ProviderTokenExchangeScopePermission

identityprovider.keycloak.m.crossplane.io / v1alpha1

apiVersion: identityprovider.keycloak.m.crossplane.io/v1alpha1 kind: ProviderTokenExchangeScopePermission metadata: name: example

apiVersion string

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

kind string

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

metadata object

spec object required

ProviderTokenExchangeScopePermissionSpec defines the desired state of ProviderTokenExchangeScopePermission

forProvider object required

clients []string

A list of IDs of the clients for which a policy will be created and set on scope based token exchange permission. Ids of the clients for which a policy will be created and set on scope based token exchange permission

clientsRefs []object

References to Client in openidclient to populate clients.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

Resolution specifies whether resolution of this reference is required. The default is 'Required', which means the reconcile will fail if the reference cannot be resolved. 'Optional' means this reference will be a no-op if it cannot be resolved.

enum: Required, Optional

resolve string

Resolve specifies when this reference should be resolved. The default is 'IfNotPresent', which will attempt to resolve the reference only when the corresponding field is not present. Use 'Always' to resolve the reference on every reconcile.

enum: Always, IfNotPresent

clientsSelector object

Selector for a list of Client in openidclient to populate clients.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

facebookProviderAlias string

Alias of the identity provider.

facebookProviderAliasRef object

Reference to a FacebookIdentityProvider in oidc to populate facebookProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

facebookProviderAliasSelector object

Selector for a FacebookIdentityProvider in oidc to populate facebookProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

githubProviderAlias string

Alias of the identity provider.

githubProviderAliasRef object

Reference to a GithubIdentityProvider in oidc to populate githubProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

githubProviderAliasSelector object

Selector for a GithubIdentityProvider in oidc to populate githubProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

googleProviderAlias string

Alias of the identity provider.

googleProviderAliasRef object

Reference to a GoogleIdentityProvider in oidc to populate googleProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

googleProviderAliasSelector object

Selector for a GoogleIdentityProvider in oidc to populate googleProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

kubernetesProviderAlias string

Alias of the identity provider.

kubernetesProviderAliasRef object

Reference to a KubernetesIdentityProvider in identityprovider to populate kubernetesProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

kubernetesProviderAliasSelector object

Selector for a KubernetesIdentityProvider in identityprovider to populate kubernetesProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

microsoftProviderAlias string

Alias of the identity provider.

microsoftProviderAliasRef object

Reference to a MicrosoftIdentityProvider in oidc to populate microsoftProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

microsoftProviderAliasSelector object

Selector for a MicrosoftIdentityProvider in oidc to populate microsoftProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

openshiftV4ProviderAlias string

Alias of the identity provider.

openshiftV4ProviderAliasRef object

Reference to a OidcOpenShiftV4IdentityProvider in identityprovider to populate openshiftV4ProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

openshiftV4ProviderAliasSelector object

Selector for a OidcOpenShiftV4IdentityProvider in identityprovider to populate openshiftV4ProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

policyType string

Defaults to "client" This is also the only value policy type supported by this provider. Type of policy that is created. At the moment only 'client' type is supported

providerAlias string

Alias of the identity provider.

providerAliasRef object

Reference to a IdentityProvider in oidc to populate providerAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

providerAliasSelector object

Selector for a IdentityProvider in oidc to populate providerAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

realmId string

The realm that the identity provider exists in.

realmIdRef object

Reference to a Realm in realm to populate realmId.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

realmIdSelector object

Selector for a Realm in realm to populate realmId.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

samlProviderAlias string

Alias of the identity provider.

samlProviderAliasRef object

Reference to a IdentityProvider in saml to populate samlProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

samlProviderAliasSelector object

Selector for a IdentityProvider in saml to populate samlProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

spiffeProviderAlias string

Alias of the identity provider.

spiffeProviderAliasRef object

Reference to a SpiffeIdentityProvider in identityprovider to populate spiffeProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

spiffeProviderAliasSelector object

Selector for a SpiffeIdentityProvider in identityprovider to populate spiffeProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

initProvider object

THIS IS A BETA FIELD. It will be honored unless the Management Policies feature flag is disabled. InitProvider holds the same fields as ForProvider, with the exception of Identifier and other resource reference fields. The fields that are in InitProvider are merged into ForProvider when the resource is created. The same fields are also added to the terraform ignore_changes hook, to avoid updating them after creation. This is useful for fields that are required on creation, but we do not desire to update them after creation, for example because of an external controller is managing them, like an autoscaler.

clients []string

clientsRefs []object

References to Client in openidclient to populate clients.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

clientsSelector object

Selector for a list of Client in openidclient to populate clients.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

facebookProviderAlias string

Alias of the identity provider.

facebookProviderAliasRef object

Reference to a FacebookIdentityProvider in oidc to populate facebookProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

facebookProviderAliasSelector object

Selector for a FacebookIdentityProvider in oidc to populate facebookProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

githubProviderAlias string

Alias of the identity provider.

githubProviderAliasRef object

Reference to a GithubIdentityProvider in oidc to populate githubProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

githubProviderAliasSelector object

Selector for a GithubIdentityProvider in oidc to populate githubProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

googleProviderAlias string

Alias of the identity provider.

googleProviderAliasRef object

Reference to a GoogleIdentityProvider in oidc to populate googleProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

googleProviderAliasSelector object

Selector for a GoogleIdentityProvider in oidc to populate googleProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

kubernetesProviderAlias string

Alias of the identity provider.

kubernetesProviderAliasRef object

Reference to a KubernetesIdentityProvider in identityprovider to populate kubernetesProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

kubernetesProviderAliasSelector object

Selector for a KubernetesIdentityProvider in identityprovider to populate kubernetesProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

microsoftProviderAlias string

Alias of the identity provider.

microsoftProviderAliasRef object

Reference to a MicrosoftIdentityProvider in oidc to populate microsoftProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

microsoftProviderAliasSelector object

Selector for a MicrosoftIdentityProvider in oidc to populate microsoftProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

openshiftV4ProviderAlias string

Alias of the identity provider.

openshiftV4ProviderAliasRef object

Reference to a OidcOpenShiftV4IdentityProvider in identityprovider to populate openshiftV4ProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

openshiftV4ProviderAliasSelector object

Selector for a OidcOpenShiftV4IdentityProvider in identityprovider to populate openshiftV4ProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

policyType string

Defaults to "client" This is also the only value policy type supported by this provider. Type of policy that is created. At the moment only 'client' type is supported

providerAlias string

Alias of the identity provider.

providerAliasRef object

Reference to a IdentityProvider in oidc to populate providerAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

providerAliasSelector object

Selector for a IdentityProvider in oidc to populate providerAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

realmId string

The realm that the identity provider exists in.

realmIdRef object

Reference to a Realm in realm to populate realmId.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

realmIdSelector object

Selector for a Realm in realm to populate realmId.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

samlProviderAlias string

Alias of the identity provider.

samlProviderAliasRef object

Reference to a IdentityProvider in saml to populate samlProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

samlProviderAliasSelector object

Selector for a IdentityProvider in saml to populate samlProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

spiffeProviderAlias string

Alias of the identity provider.

spiffeProviderAliasRef object

Reference to a SpiffeIdentityProvider in identityprovider to populate spiffeProviderAlias.

name string required

Name of the referenced object.

namespace string

Namespace of the referenced object

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

spiffeProviderAliasSelector object

Selector for a SpiffeIdentityProvider in identityprovider to populate spiffeProviderAlias.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

namespace string

Namespace for the selector

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

managementPolicies []string

THIS IS A BETA FIELD. It is on by default but can be opted out through a Crossplane feature flag. ManagementPolicies specify the array of actions Crossplane is allowed to take on the managed and external resources. See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md

providerConfigRef object

ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured.

kind string required

Kind of the referenced object.

name string required

Name of the referenced object.

writeConnectionSecretToRef object

WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource.

name string required

Name of the secret.

status object

ProviderTokenExchangeScopePermissionStatus defines the observed state of ProviderTokenExchangeScopePermission.

atProvider object

authorizationIdpResourceId string

(Computed) Resource ID representing the identity provider, this automatically created by keycloak. Resource id representing the identity provider, this automatically created by keycloak

authorizationResourceServerId string

(Computed) Resource server ID representing the realm management client on which this permission is managed. Resource server id representing the realm management client on which this permission is managed

authorizationTokenExchangeScopePermissionId string

(Computed) Permission ID representing the Permission with scope 'Token Exchange' and the resource 'authorization_idp_resource_id', this automatically created by keycloak, the policy ID will be set on this permission. Permission id representing the Permission with scope 'Token Exchange' and the resource 'authorization_idp_resource_id', this automatically created by keycloak, the policy id will be set on this permission

clients []string

facebookProviderAlias string

Alias of the identity provider.

githubProviderAlias string

Alias of the identity provider.

googleProviderAlias string

Alias of the identity provider.

id string

kubernetesProviderAlias string

Alias of the identity provider.

microsoftProviderAlias string

Alias of the identity provider.

openshiftV4ProviderAlias string

Alias of the identity provider.

policyId string

(Computed) Policy ID that will be set on the scope based token exchange permission automatically created by enabling permissions on the reference identity provider. Policy id that will be set on the scope based token exchange permission automatically created by enabling permissions on the reference identity provider

policyType string

Defaults to "client" This is also the only value policy type supported by this provider. Type of policy that is created. At the moment only 'client' type is supported

providerAlias string

Alias of the identity provider.

realmId string

The realm that the identity provider exists in.

samlProviderAlias string

Alias of the identity provider.

spiffeProviderAlias string

Alias of the identity provider.

conditions []object

Conditions of the resource.

lastTransitionTime string required

LastTransitionTime is the last time this condition transitioned from one status to another.

format: date-time

message string

A Message containing details about this condition's last transition from one status to another, if any.

observedGeneration integer

ObservedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.

format: int64

reason string required

A Reason for this condition's last transition from one status to another.

status string required

Status of this condition; is it currently True, False, or Unknown?

type string required

Type of this condition. At most one of each condition type may apply to a resource at any point in time.

observedGeneration integer

ObservedGeneration is the latest metadata.generation which resulted in either a ready state, or stalled due to error it can not recover from without human intervention.

format: int64

No matches. Try .spec.forProvider for an exact path