config/crd/bases/v1.edp.epam.com_clusterkeycloakrealms.yaml

---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.15.0
  name: clusterkeycloakrealms.v1.edp.epam.com
spec:
  group: v1.edp.epam.com
  names:
    kind: ClusterKeycloakRealm
    listKind: ClusterKeycloakRealmList
    plural: clusterkeycloakrealms
    singular: clusterkeycloakrealm
  scope: Cluster
  versions:
  - additionalPrinterColumns:
    - description: Keycloak realm is available
      jsonPath: .status.available
      name: Available
      type: boolean
    - description: Keycloak realm name
      jsonPath: .spec.realmName
      name: Realm
      type: boolean
    - description: ClusterKeycloak instance name
      jsonPath: .spec.clusterKeycloakRef
      name: Cluster-Keycloak
      type: boolean
    name: v1alpha1
    schema:
      openAPIV3Schema:
        description: ClusterKeycloakRealm is the Schema for the clusterkeycloakrealms
          API.
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          spec:
            description: ClusterKeycloakRealmSpec defines the desired state of ClusterKeycloakRealm.
            properties:
              authenticationFlows:
                description: AuthenticationFlow is the configuration for authentication
                  flows in the realm.
                nullable: true
                properties:
                  browserFlow:
                    description: BrowserFlow specifies the authentication flow to
                      use for the realm's browser clients.
                    example: browser
                    type: string
                type: object
              browserSecurityHeaders:
                additionalProperties:
                  type: string
                description: BrowserSecurityHeaders is a map of security headers to
                  apply to HTTP responses from the realm's browser clients.
                nullable: true
                type: object
              clusterKeycloakRef:
                description: ClusterKeycloakRef is a name of the ClusterKeycloak instance
                  that owns the realm.
                type: string
              displayHtmlName:
                description: DisplayHTMLName name to render in the UI.
                type: string
              displayName:
                description: DisplayName is the display name of the realm.
                type: string
              frontendUrl:
                description: |-
                  FrontendURL Set the frontend URL for the realm.
                  Use in combination with the default hostname provider to override the base URL for frontend requests for a specific realm.
                type: string
              localization:
                description: Localization is the configuration for localization in
                  the realm.
                nullable: true
                properties:
                  internationalizationEnabled:
                    description: InternationalizationEnabled indicates whether to
                      enable internationalization.
                    nullable: true
                    type: boolean
                type: object
              passwordPolicy:
                description: PasswordPolicies is a list of password policies to apply
                  to the realm.
                items:
                  properties:
                    type:
                      description: Type of password policy.
                      type: string
                    value:
                      description: Value of password policy.
                      type: string
                  required:
                  - type
                  - value
                  type: object
                nullable: true
                type: array
              realmEventConfig:
                description: RealmEventConfig is the configuration for events in the
                  realm.
                nullable: true
                properties:
                  adminEventsDetailsEnabled:
                    description: AdminEventsDetailsEnabled indicates whether to enable
                      detailed admin events.
                    type: boolean
                  adminEventsEnabled:
                    description: AdminEventsEnabled indicates whether to enable admin
                      events.
                    type: boolean
                  enabledEventTypes:
                    description: EnabledEventTypes is a list of event types to enable.
                    items:
                      type: string
                    type: array
                  eventsEnabled:
                    description: EventsEnabled indicates whether to enable events.
                    type: boolean
                  eventsExpiration:
                    description: EventsExpiration is the number of seconds after which
                      events expire.
                    type: integer
                  eventsListeners:
                    description: EventsListeners is a list of event listeners to enable.
                    items:
                      type: string
                    type: array
                type: object
              realmName:
                description: RealmName specifies the name of the realm.
                type: string
              smtp:
                description: Smtp is the configuration for email in the realm.
                nullable: true
                properties:
                  connection:
                    description: Connection specifies the email connection configuration.
                    properties:
                      authentication:
                        description: Authentication specifies the email authentication
                          configuration.
                        properties:
                          password:
                            description: Password specifies login password.
                            properties:
                              configMapKeyRef:
                                description: Selects a key of a ConfigMap.
                                properties:
                                  key:
                                    description: The key to select.
                                    type: string
                                  name:
                                    description: |-
                                      Name of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                      TODO: Add other useful fields. apiVersion, kind, uid?
                                    type: string
                                required:
                                - key
                                type: object
                                x-kubernetes-map-type: atomic
                              secretKeyRef:
                                description: Selects a key of a secret.
                                properties:
                                  key:
                                    description: The key of the secret to select from.
                                    type: string
                                  name:
                                    description: |-
                                      Name of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                      TODO: Add other useful fields. apiVersion, kind, uid?
                                    type: string
                                required:
                                - key
                                type: object
                                x-kubernetes-map-type: atomic
                            type: object
                          username:
                            description: Username specifies login username.
                            properties:
                              configMapKeyRef:
                                description: Selects a key of a ConfigMap.
                                properties:
                                  key:
                                    description: The key to select.
                                    type: string
                                  name:
                                    description: |-
                                      Name of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                      TODO: Add other useful fields. apiVersion, kind, uid?
                                    type: string
                                required:
                                - key
                                type: object
                                x-kubernetes-map-type: atomic
                              secretKeyRef:
                                description: Selects a key of a secret.
                                properties:
                                  key:
                                    description: The key of the secret to select from.
                                    type: string
                                  name:
                                    description: |-
                                      Name of the referent.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                      TODO: Add other useful fields. apiVersion, kind, uid?
                                    type: string
                                required:
                                - key
                                type: object
                                x-kubernetes-map-type: atomic
                              value:
                                description: Directly specifies a value.
                                type: string
                            type: object
                        required:
                        - password
                        - username
                        type: object
                      enableSSL:
                        description: EnableSSL specifies if SSL is enabled.
                        type: boolean
                      enableStartTLS:
                        description: EnableStartTLS specifies if StartTLS is enabled.
                        type: boolean
                      host:
                        description: Host specifies the email server host.
                        type: string
                      port:
                        default: 25
                        description: Port specifies the email server port.
                        type: integer
                    required:
                    - host
                    type: object
                  template:
                    description: Template specifies the email template configuration.
                    properties:
                      envelopeFrom:
                        description: EnvelopeFrom is an email address used for bounces
                          .
                        type: string
                      from:
                        description: From specifies the sender email address.
                        type: string
                      fromDisplayName:
                        description: FromDisplayName specifies the sender display
                          for sender email address.
                        type: string
                      replyTo:
                        description: ReplyTo specifies the reply-to email address.
                        type: string
                      replyToDisplayName:
                        description: ReplyToDisplayName specifies display name for
                          reply-to email address.
                        type: string
                    required:
                    - from
                    type: object
                required:
                - connection
                - template
                type: object
              themes:
                description: Themes is a map of themes to apply to the realm.
                nullable: true
                properties:
                  accountTheme:
                    description: AccountTheme specifies the account theme to use for
                      the realm.
                    nullable: true
                    type: string
                  adminConsoleTheme:
                    description: AdminConsoleTheme specifies the admin console theme
                      to use for the realm.
                    nullable: true
                    type: string
                  emailTheme:
                    description: EmailTheme specifies the email theme to use for the
                      realm.
                    nullable: true
                    type: string
                  loginTheme:
                    description: LoginTheme specifies the login theme to use for the
                      realm.
                    nullable: true
                    type: string
                type: object
              tokenSettings:
                description: TokenSettings is the configuration for tokens in the
                  realm.
                nullable: true
                properties:
                  accessCodeLifespan:
                    default: 60
                    description: |-
                      AccessCodeLifespan specifies max time(in seconds)a client has to finish the access token protocol.
                      This should normally be 1 minute.
                    type: integer
                  accessToken:
                    default: 900
                    description: AccessTokenLifespanForImplicitFlow specifies max
                      time(in seconds) before an access token is expired for implicit
                      flow.
                    type: integer
                  accessTokenLifespan:
                    default: 300
                    description: |-
                      AccessTokenLifespan specifies max time(in seconds) before an access token is expired.
                      This value is recommended to be short relative to the SSO timeout.
                    type: integer
                  actionTokenGeneratedByAdminLifespan:
                    default: 43200
                    description: |-
                      ActionTokenGeneratedByAdminLifespan specifies max time(in seconds) before an action permit sent to a user by administrator is expired.
                      This value is recommended to be long to allow administrators to send e-mails for users that are currently offline.
                      The default timeout can be overridden immediately before issuing the token.
                    type: integer
                  actionTokenGeneratedByUserLifespan:
                    default: 300
                    description: |-
                      AccessCodeLifespanUserAction specifies max time(in seconds) before an action permit sent by a user (such as a forgot password e-mail) is expired.
                      This value is recommended to be short because it's expected that the user would react to self-created action quickly.
                    type: integer
                  defaultSignatureAlgorithm:
                    default: RS256
                    description: DefaultSignatureAlgorithm specifies the default algorithm
                      used to sign tokens for the realm
                    enum:
                    - ES256
                    - ES384
                    - ES512
                    - EdDSA
                    - HS256
                    - HS384
                    - HS512
                    - PS256
                    - PS384
                    - PS512
                    - RS256
                    - RS384
                    - RS512
                    example: RS256
                    type: string
                  refreshTokenMaxReuse:
                    default: 0
                    description: |-
                      RefreshTokenMaxReuse specifies maximum number of times a refresh token can be reused.
                      When a different token is used, revocation is immediate.
                    type: integer
                  revokeRefreshToken:
                    default: false
                    description: |-
                      RevokeRefreshToken if enabled a refresh token can only be used up to 'refreshTokenMaxReuse' and
                      is revoked when a different token is used.
                      Otherwise, refresh tokens are not revoked when used and can be used multiple times.
                    type: boolean
                type: object
              userProfileConfig:
                description: UserProfileConfig is the configuration for user profiles
                  in the realm.
                nullable: true
                properties:
                  attributes:
                    description: Attributes specifies the list of user profile attributes.
                    items:
                      properties:
                        annotations:
                          additionalProperties:
                            type: string
                          description: Annotations specifies the annotations for the
                            attribute.
                          type: object
                        displayName:
                          description: Display name for the attribute.
                          type: string
                        group:
                          description: Group to which the attribute belongs.
                          type: string
                        multivalued:
                          description: |-
                            Multivalued specifies if this attribute supports multiple values.
                            This setting is an indicator and does not enable any validation
                          type: boolean
                        name:
                          description: Name of the user attribute, used to uniquely
                            identify an attribute.
                          type: string
                        permissions:
                          description: Permissions specifies the permissions for the
                            attribute.
                          properties:
                            edit:
                              description: Edit specifies who can edit the attribute.
                              items:
                                type: string
                              type: array
                            view:
                              description: View specifies who can view the attribute.
                              items:
                                type: string
                              type: array
                          type: object
                        required:
                          description: Required indicates that the attribute must
                            be set by users and administrators.
                          properties:
                            roles:
                              description: Roles specifies the roles for whom the
                                attribute is required.
                              items:
                                type: string
                              type: array
                            scopes:
                              description: Scopes specifies the scopes when the attribute
                                is required.
                              items:
                                type: string
                              type: array
                          type: object
                        selector:
                          description: Selector specifies the scopes for which the
                            attribute is available.
                          properties:
                            scopes:
                              description: Scopes specifies the scopes for which the
                                attribute is available.
                              items:
                                type: string
                              type: array
                          type: object
                        validations:
                          additionalProperties:
                            additionalProperties:
                              properties:
                                intVal:
                                  type: integer
                                mapVal:
                                  additionalProperties:
                                    type: string
                                  nullable: true
                                  type: object
                                sliceVal:
                                  items:
                                    type: string
                                  nullable: true
                                  type: array
                                stringVal:
                                  type: string
                              type: object
                            type: object
                          description: Validations specifies the validations for the
                            attribute.
                          type: object
                      required:
                      - name
                      type: object
                    type: array
                  groups:
                    description: Groups specifies the list of user profile groups.
                    items:
                      properties:
                        annotations:
                          additionalProperties:
                            type: string
                          description: |-
                            Annotations specifies the annotations for the group.
                            nullable
                          type: object
                        displayDescription:
                          description: DisplayDescription specifies a user-friendly
                            name for the group that should be used when rendering
                            a group of attributes in user-facing forms.
                          type: string
                        displayHeader:
                          description: DisplayHeader specifies a text that should
                            be used as a header when rendering user-facing forms.
                          type: string
                        name:
                          description: Name is unique name of the group.
                          type: string
                      required:
                      - name
                      type: object
                    type: array
                  unmanagedAttributePolicy:
                    description: |-
                      UnmanagedAttributePolicy are user attributes not explicitly defined in the user profile configuration.
                      Empty value means that unmanaged attributes are disabled.
                      Possible values:
                      ENABLED - unmanaged attributes are allowed.
                      ADMIN_VIEW - unmanaged attributes are read-only and only available through the administration console and API.
                      ADMIN_EDIT - unmanaged attributes can be managed only through the administration console and API.
                    type: string
                type: object
            required:
            - clusterKeycloakRef
            - realmName
            type: object
          status:
            description: ClusterKeycloakRealmStatus defines the observed state of
              ClusterKeycloakRealm.
            properties:
              available:
                type: boolean
              failureCount:
                format: int64
                type: integer
              value:
                type: string
            type: object
        type: object
    served: true
    storage: true
    subresources:
      status: {}