diff --git a/pkg/imports/admission/calico/embed.go b/pkg/imports/admission/calico/embed.go new file mode 100644 index 0000000000..e5afc05e5e --- /dev/null +++ b/pkg/imports/admission/calico/embed.go @@ -0,0 +1,30 @@ +// Copyright (c) 2026 Tigera, Inc. All rights reserved. +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +// Package admission serves the generated admission policies to the components +// that install them, so nothing has to keep a copy of its own. +package admission + +import ( + "embed" + "io/fs" +) + +//go:embed *.yaml +var crds embed.FS + +// FS returns the admission policy YAML in this directory. +func FS() fs.FS { + return crds +} diff --git a/pkg/imports/admission/enterprise/embed.go b/pkg/imports/admission/enterprise/embed.go new file mode 100644 index 0000000000..e5afc05e5e --- /dev/null +++ b/pkg/imports/admission/enterprise/embed.go @@ -0,0 +1,30 @@ +// Copyright (c) 2026 Tigera, Inc. All rights reserved. +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +// Package admission serves the generated admission policies to the components +// that install them, so nothing has to keep a copy of its own. +package admission + +import ( + "embed" + "io/fs" +) + +//go:embed *.yaml +var crds embed.FS + +// FS returns the admission policy YAML in this directory. +func FS() fs.FS { + return crds +} diff --git a/pkg/imports/crds/calico/v1.crd.projectcalico.org/embed.go b/pkg/imports/crds/calico/v1.crd.projectcalico.org/embed.go new file mode 100644 index 0000000000..405a0d30d5 --- /dev/null +++ b/pkg/imports/crds/calico/v1.crd.projectcalico.org/embed.go @@ -0,0 +1,30 @@ +// Copyright (c) 2026 Tigera, Inc. All rights reserved. +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +// Package crd serves the generated crd.projectcalico.org CRDs to the components +// that install them, so nothing has to keep a copy of its own. +package crd + +import ( + "embed" + "io/fs" +) + +//go:embed *.yaml +var crds embed.FS + +// FS returns the CRD YAML generated into this directory. +func FS() fs.FS { + return crds +} diff --git a/pkg/imports/crds/calico/v3.projectcalico.org/embed.go b/pkg/imports/crds/calico/v3.projectcalico.org/embed.go new file mode 100644 index 0000000000..c8057fcb43 --- /dev/null +++ b/pkg/imports/crds/calico/v3.projectcalico.org/embed.go @@ -0,0 +1,30 @@ +// Copyright (c) 2026 Tigera, Inc. All rights reserved. +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +// Package crd serves the generated projectcalico.org v3 CRDs to the components +// that install them, so nothing has to keep a copy of its own. +package crd + +import ( + "embed" + "io/fs" +) + +//go:embed *.yaml +var crds embed.FS + +// FS returns the CRD YAML generated into this directory. +func FS() fs.FS { + return crds +} diff --git a/pkg/imports/crds/enterprise/applicationlayer.projectcalico.org/applicationlayer.projectcalico.org_wafpolicies.yaml b/pkg/imports/crds/enterprise/applicationlayer.projectcalico.org/applicationlayer.projectcalico.org_wafpolicies.yaml index 27ef9631b8..4dbf7a202f 100644 --- a/pkg/imports/crds/enterprise/applicationlayer.projectcalico.org/applicationlayer.projectcalico.org_wafpolicies.yaml +++ b/pkg/imports/crds/enterprise/applicationlayer.projectcalico.org/applicationlayer.projectcalico.org_wafpolicies.yaml @@ -312,10 +312,31 @@ spec: ValidationFailure describes a single validation rule failure properties: + expected: + description: |- + Expected is the value the rule requires, rendered as a string. Set from the + violation's "expected" key. + maxLength: 256 + type: string + field: + description: |- + Field is the path of the setting that failed the rule, e.g. + "spec.coreRuleSet.paranoiaLevel". Populated when the rule's Rego emits the + object form of a violation with a "field" key; empty for rules that emit a + bare message. Consumers use it to point a user at the setting to change + rather than making them read the rule. + maxLength: 253 + type: string message: description: Message explains why validation failed maxLength: 1024 type: string + observed: + description: |- + Observed is the value the rule actually found, rendered as a string. Set + from the violation's "observed" key. + maxLength: 256 + type: string policyKind: description: PolicyKind is Global or Namespace-scoped enum: @@ -329,6 +350,12 @@ spec: that failed maxLength: 253 type: string + remedy: + description: |- + Remedy is a short, rule-authored instruction for resolving the failure. Set + from the violation's "remedy" key. + maxLength: 512 + type: string rule: description: Rule is the name of the specific rule that @@ -360,7 +387,6 @@ spec: enum: - Compliant - Warning - - Degraded - Critical type: string status: diff --git a/pkg/imports/crds/enterprise/applicationlayer.projectcalico.org/applicationlayer.projectcalico.org_wafvalidationpolicies.yaml b/pkg/imports/crds/enterprise/applicationlayer.projectcalico.org/applicationlayer.projectcalico.org_wafvalidationpolicies.yaml index 489f8fa1b2..afff28d6d7 100644 --- a/pkg/imports/crds/enterprise/applicationlayer.projectcalico.org/applicationlayer.projectcalico.org_wafvalidationpolicies.yaml +++ b/pkg/imports/crds/enterprise/applicationlayer.projectcalico.org/applicationlayer.projectcalico.org_wafvalidationpolicies.yaml @@ -185,7 +185,6 @@ spec: enum: - Compliant - Warning - - Degraded - Critical type: string validationResults: diff --git a/pkg/imports/crds/enterprise/v1.crd.projectcalico.org/applicationlayer.projectcalico.org_wafpolicies.yaml b/pkg/imports/crds/enterprise/v1.crd.projectcalico.org/applicationlayer.projectcalico.org_wafpolicies.yaml index 27ef9631b8..4dbf7a202f 100644 --- a/pkg/imports/crds/enterprise/v1.crd.projectcalico.org/applicationlayer.projectcalico.org_wafpolicies.yaml +++ b/pkg/imports/crds/enterprise/v1.crd.projectcalico.org/applicationlayer.projectcalico.org_wafpolicies.yaml @@ -312,10 +312,31 @@ spec: ValidationFailure describes a single validation rule failure properties: + expected: + description: |- + Expected is the value the rule requires, rendered as a string. Set from the + violation's "expected" key. + maxLength: 256 + type: string + field: + description: |- + Field is the path of the setting that failed the rule, e.g. + "spec.coreRuleSet.paranoiaLevel". Populated when the rule's Rego emits the + object form of a violation with a "field" key; empty for rules that emit a + bare message. Consumers use it to point a user at the setting to change + rather than making them read the rule. + maxLength: 253 + type: string message: description: Message explains why validation failed maxLength: 1024 type: string + observed: + description: |- + Observed is the value the rule actually found, rendered as a string. Set + from the violation's "observed" key. + maxLength: 256 + type: string policyKind: description: PolicyKind is Global or Namespace-scoped enum: @@ -329,6 +350,12 @@ spec: that failed maxLength: 253 type: string + remedy: + description: |- + Remedy is a short, rule-authored instruction for resolving the failure. Set + from the violation's "remedy" key. + maxLength: 512 + type: string rule: description: Rule is the name of the specific rule that @@ -360,7 +387,6 @@ spec: enum: - Compliant - Warning - - Degraded - Critical type: string status: diff --git a/pkg/imports/crds/enterprise/v1.crd.projectcalico.org/applicationlayer.projectcalico.org_wafvalidationpolicies.yaml b/pkg/imports/crds/enterprise/v1.crd.projectcalico.org/applicationlayer.projectcalico.org_wafvalidationpolicies.yaml index 489f8fa1b2..afff28d6d7 100644 --- a/pkg/imports/crds/enterprise/v1.crd.projectcalico.org/applicationlayer.projectcalico.org_wafvalidationpolicies.yaml +++ b/pkg/imports/crds/enterprise/v1.crd.projectcalico.org/applicationlayer.projectcalico.org_wafvalidationpolicies.yaml @@ -185,7 +185,6 @@ spec: enum: - Compliant - Warning - - Degraded - Critical type: string validationResults: diff --git a/pkg/imports/crds/enterprise/v1.crd.projectcalico.org/embed.go b/pkg/imports/crds/enterprise/v1.crd.projectcalico.org/embed.go new file mode 100644 index 0000000000..405a0d30d5 --- /dev/null +++ b/pkg/imports/crds/enterprise/v1.crd.projectcalico.org/embed.go @@ -0,0 +1,30 @@ +// Copyright (c) 2026 Tigera, Inc. All rights reserved. +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +// Package crd serves the generated crd.projectcalico.org CRDs to the components +// that install them, so nothing has to keep a copy of its own. +package crd + +import ( + "embed" + "io/fs" +) + +//go:embed *.yaml +var crds embed.FS + +// FS returns the CRD YAML generated into this directory. +func FS() fs.FS { + return crds +} diff --git a/pkg/imports/crds/enterprise/v3.projectcalico.org/embed.go b/pkg/imports/crds/enterprise/v3.projectcalico.org/embed.go new file mode 100644 index 0000000000..c8057fcb43 --- /dev/null +++ b/pkg/imports/crds/enterprise/v3.projectcalico.org/embed.go @@ -0,0 +1,30 @@ +// Copyright (c) 2026 Tigera, Inc. All rights reserved. +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +// Package crd serves the generated projectcalico.org v3 CRDs to the components +// that install them, so nothing has to keep a copy of its own. +package crd + +import ( + "embed" + "io/fs" +) + +//go:embed *.yaml +var crds embed.FS + +// FS returns the CRD YAML generated into this directory. +func FS() fs.FS { + return crds +}