example-extensionsManifests.yaml

extensionsManifests:
  - apiVersion: apiextensions.k8s.io/v1
    kind: CustomResourceDefinition
    metadata:
      annotations:
        controller-gen.kubebuilder.io/version: v0.19.0
      name: pipelinepolicies.extensions.kuadrant.io
    spec:
      group: extensions.kuadrant.io
      names:
        kind: PipelinePolicy
        listKind: PipelinePolicyList
        plural: pipelinepolicies
        singular: pipelinepolicy
      scope: Namespaced
      versions:
      - name: v1alpha1
        schema:
          openAPIV3Schema:
            properties:
              apiVersion:
                description: |-
                  APIVersion defines the versioned schema of this representation of an object.
                  Servers should convert recognized schemas to the latest internal value, and
                  may reject unrecognized values.
                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
                type: string
              kind:
                description: |-
                  Kind is a string value representing the REST resource this object represents.
                  Servers may infer this from the endpoint the client submits requests to.
                  Cannot be updated.
                  In CamelCase.
                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                type: string
              metadata:
                type: object
              spec:
                properties:
                  actionMethods:
                    items:
                      properties:
                        messageTemplate:
                          type: string
                        method:
                          type: string
                        name:
                          type: string
                        service:
                          type: string
                        url:
                          type: string
                      required:
                      - messageTemplate
                      - method
                      - name
                      - service
                      - url
                      type: object
                    type: array
                  request:
                    items:
                      properties:
                        headersToAdd:
                          type: string
                        logMessage:
                          type: string
                        method:
                          type: string
                        predicate:
                          type: string
                        type:
                          enum:
                          - grpc_method
                          - deny
                          - fail
                          - add_headers
                          type: string
                        var:
                          type: string
                        withBody:
                          type: string
                        withHeaders:
                          type: string
                        withStatus:
                          type: integer
                      required:
                      - type
                      type: object
                    type: array
                  response:
                    items:
                      properties:
                        headersToAdd:
                          type: string
                        logMessage:
                          type: string
                        method:
                          type: string
                        predicate:
                          type: string
                        type:
                          enum:
                          - grpc_method
                          - deny
                          - fail
                          - add_headers
                          type: string
                        var:
                          type: string
                        withBody:
                          type: string
                        withHeaders:
                          type: string
                        withStatus:
                          type: integer
                      required:
                      - type
                      type: object
                    type: array
                  targetRef:
                    description: |-
                      LocalPolicyTargetReferenceWithSectionName identifies an API object to apply a
                      direct policy to. This should be used as part of Policy resources that can
                      target single resources. For more information on how this policy attachment
                      mode works, and a sample Policy resource, refer to the policy attachment
                      documentation for Gateway API.

                      Note: This should only be used for direct policy attachment when references
                      to SectionName are actually needed. In all other cases,
                      LocalPolicyTargetReference should be used.
                    properties:
                      group:
                        description: Group is the group of the target resource.
                        maxLength: 253
                        pattern: ^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                        type: string
                      kind:
                        description: Kind is kind of the target resource.
                        maxLength: 63
                        minLength: 1
                        pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$
                        type: string
                      name:
                        description: Name is the name of the target resource.
                        maxLength: 253
                        minLength: 1
                        type: string
                      sectionName:
                        description: |-
                          SectionName is the name of a section within the target resource. When
                          unspecified, this targetRef targets the entire resource. In the following
                          resources, SectionName is interpreted as the following:

                          * Gateway: Listener name
                          * HTTPRoute: HTTPRouteRule name
                          * Service: Port name

                          If a SectionName is specified, but does not exist on the targeted object,
                          the Policy must fail to attach, and the policy implementation should record
                          a `ResolvedRefs` or similar Condition in the Policy's status.
                        maxLength: 253
                        minLength: 1
                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
                        type: string
                    required:
                    - group
                    - kind
                    - name
                    type: object
                    x-kubernetes-validations:
                    - message: Invalid targetRef.group. The only supported value is 'gateway.networking.k8s.io'
                      rule: self.group == 'gateway.networking.k8s.io'
                    - message: Invalid targetRef.kind. The only supported values are 'HTTPRoute'
                        and 'Gateway'
                      rule: self.kind == 'HTTPRoute' || self.kind == 'Gateway'
                required:
                - targetRef
                type: object
              status:
                properties:
                  conditions:
                    items:
                      description: Condition contains details for one aspect of the current
                        state of this API Resource.
                      properties:
                        lastTransitionTime:
                          description: |-
                            lastTransitionTime is the last time the condition transitioned from one status to another.
                            This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
                          format: date-time
                          type: string
                        message:
                          description: |-
                            message is a human readable message indicating details about the transition.
                            This may be an empty string.
                          maxLength: 32768
                          type: string
                        observedGeneration:
                          description: |-
                            observedGeneration represents the .metadata.generation that the condition was set based upon.
                            For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
                            with respect to the current state of the instance.
                          format: int64
                          minimum: 0
                          type: integer
                        reason:
                          description: |-
                            reason contains a programmatic identifier indicating the reason for the condition's last transition.
                            Producers of specific condition types may define expected values and meanings for this field,
                            and whether the values are considered a guaranteed API.
                            The value should be a CamelCase string.
                            This field may not be empty.
                          maxLength: 1024
                          minLength: 1
                          pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
                          type: string
                        status:
                          description: status of the condition, one of True, False, Unknown.
                          enum:
                          - "True"
                          - "False"
                          - Unknown
                          type: string
                        type:
                          description: type of condition in CamelCase or in foo.example.com/CamelCase.
                          maxLength: 316
                          pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                          type: string
                      required:
                      - lastTransitionTime
                      - message
                      - reason
                      - status
                      - type
                      type: object
                    type: array
                    x-kubernetes-list-map-keys:
                    - type
                    x-kubernetes-list-type: map
                  observedGeneration:
                    format: int64
                    type: integer
                type: object
            type: object
        served: true
        storage: true
        subresources:
          status: {}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRole
    metadata:
      name: pipeline-policy-manager-role
    rules:
    - apiGroups:
      - extensions.kuadrant.io
      resources:
      - pipelinepolicies
      verbs:
      - get
      - list
      - patch
      - update
      - watch
    - apiGroups:
      - extensions.kuadrant.io
      resources:
      - pipelinepolicies/finalizers
      verbs:
      - update
    - apiGroups:
      - extensions.kuadrant.io
      resources:
      - pipelinepolicies/status
      verbs:
      - get
      - patch
      - update
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRoleBinding
    metadata:
      name: pipeline-policy-manager-rolebinding
    roleRef:
      apiGroup: rbac.authorization.k8s.io
      kind: ClusterRole
      name: pipeline-policy-manager-role
    subjects:
    - kind: ServiceAccount
      name: kuadrant-operator-controller-manager
      namespace: kuadrant-system