AdminPermissions

role.keycloak.crossplane.io / v1alpha1

apiVersion: role.keycloak.crossplane.io/v1alpha1 kind: AdminPermissions metadata: name: example

apiVersion string

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

kind string

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

metadata object

spec object required

AdminPermissionsSpec defines the desired state of AdminPermissions

deletionPolicy string

DeletionPolicy specifies what will happen to the underlying external when this managed resource is deleted - either "Delete" or "Orphan" the external resource. This field is planned to be deprecated in favor of the ManagementPolicies field in a future release. Currently, both could be set independently and non-default values would be honored if the feature flag is enabled. See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223

enum: Orphan, Delete

forProvider object required

aggregatePolicies []string

Set of policy IDs to attach to the permission.

aggregatePoliciesRefs []object

References to ClientAggregatePolicy in openidclient to populate aggregatePolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

Resolution specifies whether resolution of this reference is required. The default is 'Required', which means the reconcile will fail if the reference cannot be resolved. 'Optional' means this reference will be a no-op if it cannot be resolved.

enum: Required, Optional

resolve string

Resolve specifies when this reference should be resolved. The default is 'IfNotPresent', which will attempt to resolve the reference only when the corresponding field is not present. Use 'Always' to resolve the reference on every reconcile.

enum: Always, IfNotPresent

aggregatePoliciesSelector object

Selector for a list of ClientAggregatePolicy in openidclient to populate aggregatePolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

clientPolicies []string

Set of policy IDs to attach to the permission.

clientPoliciesRefs []object

References to ClientClientPolicy in openidclient to populate clientPolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

clientPoliciesSelector object

Selector for a list of ClientClientPolicy in openidclient to populate clientPolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

clientScopePolicies []string

Set of policy IDs to attach to the permission.

clientScopePoliciesRefs []object

References to ClientAuthorizationClientScopePolicy in openidclient to populate clientScopePolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

clientScopePoliciesSelector object

Selector for a list of ClientAuthorizationClientScopePolicy in openidclient to populate clientScopePolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

decisionStrategy string

Decision strategy. One of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. Defaults to UNANIMOUS.

description string

Description of the permission.

groupPolicies []string

Set of policy IDs to attach to the permission.

groupPoliciesRefs []object

References to ClientGroupPolicy in openidclient to populate groupPolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

groupPoliciesSelector object

Selector for a list of ClientGroupPolicy in openidclient to populate groupPolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

jsPolicies []string

Set of policy IDs to attach to the permission.

jsPoliciesRefs []object

References to ClientJsPolicy in openidclient to populate jsPolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

jsPoliciesSelector object

Selector for a list of ClientJsPolicy in openidclient to populate jsPolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

name string

The name of the permission. Must be unique within the admin-permissions resource server. On first apply, if a permission with this name already exists it is adopted; otherwise a new one is created.

policies []string

Set of policy IDs to attach to the permission.

realmId string

The realm in which to manage this permission.

realmIdRef object

Reference to a Realm in realm to populate realmId.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

realmIdSelector object

Selector for a Realm in realm to populate realmId.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

regexPolicies []string

Set of policy IDs to attach to the permission.

regexPoliciesRefs []object

References to ClientRegexPolicy in openidclient to populate regexPolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

regexPoliciesSelector object

Selector for a list of ClientRegexPolicy in openidclient to populate regexPolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

roleIds []string

Set of role UUIDs (keycloak_role.xxx.id) this permission applies to. When omitted or empty, the permission applies to all roles in the realm. Role UUIDs this permission applies to. Leave empty to target all roles in the realm.

roleIdsRefs []object

References to Role in role to populate roleIds.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

roleIdsSelector object

Selector for a list of Role in role to populate roleIds.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

rolePolicies []string

Set of policy IDs to attach to the permission.

rolePoliciesRefs []object

References to ClientRolePolicy in openidclient to populate rolePolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

rolePoliciesSelector object

Selector for a list of ClientRolePolicy in openidclient to populate rolePolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

scopes []string

Set of scopes this permission grants. Valid values: map-role, map-role-client-scope, map-role-composite.

timePolicies []string

Set of policy IDs to attach to the permission.

timePoliciesRefs []object

References to ClientTimePolicy in openidclient to populate timePolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

timePoliciesSelector object

Selector for a list of ClientTimePolicy in openidclient to populate timePolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

userPolicies []string

Set of policy IDs to attach to the permission.

userPoliciesRefs []object

References to ClientUserPolicy in openidclient to populate userPolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

userPoliciesSelector object

Selector for a list of ClientUserPolicy in openidclient to populate userPolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

initProvider object

THIS IS A BETA FIELD. It will be honored unless the Management Policies feature flag is disabled. InitProvider holds the same fields as ForProvider, with the exception of Identifier and other resource reference fields. The fields that are in InitProvider are merged into ForProvider when the resource is created. The same fields are also added to the terraform ignore_changes hook, to avoid updating them after creation. This is useful for fields that are required on creation, but we do not desire to update them after creation, for example because of an external controller is managing them, like an autoscaler.

aggregatePolicies []string

Set of policy IDs to attach to the permission.

aggregatePoliciesRefs []object

References to ClientAggregatePolicy in openidclient to populate aggregatePolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

aggregatePoliciesSelector object

Selector for a list of ClientAggregatePolicy in openidclient to populate aggregatePolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

clientPolicies []string

Set of policy IDs to attach to the permission.

clientPoliciesRefs []object

References to ClientClientPolicy in openidclient to populate clientPolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

clientPoliciesSelector object

Selector for a list of ClientClientPolicy in openidclient to populate clientPolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

clientScopePolicies []string

Set of policy IDs to attach to the permission.

clientScopePoliciesRefs []object

References to ClientAuthorizationClientScopePolicy in openidclient to populate clientScopePolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

clientScopePoliciesSelector object

Selector for a list of ClientAuthorizationClientScopePolicy in openidclient to populate clientScopePolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

decisionStrategy string

Decision strategy. One of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. Defaults to UNANIMOUS.

description string

Description of the permission.

groupPolicies []string

Set of policy IDs to attach to the permission.

groupPoliciesRefs []object

References to ClientGroupPolicy in openidclient to populate groupPolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

groupPoliciesSelector object

Selector for a list of ClientGroupPolicy in openidclient to populate groupPolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

jsPolicies []string

Set of policy IDs to attach to the permission.

jsPoliciesRefs []object

References to ClientJsPolicy in openidclient to populate jsPolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

jsPoliciesSelector object

Selector for a list of ClientJsPolicy in openidclient to populate jsPolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

name string

The name of the permission. Must be unique within the admin-permissions resource server. On first apply, if a permission with this name already exists it is adopted; otherwise a new one is created.

policies []string

Set of policy IDs to attach to the permission.

realmId string

The realm in which to manage this permission.

realmIdRef object

Reference to a Realm in realm to populate realmId.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

realmIdSelector object

Selector for a Realm in realm to populate realmId.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

regexPolicies []string

Set of policy IDs to attach to the permission.

regexPoliciesRefs []object

References to ClientRegexPolicy in openidclient to populate regexPolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

regexPoliciesSelector object

Selector for a list of ClientRegexPolicy in openidclient to populate regexPolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

roleIds []string

roleIdsRefs []object

References to Role in role to populate roleIds.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

roleIdsSelector object

Selector for a list of Role in role to populate roleIds.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

rolePolicies []string

Set of policy IDs to attach to the permission.

rolePoliciesRefs []object

References to ClientRolePolicy in openidclient to populate rolePolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

rolePoliciesSelector object

Selector for a list of ClientRolePolicy in openidclient to populate rolePolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

scopes []string

Set of scopes this permission grants. Valid values: map-role, map-role-client-scope, map-role-composite.

timePolicies []string

Set of policy IDs to attach to the permission.

timePoliciesRefs []object

References to ClientTimePolicy in openidclient to populate timePolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

timePoliciesSelector object

Selector for a list of ClientTimePolicy in openidclient to populate timePolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

userPolicies []string

Set of policy IDs to attach to the permission.

userPoliciesRefs []object

References to ClientUserPolicy in openidclient to populate userPolicies.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

userPoliciesSelector object

Selector for a list of ClientUserPolicy in openidclient to populate userPolicies.

matchControllerRef boolean

MatchControllerRef ensures an object with the same controller reference as the selecting object is selected.

matchLabels object

MatchLabels ensures an object with matching labels is selected.

policy object

Policies for selection.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

managementPolicies []string

THIS IS A BETA FIELD. It is on by default but can be opted out through a Crossplane feature flag. ManagementPolicies specify the array of actions Crossplane is allowed to take on the managed and external resources. This field is planned to replace the DeletionPolicy field in a future release. Currently, both could be set independently and non-default values would be honored if the feature flag is enabled. If both are custom, the DeletionPolicy field will be ignored. See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md

providerConfigRef object

ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured.

name string required

Name of the referenced object.

policy object

Policies for referencing.

resolution string

enum: Required, Optional

resolve string

enum: Always, IfNotPresent

writeConnectionSecretToRef object

WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource.

name string required

Name of the secret.

namespace string required

Namespace of the secret.

status object

AdminPermissionsStatus defines the observed state of AdminPermissions.

atProvider object

aggregatePolicies []string

Set of policy IDs to attach to the permission.

authorizationResourceServerId string

The ID of the admin-permissions client, which acts as the resource server for these permissions. Resource server id of the admin-permissions client on which this permission is managed

clientPolicies []string

Set of policy IDs to attach to the permission.

clientScopePolicies []string

Set of policy IDs to attach to the permission.

decisionStrategy string

Decision strategy. One of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. Defaults to UNANIMOUS.

description string

Description of the permission.

enabled boolean

Always true when the resource exists.

groupPolicies []string

Set of policy IDs to attach to the permission.

id string

jsPolicies []string

Set of policy IDs to attach to the permission.

name string

The name of the permission. Must be unique within the admin-permissions resource server. On first apply, if a permission with this name already exists it is adopted; otherwise a new one is created.

permissionId string

The internal Keycloak UUID of the permission.

policies []string

Set of policy IDs to attach to the permission.

realmId string

The realm in which to manage this permission.

regexPolicies []string

Set of policy IDs to attach to the permission.

roleIds []string

rolePolicies []string

Set of policy IDs to attach to the permission.

scopes []string

Set of scopes this permission grants. Valid values: map-role, map-role-client-scope, map-role-composite.

timePolicies []string

Set of policy IDs to attach to the permission.

userPolicies []string

Set of policy IDs to attach to the permission.

conditions []object

Conditions of the resource.

lastTransitionTime string required

LastTransitionTime is the last time this condition transitioned from one status to another.

format: date-time

message string

A Message containing details about this condition's last transition from one status to another, if any.

observedGeneration integer

ObservedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.

format: int64

reason string required

A Reason for this condition's last transition from one status to another.

status string required

Status of this condition; is it currently True, False, or Unknown?

type string required

Type of this condition. At most one of each condition type may apply to a resource at any point in time.

observedGeneration integer

ObservedGeneration is the latest metadata.generation which resulted in either a ready state, or stalled due to error it can not recover from without human intervention.

format: int64

No matches. Try .spec.deletionPolicy for an exact path