KanidmBackupRepository
kaniop.rs / v1alpha1
apiVersion: kaniop.rs/v1alpha1
kind: KanidmBackupRepository
metadata:
name: example
spec object required
authentication object required
Authentication configuration for writer, reader, and deleter roles. These fields are mutable and can be updated to rotate credentials.
deleter object required
secretRef object
name
string required
workloadIdentity object
audience
string
reader object required
secretRef object
name
string required
workloadIdentity object
audience
string
writer object required
secretRef object
name
string required
workloadIdentity object
audience
string
encryption object
Encryption configuration for backup payloads. Supports provider-managed SSE (providerManaged),
provider KMS SSE (providerKms), and client-side envelope encryption (clientSide). When absent, no encryption is applied.
This field is mutable, but once a backup has been created with a given encryption configuration, the mode, keyId, and keyRef sub-fields become immutable.
keyId
string
keyRef object
name
string required
mode
string required
enum:
providerManaged, providerKms, clientSidelimits object
Transport limits and safety retention. This field is mutable.
maxConcurrentParts
integer
minimum:
0
maxDownloadBytesPerSecond
integer
minimum:
0
maxUploadBytesPerSecond
integer
minimum:
0
safetyBackupMinRetention
string
s3 object required
S3-compatible storage configuration. The bucket, prefix, and endpoint fields are immutable after the repository has been used.
bucket
string required
S3 bucket name. Must not be empty.
This field is immutable after the repository has been used. To use a different bucket, delete this Repository and create a new one.
caBundleRef
string
Reference to a ConfigMap or Secret containing a CA bundle for TLS verification.
endpoint
string required
S3 endpoint URL. Must use HTTPS unless insecure is enabled.
This field is immutable after the repository has been used. To use a different endpoint, delete this Repository and create a new one.
forcePathStyle
boolean
Use path-style addressing (http://endpoint/bucket) instead of virtual-hosted-style (http://bucket.endpoint).
insecure
boolean
Allow HTTP endpoints. Not recommended for production use.
prefix
string required
Prefix within the bucket. Must not contain path traversal segments (..).
This field is immutable after the repository has been used. To use a different prefix, delete this Repository and create a new one.
region
string required
AWS region. Required for all S3-compatible providers.
status object
conditions []object
lastTransitionTime
string required
lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format:
date-time
message
string required
message is a human readable message indicating details about the transition. This may be an empty string.
observedGeneration
integer
observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
format:
int64
reason
string required
reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
status
string required
status of the condition, one of True, False, Unknown.
type
string required
type of condition in CamelCase or in foo.example.com/CamelCase.
observedGeneration
integer
format:
int64No matches. Try .spec.authentication for an exact path