ForgejoDeployKey
An SSH deploy key on a ForgejoRepository (same namespace).
- API version:
forgejo.weebo.io/v1alpha1 - Scope: Namespaced
- Short names:
fjdkey - Guide: Repositories
An SSH deploy key on a ForgejoRepository (same namespace). Without
publicKey, the operator generates an ed25519 pair and writes the
private half to secretTargets (ssh-privatekey, ssh-publickey — the
kubernetes.io/ssh-auth key names). Keys are immutable in Forgejo: any
change recreates the key.
Example
apiVersion: forgejo.weebo.io/v1alpha1
kind: ForgejoDeployKey
metadata:
name: my-deploykey
namespace: team-a
spec:
repositoryRef:
name: app
readOnly: trueSpec fields
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
deletionPolicy | string | no | "Delete" | What happens to the Forgejo object when its CR is deleted. |
instanceRef | object | no | The ForgejoInstance or ForgejoLocalInstance this object lives on. Unset: the cluster's only ForgejoInstance, else the only ForgejoLocalInstance of this namespace. | |
publicKey | string | no | An OpenSSH public key (ssh-ed25519 AAAA... comment). Unset: the operator generates an ed25519 pair. | |
readOnly | boolean | no | true | |
repositoryRef | object | yes | Reference to another CR of this operator, by metadata.name. Always a CR, never a raw remote name: a cluster-scoped target is looked up cluster-wide, a namespaced one in the referencing CR's own namespace only. | |
secretTargets | object[] | no | Destinations of a generated private key. Required when publicKey is unset; a target that disappears (or a new forgejo.weebo.io/rotate-secret nonce) generates a fresh pair. | |
title | string | no | Defaults to the CR name. |
Build a manifest
Answer the questions and fill in the fields: the YAML preview updates as you type, ready to copy or download and kubectl apply.
Loading form...