Not in the top 1,000 by GitHub stars
fluxcd/agent-skills
Skills to transform AI Agents into GitOps Engineers
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
internal/skills/commit-assisted-by/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
de81eb4ed7e9 → 25da0ed5bfdd
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → de81eb4ed7e9
No earlier version was observed for comparison.
internal/skills/flux-controller-minor-releases/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
de81eb4ed7e9 → 25da0ed5bfdd
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → de81eb4ed7e9
No earlier version was observed for comparison.
internal/skills/flux-controller-patch-releases/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
de81eb4ed7e9 → 25da0ed5bfdd
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → de81eb4ed7e9
No earlier version was observed for comparison.
skills/gitops-cluster-debug/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
de81eb4ed7e9 → 25da0ed5bfdd
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → de81eb4ed7e9
No earlier version was observed for comparison.
skills/gitops-knowledge/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
de81eb4ed7e9 → 25da0ed5bfdd
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → de81eb4ed7e9
No earlier version was observed for comparison.
skills/gitops-repo-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
de81eb4ed7e9 → 25da0ed5bfdd
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → de81eb4ed7e9
No earlier version was observed for comparison.
Verified commit 25da0ed5bfdd1d8f779ef79c2c7e336781978d87
git clone --filter=blob:none --no-checkout https://github.com/fluxcd/agent-skills.git .hotskills/fluxcd-agent-skills && git -C .hotskills/fluxcd-agent-skills checkout --detach 25da0ed5bfdd1d8f779ef79c2c7e336781978d87
# Copy each selected skill directory from .hotskills/fluxcd-agent-skills into .claude/skills/<skill-name>/git clone --filter=blob:none --no-checkout https://github.com/fluxcd/agent-skills.git .hotskills/fluxcd-agent-skills && git -C .hotskills/fluxcd-agent-skills checkout --detach 25da0ed5bfdd1d8f779ef79c2c7e336781978d87
# Copy each selected skill directory from .hotskills/fluxcd-agent-skills into .agents/skills/<skill-name>/Heat
5.3- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
- commit-assisted-by
internal/skills/commit-assisted-by - flux-controller-minor-releases
internal/skills/flux-controller-minor-releases - flux-controller-patch-releases
internal/skills/flux-controller-patch-releases - gitops-cluster-debug
skills/gitops-cluster-debug - gitops-knowledge
skills/gitops-knowledge - gitops-repo-audit
skills/gitops-repo-audit
How it works
commit-assisted-by
When your agent uses it
Add an `Assisted-by: <agent-name>/<model-id>` git trailer to commits made during an AI-assisted coding session. Trigger on any `git commit` activity visible in the session — either commits you make yourself, or commits the user makes outside your tool calls that surface in the conversation — even without an explicit request. Also trigger when the user explicitly asks to tag existing commits in a branch (e.g. "add assisted-by to commits in this branch").
What it loads into context
Frontmatter
141 tokensAlways available to the agent
SKILL.md
1,279 tokensWhen the skill is activated
Reference documents
97,297 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Mode 1 — commits you create yourself
- Mode 2 — commits that appear outside your own `git commit` invocations
- Mode 3 — explicit "tag the whole branch" request
- Anti-patterns
Scripts executed separately
scripts/safety-check.sh../../../skills/gitops-repo-audit/scripts/check-deprecated.sh../../../skills/gitops-repo-audit/scripts/discover.sh../../../skills/gitops-repo-audit/scripts/validate.sh
Files
../../../.claude-plugin/marketplace.jsonasset779 bytes../../../.mcp.jsonasset135 bytes../../../agents/claude-code/fluxcd.mddoc1,961 bytesSKILL.mdcore5,337 bytesscripts/safety-check.shruns1,336 bytes../../../skills/gitops-cluster-debug/SKILL.mddoc23,888 bytes../../../skills/gitops-cluster-debug/assets/schemas/alert-notification-v1.fields.txtdoc2,505 bytes../../../skills/gitops-cluster-debug/assets/schemas/alert-notification-v1beta3.fields.txtdoc2,680 bytes../../../skills/gitops-cluster-debug/assets/schemas/artifactgenerator-source-v1beta1.fields.txtdoc14,603 bytes../../../skills/gitops-cluster-debug/assets/schemas/bucket-source-v1.fields.txtdoc8,152 bytes../../../skills/gitops-cluster-debug/assets/schemas/externalartifact-source-v1.fields.txtdoc4,180 bytes../../../skills/gitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txtdoc20,964 bytes../../../skills/gitops-cluster-debug/assets/schemas/fluxreport-fluxcd-v1.fields.txtdoc5,523 bytes../../../skills/gitops-cluster-debug/assets/schemas/gitrepository-source-v1.fields.txtdoc11,263 bytes../../../skills/gitops-cluster-debug/assets/schemas/helmchart-source-v1.fields.txtdoc7,612 bytes../../../skills/gitops-cluster-debug/assets/schemas/helmrelease-helm-v2.fields.txtdoc46,322 bytes../../../skills/gitops-cluster-debug/assets/schemas/helmrepository-source-v1.fields.txtdoc7,537 bytes../../../skills/gitops-cluster-debug/assets/schemas/imagepolicy-image-v1.fields.txtdoc5,783 bytes../../../skills/gitops-cluster-debug/assets/schemas/imagerepository-image-v1.fields.txtdoc6,527 bytes../../../skills/gitops-cluster-debug/assets/schemas/imageupdateautomation-image-v1.fields.txtdoc10,643 bytes../../../skills/gitops-cluster-debug/assets/schemas/kustomization-kustomize-v1.fields.txtdoc20,723 bytes../../../skills/gitops-cluster-debug/assets/schemas/ocirepository-source-v1.fields.txtdoc10,427 bytes../../../skills/gitops-cluster-debug/assets/schemas/provider-notification-v1.fields.txtdoc3,551 bytes../../../skills/gitops-cluster-debug/assets/schemas/provider-notification-v1beta3.fields.txtdoc3,954 bytes../../../skills/gitops-cluster-debug/assets/schemas/receiver-notification-v1.fields.txtdoc8,143 bytes../../../skills/gitops-cluster-debug/assets/schemas/resourceset-fluxcd-v1.fields.txtdoc10,874 bytes../../../skills/gitops-cluster-debug/assets/schemas/resourcesetinputprovider-fluxcd-v1.fields.txtdoc10,622 bytes../../../skills/gitops-cluster-debug/evals/evals.jsonasset5,681 bytes../../../skills/gitops-cluster-debug/evals/evals.jsonasset5,681 bytes../../../skills/gitops-cluster-debug/evals/evals.jsonasset5,681 bytes../../../skills/gitops-cluster-debug/references/flux-crds.mddoc14,977 bytes../../../skills/gitops-cluster-debug/references/troubleshooting.mddoc12,043 bytes../../../skills/gitops-knowledge/SKILL.mddoc15,544 bytes../../../skills/gitops-knowledge/assets/schemas/alert-notification-v1.fields.txtdoc2,505 bytes../../../skills/gitops-knowledge/assets/schemas/alert-notification-v1beta3.fields.txtdoc2,680 bytes../../../skills/gitops-knowledge/assets/schemas/artifactgenerator-source-v1beta1.fields.txtdoc14,603 bytes../../../skills/gitops-knowledge/assets/schemas/bucket-source-v1.fields.txtdoc8,152 bytes../../../skills/gitops-knowledge/assets/schemas/externalartifact-source-v1.fields.txtdoc4,180 bytes../../../skills/gitops-knowledge/assets/schemas/fluxinstance-fluxcd-v1.fields.txtdoc20,964 bytes../../../skills/gitops-knowledge/assets/schemas/fluxreport-fluxcd-v1.fields.txtdoc5,523 bytes../../../skills/gitops-knowledge/assets/schemas/gitrepository-source-v1.fields.txtdoc11,263 bytes../../../skills/gitops-knowledge/assets/schemas/helmchart-source-v1.fields.txtdoc7,612 bytes../../../skills/gitops-knowledge/assets/schemas/helmrelease-helm-v2.fields.txtdoc46,322 bytes../../../skills/gitops-knowledge/assets/schemas/helmrepository-source-v1.fields.txtdoc7,537 bytes../../../skills/gitops-knowledge/assets/schemas/imagepolicy-image-v1.fields.txtdoc5,783 bytes../../../skills/gitops-knowledge/assets/schemas/imagerepository-image-v1.fields.txtdoc6,527 bytes../../../skills/gitops-knowledge/assets/schemas/imageupdateautomation-image-v1.fields.txtdoc10,643 bytes../../../skills/gitops-knowledge/assets/schemas/kustomization-kustomize-v1.fields.txtdoc20,723 bytes../../../skills/gitops-knowledge/assets/schemas/ocirepository-source-v1.fields.txtdoc10,427 bytes../../../skills/gitops-knowledge/assets/schemas/provider-notification-v1.fields.txtdoc3,551 bytes../../../skills/gitops-knowledge/assets/schemas/provider-notification-v1beta3.fields.txtdoc3,954 bytes../../../skills/gitops-knowledge/assets/schemas/receiver-notification-v1.fields.txtdoc8,143 bytes../../../skills/gitops-knowledge/assets/schemas/resourceset-fluxcd-v1.fields.txtdoc10,874 bytes../../../skills/gitops-knowledge/assets/schemas/resourcesetinputprovider-fluxcd-v1.fields.txtdoc10,622 bytes../../../skills/gitops-knowledge/evals/evals.jsonasset37,970 bytes../../../skills/gitops-knowledge/evals/evals.jsonasset37,970 bytes../../../skills/gitops-knowledge/evals/evals.jsonasset37,970 bytes../../../skills/gitops-knowledge/evals/evals.jsonasset37,970 bytes../../../skills/gitops-knowledge/evals/evals.jsonasset37,970 bytes../../../skills/gitops-knowledge/references/best-practices.mddoc9,443 bytes../../../skills/gitops-knowledge/references/flux-cli.mddoc12,508 bytes../../../skills/gitops-knowledge/references/flux-operator.mddoc11,733 bytes../../../skills/gitops-knowledge/references/gitless-gitops.mddoc15,710 bytes../../../skills/gitops-knowledge/references/gitless-image-automation.mddoc7,881 bytes../../../skills/gitops-knowledge/references/helmrelease.mddoc11,874 bytes../../../skills/gitops-knowledge/references/image-automation.mddoc12,334 bytes../../../skills/gitops-knowledge/references/kustomization.mddoc14,252 bytes../../../skills/gitops-knowledge/references/mcp-server.mddoc7,527 bytes../../../skills/gitops-knowledge/references/monorepo-delivery.mddoc28,726 bytes../../../skills/gitops-knowledge/references/notifications.mddoc14,422 bytes../../../skills/gitops-knowledge/references/repo-patterns.mddoc14,538 bytes../../../skills/gitops-knowledge/references/resourcesets.mddoc36,874 bytes../../../skills/gitops-knowledge/references/sources.mddoc17,757 bytes../../../skills/gitops-knowledge/references/terraform-bootstrap.mddoc16,757 bytes../../../skills/gitops-knowledge/references/web-ui.mddoc10,012 bytes../../../skills/gitops-repo-audit/SKILL.mddoc15,337 bytes../../../skills/gitops-repo-audit/assets/schemas/alert-notification-v1.fields.txtdoc2,505 bytes../../../skills/gitops-repo-audit/assets/schemas/alert-notification-v1beta3.fields.txtdoc2,680 bytes../../../skills/gitops-repo-audit/assets/schemas/artifactgenerator-source-v1beta1.fields.txtdoc14,603 bytes../../../skills/gitops-repo-audit/assets/schemas/bucket-source-v1.fields.txtdoc8,152 bytes../../../skills/gitops-repo-audit/assets/schemas/externalartifact-source-v1.fields.txtdoc4,180 bytes../../../skills/gitops-repo-audit/assets/schemas/fluxinstance-fluxcd-v1.fields.txtdoc20,964 bytes../../../skills/gitops-repo-audit/assets/schemas/fluxreport-fluxcd-v1.fields.txtdoc5,523 bytes../../../skills/gitops-repo-audit/assets/schemas/gitrepository-source-v1.fields.txtdoc11,263 bytes../../../skills/gitops-repo-audit/assets/schemas/helmchart-source-v1.fields.txtdoc7,612 bytes../../../skills/gitops-repo-audit/assets/schemas/helmrelease-helm-v2.fields.txtdoc46,322 bytes../../../skills/gitops-repo-audit/assets/schemas/helmrepository-source-v1.fields.txtdoc7,537 bytes../../../skills/gitops-repo-audit/assets/schemas/imagepolicy-image-v1.fields.txtdoc5,783 bytes../../../skills/gitops-repo-audit/assets/schemas/imagerepository-image-v1.fields.txtdoc6,527 bytes../../../skills/gitops-repo-audit/assets/schemas/imageupdateautomation-image-v1.fields.txtdoc10,643 bytes../../../skills/gitops-repo-audit/assets/schemas/kustomization-kustomize-v1.fields.txtdoc20,723 bytes../../../skills/gitops-repo-audit/assets/schemas/ocirepository-source-v1.fields.txtdoc10,427 bytes../../../skills/gitops-repo-audit/assets/schemas/provider-notification-v1.fields.txtdoc3,551 bytes../../../skills/gitops-repo-audit/assets/schemas/provider-notification-v1beta3.fields.txtdoc3,954 bytes../../../skills/gitops-repo-audit/assets/schemas/receiver-notification-v1.fields.txtdoc8,143 bytes../../../skills/gitops-repo-audit/assets/schemas/resourceset-fluxcd-v1.fields.txtdoc10,874 bytes../../../skills/gitops-repo-audit/assets/schemas/resourcesetinputprovider-fluxcd-v1.fields.txtdoc10,622 bytes../../../skills/gitops-repo-audit/evals/evals.jsonasset17,974 bytes../../../skills/gitops-repo-audit/evals/evals.jsonasset17,974 bytes../../../skills/gitops-repo-audit/evals/evals.jsonasset17,974 bytes../../../skills/gitops-repo-audit/evals/evals.jsonasset17,974 bytes../../../skills/gitops-repo-audit/evals/evals.jsonasset17,974 bytes../../../skills/gitops-repo-audit/evals/evals.jsonasset17,974 bytes../../../skills/gitops-repo-audit/references/api-migration.mddoc4,352 bytes../../../skills/gitops-repo-audit/references/best-practices.mddoc15,531 bytes../../../skills/gitops-repo-audit/references/flux-api-summary.mddoc18,971 bytes../../../skills/gitops-repo-audit/references/flux-operator-api-summary.mddoc13,118 bytes../../../skills/gitops-repo-audit/references/repo-patterns.mddoc13,027 bytes../../../skills/gitops-repo-audit/references/security-audit.mddoc14,393 bytes../../../skills/gitops-repo-audit/scripts/check-deprecated.shruns4,172 bytes../../../skills/gitops-repo-audit/scripts/discover.shruns3,540 bytes../../../skills/gitops-repo-audit/scripts/validate.shruns22,335 bytes
Read SKILL.md
# Commit Assisted-by trailer
Record the assisting agent's involvement in a commit by adding an `Assisted-by: <agent-name>/<model-id>` git
trailer. The `<agent-name>` identify the specific AI assistant (CLI/harness) and `<model-id>` is the LLM version
that contributed to the commit. This disclosure provides transparency about AI involvement in code changes.
In the command examples below, substitute `<agent-name>/<model-id>` with your own values before running anything.
## Mode 1 — commits you create yourself
When you create a commit in a session, limit the commit subject to 50 characters. Use the imperative mood in the
subject line (e.g., "Add support for X" instead of "Added support for X").
If the commit message body is needed to explain what and why, wrap it at 72 characters. Avoid verbose explanationsView the complete source on GitHubflux-controller-minor-releases
When your agent uses it
Run the upstream Flux controller minor release procedure for helm-controller, image-automation-controller, image-reflector-controller, kustomize-controller, notification-controller, source-controller, and source-watcher. Use when cutting a new controller minor release (vX.Y.0): creating the release series branch, drafting the minor changelog, tagging, merging the release branch back to main, and adding the backport label.
What it loads into context
Frontmatter
110 tokensAlways available to the agent
SKILL.md
4,558 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Release order across controllers
- Important rules
- Preconditions
- Release Flow
- How To Build The Changelog Entry
- Critical Checks
- Bumping the API in dependent controllers
- Updating this skill
- Useful Local Queries
Files
SKILL.mdcore17,813 bytes
Read SKILL.md
# Flux Controller Minor Releases
Use this skill for upstream Flux controller **minor** releases (`vX.Y.0`) only —
the release that opens a new `release/vX.Y.x` series. Do not use it for `flux2`,
`pkg`, or other non-controller repos.
Supported controllers:
- `helm-controller`
- `image-automation-controller`
- `image-reflector-controller`
- `kustomize-controller`
- `notification-controller`
- `source-controller`
- `source-watcher`View the complete source on GitHubflux-controller-patch-releases
When your agent uses it
Run the upstream Flux controller patch release procedure for helm-controller, image-automation-controller, image-reflector-controller, kustomize-controller, notification-controller, source-controller, and source-watcher. Use when preparing a new controller patch release from a release series branch, drafting changelog entries, tagging releases, and opening the follow-up changelog PRs back to main.
What it loads into context
Frontmatter
100 tokensAlways available to the agent
SKILL.md
4,648 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Important rules
- Preconditions
- Determining which controllers need a patch release
- Release Flow
- How To Build The Changelog Entry
- Critical Checks
- Updating this skill
- Useful Local Queries
Files
SKILL.mdcore18,713 bytes
Read SKILL.md
# Flux Controller Patch Releases
Use this skill for upstream Flux controller patch releases only. Do not use it
for `flux2`, `pkg`, or other non-controller repos.
Supported controllers:
- `helm-controller`
- `image-automation-controller`
- `image-reflector-controller`
- `kustomize-controller`
- `notification-controller`
- `source-controller`
- `source-watcher`
View the complete source on GitHubgitops-cluster-debug
When your agent uses it
Debug and troubleshoot Flux CD on live Kubernetes clusters via the Flux MCP server — inspects Flux resource status, events and controller logs, traces workloads back to the Flux objects and sources that deliver them, previews what a GitOps change will do on the cluster, and performs installation health checks. Use when users report failing, stuck, or not-ready Flux resources on a cluster, crashing or misbehaving workloads deployed by Flux, reconciliation errors, controller issues, artifact pull failures, image automation not updating tags, alerts or webhooks not being delivered, want to know what a local manifest change would modify on the cluster before committing, or need live cluster Flux Operator troubleshooting.
What it loads into context
Frontmatter
181 tokensAlways available to the agent
SKILL.md
5,547 tokensWhen the skill is activated
Reference documents
5,900 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- MCP Tools
- General Rules
- Cluster Context
- Debugging Workflows
- Flux CRD Reference
- Loading References
- Report Format
- Edge Cases
Files
SKILL.mdcore23,888 bytesSKILL.mdcore23,888 bytesSKILL.mdcore23,888 bytesSKILL.mdcore23,888 bytesSKILL.mdcore23,888 bytesSKILL.mdcore23,888 bytesSKILL.mdcore23,888 bytesSKILL.mdcore23,888 bytesSKILL.mdcore23,888 bytesSKILL.mdcore23,888 bytesSKILL.mdcore23,888 bytesassets/schemas/alert-notification-v1.fields.txtdoc2,505 bytesassets/schemas/alert-notification-v1beta3.fields.txtdoc2,680 bytesassets/schemas/artifactgenerator-source-v1beta1.fields.txtdoc14,603 bytesassets/schemas/bucket-source-v1.fields.txtdoc8,152 bytesassets/schemas/externalartifact-source-v1.fields.txtdoc4,180 bytesassets/schemas/fluxinstance-fluxcd-v1.fields.txtdoc20,964 bytesassets/schemas/fluxreport-fluxcd-v1.fields.txtdoc5,523 bytesassets/schemas/gitrepository-source-v1.fields.txtdoc11,263 bytesassets/schemas/helmchart-source-v1.fields.txtdoc7,612 bytesassets/schemas/helmrelease-helm-v2.fields.txtdoc46,322 bytesassets/schemas/helmrepository-source-v1.fields.txtdoc7,537 bytesassets/schemas/imagepolicy-image-v1.fields.txtdoc5,783 bytesassets/schemas/imagerepository-image-v1.fields.txtdoc6,527 bytesassets/schemas/imageupdateautomation-image-v1.fields.txtdoc10,643 bytesassets/schemas/kustomization-kustomize-v1.fields.txtdoc20,723 bytesassets/schemas/ocirepository-source-v1.fields.txtdoc10,427 bytesassets/schemas/provider-notification-v1.fields.txtdoc3,551 bytesassets/schemas/provider-notification-v1beta3.fields.txtdoc3,954 bytesassets/schemas/receiver-notification-v1.fields.txtdoc8,143 bytesassets/schemas/resourceset-fluxcd-v1.fields.txtdoc10,874 bytesassets/schemas/resourcesetinputprovider-fluxcd-v1.fields.txtdoc10,622 bytesevals/evals.jsonasset5,681 bytesreferences/flux-crds.mddoc14,977 bytesreferences/troubleshooting.mddoc12,043 bytes
Read SKILL.md
# Flux Cluster Debugger
You are a Flux cluster debugger specialized in troubleshooting GitOps pipelines on live
Kubernetes clusters. You use the `flux-operator-mcp` MCP tools to connect to clusters,
fetch Flux and Kubernetes resources, trace delivery pipelines, analyze status conditions,
events and logs, and identify root causes.
## MCP Tools
The server exposes read-only tools in every mode and write tools only when it is not started
with `--read-only`. Check which tools you actually have before planning an action.
| Purpose | Tool | Mode |
|---|---|---|View the complete source on GitHubgitops-knowledge
When your agent uses it
Flux CD and Flux Operator expert — answers questions and generates schema-validated YAML for all Flux CRDs (not repo auditing or live cluster debugging). Use when users ask about Flux concepts, want manifests for HelmRelease, Kustomization, GitRepository, OCIRepository, ResourceSet, FluxInstance, or any Flux resource. When user needs guidance on GitOps repository structure, bootstrap Flux with Terraform, multi-tenancy, OCI-based delivery, image tag automation, drift detection, preview environments, monorepo app delivery, running migration Jobs before or after a deployment, notifications, or the Flux Web UI and MCP Server.
What it loads into context
Frontmatter
151 tokensAlways available to the agent
SKILL.md
3,838 tokensWhen the skill is activated
Reference documents
59,282 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- What is Flux
- Controllers, CRDs and References
- Ordering and Reactivity
- Decision Trees
- Canonical YAML Patterns
- Common Mistakes
Files
SKILL.mdcore15,544 bytesSKILL.mdcore15,544 bytesSKILL.mdcore15,544 bytesassets/schemas/alert-notification-v1.fields.txtdoc2,505 bytesassets/schemas/alert-notification-v1beta3.fields.txtdoc2,680 bytesassets/schemas/artifactgenerator-source-v1beta1.fields.txtdoc14,603 bytesassets/schemas/bucket-source-v1.fields.txtdoc8,152 bytesassets/schemas/externalartifact-source-v1.fields.txtdoc4,180 bytesassets/schemas/fluxinstance-fluxcd-v1.fields.txtdoc20,964 bytesassets/schemas/fluxreport-fluxcd-v1.fields.txtdoc5,523 bytesassets/schemas/gitrepository-source-v1.fields.txtdoc11,263 bytesassets/schemas/helmchart-source-v1.fields.txtdoc7,612 bytesassets/schemas/helmrelease-helm-v2.fields.txtdoc46,322 bytesassets/schemas/helmrepository-source-v1.fields.txtdoc7,537 bytesassets/schemas/imagepolicy-image-v1.fields.txtdoc5,783 bytesassets/schemas/imagerepository-image-v1.fields.txtdoc6,527 bytesassets/schemas/imageupdateautomation-image-v1.fields.txtdoc10,643 bytesassets/schemas/kustomization-kustomize-v1.fields.txtdoc20,723 bytesassets/schemas/ocirepository-source-v1.fields.txtdoc10,427 bytesassets/schemas/provider-notification-v1.fields.txtdoc3,551 bytesassets/schemas/provider-notification-v1beta3.fields.txtdoc3,954 bytesassets/schemas/receiver-notification-v1.fields.txtdoc8,143 bytesassets/schemas/resourceset-fluxcd-v1.fields.txtdoc10,874 bytesassets/schemas/resourcesetinputprovider-fluxcd-v1.fields.txtdoc10,622 bytesevals/evals.jsonasset37,970 bytesreferences/best-practices.mddoc9,443 bytesreferences/flux-cli.mddoc12,508 bytesreferences/flux-operator.mddoc11,733 bytesreferences/gitless-gitops.mddoc15,710 bytesreferences/gitless-image-automation.mddoc7,881 bytesreferences/helmrelease.mddoc11,874 bytesreferences/image-automation.mddoc12,334 bytesreferences/kustomization.mddoc14,252 bytesreferences/mcp-server.mddoc7,527 bytesreferences/monorepo-delivery.mddoc28,726 bytesreferences/notifications.mddoc14,422 bytesreferences/repo-patterns.mddoc14,538 bytesreferences/resourcesets.mddoc36,874 bytesreferences/sources.mddoc17,757 bytesreferences/terraform-bootstrap.mddoc16,757 bytesreferences/web-ui.mddoc10,012 bytes
Read SKILL.md
# Flux CD Knowledge Base
You are an expert on Flux CD, the GitOps toolkit for Kubernetes. Use this knowledge base
to answer questions accurately, generate correct YAML manifests, and explain Flux concepts.
**Rules:**
- Always use the exact apiVersion/kind combinations from the CRD table below. Never invent API versions.
- Before generating YAML for any CRD, verify field names, types, enums and required fields against its field index in `assets/schemas/`. Each line is `<dotted.path> <type> [(required)] [enum=a|b] [default=x] [pattern="..."] [min=N max=N] # description` (arrays as `path[]`, maps as `<map[string]T>`). Grep a path prefix to list a subtree (`grep '^spec\.chart\.' assets/schemas/helmrelease-helm-v2.fields.txt`) or a field name to find where it lives. Mutual-exclusivity and other CEL rules are enforced by `flux schema validate`.
- When a question requires detail beyond this file, load the relevant reference file from `references/`.
- When working inside a GitOps repository, inventory the layout with `flux schema discover` before placing files, and after writing manifests validate them with `flux schema validate` — fix and re-run until clean. Load `references/flux-cli.md` for the full CLI workflow, local rendering, and overlay debugging. If the tools aren't installed, skip validation and say so.
- Prefer Flux Operator (FluxInstance) for cluster setup. Do not reference `flux bootstrap` or legacy `gotk-*` files.
## What is Flux
View the complete source on GitHubgitops-repo-audit
When your agent uses it
Audit and validate Flux CD GitOps repositories by scanning local repo files (not live clusters) — runs Kubernetes schema validation, detects deprecated Flux APIs, reviews RBAC/multi-tenancy/secrets management, and produces a prioritized GitOps report. Use when users ask to audit, analyze, validate, review, or security-check a GitOps repo.
What it loads into context
Frontmatter
108 tokensAlways available to the agent
SKILL.md
3,577 tokensWhen the skill is activated
Reference documents
18,730 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Analysis Workflow
- Flux CRD Reference
- Loading References
- Edge Cases
Scripts executed separately
scripts/check-deprecated.shscripts/discover.shscripts/validate.sh
Files
SKILL.mdcore15,337 bytesSKILL.mdcore15,337 bytesSKILL.mdcore15,337 bytesassets/schemas/alert-notification-v1.fields.txtdoc2,505 bytesassets/schemas/alert-notification-v1beta3.fields.txtdoc2,680 bytesassets/schemas/artifactgenerator-source-v1beta1.fields.txtdoc14,603 bytesassets/schemas/bucket-source-v1.fields.txtdoc8,152 bytesassets/schemas/externalartifact-source-v1.fields.txtdoc4,180 bytesassets/schemas/fluxinstance-fluxcd-v1.fields.txtdoc20,964 bytesassets/schemas/fluxreport-fluxcd-v1.fields.txtdoc5,523 bytesassets/schemas/gitrepository-source-v1.fields.txtdoc11,263 bytesassets/schemas/helmchart-source-v1.fields.txtdoc7,612 bytesassets/schemas/helmrelease-helm-v2.fields.txtdoc46,322 bytesassets/schemas/helmrepository-source-v1.fields.txtdoc7,537 bytesassets/schemas/imagepolicy-image-v1.fields.txtdoc5,783 bytesassets/schemas/imagerepository-image-v1.fields.txtdoc6,527 bytesassets/schemas/imageupdateautomation-image-v1.fields.txtdoc10,643 bytesassets/schemas/kustomization-kustomize-v1.fields.txtdoc20,723 bytesassets/schemas/ocirepository-source-v1.fields.txtdoc10,427 bytesassets/schemas/provider-notification-v1.fields.txtdoc3,551 bytesassets/schemas/provider-notification-v1beta3.fields.txtdoc3,954 bytesassets/schemas/receiver-notification-v1.fields.txtdoc8,143 bytesassets/schemas/resourceset-fluxcd-v1.fields.txtdoc10,874 bytesassets/schemas/resourcesetinputprovider-fluxcd-v1.fields.txtdoc10,622 bytesevals/evals.jsonasset17,974 bytesreferences/api-migration.mddoc4,352 bytesreferences/best-practices.mddoc15,531 bytesreferences/flux-api-summary.mddoc18,971 bytesreferences/flux-operator-api-summary.mddoc13,118 bytesreferences/repo-patterns.mddoc13,027 bytesreferences/security-audit.mddoc14,393 bytesscripts/check-deprecated.shruns4,172 bytesscripts/discover.shruns3,540 bytesscripts/validate.shruns22,335 bytes
Read SKILL.md
# GitOps Repository Auditor
You are a GitOps repository auditor specialized in Flux CD. Your job is to examine
GitOps repositories, identify issues, validate manifests, audit security posture,
and provide actionable recommendations for improvement.
When auditing a repository, follow the workflow below. Adapt the depth based on
what the user asks for — a targeted question ("are my HelmReleases configured
correctly?") doesn't need the full workflow; a broad request ("audit this repo")
does.
## Analysis Workflow
### Phase 1: DiscoveryView the complete source on GitHubSkills included
- commit-assisted-by
- flux-controller-minor-releases
- flux-controller-patch-releases
- gitops-cluster-debug
- gitops-knowledge
- gitops-repo-audit
Repository facts
- License
- Apache-2.0
- Created
- Feb 21, 2026
- Last pushed
- Nov 3, 2026
- Forks
- 13
- Open issues
- 3
- Project activity
- Active
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 6, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 27 notes
skills/gitops-cluster-debug/evals/evals.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-cluster-debug/evals/evals.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-knowledge/evals/evals.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-knowledge/evals/evals.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-knowledge/evals/evals.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-knowledge/evals/evals.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-repo-audit/evals/evals.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-repo-audit/evals/evals.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-repo-audit/evals/evals.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-repo-audit/evals/evals.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-repo-audit/evals/evals.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-cluster-debug/evals/evals.json:1Plugin-wide analysis incomplete; see repository notesskills/gitops-cluster-debug/evals/evals.json:1Plugin-wide analysis incomplete; see repository notesskills/gitops-cluster-debug/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-cluster-debug/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-cluster-debug/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-cluster-debug/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-cluster-debug/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-cluster-debug/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/gitops-cluster-debug/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- 1 broad permissionin 1 file: commit-assisted-by/SKILL.md:1
- 4 dangerous shell commandsin 1 file: skills/gitops-repo-audit/scripts/validate.sh:465
- No hidden or obfuscated text
- No instruction overrides
- 7 executable scriptsin 4 files: skills/gitops-repo-audit/scripts/check-deprecated.sh:1 skills/gitops-repo-audit/scripts/discover.sh:1 skills/gitops-repo-audit/scripts/validate.sh:1 and 1 more
- 60 references to secretsin 8 files: skills/gitops-knowledge/references/monorepo-delivery.md:36 skills/gitops-repo-audit/references/repo-patterns.md:55 skills/gitops-knowledge/references/repo-patterns.md:116 and 5 more
- No requests to vote in Hot
Show all 1,080 signals by file
.mcp.json
internal/skills/commit-assisted-by/SKILL.md
- Broad permissionsline 1
Bash(*/safety-check.sh) Bash(git commit:*) Bash(git log:*)
internal/skills/commit-assisted-by/scripts/safety-check.sh
- Executable scriptline 1
#!/usr/bin/env bash
internal/skills/flux-controller-minor-releases/SKILL.md
- Network accessline 60
notified on completion. A foreground watch blocks the session. - **Always quote PR/issue links as full URLs** (e.g. `https://github.com/fluxcd/source-controller/pull/2082`), never the - Network accessline 61
- **Always quote PR/issue links as full URLs** (e.g. `https://github.com/fluxcd/source-controller/pull/2082`), never the `<owner>/<repo>#<number>` shorthand — full URLs are clickable from the user's - Network accessline 62
`https://github.com/fluxcd/source-controller/pull/2082`), never the - Network accessline 101
the title. The release→main PR uses the GitHub-default humanized branch name `Release/vX.Y.x`. Every PR body is a single line pointing at the flux2 minor release tracking issue: `Part of: https://github.com/fluxcd/flux2/issues/NNNN`. - Network accessline 102
`Release/vX.Y.x`. Every PR body is a single line pointing at the flux2 minor release tracking issue: `Part of: https://github.com/fluxcd/flux2/issues/NNNN`. - **Do not declare the release done until every step below has run**, including - Network accessline 103
release tracking issue: `Part of: https://github.com/fluxcd/flux2/issues/NNNN`. - Network accessline 111
- Read the upstream procedure at `website/content/en/flux/releases/procedure.md`, section `Controllers: minor releases` (https://fluxcd.io/flux/releases/procedure/#controllers-minor-releases). - Network accessline 112
section `Controllers: minor releases` (https://fluxcd.io/flux/releases/procedure/#controllers-minor-releases). - Identify the flux2 minor-release tracking issue so PR bodies can reference it - Network accessline 113
(https://fluxcd.io/flux/releases/procedure/#controllers-minor-releases). - Network accessline 114
- Identify the flux2 minor-release tracking issue so PR bodies can reference it (`Part of: https://github.com/fluxcd/flux2/issues/NNNN`). - Use `date` to get the release date for the changelog entry. - Network accessline 115
(`Part of: https://github.com/fluxcd/flux2/issues/NNNN`). - Use `date` to get the release date for the changelog entry. - `git fetch --all --tags --prune` before reasoning about branches, tags, or - Network accessline 241
When warning about a deprecated/beta API removal, link the upgrade instruction to the canonical flux2 upgrade-procedure discussion (https://github.com/fluxcd/flux2/discussions/5572), not to a one-off - Network accessline 242
to the canonical flux2 upgrade-procedure discussion (https://github.com/fluxcd/flux2/discussions/5572), not to a one-off `flux migrate` PR — the discussion is the maintained guide covering both the - Network accessline 243
(https://github.com/fluxcd/flux2/discussions/5572), not to a one-off - Network accessline 249
- An optional `### General updates` subsection for k8s/Go/dependency posture. - `Fixes:` and `Improvements:` bullet lists, each bullet a short title plus one or more `[#NNNN](https://github.com/fluxcd/<repo>/pull/NNNN)` links. - Network accessline 251
or more `[#NNNN](https://github.com/fluxcd/<repo>/pull/NNNN)` links.
internal/skills/flux-controller-patch-releases/SKILL.md
- Network accessline 40
completes, report the result and proceed. - **Always quote PR/issue links as full URLs** (e.g. `https://github.com/fluxcd/helm-controller/pull/1465`), never the - Network accessline 41
- **Always quote PR/issue links as full URLs** (e.g. `https://github.com/fluxcd/helm-controller/pull/1465`), never the `<owner>/<repo>#<number>` shorthand — full URLs are clickable from the - Network accessline 42
`https://github.com/fluxcd/helm-controller/pull/1465`), never the
skills/gitops-cluster-debug/assets/schemas/alert-notification-v1.fields.txt
skills/gitops-cluster-debug/assets/schemas/alert-notification-v1beta3.fields.txt
skills/gitops-cluster-debug/assets/schemas/artifactgenerator-source-v1beta1.fields.txt
skills/gitops-cluster-debug/assets/schemas/bucket-source-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 19
spec.secretRef <object> # SecretRef specifies the Secret containing authentication credentials for the Bucket. spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name - Network accessline 19
spec.secretRef <object> # SecretRef specifies the Secret containing authentication credentials for the Bucket. spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name - Network accessline 20
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the bucket. This field is only supported for the 'gcp' a - Network accessline 20
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the bucket. This field is only supported for the 'gcp' a - Network accessline 21
spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the bucket. This field is only supported for the 'gcp' and 'aws' providers. For more information about object identity: - Network accessline 21
spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the bucket. This field is only supported for the 'gcp' and 'aws' providers. For more information about object identity:
skills/gitops-cluster-debug/assets/schemas/externalartifact-source-v1.fields.txt
skills/gitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt
- Network accessline 1
# schema source: Flux Operator v0.62.1 https://github.com/controlplaneio-fluxcd/flux-operator - Network accessline 1
# schema source: Flux Operator v0.62.1 https://github.com/controlplaneio-fluxcd/flux-operator - Network accessline 33
spec.kustomize.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.kustomize.patches[].target <object> # Target points to the resources tha - Network accessline 33
spec.kustomize.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.kustomize.patches[].target <object> # Target points to the resources tha - Network accessline 34
spec.kustomize.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label sele - Network accessline 34
spec.kustomize.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label sele - Network accessline 35
spec.kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resou - Network accessline 35
spec.kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resou - Network accessline 36
spec.kustomize.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/ - Network accessline 36
spec.kustomize.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/ - Network accessline 37
spec.kustomize.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/b - Network accessline 37
spec.kustomize.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/b - Network accessline 38
spec.kustomize.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels - Network accessline 38
spec.kustomize.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels - Network accessline 39
spec.kustomize.patches[].target.name <string> # Name to match resources with. spec.kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.kustomize.patches[].target.version <string> # Version of the API Gro - Network accessline 39
spec.kustomize.patches[].target.name <string> # Name to match resources with. spec.kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.kustomize.patches[].target.version <string> # Version of the API Gro - Network accessline 40
spec.kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of una - Network accessline 40
spec.kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of una - Network accessline 41
spec.kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/communit - Network accessline 41
spec.kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/communit
skills/gitops-cluster-debug/assets/schemas/fluxreport-fluxcd-v1.fields.txt
skills/gitops-cluster-debug/assets/schemas/gitrepository-source-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 19
spec.ref.branch <string> # Branch to check out, defaults to 'master' if no other field is defined. spec.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow c - Network accessline 19
spec.ref.branch <string> # Branch to check out, defaults to 'master' if no other field is defined. spec.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow c - Network accessline 20
spec.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow clone the branch, in which the commit is expected to exist. spec.ref.name <string> # Name of the ref - Network accessline 20
spec.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow clone the branch, in which the commit is expected to exist. spec.ref.name <string> # Name of the ref - Network accessline 21
spec.ref.name <string> # Name of the reference to check out; takes precedence over Branch, Tag and SemVer. It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description Examples: "refs/heads/main", "refs/tags/ - Network accessline 21
spec.ref.name <string> # Name of the reference to check out; takes precedence over Branch, Tag and SemVer. It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description Examples: "refs/heads/main", "refs/tags/
skills/gitops-cluster-debug/assets/schemas/helmchart-source-v1.fields.txt
skills/gitops-cluster-debug/assets/schemas/helmrelease-helm-v2.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 8
spec.chart.kind <string> enum=HelmChart|OCIRepository # Kind is the kind of the source object generated from this template. Valid values: - HelmChart (default): generates a source.toolkit.fluxcd.io/v1 HelmChart from the HelmChartSpec-compat - Network accessline 8
spec.chart.kind <string> enum=HelmChart|OCIRepository # Kind is the kind of the source object generated from this template. Valid values: - HelmChart (default): generates a source.toolkit.fluxcd.io/v1 HelmChart from the HelmChartSpec-compat - Network accessline 9
spec.chart.metadata <object> # ObjectMeta holds the template for metadata like labels and annotations. spec.chart.metadata.annotations <map[string]string> # Annotations is an unstructured key value map stored with a resource that may be set - Network accessline 9
spec.chart.metadata <object> # ObjectMeta holds the template for metadata like labels and annotations. spec.chart.metadata.annotations <map[string]string> # Annotations is an unstructured key value map stored with a resource that may be set - Network accessline 10
spec.chart.metadata.annotations <map[string]string> # Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be prese - Network accessline 10
spec.chart.metadata.annotations <map[string]string> # Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be prese - Network accessline 11
spec.chart.metadata.labels <map[string]string> # Map of string keys and values that can be used to organize and categorize (scope and select) objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ - Network accessline 11
spec.chart.metadata.labels <map[string]string> # Map of string keys and values that can be used to organize and categorize (scope and select) objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ - Network accessline 32
spec.chart.spec.secretRef <object> # SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson. spec.chart.spec.secretRef.name <string> - Network accessline 32
spec.chart.spec.secretRef <object> # SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson. spec.chart.spec.secretRef.name <string> - Network accessline 33
spec.chart.spec.secretRef.name <string> (required) # Name of the referent. spec.chart.spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pu - Network accessline 33
spec.chart.spec.secretRef.name <string> (required) # Name of the referent. spec.chart.spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pu - Network accessline 34
spec.chart.spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For - Network accessline 34
spec.chart.spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For - Network accessline 68
spec.driftDetection.ignore[].paths <[]string> (required) # Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from consideration in a Kubernetes object. spec.driftDetection.ignore[].target <object> # Target is a selector for sp - Network accessline 68
spec.driftDetection.ignore[].paths <[]string> (required) # Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from consideration in a Kubernetes object. spec.driftDetection.ignore[].target <object> # Target is a selector for sp - Network accessline 69
spec.driftDetection.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to which this rule applies. If Target is not set, the Paths will be ignored for all Kubernetes objects within the manifest of the Helm rel - Network accessline 69
spec.driftDetection.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to which this rule applies. If Target is not set, the Paths will be ignored for all Kubernetes objects within the manifest of the Helm rel - Network accessline 70
spec.driftDetection.ignore[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the r - Network accessline 70
spec.driftDetection.ignore[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the r - Network accessline 71
spec.driftDetection.ignore[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/commun - Network accessline 71
spec.driftDetection.ignore[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/commun - Network accessline 72
spec.driftDetection.ignore[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/communi - Network accessline 72
spec.driftDetection.ignore[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/communi - Network accessline 73
spec.driftDetection.ignore[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource la - Network accessline 73
spec.driftDetection.ignore[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource la - Network accessline 74
spec.driftDetection.ignore[].target.name <string> # Name to match resources with. spec.driftDetection.ignore[].target.namespace <string> # Namespace to select resources from. spec.driftDetection.ignore[].target.version <string> # Version of - Network accessline 74
spec.driftDetection.ignore[].target.name <string> # Name to match resources with. spec.driftDetection.ignore[].target.namespace <string> # Namespace to select resources from. spec.driftDetection.ignore[].target.version <string> # Version of - Network accessline 75
spec.driftDetection.ignore[].target.namespace <string> # Namespace to select resources from. spec.driftDetection.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capabl - Network accessline 75
spec.driftDetection.ignore[].target.namespace <string> # Namespace to select resources from. spec.driftDetection.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capabl - Network accessline 76
spec.driftDetection.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/comm - Network accessline 76
spec.driftDetection.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/comm - Network accessline 83
spec.healthCheckExprs[].kind <string> # Kind of the custom resource under evaluation. spec.install <object> # Install holds the configuration for Helm install actions for this HelmRelease. spec.install.crds <string> enum=Skip|Create|CreateR - Network accessline 83
spec.healthCheckExprs[].kind <string> # Kind of the custom resource under evaluation. spec.install <object> # Install holds the configuration for Helm install actions for this HelmRelease. spec.install.crds <string> enum=Skip|Create|CreateR - Network accessline 84
spec.install <object> # Install holds the configuration for Helm install actions for this HelmRelease. spec.install.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD u - Network accessline 84
spec.install <object> # Install holds the configuration for Helm install actions for this HelmRelease. spec.install.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD u - Network accessline 85
spec.install.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Create` - Network accessline 85
spec.install.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Create` - Network accessline 122
spec.postRenderers[].kustomize.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.postRenderers[].kustomize.patches[].target <object> # Ta - Network accessline 122
spec.postRenderers[].kustomize.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.postRenderers[].kustomize.patches[].target <object> # Ta - Network accessline 123
spec.postRenderers[].kustomize.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.postRenderers[].kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a st - Network accessline 123
spec.postRenderers[].kustomize.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.postRenderers[].kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a st - Network accessline 124
spec.postRenderers[].kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matche - Network accessline 124
spec.postRenderers[].kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matche - Network accessline 125
spec.postRenderers[].kustomize.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kuber - Network accessline 125
spec.postRenderers[].kustomize.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kuber - Network accessline 126
spec.postRenderers[].kustomize.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubern - Network accessline 126
spec.postRenderers[].kustomize.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubern - Network accessline 127
spec.postRenderers[].kustomize.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the - Network accessline 127
spec.postRenderers[].kustomize.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the - Network accessline 128
spec.postRenderers[].kustomize.patches[].target.name <string> # Name to match resources with. spec.postRenderers[].kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.postRenderers[].kustomize.patches[]. - Network accessline 128
spec.postRenderers[].kustomize.patches[].target.name <string> # Name to match resources with. spec.postRenderers[].kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.postRenderers[].kustomize.patches[]. - Network accessline 129
spec.postRenderers[].kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.postRenderers[].kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Gro - Network accessline 129
spec.postRenderers[].kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.postRenderers[].kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Gro - Network accessline 130
spec.postRenderers[].kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kub - Network accessline 130
spec.postRenderers[].kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kub - Network accessline 136
spec.rollback.disableWaitForJobs <boolean> # DisableWaitForJobs disables waiting for jobs to complete after a Helm rollback has been performed. spec.rollback.force <boolean> # Force forces resource updates through a replacement strategy tha - Network accessline 136
spec.rollback.disableWaitForJobs <boolean> # DisableWaitForJobs disables waiting for jobs to complete after a Helm rollback has been performed. spec.rollback.force <boolean> # Force forces resource updates through a replacement strategy tha - Network accessline 137
spec.rollback.force <boolean> # Force forces resource updates through a replacement strategy that avoids 3-way merge conflicts on client-side apply. This field is ignored for server-side apply (which always forces conflicts with other field - Network accessline 137
spec.rollback.force <boolean> # Force forces resource updates through a replacement strategy that avoids 3-way merge conflicts on client-side apply. This field is ignored for server-side apply (which always forces conflicts with other field - Network accessline 138
spec.rollback.recreate <boolean> # Recreate performs pod restarts for any managed workloads. Deprecated: This behavior was deprecated in Helm 3: - Deprecation: https://github.com/helm/helm/pull/6463 - Removal: https://github.com/helm/helm/p - Network accessline 138
spec.rollback.recreate <boolean> # Recreate performs pod restarts for any managed workloads. Deprecated: This behavior was deprecated in Helm 3: - Deprecation: https://github.com/helm/helm/pull/6463 - Removal: https://github.com/helm/helm/p - Network accessline 160
spec.upgrade.chartNameChangeStrategy <string> enum=InPlaceUpdate|Reinstall # ChartNameChangeStrategy defines the strategy to use when a Helm chart name changes. Valid values are 'Reinstall' or 'InPlaceUpdate'. Defaults to 'Reinstall' if omi - Network accessline 160
spec.upgrade.chartNameChangeStrategy <string> enum=InPlaceUpdate|Reinstall # ChartNameChangeStrategy defines the strategy to use when a Helm chart name changes. Valid values are 'Reinstall' or 'InPlaceUpdate'. Defaults to 'Reinstall' if omi - Network accessline 161
spec.upgrade.cleanupOnFail <boolean> # CleanupOnFail allows deletion of new resources created during the Helm upgrade action when it fails. spec.upgrade.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's - Network accessline 161
spec.upgrade.cleanupOnFail <boolean> # CleanupOnFail allows deletion of new resources created during the Helm upgrade action when it fails. spec.upgrade.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's - Network accessline 162
spec.upgrade.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Skip` an - Network accessline 162
spec.upgrade.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Skip` an
skills/gitops-cluster-debug/assets/schemas/helmrepository-source-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 5
metadata.namespace <string> (required) spec <object> # HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. spec.accessFrom <object> # AccessFrom specifies an Access Control List f - Network accessline 5
metadata.namespace <string> (required) spec <object> # HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. spec.accessFrom <object> # AccessFrom specifies an Access Control List f - Network accessline 6
spec <object> # HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. spec.accessFrom <object> # AccessFrom specifies an Access Control List for allowing cross-namespace references - Network accessline 6
spec <object> # HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. spec.accessFrom <object> # AccessFrom specifies an Access Control List for allowing cross-namespace references - Network accessline 7
spec.accessFrom <object> # AccessFrom specifies an Access Control List for allowing cross-namespace references to this object. NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 - Network accessline 7
spec.accessFrom <object> # AccessFrom specifies an Access Control List for allowing cross-namespace references to this object. NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
skills/gitops-cluster-debug/assets/schemas/imagepolicy-image-v1.fields.txt
skills/gitops-cluster-debug/assets/schemas/imagerepository-image-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 19
spec.secretRef <object> # SecretRef can be given the name of a secret containing credentials to use for the image registry. The secret should be created with `kubectl create secret docker-registry`, or the equivalent. spec.secretRef.name <s - Network accessline 19
spec.secretRef <object> # SecretRef can be given the name of a secret containing credentials to use for the image registry. The secret should be created with `kubectl create secret docker-registry`, or the equivalent. spec.secretRef.name <s - Network accessline 20
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> max=253 # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets att - Network accessline 20
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> max=253 # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets att - Network accessline 21
spec.serviceAccountName <string> max=253 # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For mor - Network accessline 21
spec.serviceAccountName <string> max=253 # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For mor
skills/gitops-cluster-debug/assets/schemas/imageupdateautomation-image-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 10
spec.git.checkout.ref.branch <string> # Branch to check out, defaults to 'master' if no other field is defined. spec.git.checkout.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combine - Network accessline 10
spec.git.checkout.ref.branch <string> # Branch to check out, defaults to 'master' if no other field is defined. spec.git.checkout.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combine - Network accessline 11
spec.git.checkout.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow clone the branch, in which the commit is expected to exist. spec.git.checkout.ref.name - Network accessline 11
spec.git.checkout.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow clone the branch, in which the commit is expected to exist. spec.git.checkout.ref.name - Network accessline 12
spec.git.checkout.ref.name <string> # Name of the reference to check out; takes precedence over Branch, Tag and SemVer. It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description Examples: "refs/heads/main" - Network accessline 12
spec.git.checkout.ref.name <string> # Name of the reference to check out; takes precedence over Branch, Tag and SemVer. It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description Examples: "refs/heads/main" - Network accessline 25
spec.git.push <object> # Push specifies how and where to push commits made by the automation. If missing, commits are pushed (back) to `.spec.checkout.branch` or its default. spec.git.push.branch <string> # Branch specifies that commits sho - Network accessline 25
spec.git.push <object> # Push specifies how and where to push commits made by the automation. If missing, commits are pushed (back) to `.spec.checkout.branch` or its default. spec.git.push.branch <string> # Branch specifies that commits sho - Network accessline 26
spec.git.push.branch <string> # Branch specifies that commits should be pushed to the branch named. The branch is created using `.spec.checkout.branch` as the starting point, if it doesn't already exist. spec.git.push.options <map[string]st - Network accessline 26
spec.git.push.branch <string> # Branch specifies that commits should be pushed to the branch named. The branch is created using `.spec.checkout.branch` as the starting point, if it doesn't already exist. spec.git.push.options <map[string]st - Network accessline 27
spec.git.push.options <map[string]string> # Options specifies the push options that are sent to the Git server when performing a push operation. For details, see: https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionlto - Network accessline 27
spec.git.push.options <map[string]string> # Options specifies the push options that are sent to the Git server when performing a push operation. For details, see: https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionlto - Network accessline 28
spec.git.push.refspec <string> pattern="^$|^[^+:]" # Refspec specifies the Git Refspec to use for a push operation. If both Branch and Refspec are provided, then the commit is pushed to the branch and also using the specified refspec. Delet - Network accessline 28
spec.git.push.refspec <string> pattern="^$|^[^+:]" # Refspec specifies the Git Refspec to use for a push operation. If both Branch and Refspec are provided, then the commit is pushed to the branch and also using the specified refspec. Delet
skills/gitops-cluster-debug/assets/schemas/kustomization-kustomize-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 35
spec.ignore[].paths <[]string> (required) # Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from consideration in a Kubernetes object. spec.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to - Network accessline 35
spec.ignore[].paths <[]string> (required) # Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from consideration in a Kubernetes object. spec.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to - Network accessline 36
spec.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to which this rule applies. If Target is not set, the Paths will be ignored for all Kubernetes objects within the manifest of the Kustomization. spec.ign - Network accessline 36
spec.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to which this rule applies. If Target is not set, the Paths will be ignored for all Kubernetes objects within the manifest of the Kustomization. spec.ign - Network accessline 37
spec.ignore[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotat - Network accessline 37
spec.ignore[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotat - Network accessline 38
spec.ignore[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master - Network accessline 38
spec.ignore[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master - Network accessline 39
spec.ignore[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/ - Network accessline 39
spec.ignore[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/ - Network accessline 40
spec.ignore[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. - Network accessline 40
spec.ignore[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. - Network accessline 41
spec.ignore[].target.name <string> # Name to match resources with. spec.ignore[].target.namespace <string> # Namespace to select resources from. spec.ignore[].target.version <string> # Version of the API Group to select resources from. Toge - Network accessline 41
spec.ignore[].target.name <string> # Name to match resources with. spec.ignore[].target.namespace <string> # Namespace to select resources from. spec.ignore[].target.version <string> # Version of the API Group to select resources from. Toge - Network accessline 42
spec.ignore[].target.namespace <string> # Namespace to select resources from. spec.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying - Network accessline 42
spec.ignore[].target.namespace <string> # Namespace to select resources from. spec.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying - Network accessline 43
spec.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/mast - Network accessline 43
spec.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/mast - Network accessline 60
spec.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.patches[].target <object> # Target points to the resources that the patch document - Network accessline 60
spec.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.patches[].target <object> # Target points to the resources that the patch document - Network accessline 61
spec.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression htt - Network accessline 61
spec.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression htt - Network accessline 62
spec.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annota - Network accessline 62
spec.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annota - Network accessline 63
spec.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/maste - Network accessline 63
spec.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/maste - Network accessline 64
spec.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master - Network accessline 64
spec.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master - Network accessline 65
spec.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. - Network accessline 65
spec.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. - Network accessline 66
spec.patches[].target.name <string> # Name to match resources with. spec.patches[].target.namespace <string> # Namespace to select resources from. spec.patches[].target.version <string> # Version of the API Group to select resources from. T - Network accessline 66
spec.patches[].target.name <string> # Name to match resources with. spec.patches[].target.namespace <string> # Namespace to select resources from. spec.patches[].target.version <string> # Version of the API Group to select resources from. T - Network accessline 67
spec.patches[].target.namespace <string> # Namespace to select resources from. spec.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifyi - Network accessline 67
spec.patches[].target.namespace <string> # Namespace to select resources from. spec.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifyi - Network accessline 68
spec.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/mas - Network accessline 68
spec.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/mas
skills/gitops-cluster-debug/assets/schemas/ocirepository-source-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 23
spec.secretRef <object> # SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson. spec.secretRef.name <string> (required) # Name of t - Network accessline 23
spec.secretRef <object> # SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson. spec.secretRef.name <string> (required) # Name of t - Network accessline 24
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to - Network accessline 24
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to - Network accessline 25
spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For more inform - Network accessline 25
spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For more inform
skills/gitops-cluster-debug/assets/schemas/provider-notification-v1.fields.txt
skills/gitops-cluster-debug/assets/schemas/provider-notification-v1beta3.fields.txt
skills/gitops-cluster-debug/assets/schemas/receiver-notification-v1.fields.txt
skills/gitops-cluster-debug/assets/schemas/resourceset-fluxcd-v1.fields.txt
skills/gitops-cluster-debug/assets/schemas/resourcesetinputprovider-fluxcd-v1.fields.txt
- Network accessline 1
# schema source: Flux Operator v0.62.1 https://github.com/controlplaneio-fluxcd/flux-operator - Network accessline 1
# schema source: Flux Operator v0.62.1 https://github.com/controlplaneio-fluxcd/flux-operator - Network accessline 33
spec.selectors[].name <string> # Name selects a single ExternalArtifact by metadata.name. This field is mutually exclusive with matchLabels and matchExpressions. spec.selectors[].namespace <string> # Namespace scopes ExternalArtifact discov - Network accessline 33
spec.selectors[].name <string> # Name selects a single ExternalArtifact by metadata.name. This field is mutually exclusive with matchLabels and matchExpressions. spec.selectors[].namespace <string> # Namespace scopes ExternalArtifact discov - Network accessline 34
spec.selectors[].namespace <string> # Namespace scopes ExternalArtifact discovery. When empty, ExternalArtifacts are listed in the ResourceSetInputProvider namespace. When set to "*", ExternalArtifacts are listed across all namespaces by om - Network accessline 34
spec.selectors[].namespace <string> # Namespace scopes ExternalArtifact discovery. When empty, ExternalArtifacts are listed in the ResourceSetInputProvider namespace. When set to "*", ExternalArtifacts are listed across all namespaces by om - Network accessline 35
spec.serviceAccountName <string> # ServiceAccountName specifies the name of the Kubernetes ServiceAccount used for authentication with external services using object identity. If not specified, the default object identity ServiceAccount con - Network accessline 35
spec.serviceAccountName <string> # ServiceAccountName specifies the name of the Kubernetes ServiceAccount used for authentication with external services using object identity. If not specified, the default object identity ServiceAccount con
skills/gitops-knowledge/SKILL.md
- Access to secretsline 110
[Credential-related source omitted] - Access to secretsline 110
[Credential-related source omitted] - Network accessline 137
spec: interval: 5m url: https://github.com/org/my-app.git - Network accessline 137
spec: interval: 5m url: https://github.com/org/my-app.git - Network accessline 138
interval: 5m url: https://github.com/org/my-app.git ref: - Network accessline 138
interval: 5m url: https://github.com/org/my-app.git ref: - Network accessline 139
url: https://github.com/org/my-app.git - Network accessline 139
url: https://github.com/org/my-app.git
skills/gitops-knowledge/assets/schemas/alert-notification-v1.fields.txt
skills/gitops-knowledge/assets/schemas/alert-notification-v1beta3.fields.txt
skills/gitops-knowledge/assets/schemas/artifactgenerator-source-v1beta1.fields.txt
skills/gitops-knowledge/assets/schemas/bucket-source-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 19
spec.secretRef <object> # SecretRef specifies the Secret containing authentication credentials for the Bucket. spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name - Network accessline 19
spec.secretRef <object> # SecretRef specifies the Secret containing authentication credentials for the Bucket. spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name - Network accessline 20
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the bucket. This field is only supported for the 'gcp' a - Network accessline 20
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the bucket. This field is only supported for the 'gcp' a - Network accessline 21
spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the bucket. This field is only supported for the 'gcp' and 'aws' providers. For more information about object identity: - Network accessline 21
spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the bucket. This field is only supported for the 'gcp' and 'aws' providers. For more information about object identity:
skills/gitops-knowledge/assets/schemas/externalartifact-source-v1.fields.txt
skills/gitops-knowledge/assets/schemas/fluxinstance-fluxcd-v1.fields.txt
- Network accessline 1
# schema source: Flux Operator v0.62.1 https://github.com/controlplaneio-fluxcd/flux-operator - Network accessline 1
# schema source: Flux Operator v0.62.1 https://github.com/controlplaneio-fluxcd/flux-operator - Network accessline 33
spec.kustomize.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.kustomize.patches[].target <object> # Target points to the resources tha - Network accessline 33
spec.kustomize.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.kustomize.patches[].target <object> # Target points to the resources tha - Network accessline 34
spec.kustomize.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label sele - Network accessline 34
spec.kustomize.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label sele - Network accessline 35
spec.kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resou - Network accessline 35
spec.kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resou - Network accessline 36
spec.kustomize.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/ - Network accessline 36
spec.kustomize.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/ - Network accessline 37
spec.kustomize.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/b - Network accessline 37
spec.kustomize.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/b - Network accessline 38
spec.kustomize.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels - Network accessline 38
spec.kustomize.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels - Network accessline 39
spec.kustomize.patches[].target.name <string> # Name to match resources with. spec.kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.kustomize.patches[].target.version <string> # Version of the API Gro - Network accessline 39
spec.kustomize.patches[].target.name <string> # Name to match resources with. spec.kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.kustomize.patches[].target.version <string> # Version of the API Gro - Network accessline 40
spec.kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of una - Network accessline 40
spec.kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of una - Network accessline 41
spec.kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/communit - Network accessline 41
spec.kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/communit
skills/gitops-knowledge/assets/schemas/fluxreport-fluxcd-v1.fields.txt
skills/gitops-knowledge/assets/schemas/gitrepository-source-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 19
spec.ref.branch <string> # Branch to check out, defaults to 'master' if no other field is defined. spec.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow c - Network accessline 19
spec.ref.branch <string> # Branch to check out, defaults to 'master' if no other field is defined. spec.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow c - Network accessline 20
spec.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow clone the branch, in which the commit is expected to exist. spec.ref.name <string> # Name of the ref - Network accessline 20
spec.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow clone the branch, in which the commit is expected to exist. spec.ref.name <string> # Name of the ref - Network accessline 21
spec.ref.name <string> # Name of the reference to check out; takes precedence over Branch, Tag and SemVer. It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description Examples: "refs/heads/main", "refs/tags/ - Network accessline 21
spec.ref.name <string> # Name of the reference to check out; takes precedence over Branch, Tag and SemVer. It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description Examples: "refs/heads/main", "refs/tags/
skills/gitops-knowledge/assets/schemas/helmchart-source-v1.fields.txt
skills/gitops-knowledge/assets/schemas/helmrelease-helm-v2.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 8
spec.chart.kind <string> enum=HelmChart|OCIRepository # Kind is the kind of the source object generated from this template. Valid values: - HelmChart (default): generates a source.toolkit.fluxcd.io/v1 HelmChart from the HelmChartSpec-compat - Network accessline 8
spec.chart.kind <string> enum=HelmChart|OCIRepository # Kind is the kind of the source object generated from this template. Valid values: - HelmChart (default): generates a source.toolkit.fluxcd.io/v1 HelmChart from the HelmChartSpec-compat - Network accessline 9
spec.chart.metadata <object> # ObjectMeta holds the template for metadata like labels and annotations. spec.chart.metadata.annotations <map[string]string> # Annotations is an unstructured key value map stored with a resource that may be set - Network accessline 9
spec.chart.metadata <object> # ObjectMeta holds the template for metadata like labels and annotations. spec.chart.metadata.annotations <map[string]string> # Annotations is an unstructured key value map stored with a resource that may be set - Network accessline 10
spec.chart.metadata.annotations <map[string]string> # Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be prese - Network accessline 10
spec.chart.metadata.annotations <map[string]string> # Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be prese - Network accessline 11
spec.chart.metadata.labels <map[string]string> # Map of string keys and values that can be used to organize and categorize (scope and select) objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ - Network accessline 11
spec.chart.metadata.labels <map[string]string> # Map of string keys and values that can be used to organize and categorize (scope and select) objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ - Network accessline 32
spec.chart.spec.secretRef <object> # SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson. spec.chart.spec.secretRef.name <string> - Network accessline 32
spec.chart.spec.secretRef <object> # SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson. spec.chart.spec.secretRef.name <string> - Network accessline 33
spec.chart.spec.secretRef.name <string> (required) # Name of the referent. spec.chart.spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pu - Network accessline 33
spec.chart.spec.secretRef.name <string> (required) # Name of the referent. spec.chart.spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pu - Network accessline 34
spec.chart.spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For - Network accessline 34
spec.chart.spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For - Network accessline 68
spec.driftDetection.ignore[].paths <[]string> (required) # Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from consideration in a Kubernetes object. spec.driftDetection.ignore[].target <object> # Target is a selector for sp - Network accessline 68
spec.driftDetection.ignore[].paths <[]string> (required) # Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from consideration in a Kubernetes object. spec.driftDetection.ignore[].target <object> # Target is a selector for sp - Network accessline 69
spec.driftDetection.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to which this rule applies. If Target is not set, the Paths will be ignored for all Kubernetes objects within the manifest of the Helm rel - Network accessline 69
spec.driftDetection.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to which this rule applies. If Target is not set, the Paths will be ignored for all Kubernetes objects within the manifest of the Helm rel - Network accessline 70
spec.driftDetection.ignore[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the r - Network accessline 70
spec.driftDetection.ignore[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the r - Network accessline 71
spec.driftDetection.ignore[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/commun - Network accessline 71
spec.driftDetection.ignore[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/commun - Network accessline 72
spec.driftDetection.ignore[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/communi - Network accessline 72
spec.driftDetection.ignore[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/communi - Network accessline 73
spec.driftDetection.ignore[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource la - Network accessline 73
spec.driftDetection.ignore[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource la - Network accessline 74
spec.driftDetection.ignore[].target.name <string> # Name to match resources with. spec.driftDetection.ignore[].target.namespace <string> # Namespace to select resources from. spec.driftDetection.ignore[].target.version <string> # Version of - Network accessline 74
spec.driftDetection.ignore[].target.name <string> # Name to match resources with. spec.driftDetection.ignore[].target.namespace <string> # Namespace to select resources from. spec.driftDetection.ignore[].target.version <string> # Version of - Network accessline 75
spec.driftDetection.ignore[].target.namespace <string> # Namespace to select resources from. spec.driftDetection.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capabl - Network accessline 75
spec.driftDetection.ignore[].target.namespace <string> # Namespace to select resources from. spec.driftDetection.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capabl - Network accessline 76
spec.driftDetection.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/comm - Network accessline 76
spec.driftDetection.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/comm - Network accessline 83
spec.healthCheckExprs[].kind <string> # Kind of the custom resource under evaluation. spec.install <object> # Install holds the configuration for Helm install actions for this HelmRelease. spec.install.crds <string> enum=Skip|Create|CreateR - Network accessline 83
spec.healthCheckExprs[].kind <string> # Kind of the custom resource under evaluation. spec.install <object> # Install holds the configuration for Helm install actions for this HelmRelease. spec.install.crds <string> enum=Skip|Create|CreateR - Network accessline 84
spec.install <object> # Install holds the configuration for Helm install actions for this HelmRelease. spec.install.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD u - Network accessline 84
spec.install <object> # Install holds the configuration for Helm install actions for this HelmRelease. spec.install.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD u - Network accessline 85
spec.install.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Create` - Network accessline 85
spec.install.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Create` - Network accessline 122
spec.postRenderers[].kustomize.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.postRenderers[].kustomize.patches[].target <object> # Ta - Network accessline 122
spec.postRenderers[].kustomize.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.postRenderers[].kustomize.patches[].target <object> # Ta - Network accessline 123
spec.postRenderers[].kustomize.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.postRenderers[].kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a st - Network accessline 123
spec.postRenderers[].kustomize.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.postRenderers[].kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a st - Network accessline 124
spec.postRenderers[].kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matche - Network accessline 124
spec.postRenderers[].kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matche - Network accessline 125
spec.postRenderers[].kustomize.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kuber - Network accessline 125
spec.postRenderers[].kustomize.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kuber - Network accessline 126
spec.postRenderers[].kustomize.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubern - Network accessline 126
spec.postRenderers[].kustomize.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubern - Network accessline 127
spec.postRenderers[].kustomize.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the - Network accessline 127
spec.postRenderers[].kustomize.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the - Network accessline 128
spec.postRenderers[].kustomize.patches[].target.name <string> # Name to match resources with. spec.postRenderers[].kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.postRenderers[].kustomize.patches[]. - Network accessline 128
spec.postRenderers[].kustomize.patches[].target.name <string> # Name to match resources with. spec.postRenderers[].kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.postRenderers[].kustomize.patches[]. - Network accessline 129
spec.postRenderers[].kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.postRenderers[].kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Gro - Network accessline 129
spec.postRenderers[].kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.postRenderers[].kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Gro - Network accessline 130
spec.postRenderers[].kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kub - Network accessline 130
spec.postRenderers[].kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kub - Network accessline 136
spec.rollback.disableWaitForJobs <boolean> # DisableWaitForJobs disables waiting for jobs to complete after a Helm rollback has been performed. spec.rollback.force <boolean> # Force forces resource updates through a replacement strategy tha - Network accessline 136
spec.rollback.disableWaitForJobs <boolean> # DisableWaitForJobs disables waiting for jobs to complete after a Helm rollback has been performed. spec.rollback.force <boolean> # Force forces resource updates through a replacement strategy tha - Network accessline 137
spec.rollback.force <boolean> # Force forces resource updates through a replacement strategy that avoids 3-way merge conflicts on client-side apply. This field is ignored for server-side apply (which always forces conflicts with other field - Network accessline 137
spec.rollback.force <boolean> # Force forces resource updates through a replacement strategy that avoids 3-way merge conflicts on client-side apply. This field is ignored for server-side apply (which always forces conflicts with other field - Network accessline 138
spec.rollback.recreate <boolean> # Recreate performs pod restarts for any managed workloads. Deprecated: This behavior was deprecated in Helm 3: - Deprecation: https://github.com/helm/helm/pull/6463 - Removal: https://github.com/helm/helm/p - Network accessline 138
spec.rollback.recreate <boolean> # Recreate performs pod restarts for any managed workloads. Deprecated: This behavior was deprecated in Helm 3: - Deprecation: https://github.com/helm/helm/pull/6463 - Removal: https://github.com/helm/helm/p - Network accessline 160
spec.upgrade.chartNameChangeStrategy <string> enum=InPlaceUpdate|Reinstall # ChartNameChangeStrategy defines the strategy to use when a Helm chart name changes. Valid values are 'Reinstall' or 'InPlaceUpdate'. Defaults to 'Reinstall' if omi - Network accessline 160
spec.upgrade.chartNameChangeStrategy <string> enum=InPlaceUpdate|Reinstall # ChartNameChangeStrategy defines the strategy to use when a Helm chart name changes. Valid values are 'Reinstall' or 'InPlaceUpdate'. Defaults to 'Reinstall' if omi - Network accessline 161
spec.upgrade.cleanupOnFail <boolean> # CleanupOnFail allows deletion of new resources created during the Helm upgrade action when it fails. spec.upgrade.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's - Network accessline 161
spec.upgrade.cleanupOnFail <boolean> # CleanupOnFail allows deletion of new resources created during the Helm upgrade action when it fails. spec.upgrade.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's - Network accessline 162
spec.upgrade.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Skip` an - Network accessline 162
spec.upgrade.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Skip` an
skills/gitops-knowledge/assets/schemas/helmrepository-source-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 5
metadata.namespace <string> (required) spec <object> # HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. spec.accessFrom <object> # AccessFrom specifies an Access Control List f - Network accessline 5
metadata.namespace <string> (required) spec <object> # HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. spec.accessFrom <object> # AccessFrom specifies an Access Control List f - Network accessline 6
spec <object> # HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. spec.accessFrom <object> # AccessFrom specifies an Access Control List for allowing cross-namespace references - Network accessline 6
spec <object> # HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. spec.accessFrom <object> # AccessFrom specifies an Access Control List for allowing cross-namespace references - Network accessline 7
spec.accessFrom <object> # AccessFrom specifies an Access Control List for allowing cross-namespace references to this object. NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 - Network accessline 7
spec.accessFrom <object> # AccessFrom specifies an Access Control List for allowing cross-namespace references to this object. NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
skills/gitops-knowledge/assets/schemas/imagepolicy-image-v1.fields.txt
skills/gitops-knowledge/assets/schemas/imagerepository-image-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 19
spec.secretRef <object> # SecretRef can be given the name of a secret containing credentials to use for the image registry. The secret should be created with `kubectl create secret docker-registry`, or the equivalent. spec.secretRef.name <s - Network accessline 19
spec.secretRef <object> # SecretRef can be given the name of a secret containing credentials to use for the image registry. The secret should be created with `kubectl create secret docker-registry`, or the equivalent. spec.secretRef.name <s - Network accessline 20
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> max=253 # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets att - Network accessline 20
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> max=253 # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets att - Network accessline 21
spec.serviceAccountName <string> max=253 # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For mor - Network accessline 21
spec.serviceAccountName <string> max=253 # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For mor
skills/gitops-knowledge/assets/schemas/imageupdateautomation-image-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 10
spec.git.checkout.ref.branch <string> # Branch to check out, defaults to 'master' if no other field is defined. spec.git.checkout.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combine - Network accessline 10
spec.git.checkout.ref.branch <string> # Branch to check out, defaults to 'master' if no other field is defined. spec.git.checkout.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combine - Network accessline 11
spec.git.checkout.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow clone the branch, in which the commit is expected to exist. spec.git.checkout.ref.name - Network accessline 11
spec.git.checkout.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow clone the branch, in which the commit is expected to exist. spec.git.checkout.ref.name - Network accessline 12
spec.git.checkout.ref.name <string> # Name of the reference to check out; takes precedence over Branch, Tag and SemVer. It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description Examples: "refs/heads/main" - Network accessline 12
spec.git.checkout.ref.name <string> # Name of the reference to check out; takes precedence over Branch, Tag and SemVer. It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description Examples: "refs/heads/main" - Network accessline 25
spec.git.push <object> # Push specifies how and where to push commits made by the automation. If missing, commits are pushed (back) to `.spec.checkout.branch` or its default. spec.git.push.branch <string> # Branch specifies that commits sho - Network accessline 25
spec.git.push <object> # Push specifies how and where to push commits made by the automation. If missing, commits are pushed (back) to `.spec.checkout.branch` or its default. spec.git.push.branch <string> # Branch specifies that commits sho - Network accessline 26
spec.git.push.branch <string> # Branch specifies that commits should be pushed to the branch named. The branch is created using `.spec.checkout.branch` as the starting point, if it doesn't already exist. spec.git.push.options <map[string]st - Network accessline 26
spec.git.push.branch <string> # Branch specifies that commits should be pushed to the branch named. The branch is created using `.spec.checkout.branch` as the starting point, if it doesn't already exist. spec.git.push.options <map[string]st - Network accessline 27
spec.git.push.options <map[string]string> # Options specifies the push options that are sent to the Git server when performing a push operation. For details, see: https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionlto - Network accessline 27
spec.git.push.options <map[string]string> # Options specifies the push options that are sent to the Git server when performing a push operation. For details, see: https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionlto - Network accessline 28
spec.git.push.refspec <string> pattern="^$|^[^+:]" # Refspec specifies the Git Refspec to use for a push operation. If both Branch and Refspec are provided, then the commit is pushed to the branch and also using the specified refspec. Delet - Network accessline 28
spec.git.push.refspec <string> pattern="^$|^[^+:]" # Refspec specifies the Git Refspec to use for a push operation. If both Branch and Refspec are provided, then the commit is pushed to the branch and also using the specified refspec. Delet
skills/gitops-knowledge/assets/schemas/kustomization-kustomize-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 35
spec.ignore[].paths <[]string> (required) # Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from consideration in a Kubernetes object. spec.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to - Network accessline 35
spec.ignore[].paths <[]string> (required) # Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from consideration in a Kubernetes object. spec.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to - Network accessline 36
spec.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to which this rule applies. If Target is not set, the Paths will be ignored for all Kubernetes objects within the manifest of the Kustomization. spec.ign - Network accessline 36
spec.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to which this rule applies. If Target is not set, the Paths will be ignored for all Kubernetes objects within the manifest of the Kustomization. spec.ign - Network accessline 37
spec.ignore[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotat - Network accessline 37
spec.ignore[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotat - Network accessline 38
spec.ignore[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master - Network accessline 38
spec.ignore[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master - Network accessline 39
spec.ignore[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/ - Network accessline 39
spec.ignore[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/ - Network accessline 40
spec.ignore[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. - Network accessline 40
spec.ignore[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. - Network accessline 41
spec.ignore[].target.name <string> # Name to match resources with. spec.ignore[].target.namespace <string> # Namespace to select resources from. spec.ignore[].target.version <string> # Version of the API Group to select resources from. Toge - Network accessline 41
spec.ignore[].target.name <string> # Name to match resources with. spec.ignore[].target.namespace <string> # Namespace to select resources from. spec.ignore[].target.version <string> # Version of the API Group to select resources from. Toge - Network accessline 42
spec.ignore[].target.namespace <string> # Namespace to select resources from. spec.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying - Network accessline 42
spec.ignore[].target.namespace <string> # Namespace to select resources from. spec.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying - Network accessline 43
spec.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/mast - Network accessline 43
spec.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/mast - Network accessline 60
spec.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.patches[].target <object> # Target points to the resources that the patch document - Network accessline 60
spec.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.patches[].target <object> # Target points to the resources that the patch document - Network accessline 61
spec.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression htt - Network accessline 61
spec.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression htt - Network accessline 62
spec.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annota - Network accessline 62
spec.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annota - Network accessline 63
spec.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/maste - Network accessline 63
spec.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/maste - Network accessline 64
spec.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master - Network accessline 64
spec.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master - Network accessline 65
spec.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. - Network accessline 65
spec.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. - Network accessline 66
spec.patches[].target.name <string> # Name to match resources with. spec.patches[].target.namespace <string> # Namespace to select resources from. spec.patches[].target.version <string> # Version of the API Group to select resources from. T - Network accessline 66
spec.patches[].target.name <string> # Name to match resources with. spec.patches[].target.namespace <string> # Namespace to select resources from. spec.patches[].target.version <string> # Version of the API Group to select resources from. T - Network accessline 67
spec.patches[].target.namespace <string> # Namespace to select resources from. spec.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifyi - Network accessline 67
spec.patches[].target.namespace <string> # Namespace to select resources from. spec.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifyi - Network accessline 68
spec.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/mas - Network accessline 68
spec.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/mas
skills/gitops-knowledge/assets/schemas/ocirepository-source-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 23
spec.secretRef <object> # SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson. spec.secretRef.name <string> (required) # Name of t - Network accessline 23
spec.secretRef <object> # SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson. spec.secretRef.name <string> (required) # Name of t - Network accessline 24
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to - Network accessline 24
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to - Network accessline 25
spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For more inform - Network accessline 25
spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For more inform
skills/gitops-knowledge/assets/schemas/provider-notification-v1.fields.txt
skills/gitops-knowledge/assets/schemas/provider-notification-v1beta3.fields.txt
skills/gitops-knowledge/assets/schemas/receiver-notification-v1.fields.txt
skills/gitops-knowledge/assets/schemas/resourceset-fluxcd-v1.fields.txt
skills/gitops-knowledge/assets/schemas/resourcesetinputprovider-fluxcd-v1.fields.txt
- Network accessline 1
# schema source: Flux Operator v0.62.1 https://github.com/controlplaneio-fluxcd/flux-operator - Network accessline 1
# schema source: Flux Operator v0.62.1 https://github.com/controlplaneio-fluxcd/flux-operator - Network accessline 33
spec.selectors[].name <string> # Name selects a single ExternalArtifact by metadata.name. This field is mutually exclusive with matchLabels and matchExpressions. spec.selectors[].namespace <string> # Namespace scopes ExternalArtifact discov - Network accessline 33
spec.selectors[].name <string> # Name selects a single ExternalArtifact by metadata.name. This field is mutually exclusive with matchLabels and matchExpressions. spec.selectors[].namespace <string> # Namespace scopes ExternalArtifact discov - Network accessline 34
spec.selectors[].namespace <string> # Namespace scopes ExternalArtifact discovery. When empty, ExternalArtifacts are listed in the ResourceSetInputProvider namespace. When set to "*", ExternalArtifacts are listed across all namespaces by om - Network accessline 34
spec.selectors[].namespace <string> # Namespace scopes ExternalArtifact discovery. When empty, ExternalArtifacts are listed in the ResourceSetInputProvider namespace. When set to "*", ExternalArtifacts are listed across all namespaces by om - Network accessline 35
spec.serviceAccountName <string> # ServiceAccountName specifies the name of the Kubernetes ServiceAccount used for authentication with external services using object identity. If not specified, the default object identity ServiceAccount con - Network accessline 35
spec.serviceAccountName <string> # ServiceAccountName specifies the name of the Kubernetes ServiceAccount used for authentication with external services using object identity. If not specified, the default object identity ServiceAccount con
skills/gitops-knowledge/evals/evals.json
- Network accessline 23
{ "id": 2, "prompt": "We use GitHub pull requests for our app at https://github.com/acme-corp/web-platform. Set up preview environments for every PR labeled 'deploy-preview'. Requirements: (1) preview code is untrusted, so it mu - Network accessline 23
{ "id": 2, "prompt": "We use GitHub pull requests for our app at https://github.com/acme-corp/web-platform. Set up preview environments for every PR labeled 'deploy-preview'. Requirements: (1) preview code is untrusted, so it mu - Network accessline 24
"id": 2, "prompt": "We use GitHub pull requests for our app at https://github.com/acme-corp/web-platform. Set up preview environments for every PR labeled 'deploy-preview'. Requirements: (1) preview code is untrusted, so it must run u - Network accessline 24
"id": 2, "prompt": "We use GitHub pull requests for our app at https://github.com/acme-corp/web-platform. Set up preview environments for every PR labeled 'deploy-preview'. Requirements: (1) preview code is untrusted, so it must run u - Network accessline 25
"prompt": "We use GitHub pull requests for our app at https://github.com/acme-corp/web-platform. Set up preview environments for every PR labeled 'deploy-preview'. Requirements: (1) preview code is untrusted, so it must run under least priv - Network accessline 25
"prompt": "We use GitHub pull requests for our app at https://github.com/acme-corp/web-platform. Set up preview environments for every PR labeled 'deploy-preview'. Requirements: (1) preview code is untrusted, so it must run under least priv - Network accessline 46
{ "id": 3, "prompt": "Set up Flux notifications for our production cluster. I need: (1) Slack alerts for all errors across all Kustomizations and HelmReleases, (2) GitHub commit status updates on our repo https://github.com/acme - Network accessline 46
{ "id": 3, "prompt": "Set up Flux notifications for our production cluster. I need: (1) Slack alerts for all errors across all Kustomizations and HelmReleases, (2) GitHub commit status updates on our repo https://github.com/acme - Network accessline 47
"id": 3, "prompt": "Set up Flux notifications for our production cluster. I need: (1) Slack alerts for all errors across all Kustomizations and HelmReleases, (2) GitHub commit status updates on our repo https://github.com/acme-corp/in - Network accessline 47
"id": 3, "prompt": "Set up Flux notifications for our production cluster. I need: (1) Slack alerts for all errors across all Kustomizations and HelmReleases, (2) GitHub commit status updates on our repo https://github.com/acme-corp/in - Network accessline 48
"prompt": "Set up Flux notifications for our production cluster. I need: (1) Slack alerts for all errors across all Kustomizations and HelmReleases, (2) GitHub commit status updates on our repo https://github.com/acme-corp/infra for the 'in - Network accessline 48
"prompt": "Set up Flux notifications for our production cluster. I need: (1) Slack alerts for all errors across all Kustomizations and HelmReleases, (2) GitHub commit status updates on our repo https://github.com/acme-corp/infra for the 'in - Network accessline 70
{ "id": 4, "prompt": "I push container images to ghcr.io/acme-corp/api-server with semver tags. I want Flux to automatically detect new versions starting with 2.0.0, update the image tag in my deployment YAML at ./k8s/production - Network accessline 70
{ "id": 4, "prompt": "I push container images to ghcr.io/acme-corp/api-server with semver tags. I want Flux to automatically detect new versions starting with 2.0.0, update the image tag in my deployment YAML at ./k8s/production - Network accessline 71
"id": 4, "prompt": "I push container images to ghcr.io/acme-corp/api-server with semver tags. I want Flux to automatically detect new versions starting with 2.0.0, update the image tag in my deployment YAML at ./k8s/production/ in the - Network accessline 71
"id": 4, "prompt": "I push container images to ghcr.io/acme-corp/api-server with semver tags. I want Flux to automatically detect new versions starting with 2.0.0, update the image tag in my deployment YAML at ./k8s/production/ in the - Network accessline 72
"prompt": "I push container images to ghcr.io/acme-corp/api-server with semver tags. I want Flux to automatically detect new versions starting with 2.0.0, update the image tag in my deployment YAML at ./k8s/production/ in the Git repo https - Network accessline 72
"prompt": "I push container images to ghcr.io/acme-corp/api-server with semver tags. I want Flux to automatically detect new versions starting with 2.0.0, update the image tag in my deployment YAML at ./k8s/production/ in the Git repo https - Network accessline 110
{ "id": 6, "prompt": "I'm bootstrapping Flux Operator on a new EKS cluster named 'staging' with Terraform. The fleet is a private GitHub repo at https://github.com/acme-corp/fleet.git. We authenticate with a GitHub App (app ID, - Network accessline 110
{ "id": 6, "prompt": "I'm bootstrapping Flux Operator on a new EKS cluster named 'staging' with Terraform. The fleet is a private GitHub repo at https://github.com/acme-corp/fleet.git. We authenticate with a GitHub App (app ID, - Network accessline 111
"id": 6, "prompt": "I'm bootstrapping Flux Operator on a new EKS cluster named 'staging' with Terraform. The fleet is a private GitHub repo at https://github.com/acme-corp/fleet.git. We authenticate with a GitHub App (app ID, installa - Network accessline 111
"id": 6, "prompt": "I'm bootstrapping Flux Operator on a new EKS cluster named 'staging' with Terraform. The fleet is a private GitHub repo at https://github.com/acme-corp/fleet.git. We authenticate with a GitHub App (app ID, installa - Network accessline 112
"prompt": "I'm bootstrapping Flux Operator on a new EKS cluster named 'staging' with Terraform. The fleet is a private GitHub repo at https://github.com/acme-corp/fleet.git. We authenticate with a GitHub App (app ID, installation owner, and - Network accessline 112
"prompt": "I'm bootstrapping Flux Operator on a new EKS cluster named 'staging' with Terraform. The fleet is a private GitHub repo at https://github.com/acme-corp/fleet.git. We authenticate with a GitHub App (app ID, installation owner, and - Network accessline 130
{ "id": 7, "prompt": "Our team wants to adopt Gitless GitOps with Flux. We keep rendered Kubernetes manifests in a GitHub repo at https://github.com/acme-corp/k8s-infra under ./deploy. I need: (1) a GitHub Actions workflow that - Network accessline 130
{ "id": 7, "prompt": "Our team wants to adopt Gitless GitOps with Flux. We keep rendered Kubernetes manifests in a GitHub repo at https://github.com/acme-corp/k8s-infra under ./deploy. I need: (1) a GitHub Actions workflow that - Network accessline 131
"id": 7, "prompt": "Our team wants to adopt Gitless GitOps with Flux. We keep rendered Kubernetes manifests in a GitHub repo at https://github.com/acme-corp/k8s-infra under ./deploy. I need: (1) a GitHub Actions workflow that on push - Network accessline 131
"id": 7, "prompt": "Our team wants to adopt Gitless GitOps with Flux. We keep rendered Kubernetes manifests in a GitHub repo at https://github.com/acme-corp/k8s-infra under ./deploy. I need: (1) a GitHub Actions workflow that on push - Network accessline 132
"prompt": "Our team wants to adopt Gitless GitOps with Flux. We keep rendered Kubernetes manifests in a GitHub repo at https://github.com/acme-corp/k8s-infra under ./deploy. I need: (1) a GitHub Actions workflow that on push to main and on - Network accessline 132
"prompt": "Our team wants to adopt Gitless GitOps with Flux. We keep rendered Kubernetes manifests in a GitHub repo at https://github.com/acme-corp/k8s-infra under ./deploy. I need: (1) a GitHub Actions workflow that on push to main and on - Network accessline 217
{ "id": 12, "prompt": "Our platform monorepo at https://github.com/acme-corp/platform-monorepo has an apps/ directory where each app has a base/ and envs/dev, envs/prod overlays (the overlays reference ../../base). We run one cl - Network accessline 217
{ "id": 12, "prompt": "Our platform monorepo at https://github.com/acme-corp/platform-monorepo has an apps/ directory where each app has a base/ and envs/dev, envs/prod overlays (the overlays reference ../../base). We run one cl - Network accessline 218
"id": 12, "prompt": "Our platform monorepo at https://github.com/acme-corp/platform-monorepo has an apps/ directory where each app has a base/ and envs/dev, envs/prod overlays (the overlays reference ../../base). We run one cluster pe - Network accessline 218
"id": 12, "prompt": "Our platform monorepo at https://github.com/acme-corp/platform-monorepo has an apps/ directory where each app has a base/ and envs/dev, envs/prod overlays (the overlays reference ../../base). We run one cluster pe - Network accessline 219
[Credential-related source omitted] - Network accessline 219
[Credential-related source omitted] - Access to secretsline 219
[Credential-related source omitted] - Access to secretsline 219
[Credential-related source omitted] - Access to secretsline 220
[Credential-related source omitted] - Access to secretsline 220
[Credential-related source omitted] - Access to secretsline 228
[Credential-related source omitted] - Access to secretsline 228
[Credential-related source omitted] - Network accessline 269
{ "id": 15, "prompt": "We just upgraded to Flux 2.10. Give me the manifests for three things: (1) deploy podinfo from oci://ghcr.io/stefanprodan/charts/podinfo (semver >=6.0.0) into the apps namespace as a single HelmRelease tha - Network accessline 269
{ "id": 15, "prompt": "We just upgraded to Flux 2.10. Give me the manifests for three things: (1) deploy podinfo from oci://ghcr.io/stefanprodan/charts/podinfo (semver >=6.0.0) into the apps namespace as a single HelmRelease tha - Network accessline 270
"id": 15, "prompt": "We just upgraded to Flux 2.10. Give me the manifests for three things: (1) deploy podinfo from oci://ghcr.io/stefanprodan/charts/podinfo (semver >=6.0.0) into the apps namespace as a single HelmRelease that manage - Network accessline 270
"id": 15, "prompt": "We just upgraded to Flux 2.10. Give me the manifests for three things: (1) deploy podinfo from oci://ghcr.io/stefanprodan/charts/podinfo (semver >=6.0.0) into the apps namespace as a single HelmRelease that manage - Network accessline 271
"prompt": "We just upgraded to Flux 2.10. Give me the manifests for three things: (1) deploy podinfo from oci://ghcr.io/stefanprodan/charts/podinfo (semver >=6.0.0) into the apps namespace as a single HelmRelease that manages its own chart - Network accessline 271
"prompt": "We just upgraded to Flux 2.10. Give me the manifests for three things: (1) deploy podinfo from oci://ghcr.io/stefanprodan/charts/podinfo (semver >=6.0.0) into the apps namespace as a single HelmRelease that manages its own chart - Network accessline 278
"No standalone OCIRepository object and no spec.chartRef are used for podinfo, and spec.chart.spec does not set chart, sourceRef or version", "The Provider uses apiVersion notification.toolkit.fluxcd.io/v1 with spec.type: incident.i - Network accessline 278
"No standalone OCIRepository object and no spec.chartRef are used for podinfo, and spec.chart.spec does not set chart, sourceRef or version", "The Provider uses apiVersion notification.toolkit.fluxcd.io/v1 with spec.type: incident.i - Network accessline 279
"The Provider uses apiVersion notification.toolkit.fluxcd.io/v1 with spec.type: incident.io", "The incident.io Provider references a Secret holding both an address (https://api.incident.io/v2/alert_events/http/01JABCDEF) and a token - Network accessline 279
"The Provider uses apiVersion notification.toolkit.fluxcd.io/v1 with spec.type: incident.io", "The incident.io Provider references a Secret holding both an address (https://api.incident.io/v2/alert_events/http/01JABCDEF) and a token - Network accessline 280
"The incident.io Provider references a Secret holding both an address (https://api.incident.io/v2/alert_events/http/01JABCDEF) and a token", - Network accessline 280
"The incident.io Provider references a Secret holding both an address (https://api.incident.io/v2/alert_events/http/01JABCDEF) and a token",
skills/gitops-knowledge/references/flux-cli.md
- Network accessline 97
| `--verbose` | Print a line per document, including valid and skipped ones — confirms nothing was silently skipped | | `--skip-missing-schemas` | Skip documents with no schema in the catalog instead of failing (third-party CRDs) | | `--sch - Network accessline 97
| `--verbose` | Print a line per document, including valid and skipped ones — confirms nothing was silently skipped | | `--skip-missing-schemas` | Skip documents with no schema in the catalog instead of failing (third-party CRDs) | | `--sch - Network accessline 98
| `--skip-missing-schemas` | Skip documents with no schema in the catalog instead of failing (third-party CRDs) | | `--schema-location` | Add a schema source (repeatable): `default` for the built-in catalog, a local directory written by `fl - Network accessline 98
| `--skip-missing-schemas` | Skip documents with no schema in the catalog instead of failing (third-party CRDs) | | `--schema-location` | Add a schema source (repeatable): `default` for the built-in catalog, a local directory written by `fl - Network accessline 99
| `--schema-location` | Add a schema source (repeatable): `default` for the built-in catalog, a local directory written by `flux schema extract`, or a URL such as `https://raw.githubusercontent.com/datreeio/CRDs-catalog/main` | - Network accessline 99
| `--schema-location` | Add a schema source (repeatable): `default` for the built-in catalog, a local directory written by `flux schema extract`, or a URL such as `https://raw.githubusercontent.com/datreeio/CRDs-catalog/main` |
skills/gitops-knowledge/references/flux-operator.md
- Network accessline 194
sync: kind: GitRepository url: "https://github.com/my-org/fleet.git" - Network accessline 194
sync: kind: GitRepository url: "https://github.com/my-org/fleet.git" - Network accessline 195
kind: GitRepository url: "https://github.com/my-org/fleet.git" ref: "refs/heads/main" - Network accessline 195
kind: GitRepository url: "https://github.com/my-org/fleet.git" ref: "refs/heads/main" - Network accessline 196
url: "https://github.com/my-org/fleet.git" - Network accessline 196
url: "https://github.com/my-org/fleet.git" - Network accessline 219
provider: cosign matchOIDCIdentity: - issuer: ^https://token\.actions\.githubusercontent\.com$ - Network accessline 219
provider: cosign matchOIDCIdentity: - issuer: ^https://token\.actions\.githubusercontent\.com$ - Network accessline 220
matchOIDCIdentity: - issuer: ^https://token\.actions\.githubusercontent\.com$ subject: ^https://github\.com/my-org/fleet/\.github/workflows/release\.yaml@refs/tags/v\d+\.\d+\.\d+$ - Network accessline 220
matchOIDCIdentity: - issuer: ^https://token\.actions\.githubusercontent\.com$ subject: ^https://github\.com/my-org/fleet/\.github/workflows/release\.yaml@refs/tags/v\d+\.\d+\.\d+$ - Network accessline 221
- issuer: ^https://token\.actions\.githubusercontent\.com$ - Network accessline 221
- issuer: ^https://token\.actions\.githubusercontent\.com$ - Network accessline 222
subject: ^https://github\.com/my-org/fleet/\.github/workflows/release\.yaml@refs/tags/v\d+\.\d+\.\d+$ - Network accessline 222
subject: ^https://github\.com/my-org/fleet/\.github/workflows/release\.yaml@refs/tags/v\d+\.\d+\.\d+$
skills/gitops-knowledge/references/gitless-gitops.md
- Network accessline 84
| Flag | Purpose | |--------------------------|-- - Network accessline 84
| Flag | Purpose | |--------------------------|-- - Network accessline 85
|--------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | `--schema-location` | A - Network accessline 85
|--------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | `--schema-location` | A - Network accessline 86
| `--schema-location` | Add a schema source (repeatable); `default` keeps the built-in catalog, then append a URL e.g. `https://raw.githubusercontent.com/datreeio/CRDs-catalog/main` for out-of-tree CRDs | - Network accessline 86
| `--schema-location` | Add a schema source (repeatable); `default` keeps the built-in catalog, then append a URL e.g. `https://raw.githubusercontent.com/datreeio/CRDs-catalog/main` for out-of-tree CRDs | - Network accessline 252
provider: cosign matchOIDCIdentity: - issuer: ^https://token\.actions\.githubusercontent\.com$ - Network accessline 252
provider: cosign matchOIDCIdentity: - issuer: ^https://token\.actions\.githubusercontent\.com$ - Network accessline 253
matchOIDCIdentity: - issuer: ^https://token\.actions\.githubusercontent\.com$ subject: ^https://github\.com/org/k8s-apps/\.github/workflows/publish\.yaml@refs/heads/main$ - Network accessline 253
matchOIDCIdentity: - issuer: ^https://token\.actions\.githubusercontent\.com$ subject: ^https://github\.com/org/k8s-apps/\.github/workflows/publish\.yaml@refs/heads/main$ - Network accessline 254
- issuer: ^https://token\.actions\.githubusercontent\.com$ - Network accessline 254
- issuer: ^https://token\.actions\.githubusercontent\.com$ - Network accessline 255
subject: ^https://github\.com/org/k8s-apps/\.github/workflows/publish\.yaml@refs/heads/main$ - Network accessline 255
subject: ^https://github\.com/org/k8s-apps/\.github/workflows/publish\.yaml@refs/heads/main$ - Access to secretsline 321
[Credential-related source omitted] - Access to secretsline 321
[Credential-related source omitted] - Access to secretsline 325
[Credential-related source omitted] - Access to secretsline 325
[Credential-related source omitted] - Network accessline 351
provider: cosign matchOIDCIdentity: - issuer: ^https://token\.actions\.githubusercontent\.com$ - Network accessline 351
provider: cosign matchOIDCIdentity: - issuer: ^https://token\.actions\.githubusercontent\.com$ - Network accessline 352
matchOIDCIdentity: - issuer: ^https://token\.actions\.githubusercontent\.com$ subject: ^https://github\.com/org/repo/\.github/workflows/publish\.yaml@refs/heads/main$ - Network accessline 352
matchOIDCIdentity: - issuer: ^https://token\.actions\.githubusercontent\.com$ subject: ^https://github\.com/org/repo/\.github/workflows/publish\.yaml@refs/heads/main$ - Network accessline 353
- issuer: ^https://token\.actions\.githubusercontent\.com$ - Network accessline 353
- issuer: ^https://token\.actions\.githubusercontent\.com$ - Network accessline 354
subject: ^https://github\.com/org/repo/\.github/workflows/publish\.yaml@refs/heads/main$ - Network accessline 354
subject: ^https://github\.com/org/repo/\.github/workflows/publish\.yaml@refs/heads/main$ - Network accessline 360
subject: ^https://github\.com/org/repo/\.github/workflows/publish\.yaml@refs/tags/v\d+\.\d+\.\d+$ - Network accessline 360
subject: ^https://github\.com/org/repo/\.github/workflows/publish\.yaml@refs/tags/v\d+\.\d+\.\d+$
skills/gitops-knowledge/references/helmrelease.md
- Network accessline 174
- kind: ConfigMap name: app-config valuesKey: allowed-origins # e.g. "https://a.com,https://b.com" - Network accessline 174
- kind: ConfigMap name: app-config valuesKey: allowed-origins # e.g. "https://a.com,https://b.com" - Network accessline 175
name: app-config valuesKey: allowed-origins # e.g. "https://a.com,https://b.com" targetPath: cors.origins - Network accessline 175
name: app-config valuesKey: allowed-origins # e.g. "https://a.com,https://b.com" targetPath: cors.origins - Network accessline 176
valuesKey: allowed-origins # e.g. "https://a.com,https://b.com" - Network accessline 176
valuesKey: allowed-origins # e.g. "https://a.com,https://b.com"
skills/gitops-knowledge/references/image-automation.md
- Network accessline 388
spec: interval: 10m url: https://github.com/org/my-app.git - Network accessline 388
spec: interval: 10m url: https://github.com/org/my-app.git - Network accessline 389
interval: 10m url: https://github.com/org/my-app.git ref: - Network accessline 389
interval: 10m url: https://github.com/org/my-app.git ref: - Network accessline 390
url: https://github.com/org/my-app.git - Network accessline 390
url: https://github.com/org/my-app.git
skills/gitops-knowledge/references/kustomization.md
- Network accessline 229
credential.auth.fluxcd.io/provider: kubernetes # or spiffe credential.auth.fluxcd.io/type: jwt credential.auth.fluxcd.io/audiences: https://openbao.example.com - Network accessline 229
credential.auth.fluxcd.io/provider: kubernetes # or spiffe credential.auth.fluxcd.io/type: jwt credential.auth.fluxcd.io/audiences: https://openbao.example.com - Network accessline 230
credential.auth.fluxcd.io/type: jwt credential.auth.fluxcd.io/audiences: https://openbao.example.com transit-engine.auth.fluxcd.io/login-path: auth/jwt/login - Network accessline 230
credential.auth.fluxcd.io/type: jwt credential.auth.fluxcd.io/audiences: https://openbao.example.com transit-engine.auth.fluxcd.io/login-path: auth/jwt/login - Network accessline 231
credential.auth.fluxcd.io/audiences: https://openbao.example.com - Network accessline 231
credential.auth.fluxcd.io/audiences: https://openbao.example.com
skills/gitops-knowledge/references/mcp-server.md
- Network accessline 14
**Binary download:** Get AMD64/ARM64 binaries from the [GitHub releases page](https://github.com/controlplaneio-fluxcd/flux-operator/releases). - Network accessline 14
**Binary download:** Get AMD64/ARM64 binaries from the [GitHub releases page](https://github.com/controlplaneio-fluxcd/flux-operator/releases). - Network accessline 15
[GitHub releases page](https://github.com/controlplaneio-fluxcd/flux-operator/releases). - Network accessline 15
[GitHub releases page](https://github.com/controlplaneio-fluxcd/flux-operator/releases).
skills/gitops-knowledge/references/monorepo-delivery.md
- Access to secretsline 36
[Credential-related source omitted] - Access to secretsline 36
[Credential-related source omitted] - Network accessline 88
spec: interval: 5m url: https://github.com/org/platform-monorepo - Network accessline 88
spec: interval: 5m url: https://github.com/org/platform-monorepo - Network accessline 89
interval: 5m url: https://github.com/org/platform-monorepo ref: - Network accessline 89
interval: 5m url: https://github.com/org/platform-monorepo ref: - Network accessline 90
url: https://github.com/org/platform-monorepo - Network accessline 90
url: https://github.com/org/platform-monorepo - Access to secretsline 152
[Credential-related source omitted] - Access to secretsline 152
[Credential-related source omitted] - Access to secretsline 159
[Credential-related source omitted] - Access to secretsline 159
[Credential-related source omitted] - Access to secretsline 204
[Credential-related source omitted] - Access to secretsline 204
[Credential-related source omitted] - Access to secretsline 206
[Credential-related source omitted] - Access to secretsline 206
[Credential-related source omitted] - Access to secretsline 207
[Credential-related source omitted] - Access to secretsline 207
[Credential-related source omitted] - Access to secretsline 222
[Credential-related source omitted] - Access to secretsline 222
[Credential-related source omitted] - Access to secretsline 310
[Credential-related source omitted] - Access to secretsline 310
[Credential-related source omitted] - Access to secretsline 509
[Credential-related source omitted] - Access to secretsline 509
[Credential-related source omitted] - Access to secretsline 511
[Credential-related source omitted] - Access to secretsline 511
[Credential-related source omitted]
skills/gitops-knowledge/references/notifications.md
- Network accessline 38
namespace: flux-system stringData: address: https://prod-xxx.yyy.logic.azure.com:443/workflows/zzz/triggers/manual/paths/invoke?... - Network accessline 38
namespace: flux-system stringData: address: https://prod-xxx.yyy.logic.azure.com:443/workflows/zzz/triggers/manual/paths/invoke?... - Network accessline 40
address: https://prod-xxx.yyy.logic.azure.com:443/workflows/zzz/triggers/manual/paths/invoke?... - Network accessline 40
address: https://prod-xxx.yyy.logic.azure.com:443/workflows/zzz/triggers/manual/paths/invoke?... - Network accessline 47
| Type | Secret Field | Address | Notes | |------|-------------|---------|-------| | `slack` | `token` (bot token) | `https://slack.com/api/chat.postMessage` | Channel set in spec, address in spec | - Network accessline 47
| Type | Secret Field | Address | Notes | |------|-------------|---------|-------| | `slack` | `token` (bot token) | `https://slack.com/api/chat.postMessage` | Channel set in spec, address in spec | - Network accessline 48
|------|-------------|---------|-------| | `slack` | `token` (bot token) | `https://slack.com/api/chat.postMessage` | Channel set in spec, address in spec | | `discord` | `address` (webhook URL) | — | | - Network accessline 48
|------|-------------|---------|-------| | `slack` | `token` (bot token) | `https://slack.com/api/chat.postMessage` | Channel set in spec, address in spec | | `discord` | `address` (webhook URL) | — | | - Network accessline 49
| `slack` | `token` (bot token) | `https://slack.com/api/chat.postMessage` | Channel set in spec, address in spec | - Network accessline 49
| `slack` | `token` (bot token) | `https://slack.com/api/chat.postMessage` | Channel set in spec, address in spec | - Network accessline 51
| `msteams` | `address` (webhook URL) | — | Microsoft Teams | | `googlechat` | `address` (webhook URL) | — | Google Chat | | `telegram` | `token` | `https://api.telegram.org` | Channel is chat ID | - Network accessline 51
| `msteams` | `address` (webhook URL) | — | Microsoft Teams | | `googlechat` | `address` (webhook URL) | — | Google Chat | | `telegram` | `token` | `https://api.telegram.org` | Channel is chat ID | - Network accessline 52
| `googlechat` | `address` (webhook URL) | — | Google Chat | | `telegram` | `token` | `https://api.telegram.org` | Channel is chat ID | | `matrix` | `token` | Matrix homeserver URL | Channel is room ID | - Network accessline 52
| `googlechat` | `address` (webhook URL) | — | Google Chat | | `telegram` | `token` | `https://api.telegram.org` | Channel is chat ID | | `matrix` | `token` | Matrix homeserver URL | Channel is room ID | - Network accessline 53
| `telegram` | `token` | `https://api.telegram.org` | Channel is chat ID | - Network accessline 53
| `telegram` | `token` | `https://api.telegram.org` | Channel is chat ID | - Network accessline 57
| `webex` | `token` | — | Channel is room ID | | `zoom` | `address` (incoming webhook URL) + `token` (verification token) | — | Zoom Team Chat | | `mastodon` | `token` (access token, `write:statuses` scope) + `address` (server root URL, e.g - Network accessline 57
| `webex` | `token` | — | Channel is room ID | | `zoom` | `address` (incoming webhook URL) + `token` (verification token) | — | Zoom Team Chat | | `mastodon` | `token` (access token, `write:statuses` scope) + `address` (server root URL, e.g - Network accessline 59
| `mastodon` | `token` (access token, `write:statuses` scope) + `address` (server root URL, e.g. `https://mastodon.social`) | — | `v1` only; statuses truncated to 500 chars | - Network accessline 59
| `mastodon` | `token` (access token, `write:statuses` scope) + `address` (server root URL, e.g. `https://mastodon.social`) | — | `v1` only; statuses truncated to 500 chars | - Network accessline 68
| `datadog` | `token` (API key) | DataDog endpoint | | | `opsgenie` | `token` (API key) | OpsGenie endpoint | | | `pagerduty` | — (none required) | `https://events.pagerduty.com` | Integration routing key set in `spec.channel`, not a secret - Network accessline 68
| `datadog` | `token` (API key) | DataDog endpoint | | | `opsgenie` | `token` (API key) | OpsGenie endpoint | | | `pagerduty` | — (none required) | `https://events.pagerduty.com` | Integration routing key set in `spec.channel`, not a secret - Network accessline 69
| `opsgenie` | `token` (API key) | OpsGenie endpoint | | | `pagerduty` | — (none required) | `https://events.pagerduty.com` | Integration routing key set in `spec.channel`, not a secret | | `incident.io` | `address` (`https://api.incident.i - Network accessline 69
| `opsgenie` | `token` (API key) | OpsGenie endpoint | | | `pagerduty` | — (none required) | `https://events.pagerduty.com` | Integration routing key set in `spec.channel`, not a secret | | `incident.io` | `address` (`https://api.incident.i - Network accessline 70
| `pagerduty` | — (none required) | `https://events.pagerduty.com` | Integration routing key set in `spec.channel`, not a secret | - Network accessline 70
| `pagerduty` | — (none required) | `https://events.pagerduty.com` | Integration routing key set in `spec.channel`, not a secret | - Network accessline 71
| `incident.io` | `address` (`https://api.incident.io/v2/alert_events/http/<alert_source_config_id>`) + `token` (API token) | — | Type is `incident.io`. Errors fire, other events resolve — keep the Alert at `eventSeverity: info` so alerts a - Network accessline 71
| `incident.io` | `address` (`https://api.incident.io/v2/alert_events/http/<alert_source_config_id>`) + `token` (API token) | — | Type is `incident.io`. Errors fire, other events resolve — keep the Alert at `eventSeverity: info` so alerts a - Network accessline 327
- push oidcProviders: - issuerURL: https://token.actions.githubusercontent.com - Network accessline 327
- push oidcProviders: - issuerURL: https://token.actions.githubusercontent.com - Network accessline 328
oidcProviders: - issuerURL: https://token.actions.githubusercontent.com audience: flux-notification-controller # expected 'aud' claim (defaults to 'notification-controller') - Network accessline 328
oidcProviders: - issuerURL: https://token.actions.githubusercontent.com audience: flux-notification-controller # expected 'aud' claim (defaults to 'notification-controller') - Network accessline 329
- issuerURL: https://token.actions.githubusercontent.com - Network accessline 329
- issuerURL: https://token.actions.githubusercontent.com - Network accessline 358
type: slack channel: flux-alerts address: https://slack.com/api/chat.postMessage - Network accessline 358
type: slack channel: flux-alerts address: https://slack.com/api/chat.postMessage - Network accessline 359
channel: flux-alerts address: https://slack.com/api/chat.postMessage secretRef: - Network accessline 359
channel: flux-alerts address: https://slack.com/api/chat.postMessage secretRef: - Network accessline 360
address: https://slack.com/api/chat.postMessage - Network accessline 360
address: https://slack.com/api/chat.postMessage - Network accessline 389
spec: type: github address: https://github.com/org/repo - Network accessline 389
spec: type: github address: https://github.com/org/repo - Network accessline 390
type: github address: https://github.com/org/repo secretRef: - Network accessline 390
type: github address: https://github.com/org/repo secretRef: - Network accessline 391
address: https://github.com/org/repo - Network accessline 391
address: https://github.com/org/repo
skills/gitops-knowledge/references/repo-patterns.md
- Network accessline 53
sync: kind: GitRepository url: "https://github.com/org/fleet.git" - Network accessline 53
sync: kind: GitRepository url: "https://github.com/org/fleet.git" - Network accessline 54
kind: GitRepository url: "https://github.com/org/fleet.git" ref: "refs/heads/main" - Network accessline 54
kind: GitRepository url: "https://github.com/org/fleet.git" ref: "refs/heads/main" - Network accessline 55
url: "https://github.com/org/fleet.git" - Network accessline 55
url: "https://github.com/org/fleet.git" - Access to secretsline 116
[Credential-related source omitted] - Access to secretsline 116
[Credential-related source omitted] - Access to secretsline 141
[Credential-related source omitted] - Access to secretsline 141
[Credential-related source omitted] - Access to secretsline 143
[Credential-related source omitted] - Access to secretsline 143
[Credential-related source omitted] - Access to secretsline 144
[Credential-related source omitted] - Access to secretsline 144
[Credential-related source omitted] - Access to secretsline 154
[Credential-related source omitted] - Access to secretsline 154
[Credential-related source omitted] - Network accessline 229
spec: interval: 5m url: https://github.com/org/infra.git - Network accessline 229
spec: interval: 5m url: https://github.com/org/infra.git - Network accessline 230
interval: 5m url: https://github.com/org/infra.git ref: - Network accessline 230
interval: 5m url: https://github.com/org/infra.git ref: - Network accessline 231
url: https://github.com/org/infra.git - Network accessline 231
url: https://github.com/org/infra.git
skills/gitops-knowledge/references/resourcesets.md
- Network accessline 644
spec: type: GitHubPullRequest url: https://github.com/my-org/my-app - Network accessline 644
spec: type: GitHubPullRequest url: https://github.com/my-org/my-app - Network accessline 645
type: GitHubPullRequest url: https://github.com/my-org/my-app secretRef: - Network accessline 645
type: GitHubPullRequest url: https://github.com/my-org/my-app secretRef: - Network accessline 646
url: https://github.com/my-org/my-app - Network accessline 646
url: https://github.com/my-org/my-app - Network accessline 781
spec: type: GitHubPullRequest url: https://github.com/org/app - Network accessline 781
spec: type: GitHubPullRequest url: https://github.com/org/app - Network accessline 782
type: GitHubPullRequest url: https://github.com/org/app secretRef: - Network accessline 782
type: GitHubPullRequest url: https://github.com/org/app secretRef: - Network accessline 783
url: https://github.com/org/app - Network accessline 783
url: https://github.com/org/app - Network accessline 804
spec: interval: 2m url: https://github.com/org/app.git - Network accessline 804
spec: interval: 2m url: https://github.com/org/app.git - Network accessline 805
interval: 2m url: https://github.com/org/app.git ref: - Network accessline 805
interval: 2m url: https://github.com/org/app.git ref: - Network accessline 806
url: https://github.com/org/app.git - Network accessline 806
url: https://github.com/org/app.git
skills/gitops-knowledge/references/sources.md
- Network accessline 19
spec: interval: 5m url: https://github.com/org/my-app.git - Network accessline 19
spec: interval: 5m url: https://github.com/org/my-app.git - Network accessline 20
interval: 5m url: https://github.com/org/my-app.git ref: - Network accessline 20
interval: 5m url: https://github.com/org/my-app.git ref: - Network accessline 21
url: https://github.com/org/my-app.git - Network accessline 21
url: https://github.com/org/my-app.git - Network accessline 33
| Field | Type | Description | |-------|------|-------------| | `url` | string | Git URL — HTTPS (`https://`) or SSH (`ssh://user@host:22/repo.git`). SSH scp-style syntax (`git@host:repo`) is NOT supported. | - Network accessline 33
| Field | Type | Description | |-------|------|-------------| | `url` | string | Git URL — HTTPS (`https://`) or SSH (`ssh://user@host:22/repo.git`). SSH scp-style syntax (`git@host:repo`) is NOT supported. | - Network accessline 34
|-------|------|-------------| | `url` | string | Git URL — HTTPS (`https://`) or SSH (`ssh://user@host:22/repo.git`). SSH scp-style syntax (`git@host:repo`) is NOT supported. | | `interval` | duration | How often to poll for changes (e.g., - Network accessline 34
|-------|------|-------------| | `url` | string | Git URL — HTTPS (`https://`) or SSH (`ssh://user@host:22/repo.git`). SSH scp-style syntax (`git@host:repo`) is NOT supported. | | `interval` | duration | How often to poll for changes (e.g., - Network accessline 35
| `url` | string | Git URL — HTTPS (`https://`) or SSH (`ssh://user@host:22/repo.git`). SSH scp-style syntax (`git@host:repo`) is NOT supported. | - Network accessline 35
| `url` | string | Git URL — HTTPS (`https://`) or SSH (`ssh://user@host:22/repo.git`). SSH scp-style syntax (`git@host:repo`) is NOT supported. | - Network accessline 110
[Credential-related source omitted] - Network accessline 110
[Credential-related source omitted] - Network accessline 111
[Credential-related source omitted] - Network accessline 111
[Credential-related source omitted] - Network accessline 112
[Credential-related source omitted] - Network accessline 112
[Credential-related source omitted] - Network accessline 113
[Credential-related source omitted] - Network accessline 113
[Credential-related source omitted] - Network accessline 185
[Credential-related source omitted] - Network accessline 185
[Credential-related source omitted] - Network accessline 186
[Credential-related source omitted] - Network accessline 186
[Credential-related source omitted] - Network accessline 187
[Credential-related source omitted] - Network accessline 187
[Credential-related source omitted] - Network accessline 188
[Credential-related source omitted] - Network accessline 188
[Credential-related source omitted] - Network accessline 201
[Credential-related source omitted] - Network accessline 201
[Credential-related source omitted] - Network accessline 203
[Credential-related source omitted] - Network accessline 203
[Credential-related source omitted] - Access to secretsline 439
[Credential-related source omitted] - Access to secretsline 439
[Credential-related source omitted]
skills/gitops-knowledge/references/terraform-bootstrap.md
- Network accessline 3
The [`controlplaneio-fluxcd/flux-operator-bootstrap/kubernetes`](https://registry.terraform.io/modules/controlplaneio-fluxcd/flux-operator-bootstrap/kubernetes/latest) - Network accessline 3
The [`controlplaneio-fluxcd/flux-operator-bootstrap/kubernetes`](https://registry.terraform.io/modules/controlplaneio-fluxcd/flux-operator-bootstrap/kubernetes/latest)
skills/gitops-knowledge/references/web-ui.md
- Network accessline 23
kubectl -n flux-system port-forward svc/flux-operator 9080:9080 # Open http://localhost:9080 - Network accessline 23
kubectl -n flux-system port-forward svc/flux-operator 9080:9080 # Open http://localhost:9080 - Network accessline 24
# Open http://localhost:9080 - Network accessline 24
# Open http://localhost:9080 - Network accessline 97
web: config: baseURL: https://flux.example.com - Network accessline 97
web: config: baseURL: https://flux.example.com - Network accessline 98
config: baseURL: https://flux.example.com authentication: - Network accessline 98
config: baseURL: https://flux.example.com authentication: - Network accessline 99
baseURL: https://flux.example.com - Network accessline 99
baseURL: https://flux.example.com - Network accessline 104
clientID: flux-web clientSecret: flux-web-secret issuerURL: https://dex.example.com - Network accessline 104
clientID: flux-web clientSecret: flux-web-secret issuerURL: https://dex.example.com - Network accessline 106
issuerURL: https://dex.example.com - Network accessline 106
issuerURL: https://dex.example.com - Network accessline 138
**Keycloak** — create an OpenID Connect client in Keycloak admin console with Standard flow enabled and redirect URI set to `https://flux.example.com/callback`. - Network accessline 138
**Keycloak** — create an OpenID Connect client in Keycloak admin console with Standard flow enabled and redirect URI set to `https://flux.example.com/callback`. - Network accessline 139
Standard flow enabled and redirect URI set to `https://flux.example.com/callback`. - Network accessline 139
Standard flow enabled and redirect URI set to `https://flux.example.com/callback`. - Network accessline 143
issuerURL: https://login.microsoftonline.com/<TENANT-ID>/v2.0 - Network accessline 143
issuerURL: https://login.microsoftonline.com/<TENANT-ID>/v2.0 - Network accessline 158
web: config: baseURL: https://flux.example.com - Network accessline 158
web: config: baseURL: https://flux.example.com - Network accessline 159
config: baseURL: https://flux.example.com authentication: - Network accessline 159
config: baseURL: https://flux.example.com authentication: - Network accessline 160
baseURL: https://flux.example.com - Network accessline 160
baseURL: https://flux.example.com - Network accessline 165
clientID: flux-web clientSecret: flux-web-secret issuerURL: https://dex.example.com - Network accessline 165
clientID: flux-web clientSecret: flux-web-secret issuerURL: https://dex.example.com - Network accessline 166
clientSecret: flux-web-secret issuerURL: https://dex.example.com variables: - Network accessline 166
clientSecret: flux-web-secret issuerURL: https://dex.example.com variables: - Network accessline 167
issuerURL: https://dex.example.com - Network accessline 167
issuerURL: https://dex.example.com - Network accessline 282
clientID: flux-web clientSecret: flux-web-secret issuerURL: https://dex.example.com - Network accessline 282
clientID: flux-web clientSecret: flux-web-secret issuerURL: https://dex.example.com - Network accessline 284
issuerURL: https://dex.example.com - Network accessline 284
issuerURL: https://dex.example.com
skills/gitops-repo-audit/SKILL.md
- Network accessline 39
2. Classify the repository pattern by reading [repo-patterns.md](references/repo-patterns.md) and matching against the heuristics table 3. Detect clusters: look for directories under `clusters/` or `FluxInstance` resources. Read the FluxIns - Network accessline 39
2. Classify the repository pattern by reading [repo-patterns.md](references/repo-patterns.md) and matching against the heuristics table 3. Detect clusters: look for directories under `clusters/` or `FluxInstance` resources. Read the FluxIns - Network accessline 41
4. Check for `gotk-sync.yaml` under `flux-system/` — its presence indicates `flux bootstrap` was used. Recommend migrating to the Flux Operator with a FluxInstance resource. Always include the migration guide URL in the report: https://flux - Network accessline 41
4. Check for `gotk-sync.yaml` under `flux-system/` — its presence indicates `flux bootstrap` was used. Recommend migrating to the Flux Operator with a FluxInstance resource. Always include the migration guide URL in the report: https://flux
skills/gitops-repo-audit/assets/schemas/alert-notification-v1.fields.txt
skills/gitops-repo-audit/assets/schemas/alert-notification-v1beta3.fields.txt
skills/gitops-repo-audit/assets/schemas/artifactgenerator-source-v1beta1.fields.txt
skills/gitops-repo-audit/assets/schemas/bucket-source-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 19
spec.secretRef <object> # SecretRef specifies the Secret containing authentication credentials for the Bucket. spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name - Network accessline 19
spec.secretRef <object> # SecretRef specifies the Secret containing authentication credentials for the Bucket. spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name - Network accessline 20
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the bucket. This field is only supported for the 'gcp' a - Network accessline 20
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the bucket. This field is only supported for the 'gcp' a - Network accessline 21
spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the bucket. This field is only supported for the 'gcp' and 'aws' providers. For more information about object identity: - Network accessline 21
spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the bucket. This field is only supported for the 'gcp' and 'aws' providers. For more information about object identity:
skills/gitops-repo-audit/assets/schemas/externalartifact-source-v1.fields.txt
skills/gitops-repo-audit/assets/schemas/fluxinstance-fluxcd-v1.fields.txt
- Network accessline 1
# schema source: Flux Operator v0.62.1 https://github.com/controlplaneio-fluxcd/flux-operator - Network accessline 1
# schema source: Flux Operator v0.62.1 https://github.com/controlplaneio-fluxcd/flux-operator - Network accessline 33
spec.kustomize.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.kustomize.patches[].target <object> # Target points to the resources tha - Network accessline 33
spec.kustomize.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.kustomize.patches[].target <object> # Target points to the resources tha - Network accessline 34
spec.kustomize.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label sele - Network accessline 34
spec.kustomize.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label sele - Network accessline 35
spec.kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resou - Network accessline 35
spec.kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resou - Network accessline 36
spec.kustomize.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/ - Network accessline 36
spec.kustomize.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/ - Network accessline 37
spec.kustomize.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/b - Network accessline 37
spec.kustomize.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/b - Network accessline 38
spec.kustomize.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels - Network accessline 38
spec.kustomize.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels - Network accessline 39
spec.kustomize.patches[].target.name <string> # Name to match resources with. spec.kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.kustomize.patches[].target.version <string> # Version of the API Gro - Network accessline 39
spec.kustomize.patches[].target.name <string> # Name to match resources with. spec.kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.kustomize.patches[].target.version <string> # Version of the API Gro - Network accessline 40
spec.kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of una - Network accessline 40
spec.kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of una - Network accessline 41
spec.kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/communit - Network accessline 41
spec.kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/communit
skills/gitops-repo-audit/assets/schemas/fluxreport-fluxcd-v1.fields.txt
skills/gitops-repo-audit/assets/schemas/gitrepository-source-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 19
spec.ref.branch <string> # Branch to check out, defaults to 'master' if no other field is defined. spec.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow c - Network accessline 19
spec.ref.branch <string> # Branch to check out, defaults to 'master' if no other field is defined. spec.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow c - Network accessline 20
spec.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow clone the branch, in which the commit is expected to exist. spec.ref.name <string> # Name of the ref - Network accessline 20
spec.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow clone the branch, in which the commit is expected to exist. spec.ref.name <string> # Name of the ref - Network accessline 21
spec.ref.name <string> # Name of the reference to check out; takes precedence over Branch, Tag and SemVer. It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description Examples: "refs/heads/main", "refs/tags/ - Network accessline 21
spec.ref.name <string> # Name of the reference to check out; takes precedence over Branch, Tag and SemVer. It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description Examples: "refs/heads/main", "refs/tags/
skills/gitops-repo-audit/assets/schemas/helmchart-source-v1.fields.txt
skills/gitops-repo-audit/assets/schemas/helmrelease-helm-v2.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 8
spec.chart.kind <string> enum=HelmChart|OCIRepository # Kind is the kind of the source object generated from this template. Valid values: - HelmChart (default): generates a source.toolkit.fluxcd.io/v1 HelmChart from the HelmChartSpec-compat - Network accessline 8
spec.chart.kind <string> enum=HelmChart|OCIRepository # Kind is the kind of the source object generated from this template. Valid values: - HelmChart (default): generates a source.toolkit.fluxcd.io/v1 HelmChart from the HelmChartSpec-compat - Network accessline 9
spec.chart.metadata <object> # ObjectMeta holds the template for metadata like labels and annotations. spec.chart.metadata.annotations <map[string]string> # Annotations is an unstructured key value map stored with a resource that may be set - Network accessline 9
spec.chart.metadata <object> # ObjectMeta holds the template for metadata like labels and annotations. spec.chart.metadata.annotations <map[string]string> # Annotations is an unstructured key value map stored with a resource that may be set - Network accessline 10
spec.chart.metadata.annotations <map[string]string> # Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be prese - Network accessline 10
spec.chart.metadata.annotations <map[string]string> # Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be prese - Network accessline 11
spec.chart.metadata.labels <map[string]string> # Map of string keys and values that can be used to organize and categorize (scope and select) objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ - Network accessline 11
spec.chart.metadata.labels <map[string]string> # Map of string keys and values that can be used to organize and categorize (scope and select) objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ - Network accessline 32
spec.chart.spec.secretRef <object> # SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson. spec.chart.spec.secretRef.name <string> - Network accessline 32
spec.chart.spec.secretRef <object> # SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson. spec.chart.spec.secretRef.name <string> - Network accessline 33
spec.chart.spec.secretRef.name <string> (required) # Name of the referent. spec.chart.spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pu - Network accessline 33
spec.chart.spec.secretRef.name <string> (required) # Name of the referent. spec.chart.spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pu - Network accessline 34
spec.chart.spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For - Network accessline 34
spec.chart.spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For - Network accessline 68
spec.driftDetection.ignore[].paths <[]string> (required) # Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from consideration in a Kubernetes object. spec.driftDetection.ignore[].target <object> # Target is a selector for sp - Network accessline 68
spec.driftDetection.ignore[].paths <[]string> (required) # Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from consideration in a Kubernetes object. spec.driftDetection.ignore[].target <object> # Target is a selector for sp - Network accessline 69
spec.driftDetection.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to which this rule applies. If Target is not set, the Paths will be ignored for all Kubernetes objects within the manifest of the Helm rel - Network accessline 69
spec.driftDetection.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to which this rule applies. If Target is not set, the Paths will be ignored for all Kubernetes objects within the manifest of the Helm rel - Network accessline 70
spec.driftDetection.ignore[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the r - Network accessline 70
spec.driftDetection.ignore[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the r - Network accessline 71
spec.driftDetection.ignore[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/commun - Network accessline 71
spec.driftDetection.ignore[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/commun - Network accessline 72
spec.driftDetection.ignore[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/communi - Network accessline 72
spec.driftDetection.ignore[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/communi - Network accessline 73
spec.driftDetection.ignore[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource la - Network accessline 73
spec.driftDetection.ignore[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource la - Network accessline 74
spec.driftDetection.ignore[].target.name <string> # Name to match resources with. spec.driftDetection.ignore[].target.namespace <string> # Namespace to select resources from. spec.driftDetection.ignore[].target.version <string> # Version of - Network accessline 74
spec.driftDetection.ignore[].target.name <string> # Name to match resources with. spec.driftDetection.ignore[].target.namespace <string> # Namespace to select resources from. spec.driftDetection.ignore[].target.version <string> # Version of - Network accessline 75
spec.driftDetection.ignore[].target.namespace <string> # Namespace to select resources from. spec.driftDetection.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capabl - Network accessline 75
spec.driftDetection.ignore[].target.namespace <string> # Namespace to select resources from. spec.driftDetection.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capabl - Network accessline 76
spec.driftDetection.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/comm - Network accessline 76
spec.driftDetection.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/comm - Network accessline 83
spec.healthCheckExprs[].kind <string> # Kind of the custom resource under evaluation. spec.install <object> # Install holds the configuration for Helm install actions for this HelmRelease. spec.install.crds <string> enum=Skip|Create|CreateR - Network accessline 83
spec.healthCheckExprs[].kind <string> # Kind of the custom resource under evaluation. spec.install <object> # Install holds the configuration for Helm install actions for this HelmRelease. spec.install.crds <string> enum=Skip|Create|CreateR - Network accessline 84
spec.install <object> # Install holds the configuration for Helm install actions for this HelmRelease. spec.install.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD u - Network accessline 84
spec.install <object> # Install holds the configuration for Helm install actions for this HelmRelease. spec.install.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD u - Network accessline 85
spec.install.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Create` - Network accessline 85
spec.install.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Create` - Network accessline 122
spec.postRenderers[].kustomize.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.postRenderers[].kustomize.patches[].target <object> # Ta - Network accessline 122
spec.postRenderers[].kustomize.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.postRenderers[].kustomize.patches[].target <object> # Ta - Network accessline 123
spec.postRenderers[].kustomize.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.postRenderers[].kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a st - Network accessline 123
spec.postRenderers[].kustomize.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.postRenderers[].kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a st - Network accessline 124
spec.postRenderers[].kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matche - Network accessline 124
spec.postRenderers[].kustomize.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matche - Network accessline 125
spec.postRenderers[].kustomize.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kuber - Network accessline 125
spec.postRenderers[].kustomize.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kuber - Network accessline 126
spec.postRenderers[].kustomize.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubern - Network accessline 126
spec.postRenderers[].kustomize.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubern - Network accessline 127
spec.postRenderers[].kustomize.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the - Network accessline 127
spec.postRenderers[].kustomize.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the - Network accessline 128
spec.postRenderers[].kustomize.patches[].target.name <string> # Name to match resources with. spec.postRenderers[].kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.postRenderers[].kustomize.patches[]. - Network accessline 128
spec.postRenderers[].kustomize.patches[].target.name <string> # Name to match resources with. spec.postRenderers[].kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.postRenderers[].kustomize.patches[]. - Network accessline 129
spec.postRenderers[].kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.postRenderers[].kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Gro - Network accessline 129
spec.postRenderers[].kustomize.patches[].target.namespace <string> # Namespace to select resources from. spec.postRenderers[].kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Gro - Network accessline 130
spec.postRenderers[].kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kub - Network accessline 130
spec.postRenderers[].kustomize.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kub - Network accessline 136
spec.rollback.disableWaitForJobs <boolean> # DisableWaitForJobs disables waiting for jobs to complete after a Helm rollback has been performed. spec.rollback.force <boolean> # Force forces resource updates through a replacement strategy tha - Network accessline 136
spec.rollback.disableWaitForJobs <boolean> # DisableWaitForJobs disables waiting for jobs to complete after a Helm rollback has been performed. spec.rollback.force <boolean> # Force forces resource updates through a replacement strategy tha - Network accessline 137
spec.rollback.force <boolean> # Force forces resource updates through a replacement strategy that avoids 3-way merge conflicts on client-side apply. This field is ignored for server-side apply (which always forces conflicts with other field - Network accessline 137
spec.rollback.force <boolean> # Force forces resource updates through a replacement strategy that avoids 3-way merge conflicts on client-side apply. This field is ignored for server-side apply (which always forces conflicts with other field - Network accessline 138
spec.rollback.recreate <boolean> # Recreate performs pod restarts for any managed workloads. Deprecated: This behavior was deprecated in Helm 3: - Deprecation: https://github.com/helm/helm/pull/6463 - Removal: https://github.com/helm/helm/p - Network accessline 138
spec.rollback.recreate <boolean> # Recreate performs pod restarts for any managed workloads. Deprecated: This behavior was deprecated in Helm 3: - Deprecation: https://github.com/helm/helm/pull/6463 - Removal: https://github.com/helm/helm/p - Network accessline 160
spec.upgrade.chartNameChangeStrategy <string> enum=InPlaceUpdate|Reinstall # ChartNameChangeStrategy defines the strategy to use when a Helm chart name changes. Valid values are 'Reinstall' or 'InPlaceUpdate'. Defaults to 'Reinstall' if omi - Network accessline 160
spec.upgrade.chartNameChangeStrategy <string> enum=InPlaceUpdate|Reinstall # ChartNameChangeStrategy defines the strategy to use when a Helm chart name changes. Valid values are 'Reinstall' or 'InPlaceUpdate'. Defaults to 'Reinstall' if omi - Network accessline 161
spec.upgrade.cleanupOnFail <boolean> # CleanupOnFail allows deletion of new resources created during the Helm upgrade action when it fails. spec.upgrade.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's - Network accessline 161
spec.upgrade.cleanupOnFail <boolean> # CleanupOnFail allows deletion of new resources created during the Helm upgrade action when it fails. spec.upgrade.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's - Network accessline 162
spec.upgrade.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Skip` an - Network accessline 162
spec.upgrade.crds <string> enum=Skip|Create|CreateReplace # CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Skip` an
skills/gitops-repo-audit/assets/schemas/helmrepository-source-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 5
metadata.namespace <string> (required) spec <object> # HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. spec.accessFrom <object> # AccessFrom specifies an Access Control List f - Network accessline 5
metadata.namespace <string> (required) spec <object> # HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. spec.accessFrom <object> # AccessFrom specifies an Access Control List f - Network accessline 6
spec <object> # HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. spec.accessFrom <object> # AccessFrom specifies an Access Control List for allowing cross-namespace references - Network accessline 6
spec <object> # HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. spec.accessFrom <object> # AccessFrom specifies an Access Control List for allowing cross-namespace references - Network accessline 7
spec.accessFrom <object> # AccessFrom specifies an Access Control List for allowing cross-namespace references to this object. NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 - Network accessline 7
spec.accessFrom <object> # AccessFrom specifies an Access Control List for allowing cross-namespace references to this object. NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
skills/gitops-repo-audit/assets/schemas/imagepolicy-image-v1.fields.txt
skills/gitops-repo-audit/assets/schemas/imagerepository-image-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 19
spec.secretRef <object> # SecretRef can be given the name of a secret containing credentials to use for the image registry. The secret should be created with `kubectl create secret docker-registry`, or the equivalent. spec.secretRef.name <s - Network accessline 19
spec.secretRef <object> # SecretRef can be given the name of a secret containing credentials to use for the image registry. The secret should be created with `kubectl create secret docker-registry`, or the equivalent. spec.secretRef.name <s - Network accessline 20
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> max=253 # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets att - Network accessline 20
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> max=253 # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets att - Network accessline 21
spec.serviceAccountName <string> max=253 # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For mor - Network accessline 21
spec.serviceAccountName <string> max=253 # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For mor
skills/gitops-repo-audit/assets/schemas/imageupdateautomation-image-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 10
spec.git.checkout.ref.branch <string> # Branch to check out, defaults to 'master' if no other field is defined. spec.git.checkout.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combine - Network accessline 10
spec.git.checkout.ref.branch <string> # Branch to check out, defaults to 'master' if no other field is defined. spec.git.checkout.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combine - Network accessline 11
spec.git.checkout.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow clone the branch, in which the commit is expected to exist. spec.git.checkout.ref.name - Network accessline 11
spec.git.checkout.ref.commit <string> # Commit SHA to check out, takes precedence over all reference fields. This can be combined with Branch to shallow clone the branch, in which the commit is expected to exist. spec.git.checkout.ref.name - Network accessline 12
spec.git.checkout.ref.name <string> # Name of the reference to check out; takes precedence over Branch, Tag and SemVer. It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description Examples: "refs/heads/main" - Network accessline 12
spec.git.checkout.ref.name <string> # Name of the reference to check out; takes precedence over Branch, Tag and SemVer. It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description Examples: "refs/heads/main" - Network accessline 25
spec.git.push <object> # Push specifies how and where to push commits made by the automation. If missing, commits are pushed (back) to `.spec.checkout.branch` or its default. spec.git.push.branch <string> # Branch specifies that commits sho - Network accessline 25
spec.git.push <object> # Push specifies how and where to push commits made by the automation. If missing, commits are pushed (back) to `.spec.checkout.branch` or its default. spec.git.push.branch <string> # Branch specifies that commits sho - Network accessline 26
spec.git.push.branch <string> # Branch specifies that commits should be pushed to the branch named. The branch is created using `.spec.checkout.branch` as the starting point, if it doesn't already exist. spec.git.push.options <map[string]st - Network accessline 26
spec.git.push.branch <string> # Branch specifies that commits should be pushed to the branch named. The branch is created using `.spec.checkout.branch` as the starting point, if it doesn't already exist. spec.git.push.options <map[string]st - Network accessline 27
spec.git.push.options <map[string]string> # Options specifies the push options that are sent to the Git server when performing a push operation. For details, see: https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionlto - Network accessline 27
spec.git.push.options <map[string]string> # Options specifies the push options that are sent to the Git server when performing a push operation. For details, see: https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionlto - Network accessline 28
spec.git.push.refspec <string> pattern="^$|^[^+:]" # Refspec specifies the Git Refspec to use for a push operation. If both Branch and Refspec are provided, then the commit is pushed to the branch and also using the specified refspec. Delet - Network accessline 28
spec.git.push.refspec <string> pattern="^$|^[^+:]" # Refspec specifies the Git Refspec to use for a push operation. If both Branch and Refspec are provided, then the commit is pushed to the branch and also using the specified refspec. Delet
skills/gitops-repo-audit/assets/schemas/kustomization-kustomize-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 35
spec.ignore[].paths <[]string> (required) # Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from consideration in a Kubernetes object. spec.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to - Network accessline 35
spec.ignore[].paths <[]string> (required) # Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from consideration in a Kubernetes object. spec.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to - Network accessline 36
spec.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to which this rule applies. If Target is not set, the Paths will be ignored for all Kubernetes objects within the manifest of the Kustomization. spec.ign - Network accessline 36
spec.ignore[].target <object> # Target is a selector for specifying Kubernetes objects to which this rule applies. If Target is not set, the Paths will be ignored for all Kubernetes objects within the manifest of the Kustomization. spec.ign - Network accessline 37
spec.ignore[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotat - Network accessline 37
spec.ignore[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotat - Network accessline 38
spec.ignore[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master - Network accessline 38
spec.ignore[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master - Network accessline 39
spec.ignore[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/ - Network accessline 39
spec.ignore[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/ - Network accessline 40
spec.ignore[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. - Network accessline 40
spec.ignore[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. - Network accessline 41
spec.ignore[].target.name <string> # Name to match resources with. spec.ignore[].target.namespace <string> # Namespace to select resources from. spec.ignore[].target.version <string> # Version of the API Group to select resources from. Toge - Network accessline 41
spec.ignore[].target.name <string> # Name to match resources with. spec.ignore[].target.namespace <string> # Namespace to select resources from. spec.ignore[].target.version <string> # Version of the API Group to select resources from. Toge - Network accessline 42
spec.ignore[].target.namespace <string> # Namespace to select resources from. spec.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying - Network accessline 42
spec.ignore[].target.namespace <string> # Namespace to select resources from. spec.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying - Network accessline 43
spec.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/mast - Network accessline 43
spec.ignore[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/mast - Network accessline 60
spec.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.patches[].target <object> # Target points to the resources that the patch document - Network accessline 60
spec.patches[].patch <string> (required) # Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. spec.patches[].target <object> # Target points to the resources that the patch document - Network accessline 61
spec.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression htt - Network accessline 61
spec.patches[].target <object> # Target points to the resources that the patch document should be applied to. spec.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression htt - Network accessline 62
spec.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annota - Network accessline 62
spec.patches[].target.annotationSelector <string> # AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annota - Network accessline 63
spec.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/maste - Network accessline 63
spec.patches[].target.group <string> # Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/maste - Network accessline 64
spec.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master - Network accessline 64
spec.patches[].target.kind <string> # Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master - Network accessline 65
spec.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. - Network accessline 65
spec.patches[].target.labelSelector <string> # LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. - Network accessline 66
spec.patches[].target.name <string> # Name to match resources with. spec.patches[].target.namespace <string> # Namespace to select resources from. spec.patches[].target.version <string> # Version of the API Group to select resources from. T - Network accessline 66
spec.patches[].target.name <string> # Name to match resources with. spec.patches[].target.namespace <string> # Namespace to select resources from. spec.patches[].target.version <string> # Version of the API Group to select resources from. T - Network accessline 67
spec.patches[].target.namespace <string> # Namespace to select resources from. spec.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifyi - Network accessline 67
spec.patches[].target.namespace <string> # Namespace to select resources from. spec.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifyi - Network accessline 68
spec.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/mas - Network accessline 68
spec.patches[].target.version <string> # Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/mas
skills/gitops-repo-audit/assets/schemas/ocirepository-source-v1.fields.txt
- Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 1
# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2 - Network accessline 23
spec.secretRef <object> # SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson. spec.secretRef.name <string> (required) # Name of t - Network accessline 23
spec.secretRef <object> # SecretRef contains the secret name containing the registry login credentials to resolve image metadata. The secret must be of type kubernetes.io/dockerconfigjson. spec.secretRef.name <string> (required) # Name of t - Network accessline 24
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to - Network accessline 24
spec.secretRef.name <string> (required) # Name of the referent. spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to - Network accessline 25
spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For more inform - Network accessline 25
spec.serviceAccountName <string> # ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull, either with the pull secrets attached to the service account or with an object identity. For more inform
skills/gitops-repo-audit/assets/schemas/provider-notification-v1.fields.txt
skills/gitops-repo-audit/assets/schemas/provider-notification-v1beta3.fields.txt
skills/gitops-repo-audit/assets/schemas/receiver-notification-v1.fields.txt
skills/gitops-repo-audit/assets/schemas/resourceset-fluxcd-v1.fields.txt
skills/gitops-repo-audit/assets/schemas/resourcesetinputprovider-fluxcd-v1.fields.txt
- Network accessline 1
# schema source: Flux Operator v0.62.1 https://github.com/controlplaneio-fluxcd/flux-operator - Network accessline 1
# schema source: Flux Operator v0.62.1 https://github.com/controlplaneio-fluxcd/flux-operator - Network accessline 33
spec.selectors[].name <string> # Name selects a single ExternalArtifact by metadata.name. This field is mutually exclusive with matchLabels and matchExpressions. spec.selectors[].namespace <string> # Namespace scopes ExternalArtifact discov - Network accessline 33
spec.selectors[].name <string> # Name selects a single ExternalArtifact by metadata.name. This field is mutually exclusive with matchLabels and matchExpressions. spec.selectors[].namespace <string> # Namespace scopes ExternalArtifact discov - Network accessline 34
spec.selectors[].namespace <string> # Namespace scopes ExternalArtifact discovery. When empty, ExternalArtifacts are listed in the ResourceSetInputProvider namespace. When set to "*", ExternalArtifacts are listed across all namespaces by om - Network accessline 34
spec.selectors[].namespace <string> # Namespace scopes ExternalArtifact discovery. When empty, ExternalArtifacts are listed in the ResourceSetInputProvider namespace. When set to "*", ExternalArtifacts are listed across all namespaces by om - Network accessline 35
spec.serviceAccountName <string> # ServiceAccountName specifies the name of the Kubernetes ServiceAccount used for authentication with external services using object identity. If not specified, the default object identity ServiceAccount con - Network accessline 35
spec.serviceAccountName <string> # ServiceAccountName specifies the name of the Kubernetes ServiceAccount used for authentication with external services using object identity. If not specified, the default object identity ServiceAccount con
skills/gitops-repo-audit/evals/evals.json
- Network accessline 76
"files": [], "expectations": [ "Detects gotk-sync.yaml and recommends migrating to Flux Operator with link to https://fluxoperator.dev/docs/guides/migration/", - Network accessline 76
"files": [], "expectations": [ "Detects gotk-sync.yaml and recommends migrating to Flux Operator with link to https://fluxoperator.dev/docs/guides/migration/", - Network accessline 77
"expectations": [ "Detects gotk-sync.yaml and recommends migrating to Flux Operator with link to https://fluxoperator.dev/docs/guides/migration/", "Detects GitRepository using source.toolkit.fluxcd.io/v1beta1 (should be v1)" - Network accessline 77
"expectations": [ "Detects gotk-sync.yaml and recommends migrating to Flux Operator with link to https://fluxoperator.dev/docs/guides/migration/", "Detects GitRepository using source.toolkit.fluxcd.io/v1beta1 (should be v1)" - Network accessline 78
"Detects gotk-sync.yaml and recommends migrating to Flux Operator with link to https://fluxoperator.dev/docs/guides/migration/", - Network accessline 78
"Detects gotk-sync.yaml and recommends migrating to Flux Operator with link to https://fluxoperator.dev/docs/guides/migration/",
skills/gitops-repo-audit/references/api-migration.md
- Network accessline 3
Reference for migrating from deprecated Flux API versions to current stable versions. Source: https://github.com/fluxcd/flux2/discussions/5572 - Network accessline 3
Reference for migrating from deprecated Flux API versions to current stable versions. Source: https://github.com/fluxcd/flux2/discussions/5572 - Network accessline 4
Source: https://github.com/fluxcd/flux2/discussions/5572 - Network accessline 4
Source: https://github.com/fluxcd/flux2/discussions/5572
skills/gitops-repo-audit/references/best-practices.md
- Network accessline 90
- [ ] **Migrate from bootstrap to Flux Operator**: If `gotk-sync.yaml` is found in the repo (generated by `flux bootstrap`), recommend migrating to the Flux Operator with a `FluxInstance` resource for declarative Flux lifecycle management - Network accessline 90
- [ ] **Migrate from bootstrap to Flux Operator**: If `gotk-sync.yaml` is found in the repo (generated by `flux bootstrap`), recommend migrating to the Flux Operator with a `FluxInstance` resource for declarative Flux lifecycle management - Network accessline 92
Recommend https://fluxoperator.dev/docs/guides/migration/ for zero-downtime migration steps. - Network accessline 92
Recommend https://fluxoperator.dev/docs/guides/migration/ for zero-downtime migration steps.
skills/gitops-repo-audit/references/flux-api-summary.md
- Access to secretsline 134
[Credential-related source omitted] - Access to secretsline 134
[Credential-related source omitted] - Network accessline 313
- GitRepository: https://raw.githubusercontent.com/fluxcd/source-controller/refs/heads/main/docs/spec/v1/gitrepositories.md - Network accessline 313
- GitRepository: https://raw.githubusercontent.com/fluxcd/source-controller/refs/heads/main/docs/spec/v1/gitrepositories.md - Network accessline 314
- OCIRepository: https://raw.githubusercontent.com/fluxcd/source-controller/refs/heads/main/docs/spec/v1/ocirepositories.md - Network accessline 314
- OCIRepository: https://raw.githubusercontent.com/fluxcd/source-controller/refs/heads/main/docs/spec/v1/ocirepositories.md - Network accessline 315
- HelmRepository: https://raw.githubusercontent.com/fluxcd/source-controller/refs/heads/main/docs/spec/v1/helmrepositories.md - Network accessline 315
- HelmRepository: https://raw.githubusercontent.com/fluxcd/source-controller/refs/heads/main/docs/spec/v1/helmrepositories.md - Network accessline 316
- HelmChart: https://raw.githubusercontent.com/fluxcd/source-controller/refs/heads/main/docs/spec/v1/helmcharts.md - Network accessline 316
- HelmChart: https://raw.githubusercontent.com/fluxcd/source-controller/refs/heads/main/docs/spec/v1/helmcharts.md - Network accessline 317
- Bucket: https://raw.githubusercontent.com/fluxcd/source-controller/refs/heads/main/docs/spec/v1/buckets.md - Network accessline 317
- Bucket: https://raw.githubusercontent.com/fluxcd/source-controller/refs/heads/main/docs/spec/v1/buckets.md - Network accessline 318
- ArtifactGenerator: https://raw.githubusercontent.com/fluxcd/source-watcher/refs/heads/main/docs/spec/v1beta1/artifactgenerators.md - Network accessline 318
- ArtifactGenerator: https://raw.githubusercontent.com/fluxcd/source-watcher/refs/heads/main/docs/spec/v1beta1/artifactgenerators.md - Network accessline 319
- Kustomization: https://raw.githubusercontent.com/fluxcd/kustomize-controller/refs/heads/main/docs/spec/v1/kustomizations.md - Network accessline 319
- Kustomization: https://raw.githubusercontent.com/fluxcd/kustomize-controller/refs/heads/main/docs/spec/v1/kustomizations.md - Network accessline 320
- HelmRelease: https://raw.githubusercontent.com/fluxcd/helm-controller/refs/heads/main/docs/spec/v2/helmreleases.md - Network accessline 320
- HelmRelease: https://raw.githubusercontent.com/fluxcd/helm-controller/refs/heads/main/docs/spec/v2/helmreleases.md - Network accessline 321
- Receiver: https://raw.githubusercontent.com/fluxcd/notification-controller/refs/heads/main/docs/spec/v1/receivers.md - Network accessline 321
- Receiver: https://raw.githubusercontent.com/fluxcd/notification-controller/refs/heads/main/docs/spec/v1/receivers.md - Network accessline 322
- Alert: https://raw.githubusercontent.com/fluxcd/notification-controller/refs/heads/main/docs/spec/v1/alerts.md - Network accessline 322
- Alert: https://raw.githubusercontent.com/fluxcd/notification-controller/refs/heads/main/docs/spec/v1/alerts.md - Network accessline 323
- Provider: https://raw.githubusercontent.com/fluxcd/notification-controller/refs/heads/main/docs/spec/v1/providers.md - Network accessline 323
- Provider: https://raw.githubusercontent.com/fluxcd/notification-controller/refs/heads/main/docs/spec/v1/providers.md - Network accessline 324
- ImageRepository: https://raw.githubusercontent.com/fluxcd/image-reflector-controller/refs/heads/main/docs/spec/v1/imagerepositories.md - Network accessline 324
- ImageRepository: https://raw.githubusercontent.com/fluxcd/image-reflector-controller/refs/heads/main/docs/spec/v1/imagerepositories.md - Network accessline 325
- ImagePolicy: https://raw.githubusercontent.com/fluxcd/image-reflector-controller/refs/heads/main/docs/spec/v1/imagepolicies.md - Network accessline 325
- ImagePolicy: https://raw.githubusercontent.com/fluxcd/image-reflector-controller/refs/heads/main/docs/spec/v1/imagepolicies.md - Network accessline 326
- ImageUpdateAutomation: https://raw.githubusercontent.com/fluxcd/image-automation-controller/refs/heads/main/docs/spec/v1/imageupdateautomations.md - Network accessline 326
- ImageUpdateAutomation: https://raw.githubusercontent.com/fluxcd/image-automation-controller/refs/heads/main/docs/spec/v1/imageupdateautomations.md
skills/gitops-repo-audit/references/flux-operator-api-summary.md
- Network accessline 110
- FluxInstance: https://raw.githubusercontent.com/controlplaneio-fluxcd/flux-operator/refs/heads/main/docs/api/v1/fluxinstance.md - Network accessline 110
- FluxInstance: https://raw.githubusercontent.com/controlplaneio-fluxcd/flux-operator/refs/heads/main/docs/api/v1/fluxinstance.md - Network accessline 111
- ResourceSet: https://raw.githubusercontent.com/controlplaneio-fluxcd/flux-operator/refs/heads/main/docs/api/v1/resourceset.md - Network accessline 111
- ResourceSet: https://raw.githubusercontent.com/controlplaneio-fluxcd/flux-operator/refs/heads/main/docs/api/v1/resourceset.md - Network accessline 112
- ResourceSetInputProvider: https://raw.githubusercontent.com/controlplaneio-fluxcd/flux-operator/refs/heads/main/docs/api/v1/resourcesetinputprovider.md - Network accessline 112
- ResourceSetInputProvider: https://raw.githubusercontent.com/controlplaneio-fluxcd/flux-operator/refs/heads/main/docs/api/v1/resourcesetinputprovider.md
skills/gitops-repo-audit/references/repo-patterns.md
- Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 73
[Credential-related source omitted] - Access to secretsline 73
[Credential-related source omitted] - Access to secretsline 75
[Credential-related source omitted] - Access to secretsline 75
[Credential-related source omitted] - Access to secretsline 76
[Credential-related source omitted] - Access to secretsline 76
[Credential-related source omitted] - Access to secretsline 86
[Credential-related source omitted] - Access to secretsline 86
[Credential-related source omitted] - Access to secretsline 206
[Credential-related source omitted] - Access to secretsline 206
[Credential-related source omitted] - Access to secretsline 209
[Credential-related source omitted] - Access to secretsline 209
[Credential-related source omitted]
skills/gitops-repo-audit/scripts/check-deprecated.sh
- Executable scriptline 1
#!/usr/bin/env bash - Executable scriptline 1
#!/usr/bin/env bash - Network accessline 15
# Prerequisites # - flux (https://fluxcd.io/flux/installation/) - Network accessline 15
# Prerequisites # - flux (https://fluxcd.io/flux/installation/) - Network accessline 16
# - flux (https://fluxcd.io/flux/installation/) - Network accessline 16
# - flux (https://fluxcd.io/flux/installation/) - Network accessline 80
if ! command -v flux &> /dev/null; then echo "ERROR - flux is not installed" >&2 echo "ERROR - Install it from https://fluxcd.io/flux/installation/" >&2 - Network accessline 80
if ! command -v flux &> /dev/null; then echo "ERROR - flux is not installed" >&2 echo "ERROR - Install it from https://fluxcd.io/flux/installation/" >&2 - Network accessline 81
echo "ERROR - flux is not installed" >&2 echo "ERROR - Install it from https://fluxcd.io/flux/installation/" >&2 exit 2 - Network accessline 81
echo "ERROR - flux is not installed" >&2 echo "ERROR - Install it from https://fluxcd.io/flux/installation/" >&2 exit 2 - Network accessline 82
echo "ERROR - Install it from https://fluxcd.io/flux/installation/" >&2 - Network accessline 82
echo "ERROR - Install it from https://fluxcd.io/flux/installation/" >&2 - Network accessline 92
if ! version_ge "$version" "$MIN_FLUX_VERSION"; then echo "ERROR - Flux CLI v${version} is too old; 'flux migrate' requires Flux ${MIN_FLUX_VERSION} or later" >&2 echo "ERROR - Upgrade Flux: https://fluxcd.io/flux/installation/" >&2 - Network accessline 92
if ! version_ge "$version" "$MIN_FLUX_VERSION"; then echo "ERROR - Flux CLI v${version} is too old; 'flux migrate' requires Flux ${MIN_FLUX_VERSION} or later" >&2 echo "ERROR - Upgrade Flux: https://fluxcd.io/flux/installation/" >&2 - Network accessline 93
echo "ERROR - Flux CLI v${version} is too old; 'flux migrate' requires Flux ${MIN_FLUX_VERSION} or later" >&2 echo "ERROR - Upgrade Flux: https://fluxcd.io/flux/installation/" >&2 exit 2 - Network accessline 93
echo "ERROR - Flux CLI v${version} is too old; 'flux migrate' requires Flux ${MIN_FLUX_VERSION} or later" >&2 echo "ERROR - Upgrade Flux: https://fluxcd.io/flux/installation/" >&2 exit 2 - Network accessline 94
echo "ERROR - Upgrade Flux: https://fluxcd.io/flux/installation/" >&2 - Network accessline 94
echo "ERROR - Upgrade Flux: https://fluxcd.io/flux/installation/" >&2
skills/gitops-repo-audit/scripts/discover.sh
skills/gitops-repo-audit/scripts/validate.sh
- Executable scriptline 1
#!/usr/bin/env bash - Executable scriptline 1
#!/usr/bin/env bash - Network accessline 3
# DO NOT EDIT: this file is vendored from the flux-schema action (single source of truth). # Source: https://raw.githubusercontent.com/fluxcd/flux-schema/main/actions/validate/validate.sh - Network accessline 3
# DO NOT EDIT: this file is vendored from the flux-schema action (single source of truth). # Source: https://raw.githubusercontent.com/fluxcd/flux-schema/main/actions/validate/validate.sh - Network accessline 4
# Source: https://raw.githubusercontent.com/fluxcd/flux-schema/main/actions/validate/validate.sh - Network accessline 4
# Source: https://raw.githubusercontent.com/fluxcd/flux-schema/main/actions/validate/validate.sh - Dangerous shell operationline 465
rm -f "$errfile" - Dangerous shell operationline 465
rm -f "$errfile" - Dangerous shell operationline 469
rm -f "$errfile" - Dangerous shell operationline 469
rm -f "$errfile"
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Signal confidence: 500 facts
- Broad permissions in the frontmatter of the SKILL.mdcommit-assisted-by/SKILL.md:1High confidence
- Executable script in code of a file that runscommit-assisted-by/scripts/safety-check.sh:1High confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:60Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:61Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:62Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:101Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:102Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:103Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:111Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:112Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:113Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:114Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:115Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:241Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:242Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:243Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:249Low confidence
- Network access in prose of the SKILL.mdflux-controller-minor-releases/SKILL.md:251Low confidence
- Network access in prose of the SKILL.mdflux-controller-patch-releases/SKILL.md:40Low confidence
- Network access in prose of the SKILL.mdflux-controller-patch-releases/SKILL.md:41Low confidence
- Network access in prose of the SKILL.mdflux-controller-patch-releases/SKILL.md:42Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/alert-notification-v1.fields.txt:1Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/alert-notification-v1.fields.txt:1Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/alert-notification-v1beta3.fields.txt:1Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/alert-notification-v1beta3.fields.txt:1Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/artifactgenerator-source-v1beta1.fields.txt:1Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/artifactgenerator-source-v1beta1.fields.txt:1Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/bucket-source-v1.fields.txt:1Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/bucket-source-v1.fields.txt:1Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/bucket-source-v1.fields.txt:19Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/bucket-source-v1.fields.txt:19Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/bucket-source-v1.fields.txt:20Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/bucket-source-v1.fields.txt:20Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/bucket-source-v1.fields.txt:21Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/bucket-source-v1.fields.txt:21Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/externalartifact-source-v1.fields.txt:1Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/externalartifact-source-v1.fields.txt:1Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:1Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:1Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:33Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:33Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:34Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:34Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:35Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:35Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:36Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:36Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:37Low confidence
- Network access in prose of documentationgitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:37Low confidence
- Network access in prose of documentationskills/gitops-cluster-debug/assets/schemas/fluxinstance-fluxcd-v1.fields.txt:38Low confidence
and 450 more
Only the first 500 facts are listed.
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Manifest .claude-plugin/marketplace.json | .claude/skills/<skill-name>/ |
| Codex | Native | Manifest AGENTS.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md internal/skills/commit-assisted-by/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md internal/skills/commit-assisted-by/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md internal/skills/commit-assisted-by/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md internal/skills/commit-assisted-by/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.