinfo.#Application & {
+	config: {
 		meta: {
-			name: "podinfo"
-			annotations: {
-				"app.kubernetes.io/part-of": "podinfo"
-			}
+			name:      "podinfo"
+			namespace: "default"
 		}
-		image: {
-			repository: "ghcr.io/stefanprodan/podinfo"
-			tag:        "6.1.3"
+		image: tag: "6.1.4"
+		resources: requests: {
+			cpu:    "100m"
+			memory: "16Mi"
 		}
-		resources: requests: cpu: "100m"
 		hpa: {
 			enabled:     true
-			minReplicas: 2
-			maxReplicas: 4
-			cpu:         99
+			maxReplicas: 3
 		}
+		ingress: {
+			enabled:   true
+			className: "nginx"
+			host:      "podinfo.example.com"
+			tls:       true
+			annotations: "cert-manager.io/cluster-issuer": "letsencrypt"
+		}
+		serviceMonitor: enabled: true
 	}
-}).out
+}
+
+objects: app.objects

cue/main_tool.cue

@@ -7,6 +7,6 @@ import (
 
 command: gen: {
 	task: print: cli.Print & {
-		text: yaml.MarshalStream([ for x in resources {x}])
+		text: yaml.MarshalStream([ for x in objects {x}])
 	}
 }

cue/podinfo/app.cue

@@ -1,21 +1,26 @@
 package podinfo
 
 #Application: {
-	input: #Config
-	out: {
-		sa:     #ServiceAccount & {_config: input}
-		deploy: #Deployment & {
-			_config:         input
-			_serviceAccount: sa.metadata.name
+	config: #Config
+
+	objects: {
+		service:    #Service & {_config:        config}
+		account:    #ServiceAccount & {_config: config}
+		deployment: #Deployment & {
+			_config:         config
+			_serviceAccount: account.metadata.name
 		}
-		service: #Service & {_config: input}}
-	if input.hpa.enabled == true {
-		out: hpa: #HorizontalPodAutoscaler & {_config: input}
 	}
-	if input.serviceMonitor.enabled == true {
-		out: serviceMonitor: #ServiceMonitor & {_config: input}
+
+	if config.hpa.enabled == true {
+		objects: hpa: #HorizontalPodAutoscaler & {_config: config}
 	}
-	if input.ingress.enabled == true {
-		out: ingress: #Ingress & {_config: input}
+
+	if config.ingress.enabled == true {
+		objects: ingress: #Ingress & {_config: config}
+	}
+
+	if config.serviceMonitor.enabled == true {
+		objects: serviceMonitor: #ServiceMonitor & {_config: config}
 	}
 }

cue/podinfo/certificate.cue

@@ -1,24 +0,0 @@
-package podinfo
-
-import (
-	certmanv1 "github.com/jetstack/cert-manager/pkg/apis/certmanager/v1"
-	"encoding/yaml"
-)
-
-#certConfig: {
-	dnsNames: [string]
-	tlsSecretName: string
-	issuerRef:     string
-}
-
-#Certificate: certmanv1.#Certificate & {
-	_config:    #Config
-	apiVersion: "v1"
-	kind:       "Certificate"
-	metadata:   _config.meta
-	spec:       certmanv1.#CertificateSpec & {
-		dnsNames:   _config.cert.dnsNames
-		secretName: _config.cert.tlsSecretName
-		issuerRef:  yaml.Marshal(_config.cert.issuerRef)
-	}
-}

cue/podinfo/config.cue

@@ -6,54 +6,36 @@ import (
 )
 
 #Config: {
-	meta: metav1.#ObjectMeta
+	meta:           metav1.#ObjectMeta
+	hpa:            #hpaConfig
+	ingress:        #ingressConfig
+	service:        #serviceConfig
+	serviceMonitor: #serviceMonConfig
+
 	image: {
 		repository: *"ghcr.io/stefanprodan/podinfo" | string
-		tag:        string
 		pullPolicy: *"IfNotPresent" | string
+		tag:        string
 	}
-	selectorLabels: {
-		"app.kubernetes.io/name": meta.name
-	}
-	replicas: *1 | int
-	service:  #serviceConfig
-	host:     string
-	cache:    string
-	backends: [string]
+
+	cache?: string & =~"^tcp://"
+	backends: [...string]
 	logLevel: *"info" | string
-	faults: {
-		delay:     *false | bool
-		error:     *false | bool
-		unhealthy: *false | bool
-		unready:   *false | bool
-	}
-	h2c: {
-		enabled: *false | bool
-	}
-	ui: {
-		color:   *"#34577c" | string
-		message: *"" | string
-		logo:    *"" | string
-	}
-	podAnnotations: {[ string]: string}
-	securityContext: corev1.#PodSecurityContext
-	resources:       *{
+	replicas: *1 | int
+
+	resources: *{
 		requests: {
 			cpu:    "1m"
 			memory: "16Mi"
 		}
+		limits: memory: "128Mi"
 	} | corev1.#ResourceRequirements
-	nodeSelector: {[ string]: string}
-	affinity: corev1.#Affinity
-	tolerations: [ ...corev1.#Toleration]
-	tls: {
-		enabled:    *false | bool
-		port:       *9899 | int
-		certPath:   *"/data/cert" | string
-		secretName: *"" | string
-	}
-	cert:           #certConfig
-	hpa:            #hpaConfig
-	ingress:        #ingressConfig
-	serviceMonitor: #serviceMonConfig
+
+	selectorLabels: *{"app.kubernetes.io/name": meta.name} | {[ string]: string}
+	meta: annotations: *{"app.kubernetes.io/version": "\(image.tag)"} | {[ string]: string}
+	meta: labels:      *selectorLabels | {[ string]:  string}
+
+	securityContext?: corev1.#PodSecurityContext
+	affinity?:        corev1.#Affinity
+	tolerations?: [ ...corev1.#Toleration]
 }

cue/podinfo/deployment.cue

@@ -12,7 +12,7 @@ import (
 	kind:            "Deployment"
 	metadata:        _config.meta
 	spec:            appsv1.#DeploymentSpec & {
-		if _config.hpa.enabled == false {
+		if !_config.hpa.enabled {
 			replicas: _config.replicas
 		}
 		strategy: {
@@ -23,29 +23,33 @@ import (
 		template: {
 			metadata: {
 				labels: _config.selectorLabels
-				annotations: {
-					"prometheus.io/scrape": "true"
-					"prometheus.io/port":   "\(_config.service.metricsPort)"
-					_config.podAnnotations
+				if !_config.serviceMonitor.enabled {
+					annotations: {
+						"prometheus.io/scrape": "true"
+						"prometheus.io/port":   "\(_config.service.metricsPort)"
+					}
 				}
 			}
 			spec: corev1.#PodSpec & {
-				terminationGracePeriodSeconds: 30
+				terminationGracePeriodSeconds: 15
 				serviceAccountName:            _serviceAccount
 				containers: [
 					{
 						name:            "podinfo"
 						image:           "\(_config.image.repository):\(_config.image.tag)"
 						imagePullPolicy: _config.image.pullPolicy
-						securityContext: _config.securityContext
 						command: [
 							"./podinfo",
 							"--port=\(_config.service.httpPort)",
 							"--port-metrics=\(_config.service.metricsPort)",
 							"--grpc-port=\(_config.service.grpcPort)",
 							"--level=\(_config.logLevel)",
-							"--random-delay=\(_config.faults.delay)",
-							"--random-error=\(_config.faults.error)",
+							if _config.cache != _|_ {
+								"--cache-server=\(_config.cache)"
+							},
+							for b in _config.backends {
+								"--backend-url=\(b)"
+							},
 						]
 						ports: [
 							{
@@ -65,57 +69,40 @@ import (
 							},
 						]
 						livenessProbe: {
-							exec: {
-								command: [
-									"podcli",
-									"check",
-									"http",
-									"localhost:\(_config.service.httpPort)/healthz",
-								]
+							httpGet: {
+								path: "/healthz"
+								port: "http"
 							}
-							initialDelaySeconds: 1
-							timeoutSeconds:      5
 						}
 						readinessProbe: {
-							exec: {
-								command: [
-									"podcli",
-									"check",
-									"http",
-									"localhost:\(_config.service.httpPort)/readyz",
-								]
+							httpGet: {
+								path: "/readyz"
+								port: "http"
 							}
-							initialDelaySeconds: 1
-							timeoutSeconds:      5
 						}
 						volumeMounts: [
 							{
 								name:      "data"
 								mountPath: "/data"
 							},
-							if _config.tls.secretName != "" {
-								name:      "tls"
-								mountPath: _config.tls.certPath
-								readOnly:  true
-							},
 						]
 						resources: _config.resources
+						if _config.securityContext != _|_ {
+							securityContext: _config.securityContext
+						}
 					},
 				]
-				nodeSelector: _config.nodeSelector
-				affinity:     _config.affinity
-				tolerations:  _config.tolerations
+				if _config.affinity != _|_ {
+					affinity: _config.affinity
+				}
+				if _config.tolerations != _|_ {
+					tolerations: _config.tolerations
+				}
 				volumes: [
 					{
 						name: "data"
 						emptyDir: {}
 					},
-					if _config.tls.secretName != "" {
-						name: "tls"
-						secret: {
-							secretName: _config.tls.secretName
-						}
-					},
 				]
 			}
 		}

cue/podinfo/hpa.cue

@@ -6,10 +6,10 @@ import (
 
 #hpaConfig: {
 	enabled:     *false | bool
-	cpu:         *0 | int
+	cpu:         *99 | int
 	memory:      *"" | string
-	minReplicas: int
-	maxReplicas: int
+	minReplicas: *1 | int
+	maxReplicas: *1 | int
 }
 
 #HorizontalPodAutoscaler: autoscaling.#HorizontalPodAutoscaler & {

cue/podinfo/ingress.cue

@@ -5,21 +5,11 @@ import (
 )
 
 #ingressConfig: {
-	svcName:   string
-	svcPort:   int
-	enabled:   *false | bool
-	className: *"" | string
-	tls: [{
-		hosts: [string]
-		secretName: string
-	}]
-	hosts: [{
-		host: "podinfo.local"
-		paths: [{
-			path:     "/"
-			pathType: "ImplementationSpecific"
-		}]
-	}]
+	enabled: *false | bool
+	annotations?: {[ string]: string}
+	className?: string
+	tls:        *false | bool
+	host:       string
 }
 
 #Ingress: netv1.#Ingress & {
@@ -27,22 +17,31 @@ import (
 	apiVersion: "networking.k8s.io/v1"
 	kind:       "Ingress"
 	metadata:   _config.meta
-	spec:       netv1.#IngressSpec & {
-		ingressClassName: _config.ingress.className
-		tls: [ for t in _config.ingress.tls {
-			hosts:      t.hosts
-			secretName: t.secretName
+	if _config.ingress.annotations != _|_ {
+		metadata: annotations: _config.ingress.annotations
+	}
+	spec: netv1.#IngressSpec & {
+		rules: [{
+			host: _config.ingress.host
+			http: {
+				paths: [{
+					pathType: "Prefix"
+					path:     "/"
+					backend: service: {
+						name: _config.meta.name
+						port: name: "http"
+					}
+				}]
+			}
 		}]
-		rules: [ for h in _config.ingress.hosts {
-			host: h.host
-			http: paths: [ for p in h.paths {
-				path:     p.path
-				pathType: p.pathType
-				backend: service: {
-					name: _config.meta.name
-					port: number: _config.service.externalPort
-				}
+		if _config.ingress.tls {
+			tls: [{
+				hosts: [_config.ingress.host]
+				secretName: "\(_config.meta.name)-cert"
 			}]
-		}]
+		}
+		if _config.ingress.className != _|_ {
+			ingressClassName: _config.ingress.className
+		}
 	}
 }

cue/podinfo/service.cue

@@ -10,8 +10,6 @@ import (
 	httpPort:     *9898 | int
 	metricsPort:  *9797 | int
 	grpcPort:     *9999 | int
-	grpcService:  "podinfo" | string
-	nodePort:     *31198 | int
 }
 
 #Service: corev1.#Service & {
@@ -20,24 +18,27 @@ import (
 	kind:       "Service"
 	metadata:   _config.meta
 	spec:       corev1.#ServiceSpec & {
-		type:     "ClusterIP"
+		type:     _config.service.type
 		selector: _config.selectorLabels
-		ports: [{
-			name:       "http"
-			port:       _config.service.externalPort
-			targetPort: _config.service.httpPort
-			protocol:   "TCP"
-		}, if _config.tls.enabled == true {
-			name:       "https"
-			port:       _config.tls.port
-			targetPort: "https"
-			protocol:   "TCP"
-		}, if _config.service.grpcPort != _|_ {
-			name:       "grpc"
-			port:       _config.service.grpcPort
-			targetPort: "grpc"
-			protocol:   "TCP"
-		},
+		ports: [
+			{
+				name:       "http"
+				port:       _config.service.externalPort
+				targetPort: "\(name)"
+				protocol:   "TCP"
+			},
+			{
+				name:       "http-metrics"
+				port:       _config.service.metricsPort
+				targetPort: "\(name)"
+				protocol:   "TCP"
+			},
+			{
+				name:       "grpc"
+				port:       _config.service.grpcPort
+				targetPort: "\(name)"
+				protocol:   "TCP"
+			},
 		]
 	}
 }

cue/podinfo/servicemonitor.cue

@@ -3,7 +3,6 @@ package podinfo
 #serviceMonConfig: {
 	enabled:  *false | bool
 	interval: *"15s" | string
-	matchLabels: {}
 }
 
 #ServiceMonitor: {
@@ -14,10 +13,10 @@ package podinfo
 	spec: {
 		endpoints: [{
 			path:     "/metrics"
-			port:     "http"
+			port:     "http-metrics"
 			interval: _config.serviceMonitor.interval
 		}]
 		namespaceSelector: matchNames: _config.meta.namespace
-		selector: matchLabels:         _config.selectorLabels
+		selector: matchLabels:         _config.meta.labels
 	}
 }

deploy/bases/backend/deployment.yaml

@@ -23,7 +23,7 @@ spec:
     spec:
       containers:
       - name: backend
-        image: ghcr.io/stefanprodan/podinfo:6.1.3
+        image: ghcr.io/stefanprodan/podinfo:6.1.4
         imagePullPolicy: IfNotPresent
         ports:
         - name: http

deploy/bases/frontend/deployment.yaml

@@ -23,7 +23,7 @@ spec:
     spec:
       containers:
       - name: frontend
-        image: ghcr.io/stefanprodan/podinfo:6.1.3
+        image: ghcr.io/stefanprodan/podinfo:6.1.4
         imagePullPolicy: IfNotPresent
         ports:
         - name: http

deploy/webapp/backend/deployment.yaml

@@ -25,7 +25,7 @@ spec:
       serviceAccountName: webapp
       containers:
       - name: backend
-        image: ghcr.io/stefanprodan/podinfo:6.1.3
+        image: ghcr.io/stefanprodan/podinfo:6.1.4
         imagePullPolicy: IfNotPresent
         ports:
         - name: http

deploy/webapp/frontend/deployment.yaml

@@ -25,7 +25,7 @@ spec:
       serviceAccountName: webapp
       containers:
       - name: frontend
-        image: ghcr.io/stefanprodan/podinfo:6.1.3
+        image: ghcr.io/stefanprodan/podinfo:6.1.4
         imagePullPolicy: IfNotPresent
         ports:
         - name: http

go.mod

@@ -4,34 +4,34 @@ go 1.17
 
 require (
 	github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751
-	github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e
+	github.com/chzyer/readline v1.5.0
 	github.com/dgrijalva/jwt-go/v4 v4.0.0-preview1
-	github.com/fatih/color v1.9.0
-	github.com/fsnotify/fsnotify v1.4.9
-	github.com/gomodule/redigo v1.8.4
+	github.com/fatih/color v1.13.0
+	github.com/fsnotify/fsnotify v1.5.1
+	github.com/gomodule/redigo v1.8.8
 	github.com/gorilla/mux v1.8.0
-	github.com/gorilla/websocket v1.4.2
-	github.com/prometheus/client_golang v1.11.0
-	github.com/spf13/cobra v1.2.1
+	github.com/gorilla/websocket v1.5.0
+	github.com/prometheus/client_golang v1.12.1
+	github.com/spf13/cobra v1.4.0
 	github.com/spf13/pflag v1.0.5
-	github.com/spf13/viper v1.8.1
-	github.com/swaggo/http-swagger v1.0.0
-	github.com/swaggo/swag v1.7.6
-	go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux v0.28.0
-	go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.28.0
-	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.28.0
-	go.opentelemetry.io/contrib/propagators/aws v1.3.0
-	go.opentelemetry.io/contrib/propagators/b3 v1.3.0
-	go.opentelemetry.io/contrib/propagators/jaeger v1.3.0
-	go.opentelemetry.io/contrib/propagators/ot v1.3.0
-	go.opentelemetry.io/otel v1.3.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.3.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.3.0
-	go.opentelemetry.io/otel/sdk v1.3.0
-	go.opentelemetry.io/otel/trace v1.3.0
-	go.uber.org/zap v1.19.1
-	golang.org/x/net v0.0.0-20211216030914-fe4d6282115f
-	google.golang.org/grpc v1.43.0
+	github.com/spf13/viper v1.11.0
+	github.com/swaggo/http-swagger v1.2.6
+	github.com/swaggo/swag v1.8.1
+	go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux v0.31.0
+	go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.31.0
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.31.0
+	go.opentelemetry.io/contrib/propagators/aws v1.6.0
+	go.opentelemetry.io/contrib/propagators/b3 v1.6.0
+	go.opentelemetry.io/contrib/propagators/jaeger v1.6.0
+	go.opentelemetry.io/contrib/propagators/ot v1.6.0
+	go.opentelemetry.io/otel v1.6.3
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.6.3
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.6.3
+	go.opentelemetry.io/otel/sdk v1.6.3
+	go.opentelemetry.io/otel/trace v1.6.3
+	go.uber.org/zap v1.21.0
+	golang.org/x/net v0.0.0-20220412020605-290c469a71a5
+	google.golang.org/grpc v1.45.0
 )
 
 require (
@@ -40,45 +40,46 @@ require (
 	github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/cenkalti/backoff/v4 v4.1.2 // indirect
-	github.com/cespare/xxhash/v2 v2.1.1 // indirect
+	github.com/cespare/xxhash/v2 v2.1.2 // indirect
 	github.com/felixge/httpsnoop v1.0.2 // indirect
-	github.com/go-logr/logr v1.2.1 // indirect
-	github.com/go-logr/stdr v1.2.0 // indirect
+	github.com/go-logr/logr v1.2.3 // indirect
+	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/go-openapi/jsonpointer v0.19.5 // indirect
-	github.com/go-openapi/jsonreference v0.19.5 // indirect
-	github.com/go-openapi/spec v0.20.3 // indirect
-	github.com/go-openapi/swag v0.19.14 // indirect
+	github.com/go-openapi/jsonreference v0.19.6 // indirect
+	github.com/go-openapi/spec v0.20.4 // indirect
+	github.com/go-openapi/swag v0.19.15 // indirect
 	github.com/golang/protobuf v1.5.2 // indirect
-	github.com/grpc-ecosystem/grpc-gateway v1.16.0 // indirect
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.0 // indirect
 	github.com/hashicorp/hcl v1.0.0 // indirect
 	github.com/inconshreveable/mousetrap v1.0.0 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
-	github.com/magiconair/properties v1.8.5 // indirect
+	github.com/magiconair/properties v1.8.6 // indirect
 	github.com/mailru/easyjson v0.7.6 // indirect
-	github.com/mattn/go-colorable v0.1.4 // indirect
-	github.com/mattn/go-isatty v0.0.12 // indirect
+	github.com/mattn/go-colorable v0.1.12 // indirect
+	github.com/mattn/go-isatty v0.0.14 // indirect
 	github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
-	github.com/mitchellh/mapstructure v1.4.1 // indirect
-	github.com/pelletier/go-toml v1.9.3 // indirect
+	github.com/mitchellh/mapstructure v1.4.3 // indirect
+	github.com/pelletier/go-toml v1.9.4 // indirect
+	github.com/pelletier/go-toml/v2 v2.0.0-beta.8 // indirect
 	github.com/prometheus/client_model v0.2.0 // indirect
-	github.com/prometheus/common v0.26.0 // indirect
-	github.com/prometheus/procfs v0.6.0 // indirect
-	github.com/spf13/afero v1.6.0 // indirect
-	github.com/spf13/cast v1.3.1 // indirect
+	github.com/prometheus/common v0.32.1 // indirect
+	github.com/prometheus/procfs v0.7.3 // indirect
+	github.com/spf13/afero v1.8.2 // indirect
+	github.com/spf13/cast v1.4.1 // indirect
 	github.com/spf13/jwalterweatherman v1.1.0 // indirect
 	github.com/subosito/gotenv v1.2.0 // indirect
-	github.com/swaggo/files v0.0.0-20190704085106-630677cd5c14 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.3.0 // indirect
-	go.opentelemetry.io/otel/internal/metric v0.26.0 // indirect
-	go.opentelemetry.io/otel/metric v0.26.0 // indirect
-	go.opentelemetry.io/proto/otlp v0.11.0 // indirect
+	github.com/swaggo/files v0.0.0-20210815190702-a29dd2bc99b2 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.6.3 // indirect
+	go.opentelemetry.io/otel/metric v0.28.0 // indirect
+	go.opentelemetry.io/proto/otlp v0.15.0 // indirect
 	go.uber.org/atomic v1.7.0 // indirect
-	go.uber.org/multierr v1.6.0 // indirect
-	golang.org/x/sys v0.0.0-20210603081109-ebe580a85c40 // indirect
-	golang.org/x/text v0.3.6 // indirect
-	golang.org/x/tools v0.1.5 // indirect
-	google.golang.org/genproto v0.0.0-20210602131652-f16073e35f0c // indirect
-	google.golang.org/protobuf v1.27.1 // indirect
-	gopkg.in/ini.v1 v1.62.0 // indirect
+	go.uber.org/multierr v1.8.0 // indirect
+	golang.org/x/sys v0.0.0-20220412211240-33da011f77ad // indirect
+	golang.org/x/text v0.3.7 // indirect
+	golang.org/x/tools v0.1.7 // indirect
+	google.golang.org/genproto v0.0.0-20220407144326-9054f6ed7bac // indirect
+	google.golang.org/protobuf v1.28.0 // indirect
+	gopkg.in/ini.v1 v1.66.4 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
+	gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect
 )

go.sum

@@ -3,6 +3,7 @@ cloud.google.com/go v0.34.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMT
 cloud.google.com/go v0.38.0/go.mod h1:990N+gfupTy94rShfmMCWGDn0LpTmnzTp2qbd1dvSRU=
 cloud.google.com/go v0.44.1/go.mod h1:iSa0KzasP4Uvy3f1mN/7PiObzGgflwredwwASm/v6AU=
 cloud.google.com/go v0.44.2/go.mod h1:60680Gw3Yr4ikxnPRS/oxxkBccT6SA1yMk63TGekxKY=
+cloud.google.com/go v0.44.3/go.mod h1:60680Gw3Yr4ikxnPRS/oxxkBccT6SA1yMk63TGekxKY=
 cloud.google.com/go v0.45.1/go.mod h1:RpBamKRgapWJb87xiFSdk4g1CME7QZg3uwTez+TSTjc=
 cloud.google.com/go v0.46.3/go.mod h1:a6bKKbmY7er1mI7TEI4lsAkts/mkhTSZK8w33B4RAg0=
 cloud.google.com/go v0.50.0/go.mod h1:r9sluTvynVuxRIOHXQEHMFffphuXHOMZMycpNR5e6To=
@@ -15,9 +16,7 @@ cloud.google.com/go v0.62.0/go.mod h1:jmCYTdRCQuc1PHIIJ/maLInMho30T/Y0M4hTdTShOY
 cloud.google.com/go v0.65.0/go.mod h1:O5N8zS7uWy9vkA9vayVHs65eM1ubvY4h553ofrNHObY=
 cloud.google.com/go v0.72.0/go.mod h1:M+5Vjvlc2wnp6tjzE102Dw08nGShTscUx2nZMufOKPI=
 cloud.google.com/go v0.74.0/go.mod h1:VV1xSbzvo+9QJOxLDaJfTjx5e+MePCpCWwvftOeQmWk=
-cloud.google.com/go v0.78.0/go.mod h1:QjdrLG0uq+YwhjoVOLsS1t7TW8fs36kLs4XO5R5ECHg=
-cloud.google.com/go v0.79.0/go.mod h1:3bzgcEeQlzbuEAYu4mrWhKqWjmpprinYgKJLgKHnbb8=
-cloud.google.com/go v0.81.0/go.mod h1:mk/AM35KwGk/Nm2YSeZbxXdrNK3KZOYHmLkOqC2V6E0=
+cloud.google.com/go v0.75.0/go.mod h1:VGuuCn7PG0dwsd5XPVm2Mm3wlh3EL55/79EKB6hlPTY=
 cloud.google.com/go/bigquery v1.0.1/go.mod h1:i/xbL2UlR5RvWAURpBYZTtm/cXjCha9lbfbpx4poX+o=
 cloud.google.com/go/bigquery v1.3.0/go.mod h1:PjpwJnslEMmckchkHFfq+HTD2DmtT67aNFKH1/VBDHE=
 cloud.google.com/go/bigquery v1.4.0/go.mod h1:S8dzgnTigyfTmLBfrtrhyYhwRxG72rYxvftPBK2Dvzc=
@@ -26,7 +25,6 @@ cloud.google.com/go/bigquery v1.7.0/go.mod h1://okPTzCYNXSlb24MZs83e2Do+h+VXtc4g
 cloud.google.com/go/bigquery v1.8.0/go.mod h1:J5hqkt3O0uAFnINi6JXValWIb1v0goeZM77hZzJN/fQ=
 cloud.google.com/go/datastore v1.0.0/go.mod h1:LXYbyblFSglQ5pkeyhO+Qmw7ukd3C+pD7TKLgZqpHYE=
 cloud.google.com/go/datastore v1.1.0/go.mod h1:umbIZjpQpHh4hmRpGhH4tLFup+FVzqBi1b3c64qFpCk=
-cloud.google.com/go/firestore v1.1.0/go.mod h1:ulACoGHTpvq5r8rxGJ4ddJZBZqakUQqClKRT5SZwBmk=
 cloud.google.com/go/pubsub v1.0.1/go.mod h1:R0Gpsv3s54REJCy4fxDixWD93lHJMoZTyQ2kNxGRt3I=
 cloud.google.com/go/pubsub v1.1.0/go.mod h1:EwwdRX2sKPjnvnqCa270oGRyludottCI76h+R3AArQw=
 cloud.google.com/go/pubsub v1.2.0/go.mod h1:jhfEVHT8odbXTkndysNHCcx0awwzvfOlguIAii9o8iA=
@@ -36,11 +34,13 @@ cloud.google.com/go/storage v1.5.0/go.mod h1:tpKbwo567HUNpVclU5sGELwQWBDZ8gh0Zeo
 cloud.google.com/go/storage v1.6.0/go.mod h1:N7U0C8pVQ/+NIKOBQyamJIeKQKkZ+mxpohlUTyfDhBk=
 cloud.google.com/go/storage v1.8.0/go.mod h1:Wv1Oy7z6Yz3DshWRJFhqM/UCfaWIRTdp0RXyy7KQOVs=
 cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9ullr3+Kg0=
+cloud.google.com/go/storage v1.14.0/go.mod h1:GrKmX003DSIwi9o29oFT7YDnHYwZoctc3fOKtUw0Xmo=
 dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
 github.com/KyleBanks/depth v1.2.1 h1:5h8fQADFrWtarTdtDudMmGsC7GPbOAu6RVB3ffsVFHc=
 github.com/KyleBanks/depth v1.2.1/go.mod h1:jzSb9d0L43HxTQfT+oSA1EEp2q+ne2uh6XgeJcm8brE=
+github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU=
 github.com/PuerkitoBio/purell v1.1.1 h1:WEQqlqaGbrPkxLJWfBwQmfEAE1Z7ONdDLqrN38tNFfI=
 github.com/PuerkitoBio/purell v1.1.1/go.mod h1:c11w/QuzBsJSee3cPx9rAFu61PvFxuPbtSwDGJws/X0=
 github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578 h1:d+Bc7a5rLufV/sSk/8dngufqelfh6jnri85riMAaF/M=
@@ -54,40 +54,39 @@ github.com/alecthomas/units v0.0.0-20151022065526-2efee857e7cf/go.mod h1:ybxpYRF
 github.com/alecthomas/units v0.0.0-20190717042225-c3de453c63f4/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0=
 github.com/alecthomas/units v0.0.0-20190924025748-f65c72e2690d/go.mod h1:rBZYJk541a8SKzHPHnH3zbiI+7dagKZ0cgpgrD7Fyho=
 github.com/antihax/optional v1.0.0/go.mod h1:uupD/76wgC+ih3iEmQUL+0Ugr19nfwCT1kdvxnR2qWY=
-github.com/armon/circbuf v0.0.0-20150827004946-bbbad097214e/go.mod h1:3U/XgcO3hCbHZ8TKRvWD2dDTCfh9M9ya+I9JpbB7O8o=
-github.com/armon/go-metrics v0.0.0-20180917152333-f0300d1749da/go.mod h1:Q73ZrmVTwzkszR9V5SSuryQ31EELlFMUz1kKyl939pY=
-github.com/armon/go-radix v0.0.0-20180808171621-7fddfc383310/go.mod h1:ufUuZ+zHj4x4TnLV4JWEpy2hxWSpsRywHrMgIH9cCH8=
 github.com/benbjohnson/clock v1.1.0 h1:Q92kusRqC1XV2MjkWETPvjJVqKetz1OzxZB7mHJLju8=
 github.com/benbjohnson/clock v1.1.0/go.mod h1:J11/hYXuz8f4ySSvYwY0FKfm+ezbsZBKZxNJlLklBHA=
 github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
 github.com/beorn7/perks v1.0.0/go.mod h1:KWe93zE9D1o94FZ5RNwFwVgaQK1VOXiVxmqh+CedLV8=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
 github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
-github.com/bgentry/speakeasy v0.1.0/go.mod h1:+zsyZBPWlz7T6j88CTgSN5bM796AkVf0kBD4zp0CCIs=
-github.com/bketelsen/crypt v0.0.4/go.mod h1:aI6NrJ0pMGgvZKL1iVgXLnfIFJtfV+bKCoqOes/6LfM=
 github.com/cenkalti/backoff/v4 v4.1.2 h1:6Yo7N8UP2K6LWZnW94DLVSSrbobcWdVzAYOisuDPIFo=
 github.com/cenkalti/backoff/v4 v4.1.2/go.mod h1:scbssz8iZGpm3xbr14ovlUdkxfGXNInqkPWOWmG2CLw=
 github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
-github.com/cespare/xxhash/v2 v2.1.1 h1:6MnRN8NT7+YBpUIWxHtefFZOKTAPgGjpQSxqLNn0+qY=
+github.com/cespare/xxhash v1.1.0/go.mod h1:XrSqR1VqqWfGrhpAt58auRo0WTKS1nRRg3ghfAqPWnc=
 github.com/cespare/xxhash/v2 v2.1.1/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
-github.com/chzyer/logex v1.1.10 h1:Swpa1K6QvQznwJRcfTfQJmTE72DqScAa40E+fbHEXEE=
+github.com/cespare/xxhash/v2 v2.1.2 h1:YRXhKfTDauu4ajMg1TPgFO5jnlC2HCbmLXMcTG5cbYE=
+github.com/cespare/xxhash/v2 v2.1.2/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI=
-github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e h1:fY5BOSpyZCqRo5OhCuC+XN+r/bBCmeuuJtjz+bCNIf8=
+github.com/chzyer/logex v1.2.0 h1:+eqR0HfOetur4tgnC8ftU5imRnhi4te+BadWS95c5AM=
+github.com/chzyer/logex v1.2.0/go.mod h1:9+9sk7u7pGNWYMkh0hdiL++6OeibzJccyQU4p4MedaY=
 github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI=
-github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1 h1:q763qf9huN11kDQavWsoZXJNW3xEE4JJyHa5Q25/sd8=
+github.com/chzyer/readline v1.5.0 h1:lSwwFrbNviGePhkewF1az4oLmcwqCZijQ2/Wi3BGHAI=
+github.com/chzyer/readline v1.5.0/go.mod h1:x22KAscuvRqlLoK9CsoYsmxoXZMMFVyOl86cAH8qUic=
 github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
+github.com/chzyer/test v0.0.0-20210722231415-061457976a23 h1:dZ0/VyGgQdVGAss6Ju0dt5P0QltE0SFY5Woh6hbIfiQ=
+github.com/chzyer/test v0.0.0-20210722231415-061457976a23/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
 github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
 github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
 github.com/cncf/udpa/go v0.0.0-20200629203442-efcf912fb354/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
 github.com/cncf/udpa/go v0.0.0-20201120205902-5459f2c99403/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
 github.com/cncf/udpa/go v0.0.0-20210930031921-04548b0d99d4/go.mod h1:6pvJx4me5XPnfI9Z40ddWsdw2W/uZgQLFXToKeRcDiI=
+github.com/cncf/xds/go v0.0.0-20210312221358-fbca930ec8ed/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cncf/xds/go v0.0.0-20210805033703-aa0b78936158/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cncf/xds/go v0.0.0-20210922020428-25de7278fc84/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cncf/xds/go v0.0.0-20211011173535-cb28da3451f1/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
-github.com/coreos/go-semver v0.3.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk=
-github.com/coreos/go-systemd/v22 v22.3.2/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc=
 github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
-github.com/cpuguy83/go-md2man/v2 v2.0.0/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
+github.com/cpuguy83/go-md2man/v2 v2.0.1/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
@@ -99,19 +98,16 @@ github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.m
 github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
 github.com/envoyproxy/go-control-plane v0.9.7/go.mod h1:cwu0lG7PUMfa9snN8LXBig5ynNVH9qI8YYLbd1fK2po=
 github.com/envoyproxy/go-control-plane v0.9.9-0.20201210154907-fd9021fe5dad/go.mod h1:cXg6YxExXjJnVBQHBLXeUAgxn2UodCpnH306RInaBQk=
-github.com/envoyproxy/go-control-plane v0.9.9-0.20210217033140-668b12f5399d/go.mod h1:cXg6YxExXjJnVBQHBLXeUAgxn2UodCpnH306RInaBQk=
+github.com/envoyproxy/go-control-plane v0.9.9-0.20210512163311-63b5d3c536b0/go.mod h1:hliV/p42l8fGbc6Y9bQ70uLwIvmJyVE5k4iMKlh8wCQ=
 github.com/envoyproxy/go-control-plane v0.9.10-0.20210907150352-cf90f659a021/go.mod h1:AFq3mo9L8Lqqiid3OhADV3RfLJnjiw63cSpi+fDTRC0=
 github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
-github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4=
-github.com/fatih/color v1.9.0 h1:8xPHl4/q1VyqGIPif1F+1V3Y3lSmrq01EabUW3CoW5s=
-github.com/fatih/color v1.9.0/go.mod h1:eQcE1qtQxscV5RaZvpXrrb8Drkc3/DdQ+uUYCNjL+zU=
+github.com/fatih/color v1.13.0 h1:8LOYc1KYPPmyKMuN8QV2DNRWNbLo6LZ0iLs8+mlH53w=
+github.com/fatih/color v1.13.0/go.mod h1:kLAiJbzzSOZDVNGyDpeOxJ47H46qBXwg5ILebYFFOfk=
 github.com/felixge/httpsnoop v1.0.2 h1:+nS9g82KMXccJ/wp0zyRW9ZBHFETmMGtkk+2CTTrW4o=
 github.com/felixge/httpsnoop v1.0.2/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
-github.com/fsnotify/fsnotify v1.4.9 h1:hsms1Qyu0jgnwNXIxa+/V/PDsU6CfLf6CNO8H7IWoS4=
-github.com/fsnotify/fsnotify v1.4.9/go.mod h1:znqG4EE+3YCdAaPaxE2ZRY/06pZUdp0tY4IgpuI1SZQ=
+github.com/fsnotify/fsnotify v1.5.1 h1:mZcQUHVQUQWoPXXtuf9yuEXKudkV2sx1E06UadKWpgI=
+github.com/fsnotify/fsnotify v1.5.1/go.mod h1:T3375wBYaZdLLcVNkcVbzGHY7f1l/uK5T5Ai1i3InKU=
 github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04=
-github.com/go-chi/chi v4.0.2+incompatible h1:maB6vn6FqCxrpz4FqWdh4+lwpyZIQS7YEAUcHlgXVRs=
-github.com/go-chi/chi v4.0.2+incompatible/go.mod h1:eB3wogJHnLi3x/kFX2A+IbTBlXxmMeXJVKy9tTv1XzQ=
 github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
@@ -121,31 +117,26 @@ github.com/go-kit/log v0.1.0/go.mod h1:zbhenjAZHb184qTLMA9ZjW7ThYL0H2mk7Q6pNt4vb
 github.com/go-logfmt/logfmt v0.3.0/go.mod h1:Qt1PoO58o5twSAckw1HlFXLmHsOX5/0LbT9GBnD5lWE=
 github.com/go-logfmt/logfmt v0.4.0/go.mod h1:3RMwSq7FuexP4Kalkev3ejPJsZTpXXBr9+V4qmtdjCk=
 github.com/go-logfmt/logfmt v0.5.0/go.mod h1:wCYkCAKZfumFQihp8CzCvQ3paCTfi41vtzG1KdI/P7A=
-github.com/go-logr/logr v1.2.0/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
-github.com/go-logr/logr v1.2.1 h1:DX7uPQ4WgAWfoh+NGGlbJQswnYIVvz0SRlLS3rPZQDA=
-github.com/go-logr/logr v1.2.1/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
-github.com/go-logr/stdr v1.2.0 h1:j4LrlVXgrbIWO83mmQUnK0Hi+YnbD+vzrE1z/EphbFE=
-github.com/go-logr/stdr v1.2.0/go.mod h1:YkVgnZu1ZjjL7xTxrfm/LLZBfkhTqSR1ydtm6jTKKwI=
+github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-logr/logr v1.2.3 h1:2DntVwHkVopvECVRSlL5PSo9eG+cAkDCuckLubN+rq0=
+github.com/go-logr/logr v1.2.3/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
+github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
 github.com/go-openapi/jsonpointer v0.19.3/go.mod h1:Pl9vOtqEWErmShwVjC8pYs9cog34VGT37dQOVbmoatg=
 github.com/go-openapi/jsonpointer v0.19.5 h1:gZr+CIYByUqjcgeLXnQu2gHYQC9o73G2XUeOFYEICuY=
 github.com/go-openapi/jsonpointer v0.19.5/go.mod h1:Pl9vOtqEWErmShwVjC8pYs9cog34VGT37dQOVbmoatg=
-github.com/go-openapi/jsonreference v0.19.4/go.mod h1:RdybgQwPxbL4UEjuAruzK1x3nE69AqPYEJeo/TWfEeg=
-github.com/go-openapi/jsonreference v0.19.5 h1:1WJP/wi4OjB4iV8KVbH73rQaoialJrqv8gitZLxGLtM=
-github.com/go-openapi/jsonreference v0.19.5/go.mod h1:RdybgQwPxbL4UEjuAruzK1x3nE69AqPYEJeo/TWfEeg=
-github.com/go-openapi/spec v0.19.14/go.mod h1:gwrgJS15eCUgjLpMjBJmbZezCsw88LmgeEip0M63doA=
-github.com/go-openapi/spec v0.20.0/go.mod h1:+81FIL1JwC5P3/Iuuozq3pPE9dXdIEGxFutcFKaVbmU=
-github.com/go-openapi/spec v0.20.3 h1:uH9RQ6vdyPSs2pSy9fL8QPspDF2AMIMPtmK5coSSjtQ=
-github.com/go-openapi/spec v0.20.3/go.mod h1:gG4F8wdEDN+YPBMVnzE85Rbhf+Th2DTvA9nFPQ5AYEg=
+github.com/go-openapi/jsonreference v0.19.6 h1:UBIxjkht+AWIgYzCDSv2GN+E/togfwXUJFRTWhl2Jjs=
+github.com/go-openapi/jsonreference v0.19.6/go.mod h1:diGHMEHg2IqXZGKxqyvWdfWU/aim5Dprw5bqpKkTvns=
+github.com/go-openapi/spec v0.20.4 h1:O8hJrt0UMnhHcluhIdUgCLRWyM2x7QkBXRvOs7m+O1M=
+github.com/go-openapi/spec v0.20.4/go.mod h1:faYFR1CvsJZ0mNsmsphTMSoRrNV3TEDoAM7FOEWeq8I=
 github.com/go-openapi/swag v0.19.5/go.mod h1:POnQmlKehdgb5mhVOsnJFsivZCEZ/vjK9gh66Z9tfKk=
-github.com/go-openapi/swag v0.19.11/go.mod h1:Uc0gKkdR+ojzsEpjh39QChyu92vPgIr72POcgHMAgSY=
-github.com/go-openapi/swag v0.19.12/go.mod h1:eFdyEBkTdoAf/9RXBvj4cr1nH7GD8Kzo5HTt47gr72M=
-github.com/go-openapi/swag v0.19.14 h1:gm3vOOXfiuw5i9p5N9xJvfjvuofpyvLA9Wr6QfK5Fng=
-github.com/go-openapi/swag v0.19.14/go.mod h1:QYRuS/SOXUCsnplDa677K7+DxSOj6IPNl/eQntq43wQ=
+github.com/go-openapi/swag v0.19.15 h1:D2NRCBzS9/pEY3gP9Nl8aDqGUcPFrwG2p+CNFrLyrCM=
+github.com/go-openapi/swag v0.19.15/go.mod h1:QYRuS/SOXUCsnplDa677K7+DxSOj6IPNl/eQntq43wQ=
 github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
-github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=
 github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
-github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
+github.com/golang/glog v1.0.0 h1:nfP3RFugxnNRyKgeWd4oI1nYvXpxrx8ck8ZrcizshdQ=
+github.com/golang/glog v1.0.0/go.mod h1:EWib/APOK0SL3dFbYqvxE3UYd8E6s1ouQ7iEp/0LWV4=
 github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
@@ -156,7 +147,6 @@ github.com/golang/mock v1.4.0/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt
 github.com/golang/mock v1.4.1/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw=
 github.com/golang/mock v1.4.3/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw=
 github.com/golang/mock v1.4.4/go.mod h1:l3mdAwkq5BuhzHwde/uurv3sEJeZMXNpwsxVWU71h+4=
-github.com/golang/mock v1.5.0/go.mod h1:CWnOUgYIOo4TcNZ0wHX3YZCqsaM1I1Jvs6v3mP3KVu8=
 github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
@@ -172,11 +162,10 @@ github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QD
 github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
 github.com/golang/protobuf v1.4.3/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
 github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
-github.com/golang/protobuf v1.5.1/go.mod h1:DopwsBzvsk0Fs44TXzsVbJyPhcCPeIwnvohx4u74HPM=
 github.com/golang/protobuf v1.5.2 h1:ROPKBNFfQgOUMifHyP+KYbvpjbdoFNs+aK7DXlji0Tw=
 github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
-github.com/gomodule/redigo v1.8.4 h1:Z5JUg94HMTR1XpwBaSH4vq3+PNSIykBLxMdglbw10gg=
-github.com/gomodule/redigo v1.8.4/go.mod h1:P9dn9mFrCBvWhGE1wpxx6fgq7BAeLBk+UUUzlpkBYO0=
+github.com/gomodule/redigo v1.8.8 h1:f6cXq6RRfiyrOJEV7p3JhLDlmawGBVBBP1MggY8Mo4E=
+github.com/gomodule/redigo v1.8.8/go.mod h1:7ArFNvsTjH8GMMzB4uy1snslv2BwmginuMs06a1uzZE=
 github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
 github.com/google/btree v1.0.0/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
 github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
@@ -187,11 +176,11 @@ github.com/google/go-cmp v0.4.1/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/
 github.com/google/go-cmp v0.5.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.1/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
-github.com/google/go-cmp v0.5.3/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.4/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
-github.com/google/go-cmp v0.5.6 h1:BKbKCqvP6I+rmFHt06ZmyQtvB8xAkWdhFyr0ZUNZcxQ=
 github.com/google/go-cmp v0.5.6/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.7 h1:81/ik6ipDQS2aGcBfIN5dHDB36BwrStyeAQquSYCV4o=
+github.com/google/go-cmp v0.5.7/go.mod h1:n+brtR0CgQNWTVd5ZUFpTBC8YFBDLK/h/bpaJ8/DtOE=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/martian v2.1.0+incompatible/go.mod h1:9I4somxYTbIHy5NJKHRl3wXiIaQGbYVAs8BPL6v8lEs=
 github.com/google/martian/v3 v3.0.0/go.mod h1:y5Zk1BBys9G+gd6Jrk0W3cC1+ELVxBWuIGO+w/tUAp0=
@@ -205,42 +194,24 @@ github.com/google/pprof v0.0.0-20200430221834-fc25d7d30c6d/go.mod h1:ZgVRPoUq/hf
 github.com/google/pprof v0.0.0-20200708004538-1a94d8640e99/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
 github.com/google/pprof v0.0.0-20201023163331-3e6fc7fc9c4c/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
 github.com/google/pprof v0.0.0-20201203190320-1bf35d6f28c2/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
-github.com/google/pprof v0.0.0-20210122040257-d980be63207e/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
-github.com/google/pprof v0.0.0-20210226084205-cbba55b83ad5/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
+github.com/google/pprof v0.0.0-20201218002935-b9804c9f04c2/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
 github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI=
 github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/googleapis/gax-go/v2 v2.0.4/go.mod h1:0Wqv26UfaUD9n4G6kQubkQ+KchISgw+vpHVxEJEs9eg=
 github.com/googleapis/gax-go/v2 v2.0.5/go.mod h1:DWXyrwAJ9X0FpwwEdw+IPEYBICEFu5mhpdKc/us6bOk=
-github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1 h1:EGx4pi6eqNxGaHF6qqu48+N2wcFQ5qg5FXgOdqsJ5d8=
+github.com/googleapis/google-cloud-go-testing v0.0.0-20200911160855-bcd43fbb19e8/go.mod h1:dvDLG8qkwmyD9a/MJJN3XJcT3xFxOKAvTZGvuZmac9g=
 github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY=
-github.com/gorilla/mux v1.7.3/go.mod h1:1lud6UwP+6orDFRuTfBEV8e9/aOM/c4fVVCaMa2zaAs=
 github.com/gorilla/mux v1.8.0 h1:i40aqfkR1h2SlN9hojwV5ZA91wcXFOvkdNIeFDP5koI=
 github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB71So=
-github.com/gorilla/websocket v1.4.2 h1:+/TMaTYc4QFitKJxsQ7Yye35DkWvkdLcvGKqM+x0Ufc=
-github.com/gorilla/websocket v1.4.2/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
-github.com/grpc-ecosystem/grpc-gateway v1.16.0 h1:gmcG1KaJ57LophUzW0Hy8NmPhnMZb4M0+kPpLofRdBo=
+github.com/gorilla/websocket v1.5.0 h1:PPwGk2jz7EePpoHN/+ClbZu8SPxiqlu12wZP/3sWmnc=
+github.com/gorilla/websocket v1.5.0/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
 github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw=
-github.com/hashicorp/consul/api v1.1.0/go.mod h1:VmuI/Lkw1nC05EYQWNKwWGbkg+FbDBtguAZLlVdkD9Q=
-github.com/hashicorp/consul/sdk v0.1.1/go.mod h1:VKf9jXwCTEY1QZP2MOLRhb5i/I/ssyNV1vwHyQBF0x8=
-github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
-github.com/hashicorp/go-cleanhttp v0.5.1/go.mod h1:JpRdi6/HCYpAwUzNwuwqhbovhLtngrth3wmdIIUrZ80=
-github.com/hashicorp/go-immutable-radix v1.0.0/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
-github.com/hashicorp/go-msgpack v0.5.3/go.mod h1:ahLV/dePpqEmjfWmKiqvPkv/twdG7iPBM1vqhUKIvfM=
-github.com/hashicorp/go-multierror v1.0.0/go.mod h1:dHtQlpGsu+cZNNAkkCN/P3hoUDHhCYQXV3UM06sGGrk=
-github.com/hashicorp/go-rootcerts v1.0.0/go.mod h1:K6zTfqpRlCUIjkwsN4Z+hiSfzSTQa6eBIzfwKfwNnHU=
-github.com/hashicorp/go-sockaddr v1.0.0/go.mod h1:7Xibr9yA9JjQq1JpNB2Vw7kxv8xerXegt+ozgdvDeDU=
-github.com/hashicorp/go-syslog v1.0.0/go.mod h1:qPfqrKkXGihmCqbJM2mZgkZGvKG1dFdvsLplgctolz4=
-github.com/hashicorp/go-uuid v1.0.0/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
-github.com/hashicorp/go-uuid v1.0.1/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
-github.com/hashicorp/go.net v0.0.1/go.mod h1:hjKkEWcCURg++eb33jQU7oqQcI9XDCnUzHA0oac0k90=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.0 h1:BZHcxBETFHIdVyhyEfOvn/RdU/QGdLI4y34qQGjGWO0=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.0/go.mod h1:hgWBS7lorOAVIJEQMi4ZsPv9hVvWI6+ch50m39Pf2Ks=
 github.com/hashicorp/golang-lru v0.5.0/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
 github.com/hashicorp/golang-lru v0.5.1/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
 github.com/hashicorp/hcl v1.0.0 h1:0Anlzjpi4vEasTeNFn2mLJgTSwt0+6sfsiTG8qcWGx4=
 github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ=
-github.com/hashicorp/logutils v1.0.0/go.mod h1:QIAnNjmIWmVIIkWDTG1z5v++HQmx9WQRO+LraFDTW64=
-github.com/hashicorp/mdns v1.0.0/go.mod h1:tL+uN++7HEJ6SQLQ2/p+z2pH24WQKWjBPkE0mNTz8vQ=
-github.com/hashicorp/memberlist v0.1.3/go.mod h1:ajVTdAv/9Im8oMAAj5G31PhhMCZJV2pPBoIllUwCN7I=
-github.com/hashicorp/serf v0.8.2/go.mod h1:6hOLApaqBFA1NXqRQAsxw9QxuDEvNxSQRwA/JwenrHc=
 github.com/ianlancetaylor/demangle v0.0.0-20181102032728-5e5cf60278f6/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
 github.com/ianlancetaylor/demangle v0.0.0-20200824232613-28f6c0f3b639/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
 github.com/inconshreveable/mousetrap v1.0.0 h1:Z8tu5sraLXCXIcARxBp/8cbvlwVa7Z1NHg9XEKhtSvM=
@@ -251,13 +222,12 @@ github.com/jpillora/backoff v1.0.0/go.mod h1:J/6gKK9jxlEcS3zixgDgUAsiuZ7yrSoa/FX
 github.com/json-iterator/go v1.1.6/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
 github.com/json-iterator/go v1.1.10/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
 github.com/json-iterator/go v1.1.11/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
+github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/jstemmer/go-junit-report v0.0.0-20190106144839-af01ea7f8024/go.mod h1:6v2b51hI/fHJwM22ozAgKL4VKDeJcHhJFhtBdhmNjmU=
 github.com/jstemmer/go-junit-report v0.9.1/go.mod h1:Brl9GWCQeLvo8nXZwPNNblvFj/XSXhF0NWZEnDohbsk=
-github.com/jtolds/gls v4.20.0+incompatible h1:xdiiI2gbIgH/gLH7ADydsJ1uDOEzR8yvV7C0MuV77Wo=
 github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU=
 github.com/julienschmidt/httprouter v1.2.0/go.mod h1:SYymIcj16QtmaHHD7aYtjjsJG7VTCxuUUipMqKk8s4w=
 github.com/julienschmidt/httprouter v1.3.0/go.mod h1:JR6WtHb+2LUe8TCKY3cZOxFyyO8IZAc4RVcycCCAKdM=
-github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/konsorten/go-windows-terminal-sequences v1.0.3/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
@@ -268,36 +238,27 @@ github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
-github.com/magiconair/properties v1.8.5 h1:b6kJs+EmPFMYGkow9GiUyCyOvIwYetYJ3fSaWak/Gls=
-github.com/magiconair/properties v1.8.5/go.mod h1:y3VJvCyxH9uVvJTWEGAELF3aiYNyPKd5NZ3oSwXrF60=
+github.com/magiconair/properties v1.8.6 h1:5ibWZ6iY0NctNGWo87LalDlEZ6R41TqbbDamhfG/Qzo=
+github.com/magiconair/properties v1.8.6/go.mod h1:y3VJvCyxH9uVvJTWEGAELF3aiYNyPKd5NZ3oSwXrF60=
 github.com/mailru/easyjson v0.0.0-20190614124828-94de47d64c63/go.mod h1:C1wdFJiN94OJF2b5HbByQZoLdCWB1Yqtg26g4irojpc=
 github.com/mailru/easyjson v0.0.0-20190626092158-b2ccc519800e/go.mod h1:C1wdFJiN94OJF2b5HbByQZoLdCWB1Yqtg26g4irojpc=
 github.com/mailru/easyjson v0.7.6 h1:8yTIVnZgCoiM1TgqoeTl+LfU5Jg6/xL3QhGQnimLYnA=
 github.com/mailru/easyjson v0.7.6/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
-github.com/mattn/go-colorable v0.0.9/go.mod h1:9vuHe8Xs5qXnSaW/c/ABM9alt+Vo+STaOChaDxuIBZU=
-github.com/mattn/go-colorable v0.1.4 h1:snbPLB8fVfU9iwbbo30TPtbLRzwWu6aJS6Xh4eaaviA=
-github.com/mattn/go-colorable v0.1.4/go.mod h1:U0ppj6V5qS13XJ6of8GYAs25YV2eR4EVcfRqFIhoBtE=
-github.com/mattn/go-isatty v0.0.3/go.mod h1:M+lRXTBqGeGNdLjl/ufCoiOlB5xdOkqRJdNxMWT7Zi4=
-github.com/mattn/go-isatty v0.0.8/go.mod h1:Iq45c/XA43vh69/j3iqttzPXn0bhXyGjM0Hdxcsrc5s=
-github.com/mattn/go-isatty v0.0.11/go.mod h1:PhnuNfih5lzO57/f3n+odYbM4JtupLOxQOAqxQCu2WE=
-github.com/mattn/go-isatty v0.0.12 h1:wuysRhFDzyxgEmMf5xjvJ2M9dZoWAXNNr5LSBS7uHXY=
+github.com/mattn/go-colorable v0.1.9/go.mod h1:u6P/XSegPjTcexA+o6vUJrdnUu04hMope9wVRipJSqc=
+github.com/mattn/go-colorable v0.1.12 h1:jF+Du6AlPIjs2BiUiQlKOX0rt3SujHxPnksPKZbaA40=
+github.com/mattn/go-colorable v0.1.12/go.mod h1:u5H1YNBxpqRaxsYJYSkiCWKzEfiAb1Gb520KVy5xxl4=
 github.com/mattn/go-isatty v0.0.12/go.mod h1:cbi8OIDigv2wuxKPP5vlRcQ1OAZbq2CE4Kysco4FUpU=
+github.com/mattn/go-isatty v0.0.14 h1:yVuAays6BHfxijgZPzw+3Zlu5yQgKGP2/hcQbHb7S9Y=
+github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27kJ6hsGG94=
 github.com/matttproud/golang_protobuf_extensions v1.0.1 h1:4hp9jkHxhMHkqkrB3Ix0jegS5sx/RkqARlsWZ6pIwiU=
 github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
-github.com/miekg/dns v1.0.14/go.mod h1:W1PPwlIAgtquWBMBEV9nkV9Cazfe8ScdGz/Lj7v3Nrg=
-github.com/mitchellh/cli v1.0.0/go.mod h1:hNIlj7HEI86fIcpObd7a0FcrxTWetlwJDGcceTlRvqc=
-github.com/mitchellh/go-homedir v1.0.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
-github.com/mitchellh/go-testing-interface v1.0.0/go.mod h1:kRemZodwjscx+RGhAo8eIhFbs2+BFgRtFPeD/KE+zxI=
-github.com/mitchellh/gox v0.4.0/go.mod h1:Sd9lOJ0+aimLBi73mGofS1ycjY8lL3uZM3JPS42BGNg=
-github.com/mitchellh/iochan v1.0.0/go.mod h1:JwYml1nuB7xOzsp52dPpHFffvOCDupsG0QubkSMEySY=
-github.com/mitchellh/mapstructure v0.0.0-20160808181253-ca63d7c062ee/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
-github.com/mitchellh/mapstructure v1.1.2/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
-github.com/mitchellh/mapstructure v1.4.1 h1:CpVNEelQCZBooIPDn+AR3NpivK/TIKU8bDxdASFVQag=
-github.com/mitchellh/mapstructure v1.4.1/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
+github.com/mitchellh/mapstructure v1.4.3 h1:OVowDSCllw/YjdLkam3/sm7wEtOy59d8ndGgCcyj8cs=
+github.com/mitchellh/mapstructure v1.4.3/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
 github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/reflect2 v0.0.0-20180701023420-4b7aa43c6742/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
 github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
+github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e h1:fD57ERR4JtEqsWbfPhv4DMiApHyliiK5xCTNVSPiaAs=
@@ -308,22 +269,23 @@ github.com/otiai10/curr v0.0.0-20150429015615-9b4961190c95/go.mod h1:9qAhocn7zKJ
 github.com/otiai10/curr v1.0.0/go.mod h1:LskTG5wDwr8Rs+nNQ+1LlxRjAtTZZjtJW4rMXl6j4vs=
 github.com/otiai10/mint v1.3.0/go.mod h1:F5AjcsTsWUqX+Na9fpHb52P8pcRX2CI6A3ctIT91xUo=
 github.com/otiai10/mint v1.3.3/go.mod h1:/yxELlJQ0ufhjUwhshSj+wFjZ78CnZ48/1wtmBH1OTc=
-github.com/pascaldekloe/goe v0.0.0-20180627143212-57f6aae5913c/go.mod h1:lzWF7FIEvWOWxwDKqyGYQf6ZUaNfKdP144TG7ZOy1lc=
-github.com/pelletier/go-toml v1.9.3 h1:zeC5b1GviRUyKYd6OJPvBU/mcVDVoL1OhT17FCt5dSQ=
-github.com/pelletier/go-toml v1.9.3/go.mod h1:u1nR/EPcESfeI/szUZKdtJ0xRNbUoANCkoOuaOx1Y+c=
+github.com/pelletier/go-toml v1.9.4 h1:tjENF6MfZAg8e4ZmZTeWaWiT2vXtsoO6+iuOjFhECwM=
+github.com/pelletier/go-toml v1.9.4/go.mod h1:u1nR/EPcESfeI/szUZKdtJ0xRNbUoANCkoOuaOx1Y+c=
+github.com/pelletier/go-toml/v2 v2.0.0-beta.8 h1:dy81yyLYJDwMTifq24Oi/IslOslRrDSb3jwDggjz3Z0=
+github.com/pelletier/go-toml/v2 v2.0.0-beta.8/go.mod h1:r9LEWfGN8R5k0VXJ+0BkIe7MYkRdwZOjgMj2KwnJFUo=
 github.com/pkg/errors v0.8.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
 github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
-github.com/pkg/sftp v1.10.1/go.mod h1:lYOWFsE0bwd1+KfKJaKeuokY15vzFx25BLbzYYoAxZI=
+github.com/pkg/sftp v1.13.1/go.mod h1:3HaPG6Dq1ILlpPZRO0HVMrsydcdLt6HRDccSgb87qRg=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/posener/complete v1.1.1/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndrE9hABlRI=
 github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
 github.com/prometheus/client_golang v1.0.0/go.mod h1:db9x61etRT2tGnBNRi70OPL5FsnadC4Ky3P0J6CfImo=
 github.com/prometheus/client_golang v1.7.1/go.mod h1:PY5Wy2awLA44sXw4AOSfFBetzPP4j5+D6mVACh+pe2M=
-github.com/prometheus/client_golang v1.11.0 h1:HNkLOAEQMIDv/K+04rukrLx6ch7msSRwf3/SASFAGtQ=
 github.com/prometheus/client_golang v1.11.0/go.mod h1:Z6t4BnS23TR94PD6BsDNk8yVqroYurpAkEiz0P2BEV0=
+github.com/prometheus/client_golang v1.12.1 h1:ZiaPsmm9uiBeaSMRznKsCDNtPCS0T3JVDGF+06gjBzk=
+github.com/prometheus/client_golang v1.12.1/go.mod h1:3Z9XVyYiZYEO+YQWt3RD2R3jrbd179Rt297l4aS6nDY=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
@@ -331,38 +293,38 @@ github.com/prometheus/client_model v0.2.0 h1:uq5h0d+GuxiXLJLNABMgp2qUWDPiLvgCzz2
 github.com/prometheus/client_model v0.2.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/common v0.4.1/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
 github.com/prometheus/common v0.10.0/go.mod h1:Tlit/dnDKsSWFlCLTWaA1cyBgKHSMdTB80sz/V91rCo=
-github.com/prometheus/common v0.26.0 h1:iMAkS2TDoNWnKM+Kopnx/8tnEStIfpYA0ur0xQzzhMQ=
 github.com/prometheus/common v0.26.0/go.mod h1:M7rCNAaPfAosfx8veZJCuw84e35h3Cfd9VFqTh1DIvc=
+github.com/prometheus/common v0.32.1 h1:hWIdL3N2HoUx3B8j3YN9mWor0qhY/NlEKZEaXxuIRh4=
+github.com/prometheus/common v0.32.1/go.mod h1:vu+V0TpY+O6vW9J44gczi3Ap/oXXR10b+M/gUGO4Hls=
 github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
 github.com/prometheus/procfs v0.0.2/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsTZCD3I8kEA=
 github.com/prometheus/procfs v0.1.3/go.mod h1:lV6e/gmhEcM9IjHGsFOCxxuZ+z1YqCvr4OA4YeYWdaU=
-github.com/prometheus/procfs v0.6.0 h1:mxy4L2jP6qMonqmq+aTtOx1ifVWUgG/TAmntgbh3xv4=
 github.com/prometheus/procfs v0.6.0/go.mod h1:cz+aTbrPOrUb4q7XlbU9ygM+/jj0fzG6c1xBZuNvfVA=
+github.com/prometheus/procfs v0.7.3 h1:4jVXhlkAyzOScmCkXBTOLRLTz8EeU+eyjrwB/EPq0VU=
+github.com/prometheus/procfs v0.7.3/go.mod h1:cz+aTbrPOrUb4q7XlbU9ygM+/jj0fzG6c1xBZuNvfVA=
 github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ=
 github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/russross/blackfriday/v2 v2.0.1/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
-github.com/ryanuber/columnize v0.0.0-20160712163229-9b3edd62028f/go.mod h1:sm1tb6uqfes/u+d4ooFouqFdy9/2g9QGwK3SQygK0Ts=
-github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529/go.mod h1:DxrIzT+xaE7yg65j358z/aeFdxmN0P9QXhEzd20vsDc=
+github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
 github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/sirupsen/logrus v1.6.0/go.mod h1:7uNnSEd1DgxDLC74fIahvMZmmYsHGZGEOFrfsX/uA88=
-github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d h1:zE9ykElWQ6/NYmHa3jpm/yHnI4xSofP+UP6SpjHcSeM=
 github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d/go.mod h1:OnSkiWE9lh6wB0YB77sQom3nweQdgAjqCqsofrRNTgc=
-github.com/smartystreets/goconvey v1.6.4 h1:fv0U8FUIMPNf1L9lnHLvLhgicrIVChEkdzIKYqbNC9s=
 github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
-github.com/spf13/afero v1.6.0 h1:xoax2sJ2DT8S8xA2paPFjDCScCNeWsg75VG0DLRreiY=
-github.com/spf13/afero v1.6.0/go.mod h1:Ai8FlHk4v/PARR026UzYexafAt9roJ7LcLMAmO6Z93I=
-github.com/spf13/cast v1.3.1 h1:nFm6S0SMdyzrzcmThSipiEubIDy8WEXKNZ0UOgiRpng=
-github.com/spf13/cast v1.3.1/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
-github.com/spf13/cobra v1.2.1 h1:+KmjbUw1hriSNMF55oPrkZcb27aECyrj8V2ytv7kWDw=
-github.com/spf13/cobra v1.2.1/go.mod h1:ExllRjgxM/piMAM+3tAZvg8fsklGAf3tPfi+i8t68Nk=
+github.com/spaolacci/murmur3 v0.0.0-20180118202830-f09979ecbc72/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA=
+github.com/spf13/afero v1.8.2 h1:xehSyVa0YnHWsJ49JFljMpg1HX19V6NDZ1fkm1Xznbo=
+github.com/spf13/afero v1.8.2/go.mod h1:CtAatgMJh6bJEIs48Ay/FOnkljP3WeGUG0MC1RfAqwo=
+github.com/spf13/cast v1.4.1 h1:s0hze+J0196ZfEMTs80N7UlFt0BDuQ7Q+JDnHiMWKdA=
+github.com/spf13/cast v1.4.1/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
+github.com/spf13/cobra v1.4.0 h1:y+wJpx64xcgO1V+RcnwW0LEHxTKRi2ZDPSBjWnrg88Q=
+github.com/spf13/cobra v1.4.0/go.mod h1:Wo4iy3BUC+X2Fybo0PDqwJIv3dNRiZLHQymsfxlB84g=
 github.com/spf13/jwalterweatherman v1.1.0 h1:ue6voC5bR5F8YxI5S67j9i582FU4Qvo2bmqnqMYADFk=
 github.com/spf13/jwalterweatherman v1.1.0/go.mod h1:aNWZUN0dPAAO/Ljvb5BEdw96iTZ0EXowPYD95IqWIGo=
 github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
 github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
-github.com/spf13/viper v1.8.1 h1:Kq1fyeebqsBfbjZj4EL7gj2IO0mMaiyjYUWcUsl2O44=
-github.com/spf13/viper v1.8.1/go.mod h1:o0Pch8wJ9BVSWGQMbra6iw0oQ5oktSIBaujf1rJH9Ns=
+github.com/spf13/viper v1.11.0 h1:7OX/1FS6n7jHD1zGrZTM7WtY13ZELRyosK4k93oPr44=
+github.com/spf13/viper v1.11.0/go.mod h1:djo0X/bA5+tYVoCn+C7cAYJGcVn/qYLFTG8gdUsX7Zk=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
@@ -370,84 +332,85 @@ github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UV
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
 github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
-github.com/stretchr/testify v1.7.0 h1:nwc3DEeHmmLAfoZucVR881uASk0Mfjw8xYJ99tb5CcY=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.1 h1:5TQK59W5E3v0r2duFAb7P95B6hEeOyEnHRa8MjYSMTY=
+github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/subosito/gotenv v1.2.0 h1:Slr1R9HxAlEKefgq5jn9U+DnETlIUa6HfgEzj0g5d7s=
 github.com/subosito/gotenv v1.2.0/go.mod h1:N0PQaV/YGNqwC0u51sEeR/aUtSLEXKX9iv69rRypqCw=
-github.com/swaggo/files v0.0.0-20190704085106-630677cd5c14 h1:PyYN9JH5jY9j6av01SpfRMb+1DWg/i3MbGOKPxJ2wjM=
-github.com/swaggo/files v0.0.0-20190704085106-630677cd5c14/go.mod h1:gxQT6pBGRuIGunNf/+tSOB5OHvguWi8Tbt82WOkf35E=
-github.com/swaggo/http-swagger v1.0.0 h1:ksYgVBCYmAaxFsGVGojlPROgYfiQQSllETTWMtHJHTo=
-github.com/swaggo/http-swagger v1.0.0/go.mod h1:cKIcshBU9yEAnfWv6ZzVKSsEf8h5ozxB8/zHQWyOQ/8=
-github.com/swaggo/swag v1.7.0/go.mod h1:BdPIL73gvS9NBsdi7M1JOxLvlbfvNRaBP8m6WT6Aajo=
-github.com/swaggo/swag v1.7.6 h1:UbAqHyXkW2J+cDjs5S43MkuYR7a6stB7Am7SK8NBmRg=
-github.com/swaggo/swag v1.7.6/go.mod h1:7vLqNYEtYoIsD14wXgy9oDS65MNiDANrPtbk9rnLuj0=
+github.com/swaggo/files v0.0.0-20210815190702-a29dd2bc99b2 h1:+iNTcqQJy0OZ5jk6a5NLib47eqXK8uYcPX+O4+cBpEM=
+github.com/swaggo/files v0.0.0-20210815190702-a29dd2bc99b2/go.mod h1:lKJPbtWzJ9JhsTN1k1gZgleJWY/cqq0psdoMmaThG3w=
+github.com/swaggo/http-swagger v1.2.6 h1:ihTjChUoSRMpFMjWw+0AkL1Ti4r6v8pCgVYLmQVRlRw=
+github.com/swaggo/http-swagger v1.2.6/go.mod h1:CcoICgY3yVDk2u1LQUCMHbAj0fjlxIX+873psXlIKNA=
+github.com/swaggo/swag v1.7.9/go.mod h1:gZ+TJ2w/Ve1RwQsA2IRoSOTidHz6DX+PIG8GWvbnoLU=
+github.com/swaggo/swag v1.8.1 h1:JuARzFX1Z1njbCGz+ZytBR15TFJwF2Q7fu8puJHhQYI=
+github.com/swaggo/swag v1.8.1/go.mod h1:ugemnJsPZm/kRwFUnzBlbHRd0JY9zE1M4F+uy2pAaPQ=
 github.com/urfave/cli/v2 v2.3.0/go.mod h1:LJmUH05zAU44vOAcrfzZQKsZbVcdbOG8rtL3/XcUArI=
 github.com/yuin/goldmark v1.1.25/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.1.32/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
-go.etcd.io/etcd/api/v3 v3.5.0/go.mod h1:cbVKeC6lCfl7j/8jBhAK6aIYO9XOjdptoxU/nLQcPvs=
-go.etcd.io/etcd/client/pkg/v3 v3.5.0/go.mod h1:IJHfcCEKxYu1Os13ZdwCwIUTUVGYTSAM3YSwc9/Ac1g=
-go.etcd.io/etcd/client/v2 v2.305.0/go.mod h1:h9puh54ZTgAKtEbut2oe9P4L/oqKCVB6xsXlzd7alYQ=
+github.com/yuin/goldmark v1.4.0/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
 go.opencensus.io v0.21.0/go.mod h1:mSImk1erAIZhrmZN+AvHh14ztQfjbGwt4TtuofqLduU=
 go.opencensus.io v0.22.0/go.mod h1:+kGneAE2xo2IficOXnaByMWTGM9T73dGwxeWcUqIpI8=
 go.opencensus.io v0.22.2/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw=
 go.opencensus.io v0.22.3/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw=
 go.opencensus.io v0.22.4/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw=
 go.opencensus.io v0.22.5/go.mod h1:5pWMHQbX5EPX2/62yrJeAkowc+lfs/XD7Uxpq3pI6kk=
-go.opencensus.io v0.23.0/go.mod h1:XItmlyltB5F7CS4xOC1DcqMoFqwtC6OG2xF7mCv7P7E=
-go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux v0.28.0 h1:jGqTKfqtAbO+89WoLP7PuuOp2qCjaf+WkEDblYKL43k=
-go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux v0.28.0/go.mod h1:M4oIwAKStYVkLiVuW0+yPXrwd+pjss8kr547uaJ0cJQ=
-go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.28.0 h1:3bv6d9BPHoaZLcl7OBYlmymaxAt0mngfDFkulGw2LXY=
-go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.28.0/go.mod h1:y6HdV2Mk43TiOiNvrxczQQX2enNN9sQVR9lXfnJj6JQ=
-go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.28.0 h1:hpEoMBvKLC6CqFZogJypr9IHwwSNF3ayEkNzD502QAM=
-go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.28.0/go.mod h1:Ihno+mNBfZlT0Qot3XyRTdZ/9U/Cg2Pfgj75DTdIfq4=
-go.opentelemetry.io/contrib/propagators/aws v1.3.0 h1:BHhTUInxLQ6duq167/RIYERH6JM/33kYqePoCmSJsoM=
-go.opentelemetry.io/contrib/propagators/aws v1.3.0/go.mod h1:ugiMjPVWkdZy6FcU7YVYXF5jgLqiigf9TjDY+aRLjdw=
-go.opentelemetry.io/contrib/propagators/b3 v1.3.0 h1:f+JfMSDNm2u+fekYYjyoixk+DWDTDAGD3SC50y61koE=
-go.opentelemetry.io/contrib/propagators/b3 v1.3.0/go.mod h1:qzi0km8qO3l2jxB5aDg4Q9xyqV4HKnCWZYpVYDTUIT0=
-go.opentelemetry.io/contrib/propagators/jaeger v1.3.0 h1:yBy4QZXuMA7s3+uhLK556NdmjKpj3RjGMaW+WMLU6CM=
-go.opentelemetry.io/contrib/propagators/jaeger v1.3.0/go.mod h1:igceHZGoCcIJavRTG1dS7+9Vnoid4qa7SZPa7doupq8=
-go.opentelemetry.io/contrib/propagators/ot v1.3.0 h1:hqFpnicJXKy8l8PfwFWhRSt/TgOHCpugKiXsPP1zJUc=
-go.opentelemetry.io/contrib/propagators/ot v1.3.0/go.mod h1:Gpwe4R8j9Zbw7aaADYSQRE1U0o41j0TwnHxuhwRLklk=
-go.opentelemetry.io/otel v1.3.0 h1:APxLf0eiBwLl+SOXiJJCVYzA1OOJNyAoV8C5RNRyy7Y=
-go.opentelemetry.io/otel v1.3.0/go.mod h1:PWIKzi6JCp7sM0k9yZ43VX+T345uNbAkDKwHVjb2PTs=
-go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.3.0 h1:R/OBkMoGgfy2fLhs2QhkCI1w4HLEQX92GCcJB6SSdNk=
-go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.3.0/go.mod h1:VpP4/RMn8bv8gNo9uK7/IMY4mtWLELsS+JIP0inH0h4=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.3.0 h1:giGm8w67Ja7amYNfYMdme7xSp2pIxThWopw8+QP51Yk=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.3.0/go.mod h1:hO1KLR7jcKaDDKDkvI9dP/FIhpmna5lkqPUQdEjFAM8=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.3.0 h1:VQbUHoJqytHHSJ1OZodPH9tvZZSVzUHjPHpkO85sT6k=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.3.0/go.mod h1:keUU7UfnwWTWpJ+FWnyqmogPa82nuU5VUANFq49hlMY=
-go.opentelemetry.io/otel/internal/metric v0.26.0 h1:dlrvawyd/A+X8Jp0EBT4wWEe4k5avYaXsXrBr4dbfnY=
-go.opentelemetry.io/otel/internal/metric v0.26.0/go.mod h1:CbBP6AxKynRs3QCbhklyLUtpfzbqCLiafV9oY2Zj1Jk=
-go.opentelemetry.io/otel/metric v0.26.0 h1:VaPYBTvA13h/FsiWfxa3yZnZEm15BhStD8JZQSA773M=
-go.opentelemetry.io/otel/metric v0.26.0/go.mod h1:c6YL0fhRo4YVoNs6GoByzUgBp36hBL523rECoZA5UWg=
-go.opentelemetry.io/otel/sdk v1.3.0 h1:3278edCoH89MEJ0Ky8WQXVmDQv3FX4ZJ3Pp+9fJreAI=
-go.opentelemetry.io/otel/sdk v1.3.0/go.mod h1:rIo4suHNhQwBIPg9axF8V9CA72Wz2mKF1teNrup8yzs=
-go.opentelemetry.io/otel/trace v1.3.0 h1:doy8Hzb1RJ+I3yFhtDmwNc7tIyw1tNMOIsyPzp1NOGY=
-go.opentelemetry.io/otel/trace v1.3.0/go.mod h1:c/VDhno8888bvQYmbYLqe41/Ldmr/KKunbvWM4/fEjk=
+go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux v0.31.0 h1:JsG81EydEUqQ4YwMagcoB+ORr8SpyvsH0YuKlqkx+Ws=
+go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux v0.31.0/go.mod h1:Vki7CMG0YusPVM+qESMzjYVoJrpW1rzpHyLfjg+ehoU=
+go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.31.0 h1:lBr/T645/1dty/uEdSeW0gXGn065B7ot0i0eYsHIHYU=
+go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.31.0/go.mod h1:UmlBhKeBJLuVUTKk6X5SX4/ce6tBvMDPZkEZoxGlVoM=
+go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.31.0 h1:woM+Mb4d0A+Dxa3rYPenSN5ZeS9qHUvE8rlObiLRXTY=
+go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.31.0/go.mod h1:PFmBsWbldL1kiWZk9+0LBZz2brhByaGsvp6pRICMlPE=
+go.opentelemetry.io/contrib/propagators/aws v1.6.0 h1:ISWN3Eeiw+MNnNFpuIafAbXgzHqeGxd0CfuKCK4xG78=
+go.opentelemetry.io/contrib/propagators/aws v1.6.0/go.mod h1:fOmOQxE2MRdO7NXEpvOslkTlR7bnUyEGwxAGCmfWPy4=
+go.opentelemetry.io/contrib/propagators/b3 v1.6.0 h1:rHeNbko1wNe1Sazpw5IJD83x43lfzMnDb8vckdKxRu8=
+go.opentelemetry.io/contrib/propagators/b3 v1.6.0/go.mod h1:6kJAkL2/nNqP9AYhm/8j4dzVU8BfpcvYr2cy25RGBak=
+go.opentelemetry.io/contrib/propagators/jaeger v1.6.0 h1:tCc+sWgHVeOMp4zmUxHHTaoA5vQlGO089zfg97d+BvU=
+go.opentelemetry.io/contrib/propagators/jaeger v1.6.0/go.mod h1:cqu1XdBYBXqXHxZLJdK00G9rT5Hda7Fa938I8LVYz/Y=
+go.opentelemetry.io/contrib/propagators/ot v1.6.0 h1:037SbrdXn9muL3aj8jhEbQjeL2NecN4Hw3fM3etW86Y=
+go.opentelemetry.io/contrib/propagators/ot v1.6.0/go.mod h1:3VhQsa8GmFmWZ8G2tuEW6MtdkCINcqXAvf2k5qlvEtA=
+go.opentelemetry.io/otel v1.6.0/go.mod h1:bfJD2DZVw0LBxghOTlgnlI0CV3hLDu9XF/QKOUXMTQQ=
+go.opentelemetry.io/otel v1.6.1/go.mod h1:blzUabWHkX6LJewxvadmzafgh/wnvBSDBdOuwkAtrWQ=
+go.opentelemetry.io/otel v1.6.3 h1:FLOfo8f9JzFVFVyU+MSRJc2HdEAXQgm7pIv2uFKRSZE=
+go.opentelemetry.io/otel v1.6.3/go.mod h1:7BgNga5fNlF/iZjG06hM3yofffp0ofKCDwSXx1GC4dI=
+go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.6.3 h1:nAmg1WgsUXoXf46dJG9eS/AzOcvkCTK4xJSUYpWyHYg=
+go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.6.3/go.mod h1:NEu79Xo32iVb+0gVNV8PMd7GoWqnyDXRlj04yFjqz40=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.6.3 h1:4/UjHWMVVc5VwX/KAtqJOHErKigMCH8NexChMuanb/o=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.6.3/go.mod h1:UJmXdiVVBaZ63umRUTwJuCMAV//GCMvDiQwn703/GoY=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.6.3 h1:leYDq5psbM3K4QNcZ2juCj30LjUnvxjuYQj1mkGjXFM=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.6.3/go.mod h1:ycItY/esVj8c0dKgYTOztTERXtPzcfDU/0o8EdwCjoA=
+go.opentelemetry.io/otel/metric v0.28.0 h1:o5YNh+jxACMODoAo1bI7OES0RUW4jAMae0Vgs2etWAQ=
+go.opentelemetry.io/otel/metric v0.28.0/go.mod h1:TrzsfQAmQaB1PDcdhBauLMk7nyyg9hm+GoQq/ekE9Iw=
+go.opentelemetry.io/otel/sdk v1.6.1/go.mod h1:IVYrddmFZ+eJqu2k38qD3WezFR2pymCzm8tdxyh3R4E=
+go.opentelemetry.io/otel/sdk v1.6.3 h1:prSHYdwCQOX5DrsEzxowH3nLhoAzEBdZhvrR79scfLs=
+go.opentelemetry.io/otel/sdk v1.6.3/go.mod h1:A4iWF7HTXa+GWL/AaqESz28VuSBIcZ+0CV+IzJ5NMiQ=
+go.opentelemetry.io/otel/trace v1.6.0/go.mod h1:qs7BrU5cZ8dXQHBGxHMOxwME/27YH2qEp4/+tZLLwJE=
+go.opentelemetry.io/otel/trace v1.6.1/go.mod h1:RkFRM1m0puWIq10oxImnGEduNBzxiN7TXluRBtE+5j0=
+go.opentelemetry.io/otel/trace v1.6.3 h1:IqN4L+5b0mPNjdXIiZ90Ni4Bl5BRkDQywePLWemd9bc=
+go.opentelemetry.io/otel/trace v1.6.3/go.mod h1:GNJQusJlUgZl9/TQBPKU/Y/ty+0iVB5fjhKeJGZPGFs=
 go.opentelemetry.io/proto/otlp v0.7.0/go.mod h1:PqfVotwruBrMGOCsRd/89rSnXhoiJIqeYNgFYFoEGnI=
-go.opentelemetry.io/proto/otlp v0.11.0 h1:cLDgIBTf4lLOlztkhzAEdQsJ4Lj+i5Wc9k6Nn0K1VyU=
-go.opentelemetry.io/proto/otlp v0.11.0/go.mod h1:QpEjXPrNQzrFDZgoTo49dgHR9RYRSrg3NAKnUGl9YpQ=
+go.opentelemetry.io/proto/otlp v0.15.0 h1:h0bKrvdrT/9sBwEJ6iWUqT/N/xPcS66bL4u3isneJ6w=
+go.opentelemetry.io/proto/otlp v0.15.0/go.mod h1:H7XAot3MsfNsj7EXtrA2q5xSNQ10UqI405h3+duxN4U=
 go.uber.org/atomic v1.7.0 h1:ADUqmZGgLDDfbSL9ZmPxKTybcoEYHgpYfELNoN+7hsw=
 go.uber.org/atomic v1.7.0/go.mod h1:fEN4uk6kAWBTFdckzkM89CLk9XfWZrxpCo0nPH17wJc=
-go.uber.org/goleak v1.1.11-0.20210813005559-691160354723/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
+go.uber.org/goleak v1.1.11/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
 go.uber.org/goleak v1.1.12 h1:gZAh5/EyT/HQwlpkCy6wTpqfH9H8Lz8zbm3dZh+OyzA=
 go.uber.org/goleak v1.1.12/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
-go.uber.org/multierr v1.6.0 h1:y6IPFStTAIT5Ytl7/XYmHvzXQ7S3g/IeZW9hyZ5thw4=
 go.uber.org/multierr v1.6.0/go.mod h1:cdWPpRnG4AhwMwsgIHip0KRBQjJy5kYEpYjJxpXp9iU=
-go.uber.org/zap v1.17.0/go.mod h1:MXVU+bhUf/A7Xi2HNOnopQOrmycQ5Ih87HtOu4q5SSo=
-go.uber.org/zap v1.19.1 h1:ue41HOKd1vGURxrmeKIgELGb3jPW9DMUDGtsinblHwI=
-go.uber.org/zap v1.19.1/go.mod h1:j3DNczoxDZroyBnOT1L/Q79cfUMGZxlv/9dzN7SM1rI=
+go.uber.org/multierr v1.8.0 h1:dg6GjLku4EH+249NNmoIciG9N/jURbDG+pFlTkhzIC8=
+go.uber.org/multierr v1.8.0/go.mod h1:7EAYxJLBy9rStEaz58O2t4Uvip6FSURkq8/ppBp95ak=
+go.uber.org/zap v1.21.0 h1:WefMeulhovoZ2sYXz7st6K0sLj7bBhpiFaud4r4zST8=
+go.uber.org/zap v1.21.0/go.mod h1:wjWOCqI0f2ZZrJF/UufIOkiC8ii6tm1iqIsLo76RfJw=
 golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
-golang.org/x/crypto v0.0.0-20181029021203-45a5f77698d3/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
-golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/crypto v0.0.0-20210421170649-83a5a9bb288b/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
+golang.org/x/crypto v0.0.0-20211108221036-ceb1ce70b4fa/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -471,7 +434,6 @@ golang.org/x/lint v0.0.0-20191125180803-fdd1cda4f05f/go.mod h1:5qLYkcX4OjUUV8bRu
 golang.org/x/lint v0.0.0-20200130185559-910be7a94367/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
 golang.org/x/lint v0.0.0-20200302205851-738671d3881b/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
 golang.org/x/lint v0.0.0-20201208152925-83fdc39ff7b5/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
-golang.org/x/lint v0.0.0-20210508222113-6edffad5e616/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
 golang.org/x/mobile v0.0.0-20190312151609-d3739f865fa6/go.mod h1:z+o9i4GpDbdi3rU15maQ/Ox0txvL9dWGYEHz965HBQE=
 golang.org/x/mobile v0.0.0-20190719004257-d2bd2a29d028/go.mod h1:E/iHnbuqvinMTCcRqshq8CkpyQDoeVncDDYHnLhea+o=
 golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc=
@@ -486,9 +448,7 @@ golang.org/x/mod v0.4.2 h1:Gz96sIWK3OalVv/I/qNygP42zyoKp3xptRVCWRFEBvo=
 golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
-golang.org/x/net v0.0.0-20181023162649-9b4f9f5ad519/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20181114220301-adae6a3d119a/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
-golang.org/x/net v0.0.0-20181201002055-351d144fa1fc/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
@@ -500,7 +460,6 @@ golang.org/x/net v0.0.0-20190613194153-d28f0bde5980/go.mod h1:z5CRVTTTmAJ677TzLL
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20190628185345-da137c7871d7/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20190724013045-ca1201d0de80/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20190827160401-ba9fcec4b297/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20191209160850-c0dbc17a3553/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20200114155413-6afb5195e5aa/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20200202094626-16171245cfb2/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
@@ -517,15 +476,15 @@ golang.org/x/net v0.0.0-20200707034311-ab3426394381/go.mod h1:/O7V0waA8r7cgGh81R
 golang.org/x/net v0.0.0-20200822124328-c89045814202/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
 golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
 golang.org/x/net v0.0.0-20201031054903-ff519b6c9102/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
-golang.org/x/net v0.0.0-20201110031124-69a78807bb2b/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
-golang.org/x/net v0.0.0-20201207224615-747e23833adb/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
 golang.org/x/net v0.0.0-20201209123823-ac852fbbde11/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
-golang.org/x/net v0.0.0-20210119194325-5f4716e94777/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
+golang.org/x/net v0.0.0-20201224014010-6772e930b67b/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
-golang.org/x/net v0.0.0-20210316092652-d523dce5a7f4/go.mod h1:RBQZq4jEuRlivfhVLdyRGr576XBO4/greRjx4P4O3yc=
 golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM=
-golang.org/x/net v0.0.0-20211216030914-fe4d6282115f h1:hEYJvxw1lSnWIl8X9ofsYMklzaDs90JI2az5YMd4fPM=
-golang.org/x/net v0.0.0-20211216030914-fe4d6282115f/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
+golang.org/x/net v0.0.0-20210421230115-4e50805a0758/go.mod h1:72T/g9IO56b78aLF+1Kcs5dz7/ng1VjMUvfKvpfy+jM=
+golang.org/x/net v0.0.0-20210525063256-abc453219eb5/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
+golang.org/x/net v0.0.0-20210805182204-aaa1db679c0d/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
+golang.org/x/net v0.0.0-20220412020605-290c469a71a5 h1:bRb386wvrE+oBNdF1d/Xh9mQrfQ4ecYhW5qJ5GvTGT4=
+golang.org/x/net v0.0.0-20220412020605-290c469a71a5/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -535,9 +494,8 @@ golang.org/x/oauth2 v0.0.0-20200902213428-5d25da1a8d43/go.mod h1:KelEdhl1UZF7XfJ
 golang.org/x/oauth2 v0.0.0-20201109201403-9fd604954f58/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
 golang.org/x/oauth2 v0.0.0-20201208152858-08078c50e5b5/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
 golang.org/x/oauth2 v0.0.0-20210218202405-ba52d332ba99/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
-golang.org/x/oauth2 v0.0.0-20210220000619-9bb904979d93/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
-golang.org/x/oauth2 v0.0.0-20210313182246-cd4f82c27b84/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
-golang.org/x/oauth2 v0.0.0-20210402161424-2e8d93401602/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
+golang.org/x/oauth2 v0.0.0-20210514164344-f6687ab2804c/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
+golang.org/x/oauth2 v0.0.0-20211104180415-d3ed0bb246c8/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -549,13 +507,10 @@ golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
-golang.org/x/sys v0.0.0-20181026203630-95b1ffbd15a5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20181116152217-5ac8a444bdc5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
-golang.org/x/sys v0.0.0-20190222072716-a9d3bda3a223/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190422165155-953cdadca894/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -565,8 +520,6 @@ golang.org/x/sys v0.0.0-20190606165138-5da285871e9c/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20190624142023-c5567b49c5d0/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190726091711-fc99dfbffb4e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191001151750-bb3f8db39f24/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20191005200804-aed5e4c7ecf9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191204072324-ce4227a45e2e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191228213918-04cbcbbfeed8/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20200106162015-b016eb3dc98e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -593,16 +546,21 @@ golang.org/x/sys v0.0.0-20201201145000-ef89a241ccb3/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20210104204734-6f8348627aad/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210119212857-b64e53b001e4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210124154548-22da62e12c0c/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20210220050731-9a76102bfb43/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20210305230114-8fe3ee5dd75b/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20210315160823-c6e025ad8005/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20210320140829-1e4c9ba3b0c4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210225134936-a50acf3fe073/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20210403161142-5e06dd20ab57/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210420072515-93ed5bcd2bfe/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423185535-09eb48e85fd7/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20210603081109-ebe580a85c40 h1:JWgyZ1qgdTaF3N3oxC+MdTV7qvEEgHo3otj+HB5CM7Q=
 golang.org/x/sys v0.0.0-20210603081109-ebe580a85c40/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20210809222454-d867a43fc93e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20210927094055-39ccf1dd6fa6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220114195835-da31bd327af9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220310020820-b874c991c1a5/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220412211240-33da011f77ad h1:ntjMns5wyP/fN65tdBD4g8J5w8n015+iIIs9rtjXkY0=
+golang.org/x/sys v0.0.0-20220412211240-33da011f77ad/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -611,8 +569,9 @@ golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.4/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
-golang.org/x/text v0.3.6 h1:aRYxNxv6iGQlyVaZmk6ZgYEDa+Jg18DxebPSrd6bg1M=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.3.7 h1:olpwvP2KacW1ZWvsR7uQhoyTYvKAupfQrRGBFM352Gk=
+golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
@@ -632,7 +591,6 @@ golang.org/x/tools v0.0.0-20190628153133-6cdbf07be9d0/go.mod h1:/rFqwRUd4F7ZHNgw
 golang.org/x/tools v0.0.0-20190816200558-6889da9d5479/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20190911174233-4f2ddba30aff/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191012152004-8de300cfc20a/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
-golang.org/x/tools v0.0.0-20191112195655-aa38f8e97acc/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191113191852-77e3bb0ad9e7/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191115202509-3a792d9c32b2/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
@@ -655,27 +613,24 @@ golang.org/x/tools v0.0.0-20200501065659-ab2804fb9c9d/go.mod h1:EkVYQZoAsY45+roY
 golang.org/x/tools v0.0.0-20200512131952-2bc93b1c0c88/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
 golang.org/x/tools v0.0.0-20200515010526-7d3b6ebf133d/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
 golang.org/x/tools v0.0.0-20200618134242-20370b0cb4b2/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
-golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
 golang.org/x/tools v0.0.0-20200729194436-6467de6f59a7/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
 golang.org/x/tools v0.0.0-20200804011535-6c149bb5ef0d/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
 golang.org/x/tools v0.0.0-20200825202427-b303f430e36d/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
 golang.org/x/tools v0.0.0-20200904185747-39188db58858/go.mod h1:Cj7w3i3Rnn0Xh82ur9kSqwfTHTeVxaDqrfMjpcNT6bE=
 golang.org/x/tools v0.0.0-20201110124207-079ba7bd75cd/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
-golang.org/x/tools v0.0.0-20201120155355-20be4ac4bd6e/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/tools v0.0.0-20201201161351-ac6f37ff4c2a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
-golang.org/x/tools v0.0.0-20201208062317-e652b2f42cc7/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/tools v0.0.0-20201208233053-a543418bbed2/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/tools v0.0.0-20210105154028-b0ab187a4818/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
-golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
+golang.org/x/tools v0.0.0-20210108195828-e2f9c7f1fc8e/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/tools v0.1.0/go.mod h1:xkSsbof2nBLbhDlRMhhhyNLN/zl3eTqcnHD5viDpcZ0=
-golang.org/x/tools v0.1.2/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
-golang.org/x/tools v0.1.5 h1:ouewzE6p+/VEB31YYnTbEJdi8pFqKp4P4n85vwo3DHA=
 golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
+golang.org/x/tools v0.1.7 h1:6j8CgantCy3yc8JGBqkDLMKWqZ0RDU2g1HVgacojGWQ=
+golang.org/x/tools v0.1.7/go.mod h1:LGqMHiF4EqQNHR1JncWGqT5BVaXmza+X+BDGol+dOxo=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 h1:go1bK/D/BFZV2I8cIQd1NKEZ+0owSTG1fDTci4IqFcE=
 golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20220411194840-2f41105eb62f h1:GGU+dLjvlC3qDwqYgL6UgRmHXhOOgns0bZu2Ty5mm6U=
 google.golang.org/api v0.4.0/go.mod h1:8k5glujaEP+g9n7WNsDg8QP6cUVNI86fCNMcbazEtwE=
 google.golang.org/api v0.7.0/go.mod h1:WtwebWUNSVBH/HAw79HIFXZNqEvBhG+Ra+ax0hx3E3M=
 google.golang.org/api v0.8.0/go.mod h1:o4eAsZoiT+ibD93RtjEohWalFOjRDx6CVaqeizhEnKg=
@@ -695,9 +650,6 @@ google.golang.org/api v0.30.0/go.mod h1:QGmEvQ87FHZNiUVJkT14jQNYJ4ZJjdRF23ZXz513
 google.golang.org/api v0.35.0/go.mod h1:/XrVsuzM0rZmrsbjJutiuftIzeuTQcEeaYcSk/mQ1dg=
 google.golang.org/api v0.36.0/go.mod h1:+z5ficQTmoYpPn8LCUNVpK5I7hwkpjbcgqA7I34qYtE=
 google.golang.org/api v0.40.0/go.mod h1:fYKFpnQN0DsDSKRVRcQSDQNtqWPfM9i+zNPxepjRCQ8=
-google.golang.org/api v0.41.0/go.mod h1:RkxM5lITDfTzmyKFPt+wGrCJbVfniCr2ool8kTBzRTU=
-google.golang.org/api v0.43.0/go.mod h1:nQsDGjRXMo4lvh5hP0TKqF244gqhGcr/YSIykhUk/94=
-google.golang.org/api v0.44.0/go.mod h1:EBOGZqzyhtvMDoxwS97ctnh0zUmYY6CxqXsc1AvkYD8=
 google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
 google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/appengine v1.5.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
@@ -740,13 +692,11 @@ google.golang.org/genproto v0.0.0-20201109203340-2640f1f9cdfb/go.mod h1:FWY/as6D
 google.golang.org/genproto v0.0.0-20201201144952-b05cb90ed32e/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
 google.golang.org/genproto v0.0.0-20201210142538-e3217bee35cc/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
 google.golang.org/genproto v0.0.0-20201214200347-8c77b98c765d/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
-google.golang.org/genproto v0.0.0-20210222152913-aa3ee6e6a81c/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
-google.golang.org/genproto v0.0.0-20210303154014-9728d6b83eeb/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
-google.golang.org/genproto v0.0.0-20210310155132-4ce2db91004e/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
-google.golang.org/genproto v0.0.0-20210319143718-93e7006c17a6/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
-google.golang.org/genproto v0.0.0-20210402141018-6c239bbf2bb1/go.mod h1:9lPAdzaEmUacj36I+k7YKbEc5CXzPIeORRgDAUOu28A=
-google.golang.org/genproto v0.0.0-20210602131652-f16073e35f0c h1:wtujag7C+4D6KMoulW9YauvK2lgdvCMS260jsqqBXr0=
-google.golang.org/genproto v0.0.0-20210602131652-f16073e35f0c/go.mod h1:UODoCrxHCcBojKKwX1terBiRUaqAsFqJiF615XL43r0=
+google.golang.org/genproto v0.0.0-20210108203827-ffc7fda8c3d7/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20210226172003-ab064af71705/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20211118181313-81c1377c94b1/go.mod h1:5CzLGKJ67TSI2B9POpiiyGha0AjJvZIUgRMt1dSmuhc=
+google.golang.org/genproto v0.0.0-20220407144326-9054f6ed7bac h1:qSNTkEN+L2mvWcLgJOR+8bdHX9rN/IdU3A1Ghpfb1Rg=
+google.golang.org/genproto v0.0.0-20220407144326-9054f6ed7bac/go.mod h1:8w6bsBMX6yCPbAVTeqQHvzxW0EIFigd5lZyahWgyfDo=
 google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
 google.golang.org/grpc v1.20.1/go.mod h1:10oTOabMzJvdu6/UiuZezV6QK5dSlG84ov/aaiqXj38=
 google.golang.org/grpc v1.21.1/go.mod h1:oYelfM1adQP15Ek0mdvEgi9Df8B9CZIaU1084ijfRaM=
@@ -765,11 +715,10 @@ google.golang.org/grpc v1.33.2/go.mod h1:JMHMWHQWaTccqQQlmk3MJZS+GWXOdAesneDmEnv
 google.golang.org/grpc v1.34.0/go.mod h1:WotjhfgOW/POjDeRt8vscBtXq+2VjORFy659qA51WJ8=
 google.golang.org/grpc v1.35.0/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU=
 google.golang.org/grpc v1.36.0/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU=
-google.golang.org/grpc v1.36.1/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU=
-google.golang.org/grpc v1.38.0/go.mod h1:NREThFqKR1f3iQ6oBuvc5LadQuXVGo9rkm5ZGrQdJfM=
+google.golang.org/grpc v1.40.0/go.mod h1:ogyxbiOoUXAkP+4+xa6PZSE9DZgIHtSpzjDTB9KAK34=
 google.golang.org/grpc v1.42.0/go.mod h1:k+4IHHFw41K8+bbowsex27ge2rCb65oeWqe4jJ590SU=
-google.golang.org/grpc v1.43.0 h1:Eeu7bZtDZ2DpRCsLhUlcrLnvYaMK1Gz86a+hMVvELmM=
-google.golang.org/grpc v1.43.0/go.mod h1:k+4IHHFw41K8+bbowsex27ge2rCb65oeWqe4jJ590SU=
+google.golang.org/grpc v1.45.0 h1:NEpgUqV3Z+ZjkqMsxMg11IaDrXY4RY6CQukSGK0uI1M=
+google.golang.org/grpc v1.45.0/go.mod h1:lN7owxKUQEqMfSyQikvvk5tf/6zMPsrK+ONuO11+0rQ=
 google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
 google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
 google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
@@ -782,8 +731,9 @@ google.golang.org/protobuf v1.24.0/go.mod h1:r/3tXBNzIEhYS9I1OUVjXDlt8tc493IdKGj
 google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c=
 google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
 google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
-google.golang.org/protobuf v1.27.1 h1:SnqbnDw1V7RiZcXPx5MEeqPv2s79L9i7BJUlG/+RurQ=
 google.golang.org/protobuf v1.27.1/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
+google.golang.org/protobuf v1.28.0 h1:w43yiav+6bVFTBQFZX0r7ipe9JQ1QsbMgHwbBziscLw=
+google.golang.org/protobuf v1.28.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
 gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
@@ -791,8 +741,8 @@ gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8
 gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f h1:BLraFXnmrev5lT+xlilqcH8XK9/i0At2xKjWk4p6zsU=
 gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
-gopkg.in/ini.v1 v1.62.0 h1:duBzk771uxoUuOlyRLkHsygud9+5lrlGjdFBb4mSKDU=
-gopkg.in/ini.v1 v1.62.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
+gopkg.in/ini.v1 v1.66.4 h1:SsAcf+mM7mRZo2nJNGt8mZCjG8ZRaNGMURJw7BsIST4=
+gopkg.in/ini.v1 v1.66.4/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
 gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.3/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=

kustomize/deployment.yaml

@@ -23,7 +23,7 @@ spec:
     spec:
       containers:
       - name: podinfod
-        image: ghcr.io/stefanprodan/podinfo:6.1.3
+        image: ghcr.io/stefanprodan/podinfo:6.1.4
         imagePullPolicy: IfNotPresent
         ports:
         - name: http

pkg/version/version.go

@@ -1,4 +1,4 @@
 package version
 
-var VERSION = "6.1.3"
+var VERSION = "6.1.4"
 var REVISION = "unknown"