CRD reference
Every kind the operator adds, its fields, and an interactive manifest builder.
Each page lists a kind's spec fields, shows a minimal example, and has a
form that builds a ready-to-apply manifest. These pages are generated from
the CRDs themselves, so they always match the installed version. For the
ideas behind the fields, start with Concepts.
| Kind | Short names | Scope | Description |
|---|---|---|---|
ForgejoInstance | fji | Cluster | Connection to a real Forgejo server (v16 or later). |
ForgejoLocalInstance | fjli | Namespaced | Connection to a real Forgejo server (v16 or later), owned by a namespace: its token is that namespace's, and only the objects of this namespace use it unless sharedWith says otherwise. |
ForgejoUser | fjuser | Namespaced | A Forgejo user, in one of three modes. |
ForgejoUserKey | fjukey | Namespaced | An SSH public key of a user — typically a bot's. |
ForgejoOrganization | fjorg | Namespaced | A Forgejo organization. |
ForgejoTeam | fjteam | Namespaced | A team inside a ForgejoOrganization, with its members. |
ForgejoNamespacePolicy | fjnp | Cluster | Namespace allow-list for the namespaced kinds, enforced by the admission webhook (CREATE/UPDATE) and re-checked by every reconciler. |
ForgejoRepository | fjrepo | Namespaced | A Forgejo repository, owned by a ForgejoOrganization or a ForgejoUser. |
ForgejoWebhook | fjhook | Namespaced | A webhook on a ForgejoRepository (same namespace) or a ForgejoOrganization — exactly one of the two refs. |
ForgejoDeployKey | fjdkey | Namespaced | An SSH deploy key on a ForgejoRepository (same namespace). |
ForgejoOAuth2Application | fjoauth | Namespaced | An OAuth2 application registered in Forgejo, for apps that use Forgejo as their identity provider. |
ForgejoAccessToken | fjtoken | Namespaced | An access token of a ForgejoUser (typically a bot), issued through the admin API (Forgejo v16+) and written to secretTargets as FORGEJO_TOKEN, FORGEJO_USERNAME and FORGEJO_URL. |