Packages
openbao.org/v1alpha1
Package v1alpha1 contains API Schema definitions for the openbao v1alpha1 API group.
Resource Types
OpenBaoTenant
OpenBaoTenant is the Schema for the openbaotenants API. OpenBaoTenant is a governance CRD that explicitly declares which namespace should be provisioned with tenant RBAC. This replaces the previous label-based approach (openbao.org/tenant=true) to improve security by eliminating the need for the Provisioner to have list/watch permissions on namespaces.
| Field | Description | Default | Validation |
|---|---|---|---|
apiVersion string | openbao.org/v1alpha1 | ||
kind string | OpenBaoTenant | ||
spec OpenBaoTenantSpec | |||
status OpenBaoTenantStatus |
OpenBaoTenantSpec
OpenBaoTenantSpec defines the desired state of OpenBaoTenant.
Appears in:
| Field | Description | Default | Validation |
|---|---|---|---|
targetNamespace string | TargetNamespace is the name of the namespace to provision with tenant RBAC. The Provisioner will create Role and RoleBinding resources in this namespace to grant the OpenBaoCluster controller permission to manage OpenBaoCluster resources in that namespace. | MinLength: 1 | |
quota ResourceQuotaSpec | Quota defines the resource quota to apply to the tenant namespace. | Optional: {} | |
limitRange LimitRangeSpec | LimitRange defines the limit range to apply to the tenant namespace. | Optional: {} |
OpenBaoTenantStatus
OpenBaoTenantStatus defines the observed state of OpenBaoTenant.
Appears in:
| Field | Description | Default | Validation |
|---|---|---|---|
provisioned boolean | Provisioned indicates if the RBAC has been successfully applied to the target namespace. | Optional: {} | |
lastError string | LastError reports any issues finding the namespace or applying RBAC. | Optional: {} | |
conditions Condition array | Conditions represent the latest available observations of the tenant’s state. | Optional: {} |