bundle/manifests/v1.edp.epam.com_keycloakclients.yaml [58:336]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                type: object
              authorization:
                description: Authorization is a client authorization configuration.
                nullable: true
                properties:
                  permissions:
                    items:
                      properties:
                        decisionStrategy:
                          default: UNANIMOUS
                          description: DecisionStrategy is a permission decision strategy.
                          enum:
                          - UNANIMOUS
                          - AFFIRMATIVE
                          - CONSENSUS
                          type: string
                        description:
                          description: Description is a permission description.
                          type: string
                        logic:
                          default: POSITIVE
                          description: Logic is a permission logic.
                          enum:
                          - POSITIVE
                          - NEGATIVE
                          type: string
                        name:
                          description: Name is a permission name.
                          type: string
                        policies:
                          description: |-
                            Policies is a list of policies names.
                            Specifies all the policies that must be applied to the scopes defined by this policy or permission.
                          example:
                          - policy1
                          - policy2
                          items:
                            type: string
                          nullable: true
                          type: array
                        resources:
                          description: |-
                            Resources is a list of resources names.
                            Specifies that this permission must be applied to all resource instances of a given type.
                          example:
                          - resource1
                          - resource2
                          items:
                            type: string
                          nullable: true
                          type: array
                        scopes:
                          description: |-
                            Scopes is a list of authorization scopes names.
                            Specifies that this permission must be applied to one or more scopes.
                          example:
                          - scope1
                          - scope2
                          items:
                            type: string
                          nullable: true
                          type: array
                        type:
                          description: Type is a permission type.
                          enum:
                          - resource
                          - scope
                          type: string
                      required:
                      - name
                      - type
                      type: object
                    type: array
                  policies:
                    items:
                      description: Policy represents a client authorization policy.
                      properties:
                        aggregatedPolicy:
                          description: AggregatedPolicy is an aggregated policy settings.
                          properties:
                            policies:
                              description: |-
                                Policies is a list of aggregated policies names.
                                Specifies all the policies that must be applied to the scopes defined by this policy or permission.
                              example:
                                policies:
                                - policy1
                                - policy2
                              items:
                                type: string
                              type: array
                          required:
                          - policies
                          type: object
                        clientPolicy:
                          description: ClientPolicy is a client policy settings.
                          properties:
                            clients:
                              description: Clients is a list of client names. Specifies
                                which client(s) are allowed by this policy.
                              example:
                              - clients1
                              - clients2
                              items:
                                type: string
                              type: array
                          required:
                          - clients
                          type: object
                        decisionStrategy:
                          default: UNANIMOUS
                          description: DecisionStrategy is a policy decision strategy.
                          enum:
                          - UNANIMOUS
                          - AFFIRMATIVE
                          - CONSENSUS
                          type: string
                        description:
                          description: Description is a policy description.
                          type: string
                        groupPolicy:
                          description: GroupPolicy is a group policy settings.
                          properties:
                            groups:
                              description: Groups is a list of group names. Specifies
                                which group(s) are allowed by this policy.
                              example: '{"groups":[{"name":"group1","extendChildren":true},{"name":"group2"}]}'
                              items:
                                description: GroupDefinition represents a group in
                                  a GroupPolicyData.
                                properties:
                                  extendChildren:
                                    description: ExtendChildren is a flag that specifies
                                      whether to extend children.
                                    type: boolean
                                  name:
                                    description: Name is a group name.
                                    example: group1
                                    type: string
                                required:
                                - name
                                type: object
                              type: array
                            groupsClaim:
                              description: |-
                                GroupsClaim is a group claim.
                                If defined, the policy will fetch user's groups from the given claim
                                within an access token or ID token representing the identity asking permissions.
                                If not defined, user's groups are obtained from your realm configuration.
                              type: string
                          type: object
                        logic:
                          default: POSITIVE
                          description: Logic is a policy logic.
                          enum:
                          - POSITIVE
                          - NEGATIVE
                          type: string
                        name:
                          description: Name is a policy name.
                          type: string
                        rolePolicy:
                          description: RolePolicy is a role policy settings.
                          properties:
                            roles:
                              description: Roles is a list of role.
                              example:
                                roles:
                                - name: role1
                                  required: true
                                - name: role2
                              items:
                                description: RoleDefinition represents a role in a
                                  RolePolicyData.
                                properties:
                                  name:
                                    description: Name is a role name.
                                    example: role1
                                    type: string
                                  required:
                                    description: Required is a flag that specifies
                                      whether the role is required.
                                    type: boolean
                                required:
                                - name
                                type: object
                              type: array
                          required:
                          - roles
                          type: object
                        timePolicy:
                          description: ScopePolicy is a scope policy settings.
                          properties:
                            dayMonth:
                              description: |-
                                Day defines the month which the policy MUST be granted.
                                You can also provide a range by filling the dayMonthEnd field.
                                In this case, permission is granted only if current month is between or equal to the two values you provided.
                              example: "1"
                              type: string
                            dayMonthEnd:
                              example: "2"
                              type: string
                            hour:
                              description: |-
                                Hour defines the hour when the policy MUST be granted.
                                You can also provide a range by filling the hourEnd.
                                In this case, permission is granted only if current hour is between or equal to the two values you provided.
                              example: "1"
                              type: string
                            hourEnd:
                              example: "2"
                              type: string
                            minute:
                              description: |-
                                Minute defines the minute when the policy MUST be granted.
                                You can also provide a range by filling the minuteEnd field.
                                In this case, permission is granted only if current minute is between or equal to the two values you provided.
                              example: "1"
                              type: string
                            minuteEnd:
                              example: "2"
                              type: string
                            month:
                              description: |-
                                Month defines the month which the policy MUST be granted.
                                You can also provide a range by filling the monthEnd.
                                In this case, permission is granted only if current month is between or equal to the two values you provided.
                              example: "1"
                              type: string
                            monthEnd:
                              example: "2"
                              type: string
                            notBefore:
                              description: |-
                                NotBefore defines the time before which the policy MUST NOT be granted.
                                Only granted if current date/time is after or equal to this value.
                              example: "2024-03-03 00:00:00"
                              type: string
                            notOnOrAfter:
                              description: |-
                                NotOnOrAfter defines the time after which the policy MUST NOT be granted.
                                Only granted if current date/time is before or equal to this value.
                              example: "2024-04-04 00:00:00"
                              type: string
                          required:
                          - notBefore
                          - notOnOrAfter
                          type: object
                        type:
                          description: Type is a policy type.
                          enum:
                          - aggregate
                          - client
                          - group
                          - role
                          - time
                          - user
                          type: string
                        userPolicy:
                          description: UserPolicy is a user policy settings.
                          properties:
                            users:
                              description: Users is a list of usernames. Specifies
                                which user(s) are allowed by this policy.
                              example:
                              - users1
                              - users2
                              items:
                                type: string
                              type: array
                          required:
                          - users
                          type: object
                      required:
                      - name
                      - type
                      type: object
                    type: array
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



config/crd/bases/v1.edp.epam.com_keycloakclients.yaml [71:349]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                type: object
              authorization:
                description: Authorization is a client authorization configuration.
                nullable: true
                properties:
                  permissions:
                    items:
                      properties:
                        decisionStrategy:
                          default: UNANIMOUS
                          description: DecisionStrategy is a permission decision strategy.
                          enum:
                          - UNANIMOUS
                          - AFFIRMATIVE
                          - CONSENSUS
                          type: string
                        description:
                          description: Description is a permission description.
                          type: string
                        logic:
                          default: POSITIVE
                          description: Logic is a permission logic.
                          enum:
                          - POSITIVE
                          - NEGATIVE
                          type: string
                        name:
                          description: Name is a permission name.
                          type: string
                        policies:
                          description: |-
                            Policies is a list of policies names.
                            Specifies all the policies that must be applied to the scopes defined by this policy or permission.
                          example:
                          - policy1
                          - policy2
                          items:
                            type: string
                          nullable: true
                          type: array
                        resources:
                          description: |-
                            Resources is a list of resources names.
                            Specifies that this permission must be applied to all resource instances of a given type.
                          example:
                          - resource1
                          - resource2
                          items:
                            type: string
                          nullable: true
                          type: array
                        scopes:
                          description: |-
                            Scopes is a list of authorization scopes names.
                            Specifies that this permission must be applied to one or more scopes.
                          example:
                          - scope1
                          - scope2
                          items:
                            type: string
                          nullable: true
                          type: array
                        type:
                          description: Type is a permission type.
                          enum:
                          - resource
                          - scope
                          type: string
                      required:
                      - name
                      - type
                      type: object
                    type: array
                  policies:
                    items:
                      description: Policy represents a client authorization policy.
                      properties:
                        aggregatedPolicy:
                          description: AggregatedPolicy is an aggregated policy settings.
                          properties:
                            policies:
                              description: |-
                                Policies is a list of aggregated policies names.
                                Specifies all the policies that must be applied to the scopes defined by this policy or permission.
                              example:
                                policies:
                                - policy1
                                - policy2
                              items:
                                type: string
                              type: array
                          required:
                          - policies
                          type: object
                        clientPolicy:
                          description: ClientPolicy is a client policy settings.
                          properties:
                            clients:
                              description: Clients is a list of client names. Specifies
                                which client(s) are allowed by this policy.
                              example:
                              - clients1
                              - clients2
                              items:
                                type: string
                              type: array
                          required:
                          - clients
                          type: object
                        decisionStrategy:
                          default: UNANIMOUS
                          description: DecisionStrategy is a policy decision strategy.
                          enum:
                          - UNANIMOUS
                          - AFFIRMATIVE
                          - CONSENSUS
                          type: string
                        description:
                          description: Description is a policy description.
                          type: string
                        groupPolicy:
                          description: GroupPolicy is a group policy settings.
                          properties:
                            groups:
                              description: Groups is a list of group names. Specifies
                                which group(s) are allowed by this policy.
                              example: '{"groups":[{"name":"group1","extendChildren":true},{"name":"group2"}]}'
                              items:
                                description: GroupDefinition represents a group in
                                  a GroupPolicyData.
                                properties:
                                  extendChildren:
                                    description: ExtendChildren is a flag that specifies
                                      whether to extend children.
                                    type: boolean
                                  name:
                                    description: Name is a group name.
                                    example: group1
                                    type: string
                                required:
                                - name
                                type: object
                              type: array
                            groupsClaim:
                              description: |-
                                GroupsClaim is a group claim.
                                If defined, the policy will fetch user's groups from the given claim
                                within an access token or ID token representing the identity asking permissions.
                                If not defined, user's groups are obtained from your realm configuration.
                              type: string
                          type: object
                        logic:
                          default: POSITIVE
                          description: Logic is a policy logic.
                          enum:
                          - POSITIVE
                          - NEGATIVE
                          type: string
                        name:
                          description: Name is a policy name.
                          type: string
                        rolePolicy:
                          description: RolePolicy is a role policy settings.
                          properties:
                            roles:
                              description: Roles is a list of role.
                              example:
                                roles:
                                - name: role1
                                  required: true
                                - name: role2
                              items:
                                description: RoleDefinition represents a role in a
                                  RolePolicyData.
                                properties:
                                  name:
                                    description: Name is a role name.
                                    example: role1
                                    type: string
                                  required:
                                    description: Required is a flag that specifies
                                      whether the role is required.
                                    type: boolean
                                required:
                                - name
                                type: object
                              type: array
                          required:
                          - roles
                          type: object
                        timePolicy:
                          description: ScopePolicy is a scope policy settings.
                          properties:
                            dayMonth:
                              description: |-
                                Day defines the month which the policy MUST be granted.
                                You can also provide a range by filling the dayMonthEnd field.
                                In this case, permission is granted only if current month is between or equal to the two values you provided.
                              example: "1"
                              type: string
                            dayMonthEnd:
                              example: "2"
                              type: string
                            hour:
                              description: |-
                                Hour defines the hour when the policy MUST be granted.
                                You can also provide a range by filling the hourEnd.
                                In this case, permission is granted only if current hour is between or equal to the two values you provided.
                              example: "1"
                              type: string
                            hourEnd:
                              example: "2"
                              type: string
                            minute:
                              description: |-
                                Minute defines the minute when the policy MUST be granted.
                                You can also provide a range by filling the minuteEnd field.
                                In this case, permission is granted only if current minute is between or equal to the two values you provided.
                              example: "1"
                              type: string
                            minuteEnd:
                              example: "2"
                              type: string
                            month:
                              description: |-
                                Month defines the month which the policy MUST be granted.
                                You can also provide a range by filling the monthEnd.
                                In this case, permission is granted only if current month is between or equal to the two values you provided.
                              example: "1"
                              type: string
                            monthEnd:
                              example: "2"
                              type: string
                            notBefore:
                              description: |-
                                NotBefore defines the time before which the policy MUST NOT be granted.
                                Only granted if current date/time is after or equal to this value.
                              example: "2024-03-03 00:00:00"
                              type: string
                            notOnOrAfter:
                              description: |-
                                NotOnOrAfter defines the time after which the policy MUST NOT be granted.
                                Only granted if current date/time is before or equal to this value.
                              example: "2024-04-04 00:00:00"
                              type: string
                          required:
                          - notBefore
                          - notOnOrAfter
                          type: object
                        type:
                          description: Type is a policy type.
                          enum:
                          - aggregate
                          - client
                          - group
                          - role
                          - time
                          - user
                          type: string
                        userPolicy:
                          description: UserPolicy is a user policy settings.
                          properties:
                            users:
                              description: Users is a list of usernames. Specifies
                                which user(s) are allowed by this policy.
                              example:
                              - users1
                              - users2
                              items:
                                type: string
                              type: array
                          required:
                          - users
                          type: object
                      required:
                      - name
                      - type
                      type: object
                    type: array
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



