---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    include.release.openshift.io/self-managed-high-availability: "true"
  creationTimestamp: "2022-03-08T10:13:29Z"
  generation: 1
  managedFields:
  - apiVersion: apiextensions.k8s.io/v1beta1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:include.release.openshift.io/self-managed-high-availability: {}
      f:spec:
        f:conversion:
          .: {}
          f:strategy: {}
        f:group: {}
        f:names:
          f:kind: {}
          f:listKind: {}
          f:plural: {}
          f:singular: {}
        f:preserveUnknownFields: {}
        f:scope: {}
        f:subresources:
          .: {}
          f:status: {}
        f:validation:
          .: {}
          f:openAPIV3Schema:
            .: {}
            f:description: {}
            f:properties:
              .: {}
              f:apiVersion:
                .: {}
                f:description: {}
                f:type: {}
              f:kind:
                .: {}
                f:description: {}
                f:type: {}
              f:metadata:
                .: {}
                f:type: {}
              f:spec:
                .: {}
                f:description: {}
                f:properties:
                  .: {}
                  f:additionalTrustedCA:
                    .: {}
                    f:description: {}
                    f:properties:
                      .: {}
                      f:name:
                        .: {}
                        f:description: {}
                        f:type: {}
                    f:required: {}
                    f:type: {}
                  f:allowedRegistriesForImport:
                    .: {}
                    f:description: {}
                    f:items: {}
                    f:type: {}
                  f:externalRegistryHostnames:
                    .: {}
                    f:description: {}
                    f:items: {}
                    f:type: {}
                  f:registrySources:
                    .: {}
                    f:description: {}
                    f:properties:
                      .: {}
                      f:allowedRegistries:
                        .: {}
                        f:description: {}
                        f:items: {}
                        f:type: {}
                      f:blockedRegistries:
                        .: {}
                        f:description: {}
                        f:items: {}
                        f:type: {}
                      f:insecureRegistries:
                        .: {}
                        f:description: {}
                        f:items: {}
                        f:type: {}
                    f:type: {}
                f:type: {}
              f:status:
                .: {}
                f:description: {}
                f:properties:
                  .: {}
                  f:externalRegistryHostnames:
                    .: {}
                    f:description: {}
                    f:items: {}
                    f:type: {}
                  f:internalRegistryHostname:
                    .: {}
                    f:description: {}
                    f:type: {}
                f:type: {}
            f:required: {}
            f:type: {}
        f:version: {}
        f:versions: {}
      f:status:
        f:storedVersions: {}
    manager: cluster-bootstrap
    operation: Update
    time: "2022-03-08T10:13:29Z"
  - apiVersion: apiextensions.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:acceptedNames:
          f:kind: {}
          f:listKind: {}
          f:plural: {}
          f:singular: {}
        f:conditions: {}
    manager: kube-apiserver
    operation: Update
    time: "2022-03-08T10:13:29Z"
  name: images.config.openshift.io
  resourceVersion: "440"
  selfLink: /apis/apiextensions.k8s.io/v1/customresourcedefinitions/images.config.openshift.io
  uid: 32cd4f84-3cb6-466d-81f6-d0e03a89f2ad
spec:
  conversion:
    strategy: None
  group: config.openshift.io
  names:
    kind: Image
    listKind: ImageList
    plural: images
    singular: image
  scope: Cluster
  versions:
  - name: v1
    schema:
      openAPIV3Schema:
        description: Image governs policies related to imagestream imports and runtime configuration for external registries. It allows cluster admins to configure which registries OpenShift is allowed to import images from, extra CA trust bundles for external registries, and policies to block or allow registry hostnames. When exposing OpenShift's image registry to the public, this also lets cluster admins specify the external hostname.
        properties:
          apiVersion:
            description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
            type: string
          kind:
            description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
            type: string
          metadata:
            type: object
          spec:
            description: spec holds user settable values for configuration
            properties:
              additionalTrustedCA:
                description: additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted during imagestream import, pod image pull, build image pull, and imageregistry pullthrough. The namespace for this config map is openshift-config.
                properties:
                  name:
                    description: name is the metadata.name of the referenced config map
                    type: string
                required:
                - name
                type: object
              allowedRegistriesForImport:
                description: allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.
                items:
                  description: RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.
                  properties:
                    domainName:
                      description: domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.
                      type: string
                    insecure:
                      description: insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.
                      type: boolean
                  type: object
                type: array
              externalRegistryHostnames:
                description: externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in "hostname[:port]" format.
                items:
                  type: string
                type: array
              registrySources:
                description: registrySources contains configuration that determines how the container runtime should treat individual registries when accessing images for builds+pods. (e.g. whether or not to allow insecure access).  It does not contain configuration for the internal cluster registry.
                properties:
                  allowedRegistries:
                    description: "allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied. \n Only one of BlockedRegistries or AllowedRegistries may be set."
                    items:
                      type: string
                    type: array
                  blockedRegistries:
                    description: "blockedRegistries cannot be used for image pull and push actions. All other registries are permitted. \n Only one of BlockedRegistries or AllowedRegistries may be set."
                    items:
                      type: string
                    type: array
                  insecureRegistries:
                    description: insecureRegistries are registries which do not have a valid TLS certificates or only support HTTP connections.
                    items:
                      type: string
                    type: array
                type: object
            type: object
          status:
            description: status holds observed values from the cluster. They may not be overridden.
            properties:
              externalRegistryHostnames:
                description: externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in "hostname[:port]" format.
                items:
                  type: string
                type: array
              internalRegistryHostname:
                description: internalRegistryHostname sets the hostname for the default internal image registry. The value must be in "hostname[:port]" format. This value is set by the image registry operator which controls the internal registry hostname. For backward compatibility, users can still use OPENSHIFT_DEFAULT_REGISTRY environment variable but this setting overrides the environment variable.
                type: string
            type: object
        required:
        - spec
        type: object
    served: true
    storage: true
    subresources:
      status: {}
status:
  acceptedNames:
    kind: Image
    listKind: ImageList
    plural: images
    singular: image
  conditions:
  - lastTransitionTime: "2022-03-08T10:13:29Z"
    message: no conflicts found
    reason: NoConflicts
    status: "True"
    type: NamesAccepted
  - lastTransitionTime: "2022-03-08T10:13:29Z"
    message: the initial names have been accepted
    reason: InitialNamesAccepted
    status: "True"
    type: Established
  storedVersions:
  - v1
