vulnerabilityscanning.oracle.com/v1beta1¶
APIVersion: vulnerabilityscanning.oracle.com/v1beta1
This content is generated from the checked-in CRD schemas in config/crd/bases/. If a description is missing or incorrect, fix the source comments or generator inputs and rerun make generate manifests; do not hand-edit config/crd/bases/*.yaml.
Packages¶
No customer-visible package currently exposes vulnerabilityscanning.oracle.com/v1beta1.
Resources¶
| Kind | Scope | Sample | Packages |
|---|---|---|---|
| ContainerScanRecipe | Namespaced | Sample | - |
| ContainerScanTarget | Namespaced | Sample | - |
| HostScanRecipe | Namespaced | Sample | - |
| HostScanTarget | Namespaced | Sample | - |
ContainerScanRecipe¶
ContainerScanRecipe is the Schema for the containerscanrecipes API.
Plural:containerscanrecipesScope:NamespacedAPIVersion:vulnerabilityscanning.oracle.com/v1beta1Sample: Sample (config/samples/vulnerabilityscanning_v1beta1_containerscanrecipe.yaml)Packages: Not currently exposed by a customer-visible package.
Spec¶
ContainerScanRecipeSpec defines the desired state of ContainerScanRecipe.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
compartmentId |
The OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the container scan recipe's compartment | string |
Yes | - | - |
definedTags |
Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace": {"bar-key": "value"}} |
map[string, map[string, string]] |
No | - | - |
displayName |
User friendly name of container scan recipe. If not present, will be auto-generated. | string |
No | - | - |
freeformTags |
Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"} |
map[string, string] |
No | - | - |
imageCount |
This field is set equal to the number of images we want to scan in the first go when the recipe is created | integer |
No | - | - |
scanSettings |
ContainerScanRecipeScanSettings defines nested fields for ContainerScanRecipe.ScanSettings. | object |
Yes | - | - |
Spec.scanSettings¶
Back to ContainerScanRecipe spec
ContainerScanRecipeScanSettings defines nested fields for ContainerScanRecipe.ScanSettings.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
scanLevel |
The scan level | string |
Yes | - | - |
Status¶
ContainerScanRecipeStatus defines the observed state of ContainerScanRecipe.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
compartmentId |
The OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the container scan recipe's compartment | string |
No | - | - |
definedTags |
Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace": {"bar-key": "value"}} |
map[string, map[string, string]] |
No | - | - |
displayName |
User friendly name of container scan recipe | string |
No | - | - |
freeformTags |
Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"} |
map[string, string] |
No | - | - |
id |
The OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of container scan recipe. Immutable and generated on creation. | string |
No | - | - |
imageCount |
This field is set equal to the number of images we want to scan in the first go when the recipe is created | integer |
No | - | - |
lifecycleState |
The current state of the config. | string |
No | - | - |
scanSettings |
ContainerScanRecipeScanSettings defines nested fields for ContainerScanRecipe.ScanSettings. | object |
No | - | - |
status |
- | object |
Yes | - | - |
systemTags |
Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud": {"free-tier-retained": "true"}} |
map[string, map[string, string]] |
No | - | - |
timeCreated |
Date and time the recipe was created, format as described in RFC 3339 (https://tools.ietf.org/rfc/rfc3339) | string |
No | - | - |
timeUpdated |
Date and time the recipe was last updated, format as described in RFC 3339 (https://tools.ietf.org/rfc/rfc3339) | string |
No | - | - |
Status.scanSettings¶
Back to ContainerScanRecipe status
ContainerScanRecipeScanSettings defines nested fields for ContainerScanRecipe.ScanSettings.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
scanLevel |
The scan level | string |
Yes | - | - |
Status.status¶
Back to ContainerScanRecipe status
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
async |
Async is the canonical controller-owned async contract. Resource-local legacy work-request fields may remain as compatibility mirrors while follow-on migrations land, but new async state should project here first. | object |
No | - | - |
conditions |
- | list[object] |
No | - | - |
createdAt |
- | string (date-time) |
No | - | - |
deletedAt |
- | string (date-time) |
No | - | - |
message |
- | string |
No | - | - |
ocid |
- | string |
No | - | - |
opcRequestId |
OpcRequestID is the latest non-empty OCI request ID from a mutating OCI response or surfaced OCI service error that materially contributed to the current shared status projection. Headerless follow-up observations keep the last non-empty value intact. | string |
No | - | - |
reason |
- | string |
No | - | - |
requestedAt |
- | string (date-time) |
No | - | - |
updatedAt |
- | string (date-time) |
No | - | - |
Status.status.async¶
Back to ContainerScanRecipe status
Async is the canonical controller-owned async contract. Resource-local legacy work-request fields may remain as compatibility mirrors while follow-on migrations land, but new async state should project here first.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
current |
- | object |
No | - | - |
Status.status.async.current¶
Back to ContainerScanRecipe status
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
message |
- | string |
No | - | - |
normalizedClass |
- | string |
Yes | - | attention, canceled, failed, pending, succeeded, unknown |
percentComplete |
- | number |
No | - | - |
phase |
- | string |
Yes | - | create, delete, update |
rawOperationType |
- | string |
No | - | - |
rawStatus |
- | string |
No | - | - |
source |
- | string |
Yes | - | lifecycle, none, workrequest |
updatedAt |
- | string (date-time) |
Yes | - | - |
workRequestId |
- | string |
No | - | - |
Status.status.conditions[]¶
Back to ContainerScanRecipe status
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
lastTransitionTime |
- | string (date-time) |
No | - | - |
message |
- | string |
No | - | - |
reason |
- | string |
No | - | - |
status |
- | string |
Yes | - | - |
type |
- | string |
Yes | - | - |
ContainerScanTarget¶
ContainerScanTarget is the Schema for the containerscantargets API.
Plural:containerscantargetsScope:NamespacedAPIVersion:vulnerabilityscanning.oracle.com/v1beta1Sample: Sample (config/samples/vulnerabilityscanning_v1beta1_containerscantarget.yaml)Packages: Not currently exposed by a customer-visible package.
Spec¶
ContainerScanTargetSpec defines the desired state of ContainerScanTarget.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
compartmentId |
The OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the container scan target's compartment | string |
Yes | - | - |
containerScanRecipeId |
ID of the container scan recipe this target applies. | string |
Yes | - | - |
definedTags |
Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace": {"bar-key": "value"}} |
map[string, map[string, string]] |
No | - | - |
description |
Target description. | string |
No | - | - |
displayName |
User friendly name of container scan target. If not present, will be auto-generated. | string |
No | - | - |
freeformTags |
Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"} |
map[string, string] |
No | - | - |
targetRegistry |
ContainerScanTargetTargetRegistry defines nested fields for ContainerScanTarget.TargetRegistry. | object |
Yes | - | - |
Spec.targetRegistry¶
Back to ContainerScanTarget spec
ContainerScanTargetTargetRegistry defines nested fields for ContainerScanTarget.TargetRegistry.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
compartmentId |
The OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the compartment to perform the scans in. All listed repositories must be in the compartment. | string |
No | - | - |
jsonData |
- | string |
No | - | - |
repositories |
List of repositories to scan images in. If left empty, the target defaults to scanning all repos in the compartmentId | list[string] |
No | - | - |
type |
- | string |
No | - | - |
url |
URL of the registry. Required for non-OCIR registry types (for OCIR registry types, it can be inferred from the tenancy). | string |
No | - | - |
Status¶
ContainerScanTargetStatus defines the observed state of ContainerScanTarget.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
compartmentId |
The OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the container scan target's compartment | string |
No | - | - |
containerScanRecipeId |
ID of the container scan recipe this target applies. | string |
No | - | - |
definedTags |
Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace": {"bar-key": "value"}} |
map[string, map[string, string]] |
No | - | - |
description |
Target description. | string |
No | - | - |
displayName |
User friendly name of container scan target | string |
No | - | - |
freeformTags |
Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"} |
map[string, string] |
No | - | - |
id |
The OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of container scan target. Immutable and generated on creation. | string |
No | - | - |
lifecycleState |
The current state of the config. | string |
No | - | - |
status |
- | object |
Yes | - | - |
systemTags |
Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud": {"free-tier-retained": "true"}} |
map[string, map[string, string]] |
No | - | - |
targetRegistry |
ContainerScanTargetTargetRegistry defines nested fields for ContainerScanTarget.TargetRegistry. | object |
No | - | - |
timeCreated |
Date and time the target was created, format as described in RFC 3339 (https://tools.ietf.org/rfc/rfc3339) | string |
No | - | - |
timeUpdated |
Date and time the target was last updated, format as described in RFC 3339 (https://tools.ietf.org/rfc/rfc3339) | string |
No | - | - |
Status.status¶
Back to ContainerScanTarget status
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
async |
Async is the canonical controller-owned async contract. Resource-local legacy work-request fields may remain as compatibility mirrors while follow-on migrations land, but new async state should project here first. | object |
No | - | - |
conditions |
- | list[object] |
No | - | - |
createdAt |
- | string (date-time) |
No | - | - |
deletedAt |
- | string (date-time) |
No | - | - |
message |
- | string |
No | - | - |
ocid |
- | string |
No | - | - |
opcRequestId |
OpcRequestID is the latest non-empty OCI request ID from a mutating OCI response or surfaced OCI service error that materially contributed to the current shared status projection. Headerless follow-up observations keep the last non-empty value intact. | string |
No | - | - |
reason |
- | string |
No | - | - |
requestedAt |
- | string (date-time) |
No | - | - |
updatedAt |
- | string (date-time) |
No | - | - |
Status.status.async¶
Back to ContainerScanTarget status
Async is the canonical controller-owned async contract. Resource-local legacy work-request fields may remain as compatibility mirrors while follow-on migrations land, but new async state should project here first.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
current |
- | object |
No | - | - |
Status.status.async.current¶
Back to ContainerScanTarget status
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
message |
- | string |
No | - | - |
normalizedClass |
- | string |
Yes | - | attention, canceled, failed, pending, succeeded, unknown |
percentComplete |
- | number |
No | - | - |
phase |
- | string |
Yes | - | create, delete, update |
rawOperationType |
- | string |
No | - | - |
rawStatus |
- | string |
No | - | - |
source |
- | string |
Yes | - | lifecycle, none, workrequest |
updatedAt |
- | string (date-time) |
Yes | - | - |
workRequestId |
- | string |
No | - | - |
Status.status.conditions[]¶
Back to ContainerScanTarget status
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
lastTransitionTime |
- | string (date-time) |
No | - | - |
message |
- | string |
No | - | - |
reason |
- | string |
No | - | - |
status |
- | string |
Yes | - | - |
type |
- | string |
Yes | - | - |
Status.targetRegistry¶
Back to ContainerScanTarget status
ContainerScanTargetTargetRegistry defines nested fields for ContainerScanTarget.TargetRegistry.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
compartmentId |
The OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the compartment to perform the scans in. All listed repositories must be in the compartment. | string |
No | - | - |
jsonData |
- | string |
No | - | - |
repositories |
List of repositories to scan images in. If left empty, the target defaults to scanning all repos in the compartmentId | list[string] |
No | - | - |
type |
- | string |
No | - | - |
url |
URL of the registry. Required for non-OCIR registry types (for OCIR registry types, it can be inferred from the tenancy). | string |
No | - | - |
HostScanRecipe¶
HostScanRecipe is the Schema for the hostscanrecipes API.
Plural:hostscanrecipesScope:NamespacedAPIVersion:vulnerabilityscanning.oracle.com/v1beta1Sample: Sample (config/samples/vulnerabilityscanning_v1beta1_hostscanrecipe.yaml)Packages: Not currently exposed by a customer-visible package.
Spec¶
HostScanRecipeSpec defines the desired state of HostScanRecipe.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
agentSettings |
HostScanRecipeAgentSettings defines nested fields for HostScanRecipe.AgentSettings. | object |
Yes | - | - |
applicationSettings |
HostScanRecipeApplicationSettings defines nested fields for HostScanRecipe.ApplicationSettings. | object |
No | - | - |
compartmentId |
Compartment ID of the scanning config. If no individual hosts are specified, all hosts in this compartment are scanned | string |
Yes | - | - |
definedTags |
Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace": {"bar-key": "value"}} |
map[string, map[string, string]] |
No | - | - |
displayName |
Recipe identifier, which can be renamed. If not present, it will be auto-generated. Avoid entering confidential information. | string |
No | - | - |
freeformTags |
Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"} |
map[string, string] |
No | - | - |
portSettings |
HostScanRecipePortSettings defines nested fields for HostScanRecipe.PortSettings. | object |
Yes | - | - |
schedule |
HostScanRecipeSchedule defines nested fields for HostScanRecipe.Schedule. | object |
Yes | - | - |
Spec.agentSettings¶
HostScanRecipeAgentSettings defines nested fields for HostScanRecipe.AgentSettings.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
agentConfiguration |
HostScanRecipeAgentSettingsAgentConfiguration defines nested fields for HostScanRecipe.AgentSettings.AgentConfiguration. | object |
No | - | - |
scanLevel |
The scan level | string |
Yes | - | - |
Spec.agentSettings.agentConfiguration¶
HostScanRecipeAgentSettingsAgentConfiguration defines nested fields for HostScanRecipe.AgentSettings.AgentConfiguration.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
cisBenchmarkSettings |
HostScanRecipeAgentSettingsAgentConfigurationCisBenchmarkSettings defines nested fields for HostScanRecipe.AgentSettings.AgentConfiguration.CisBenchmarkSettings. | object |
No | - | - |
endpointProtectionSettings |
HostScanRecipeAgentSettingsAgentConfigurationEndpointProtectionSettings defines nested fields for HostScanRecipe.AgentSettings.AgentConfiguration.EndpointProtectionSettings. | object |
No | - | - |
jsonData |
- | string |
No | - | - |
shouldUnInstall |
Boolean flag letting agent know if it should un-install the Qualys agent when it is stopped. | boolean |
No | - | - |
vaultSecretId |
Vault secret OCID which stores license information. Content inside this secret in vault would be base64 string containing information about customer's Qualys susbcription license. | string |
No | - | - |
vendor |
- | string |
No | - | - |
vendorType |
Vendor to use for the host scan agent. | string |
No | - | - |
Spec.agentSettings.agentConfiguration.cisBenchmarkSettings¶
HostScanRecipeAgentSettingsAgentConfigurationCisBenchmarkSettings defines nested fields for HostScanRecipe.AgentSettings.AgentConfiguration.CisBenchmarkSettings.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
scanLevel |
The level of strictness to apply for CIS Benchmarks. Use 'NONE' to disable CIS Benchmark checks entirely. | string |
No | - | - |
Spec.agentSettings.agentConfiguration.endpointProtectionSettings¶
HostScanRecipeAgentSettingsAgentConfigurationEndpointProtectionSettings defines nested fields for HostScanRecipe.AgentSettings.AgentConfiguration.EndpointProtectionSettings.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
scanLevel |
The scan level. Use 'NONE' to disable Endpoint Protection checks entirely. | string |
No | - | - |
Spec.applicationSettings¶
HostScanRecipeApplicationSettings defines nested fields for HostScanRecipe.ApplicationSettings.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
applicationScanRecurrence |
Scan recurrences in RFC-5545 section 3.3.10 format. Only supported input are weekly, biweekly, monthly listed below FREQ=WEEKLY;WKST= |
string |
Yes | - | - |
foldersToScan |
List of folders selected for scanning | list[object] |
Yes | - | - |
isEnabled |
Enable or disable application scan | boolean |
Yes | - | - |
Spec.applicationSettings.foldersToScan[]¶
HostScanRecipeApplicationSettingsFoldersToScan defines nested fields for HostScanRecipe.ApplicationSettings.FoldersToScan.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
folder |
Folder to be scanned in the corresponding operating system | string |
Yes | - | - |
operatingsystem |
Operating system type | string |
Yes | - | - |
Spec.portSettings¶
HostScanRecipePortSettings defines nested fields for HostScanRecipe.PortSettings.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
scanLevel |
The scan level | string |
Yes | - | - |
Spec.schedule¶
HostScanRecipeSchedule defines nested fields for HostScanRecipe.Schedule.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
dayOfWeek |
Day of week the scheduled scan occurs (not applicable for DAILY type) | string |
No | - | - |
type |
How often the scan occurs | string |
Yes | - | - |
Status¶
HostScanRecipeStatus defines the observed state of HostScanRecipe.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
agentSettings |
HostScanRecipeAgentSettings defines nested fields for HostScanRecipe.AgentSettings. | object |
No | - | - |
applicationSettings |
HostScanRecipeApplicationSettings defines nested fields for HostScanRecipe.ApplicationSettings. | object |
No | - | - |
compartmentId |
Compartment ID of the scan recipe | string |
No | - | - |
definedTags |
Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace": {"bar-key": "value"}} |
map[string, map[string, string]] |
No | - | - |
displayName |
Recipe identifier, which can be renamed | string |
No | - | - |
freeformTags |
Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"} |
map[string, string] |
No | - | - |
id |
Unique identifier of the config that is immutable on creation | string |
No | - | - |
lifecycleState |
The current state of the config. | string |
No | - | - |
portSettings |
HostScanRecipePortSettings defines nested fields for HostScanRecipe.PortSettings. | object |
No | - | - |
schedule |
HostScanRecipeSchedule defines nested fields for HostScanRecipe.Schedule. | object |
No | - | - |
status |
- | object |
Yes | - | - |
systemTags |
Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud": {"free-tier-retained": "true"}} |
map[string, map[string, string]] |
No | - | - |
timeCreated |
Date and time the recipe was created, format as described in RFC 3339 (https://tools.ietf.org/rfc/rfc3339) | string |
No | - | - |
timeUpdated |
Date and time the recipe was last updated, format as described in RFC 3339 (https://tools.ietf.org/rfc/rfc3339) | string |
No | - | - |
Status.agentSettings¶
HostScanRecipeAgentSettings defines nested fields for HostScanRecipe.AgentSettings.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
agentConfiguration |
HostScanRecipeAgentSettingsAgentConfiguration defines nested fields for HostScanRecipe.AgentSettings.AgentConfiguration. | object |
No | - | - |
scanLevel |
The scan level | string |
Yes | - | - |
Status.agentSettings.agentConfiguration¶
HostScanRecipeAgentSettingsAgentConfiguration defines nested fields for HostScanRecipe.AgentSettings.AgentConfiguration.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
cisBenchmarkSettings |
HostScanRecipeAgentSettingsAgentConfigurationCisBenchmarkSettings defines nested fields for HostScanRecipe.AgentSettings.AgentConfiguration.CisBenchmarkSettings. | object |
No | - | - |
endpointProtectionSettings |
HostScanRecipeAgentSettingsAgentConfigurationEndpointProtectionSettings defines nested fields for HostScanRecipe.AgentSettings.AgentConfiguration.EndpointProtectionSettings. | object |
No | - | - |
jsonData |
- | string |
No | - | - |
shouldUnInstall |
Boolean flag letting agent know if it should un-install the Qualys agent when it is stopped. | boolean |
No | - | - |
vaultSecretId |
Vault secret OCID which stores license information. Content inside this secret in vault would be base64 string containing information about customer's Qualys susbcription license. | string |
No | - | - |
vendor |
- | string |
No | - | - |
vendorType |
Vendor to use for the host scan agent. | string |
No | - | - |
Status.agentSettings.agentConfiguration.cisBenchmarkSettings¶
HostScanRecipeAgentSettingsAgentConfigurationCisBenchmarkSettings defines nested fields for HostScanRecipe.AgentSettings.AgentConfiguration.CisBenchmarkSettings.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
scanLevel |
The level of strictness to apply for CIS Benchmarks. Use 'NONE' to disable CIS Benchmark checks entirely. | string |
No | - | - |
Status.agentSettings.agentConfiguration.endpointProtectionSettings¶
HostScanRecipeAgentSettingsAgentConfigurationEndpointProtectionSettings defines nested fields for HostScanRecipe.AgentSettings.AgentConfiguration.EndpointProtectionSettings.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
scanLevel |
The scan level. Use 'NONE' to disable Endpoint Protection checks entirely. | string |
No | - | - |
Status.applicationSettings¶
HostScanRecipeApplicationSettings defines nested fields for HostScanRecipe.ApplicationSettings.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
applicationScanRecurrence |
Scan recurrences in RFC-5545 section 3.3.10 format. Only supported input are weekly, biweekly, monthly listed below FREQ=WEEKLY;WKST= |
string |
Yes | - | - |
foldersToScan |
List of folders selected for scanning | list[object] |
Yes | - | - |
isEnabled |
Enable or disable application scan | boolean |
Yes | - | - |
Status.applicationSettings.foldersToScan[]¶
HostScanRecipeApplicationSettingsFoldersToScan defines nested fields for HostScanRecipe.ApplicationSettings.FoldersToScan.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
folder |
Folder to be scanned in the corresponding operating system | string |
Yes | - | - |
operatingsystem |
Operating system type | string |
Yes | - | - |
Status.portSettings¶
HostScanRecipePortSettings defines nested fields for HostScanRecipe.PortSettings.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
scanLevel |
The scan level | string |
Yes | - | - |
Status.schedule¶
HostScanRecipeSchedule defines nested fields for HostScanRecipe.Schedule.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
dayOfWeek |
Day of week the scheduled scan occurs (not applicable for DAILY type) | string |
No | - | - |
type |
How often the scan occurs | string |
Yes | - | - |
Status.status¶
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
async |
Async is the canonical controller-owned async contract. Resource-local legacy work-request fields may remain as compatibility mirrors while follow-on migrations land, but new async state should project here first. | object |
No | - | - |
conditions |
- | list[object] |
No | - | - |
createdAt |
- | string (date-time) |
No | - | - |
deletedAt |
- | string (date-time) |
No | - | - |
message |
- | string |
No | - | - |
ocid |
- | string |
No | - | - |
opcRequestId |
OpcRequestID is the latest non-empty OCI request ID from a mutating OCI response or surfaced OCI service error that materially contributed to the current shared status projection. Headerless follow-up observations keep the last non-empty value intact. | string |
No | - | - |
reason |
- | string |
No | - | - |
requestedAt |
- | string (date-time) |
No | - | - |
updatedAt |
- | string (date-time) |
No | - | - |
Status.status.async¶
Async is the canonical controller-owned async contract. Resource-local legacy work-request fields may remain as compatibility mirrors while follow-on migrations land, but new async state should project here first.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
current |
- | object |
No | - | - |
Status.status.async.current¶
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
message |
- | string |
No | - | - |
normalizedClass |
- | string |
Yes | - | attention, canceled, failed, pending, succeeded, unknown |
percentComplete |
- | number |
No | - | - |
phase |
- | string |
Yes | - | create, delete, update |
rawOperationType |
- | string |
No | - | - |
rawStatus |
- | string |
No | - | - |
source |
- | string |
Yes | - | lifecycle, none, workrequest |
updatedAt |
- | string (date-time) |
Yes | - | - |
workRequestId |
- | string |
No | - | - |
Status.status.conditions[]¶
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
lastTransitionTime |
- | string (date-time) |
No | - | - |
message |
- | string |
No | - | - |
reason |
- | string |
No | - | - |
status |
- | string |
Yes | - | - |
type |
- | string |
Yes | - | - |
HostScanTarget¶
HostScanTarget is the Schema for the hostscantargets API.
Plural:hostscantargetsScope:NamespacedAPIVersion:vulnerabilityscanning.oracle.com/v1beta1Sample: Sample (config/samples/vulnerabilityscanning_v1beta1_hostscantarget.yaml)Packages: Not currently exposed by a customer-visible package.
Spec¶
HostScanTargetSpec defines the desired state of HostScanTarget.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
compartmentId |
Compartment ID of the object (this). | string |
Yes | - | - |
definedTags |
Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace": {"bar-key": "value"}} |
map[string, map[string, string]] |
No | - | - |
description |
Target description. | string |
No | - | - |
displayName |
Target identifier, which can be renamed. If not present, it will be auto-generated. Avoid entering confidential information. | string |
No | - | - |
freeformTags |
Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"} |
map[string, string] |
No | - | - |
hostScanRecipeId |
ID of the host scan recipe this target applies. | string |
Yes | - | - |
instanceIds |
List of compute instance IDs to target (optional). If empty, targets the entire targetCompartmentId. | list[string] |
No | - | - |
targetCompartmentId |
Compartment ID to target. If a list of hosts is provided, all hosts must be in this compartment. | string |
Yes | - | - |
Status¶
HostScanTargetStatus defines the observed state of HostScanTarget.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
compartmentId |
Compartment ID of the object (this). | string |
No | - | - |
definedTags |
Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace": {"bar-key": "value"}} |
map[string, map[string, string]] |
No | - | - |
description |
Target description. | string |
No | - | - |
displayName |
Target identifier, which can be renamed. | string |
No | - | - |
freeformTags |
Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"} |
map[string, string] |
No | - | - |
hostScanRecipeId |
ID of the host scan recipe this target applies. | string |
No | - | - |
id |
Unique identifier of the config that is immutable on creation | string |
No | - | - |
instanceIds |
List of compute instance IDs to target (optional). If empty, targets the entire targetCompartmentId. | list[string] |
No | - | - |
lifecycleState |
The current state of the config. | string |
No | - | - |
status |
- | object |
Yes | - | - |
systemTags |
Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud": {"free-tier-retained": "true"}} |
map[string, map[string, string]] |
No | - | - |
targetCompartmentId |
Compartment ID to target. If a list of hosts is provided, all hosts must be in this compartment. | string |
No | - | - |
timeCreated |
Date and time the target was created, format as described in RFC 3339 (https://tools.ietf.org/rfc/rfc3339) | string |
No | - | - |
timeUpdated |
Date and time the target was last updated, format as described in RFC 3339 (https://tools.ietf.org/rfc/rfc3339) | string |
No | - | - |
Status.status¶
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
async |
Async is the canonical controller-owned async contract. Resource-local legacy work-request fields may remain as compatibility mirrors while follow-on migrations land, but new async state should project here first. | object |
No | - | - |
conditions |
- | list[object] |
No | - | - |
createdAt |
- | string (date-time) |
No | - | - |
deletedAt |
- | string (date-time) |
No | - | - |
message |
- | string |
No | - | - |
ocid |
- | string |
No | - | - |
opcRequestId |
OpcRequestID is the latest non-empty OCI request ID from a mutating OCI response or surfaced OCI service error that materially contributed to the current shared status projection. Headerless follow-up observations keep the last non-empty value intact. | string |
No | - | - |
reason |
- | string |
No | - | - |
requestedAt |
- | string (date-time) |
No | - | - |
updatedAt |
- | string (date-time) |
No | - | - |
Status.status.async¶
Async is the canonical controller-owned async contract. Resource-local legacy work-request fields may remain as compatibility mirrors while follow-on migrations land, but new async state should project here first.
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
current |
- | object |
No | - | - |
Status.status.async.current¶
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
message |
- | string |
No | - | - |
normalizedClass |
- | string |
Yes | - | attention, canceled, failed, pending, succeeded, unknown |
percentComplete |
- | number |
No | - | - |
phase |
- | string |
Yes | - | create, delete, update |
rawOperationType |
- | string |
No | - | - |
rawStatus |
- | string |
No | - | - |
source |
- | string |
Yes | - | lifecycle, none, workrequest |
updatedAt |
- | string (date-time) |
Yes | - | - |
workRequestId |
- | string |
No | - | - |
Status.status.conditions[]¶
| Field | Description | Type | Required | Default | Enum |
|---|---|---|---|---|---|
lastTransitionTime |
- | string (date-time) |
No | - | - |
message |
- | string |
No | - | - |
reason |
- | string |
No | - | - |
status |
- | string |
Yes | - | - |
type |
- | string |
Yes | - | - |