diff --git a/crossplane_provider_keycloak/cluster/client/v1alpha1/client_keycloak_crossplane_io_v1alpha1_generic_client_protocol_mapper.k b/crossplane_provider_keycloak/cluster/client/v1alpha1/client_keycloak_crossplane_io_v1alpha1_generic_client_protocol_mapper.k new file mode 100644 index 00000000..f6358939 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/client/v1alpha1/client_keycloak_crossplane_io_v1alpha1_generic_client_protocol_mapper.k @@ -0,0 +1,1353 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema GenericClientProtocolMapper: + r""" + GenericClientProtocolMapper is the Schema for the GenericClientProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "client.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "GenericClientProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpec, default is Undefined, required + spec + status : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "client.keycloak.crossplane.io/v1alpha1" = "client.keycloak.crossplane.io/v1alpha1" + + kind: "GenericClientProtocolMapper" = "GenericClientProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpec + + status?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperStatus + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpec: + r""" + GenericClientProtocolMapperSpec defines the desired state of GenericClientProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProvider + + initProvider?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecWriteConnectionSecretToRef + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProvider: + r""" + client keycloak crossplane io v1alpha1 generic client protocol mapper spec for provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper is attached to. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + config : {str:str}, default is Undefined, optional + A map with key / value pairs for configuring the protocol mapper. The supported keys depends on the protocol mapper. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + $protocol : str, default is Undefined, optional + The type of client (either openid-connect or saml). The type must match the type of the client. + The protocol of the client (openid-connect / saml). + protocolMapper : str, default is Undefined, optional + The name of the protocol mapper. The protocol mapper must be compatible with the specified client. + The type of the protocol mapper. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + samlClientId : str, default is Undefined, optional + The client this protocol mapper is attached to. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + samlClientIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDRef, default is Undefined, optional + saml client Id ref + samlClientIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDSelector, default is Undefined, optional + saml client Id selector + samlClientScopeId : str, default is Undefined, optional + The mapper's associated client scope. Cannot be used at the same time as client_id. + samlClientScopeIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDRef, default is Undefined, optional + saml client scope Id ref + samlClientScopeIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDSelector, default is Undefined, optional + saml client scope Id selector + """ + + + clientId?: str + + clientIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDSelector + + config?: {str:str} + + name?: str + + $protocol?: str + + protocolMapper?: str + + realmId?: str + + realmIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDSelector + + samlClientId?: str + + samlClientIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDRef + + samlClientIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDSelector + + samlClientScopeId?: str + + samlClientScopeIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDRef + + samlClientScopeIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDSelector + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDRef: + r""" + Reference to a Client in samlclient to populate samlClientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDSelector: + r""" + Selector for a Client in samlclient to populate samlClientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper is attached to. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + config : {str:str}, default is Undefined, optional + A map with key / value pairs for configuring the protocol mapper. The supported keys depends on the protocol mapper. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + $protocol : str, default is Undefined, optional + The type of client (either openid-connect or saml). The type must match the type of the client. + The protocol of the client (openid-connect / saml). + protocolMapper : str, default is Undefined, optional + The name of the protocol mapper. The protocol mapper must be compatible with the specified client. + The type of the protocol mapper. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + samlClientId : str, default is Undefined, optional + The client this protocol mapper is attached to. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + samlClientIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDRef, default is Undefined, optional + saml client Id ref + samlClientIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDSelector, default is Undefined, optional + saml client Id selector + samlClientScopeId : str, default is Undefined, optional + The mapper's associated client scope. Cannot be used at the same time as client_id. + samlClientScopeIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDRef, default is Undefined, optional + saml client scope Id ref + samlClientScopeIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDSelector, default is Undefined, optional + saml client scope Id selector + """ + + + clientId?: str + + clientIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDSelector + + config?: {str:str} + + name?: str + + $protocol?: str + + protocolMapper?: str + + realmId?: str + + realmIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDSelector + + samlClientId?: str + + samlClientIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDRef + + samlClientIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDSelector + + samlClientScopeId?: str + + samlClientScopeIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDRef + + samlClientScopeIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDSelector + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDRef: + r""" + Reference to a Client in samlclient to populate samlClientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDSelector: + r""" + Selector for a Client in samlclient to populate samlClientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecProviderConfigRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperStatus: + r""" + GenericClientProtocolMapperStatus defines the observed state of GenericClientProtocolMapper. + + Attributes + ---------- + atProvider : ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperStatusAtProvider + + conditions?: [ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperStatusAtProvider: + r""" + client keycloak crossplane io v1alpha1 generic client protocol mapper status at provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper is attached to. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The mapper's associated client scope. Cannot be used at the same time as client_id. + config : {str:str}, default is Undefined, optional + A map with key / value pairs for configuring the protocol mapper. The supported keys depends on the protocol mapper. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + $protocol : str, default is Undefined, optional + The type of client (either openid-connect or saml). The type must match the type of the client. + The protocol of the client (openid-connect / saml). + protocolMapper : str, default is Undefined, optional + The name of the protocol mapper. The protocol mapper must be compatible with the specified client. + The type of the protocol mapper. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + samlClientId : str, default is Undefined, optional + The client this protocol mapper is attached to. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + samlClientScopeId : str, default is Undefined, optional + The mapper's associated client scope. Cannot be used at the same time as client_id. + """ + + + clientId?: str + + clientScopeId?: str + + config?: {str:str} + + id?: str + + name?: str + + $protocol?: str + + protocolMapper?: str + + realmId?: str + + samlClientId?: str + + samlClientScopeId?: str + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/client/v1alpha1/client_keycloak_crossplane_io_v1alpha1_generic_client_role_mapper.k b/crossplane_provider_keycloak/cluster/client/v1alpha1/client_keycloak_crossplane_io_v1alpha1_generic_client_role_mapper.k new file mode 100644 index 00000000..62182bbb --- /dev/null +++ b/crossplane_provider_keycloak/cluster/client/v1alpha1/client_keycloak_crossplane_io_v1alpha1_generic_client_role_mapper.k @@ -0,0 +1,1511 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema GenericClientRoleMapper: + r""" + GenericClientRoleMapper is the Schema for the GenericClientRoleMappers API. + + Attributes + ---------- + apiVersion : str, default is "client.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "GenericClientRoleMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpec, default is Undefined, required + spec + status : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "client.keycloak.crossplane.io/v1alpha1" = "client.keycloak.crossplane.io/v1alpha1" + + kind: "GenericClientRoleMapper" = "GenericClientRoleMapper" + + metadata?: v1.ObjectMeta + + spec: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpec + + status?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperStatus + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpec: + r""" + GenericClientRoleMapperSpec defines the desired state of GenericClientRoleMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProvider, default is Undefined, required + for provider + initProvider : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProvider + + initProvider?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecWriteConnectionSecretToRef + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProvider: + r""" + client keycloak crossplane io v1alpha1 generic client role mapper spec for provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The ID of the client this role mapper should be added to. Conflicts with client_scope_id. This argument is required if client_scope_id is not set. + The destination client of the role. Cannot be used at the same time as client_scope_id. + clientIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The ID of the client scope this role mapper should be added to. Conflicts with client_id. This argument is required if client_id is not set. + The destination client scope of the role. Cannot be used at the same time as client_id. + clientScopeIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + realmId : str, default is Undefined, optional + The realm this role mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + roleId : str, default is Undefined, optional + The ID of the role to be added to this role mapper. + Id of the role to assign + roleIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDRef, default is Undefined, optional + role Id ref + roleIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDSelector, default is Undefined, optional + role Id selector + samlClientId : str, default is Undefined, optional + The ID of the client this role mapper should be added to. Conflicts with client_scope_id. This argument is required if client_scope_id is not set. + The destination client of the role. Cannot be used at the same time as client_scope_id. + samlClientIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDRef, default is Undefined, optional + saml client Id ref + samlClientIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDSelector, default is Undefined, optional + saml client Id selector + samlClientScopeId : str, default is Undefined, optional + The ID of the client scope this role mapper should be added to. Conflicts with client_id. This argument is required if client_id is not set. + The destination client scope of the role. Cannot be used at the same time as client_id. + samlClientScopeIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDRef, default is Undefined, optional + saml client scope Id ref + samlClientScopeIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDSelector, default is Undefined, optional + saml client scope Id selector + """ + + + clientId?: str + + clientIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDRef + + clientIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDSelector + + realmId?: str + + realmIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDRef + + realmIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDSelector + + roleId?: str + + roleIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDRef + + roleIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDSelector + + samlClientId?: str + + samlClientIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDRef + + samlClientIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDSelector + + samlClientScopeId?: str + + samlClientScopeIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDRef + + samlClientScopeIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDSelector + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDRef: + r""" + Reference to a Role in role to populate roleId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDSelector: + r""" + Selector for a Role in role to populate roleId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDRef: + r""" + Reference to a Client in samlclient to populate samlClientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDSelector: + r""" + Selector for a Client in samlclient to populate samlClientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + clientId : str, default is Undefined, optional + The ID of the client this role mapper should be added to. Conflicts with client_scope_id. This argument is required if client_scope_id is not set. + The destination client of the role. Cannot be used at the same time as client_scope_id. + clientIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The ID of the client scope this role mapper should be added to. Conflicts with client_id. This argument is required if client_id is not set. + The destination client scope of the role. Cannot be used at the same time as client_id. + clientScopeIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + realmId : str, default is Undefined, optional + The realm this role mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + roleId : str, default is Undefined, optional + The ID of the role to be added to this role mapper. + Id of the role to assign + roleIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDRef, default is Undefined, optional + role Id ref + roleIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDSelector, default is Undefined, optional + role Id selector + samlClientId : str, default is Undefined, optional + The ID of the client this role mapper should be added to. Conflicts with client_scope_id. This argument is required if client_scope_id is not set. + The destination client of the role. Cannot be used at the same time as client_scope_id. + samlClientIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDRef, default is Undefined, optional + saml client Id ref + samlClientIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDSelector, default is Undefined, optional + saml client Id selector + samlClientScopeId : str, default is Undefined, optional + The ID of the client scope this role mapper should be added to. Conflicts with client_id. This argument is required if client_id is not set. + The destination client scope of the role. Cannot be used at the same time as client_id. + samlClientScopeIdRef : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDRef, default is Undefined, optional + saml client scope Id ref + samlClientScopeIdSelector : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDSelector, default is Undefined, optional + saml client scope Id selector + """ + + + clientId?: str + + clientIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDRef + + clientIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDSelector + + realmId?: str + + realmIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDRef + + realmIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDSelector + + roleId?: str + + roleIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDRef + + roleIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDSelector + + samlClientId?: str + + samlClientIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDRef + + samlClientIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDSelector + + samlClientScopeId?: str + + samlClientScopeIdRef?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDRef + + samlClientScopeIdSelector?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDSelector + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDRef: + r""" + Reference to a Role in role to populate roleId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDSelector: + r""" + Selector for a Role in role to populate roleId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDRef: + r""" + Reference to a Client in samlclient to populate samlClientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDSelector: + r""" + Selector for a Client in samlclient to populate samlClientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDSelectorPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecProviderConfigRefPolicy + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperStatus: + r""" + GenericClientRoleMapperStatus defines the observed state of GenericClientRoleMapper. + + Attributes + ---------- + atProvider : ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperStatusAtProvider + + conditions?: [ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperStatusAtProvider: + r""" + client keycloak crossplane io v1alpha1 generic client role mapper status at provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The ID of the client this role mapper should be added to. Conflicts with client_scope_id. This argument is required if client_scope_id is not set. + The destination client of the role. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The ID of the client scope this role mapper should be added to. Conflicts with client_id. This argument is required if client_id is not set. + The destination client scope of the role. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + realmId : str, default is Undefined, optional + The realm this role mapper exists within. + The realm id where the associated client or client scope exists. + roleId : str, default is Undefined, optional + The ID of the role to be added to this role mapper. + Id of the role to assign + samlClientId : str, default is Undefined, optional + The ID of the client this role mapper should be added to. Conflicts with client_scope_id. This argument is required if client_scope_id is not set. + The destination client of the role. Cannot be used at the same time as client_scope_id. + samlClientScopeId : str, default is Undefined, optional + The ID of the client scope this role mapper should be added to. Conflicts with client_id. This argument is required if client_id is not set. + The destination client scope of the role. Cannot be used at the same time as client_id. + """ + + + clientId?: str + + clientScopeId?: str + + id?: str + + realmId?: str + + roleId?: str + + samlClientId?: str + + samlClientScopeId?: str + + +schema ClientKeycloakCrossplaneIoV1alpha1GenericClientRoleMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/group/v1alpha1/group_keycloak_crossplane_io_v1alpha1_group.k b/crossplane_provider_keycloak/cluster/group/v1alpha1/group_keycloak_crossplane_io_v1alpha1_group.k index 59722aa8..79e347ac 100644 --- a/crossplane_provider_keycloak/cluster/group/v1alpha1/group_keycloak_crossplane_io_v1alpha1_group.k +++ b/crossplane_provider_keycloak/cluster/group/v1alpha1/group_keycloak_crossplane_io_v1alpha1_group.k @@ -96,6 +96,12 @@ schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProvider: description name : str, default is Undefined, optional The name of the group. + organizationId : str, default is Undefined, optional + The organization this group exists in. If omitted, this group will be managed as a realm group. Organization groups require Keycloak 26.6.0 or later. + organizationIdRef : GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector parentId : str, default is Undefined, optional The ID of this group's parent. If omitted, this group will be defined at the root level. parentIdRef : GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderParentIDRef, default is Undefined, optional @@ -117,6 +123,12 @@ schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProvider: name?: str + organizationId?: str + + organizationIdRef?: GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDRef + + organizationIdSelector?: GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDSelector + parentId?: str parentIdRef?: GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderParentIDRef @@ -130,6 +142,95 @@ schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProvider: realmIdSelector?: GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderRealmIDSelector +schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDRefPolicy + + +schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDSelectorPolicy + + +schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecForProviderParentIDRef: r""" Reference to a Group in group to populate parentId. @@ -329,6 +430,12 @@ schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProvider: description name : str, default is Undefined, optional The name of the group. + organizationId : str, default is Undefined, optional + The organization this group exists in. If omitted, this group will be managed as a realm group. Organization groups require Keycloak 26.6.0 or later. + organizationIdRef : GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector parentId : str, default is Undefined, optional The ID of this group's parent. If omitted, this group will be defined at the root level. parentIdRef : GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderParentIDRef, default is Undefined, optional @@ -350,6 +457,12 @@ schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProvider: name?: str + organizationId?: str + + organizationIdRef?: GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDRef + + organizationIdSelector?: GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDSelector + parentId?: str parentIdRef?: GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderParentIDRef @@ -363,6 +476,95 @@ schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProvider: realmIdSelector?: GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderRealmIDSelector +schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDRefPolicy + + +schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDSelectorPolicy + + +schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + schema GroupKeycloakCrossplaneIoV1alpha1GroupSpecInitProviderParentIDRef: r""" Reference to a Group in group to populate parentId. @@ -644,6 +846,8 @@ schema GroupKeycloakCrossplaneIoV1alpha1GroupStatusAtProvider: id name : str, default is Undefined, optional The name of the group. + organizationId : str, default is Undefined, optional + The organization this group exists in. If omitted, this group will be managed as a realm group. Organization groups require Keycloak 26.6.0 or later. parentId : str, default is Undefined, optional The ID of this group's parent. If omitted, this group will be defined at the root level. path : str, default is Undefined, optional @@ -661,6 +865,8 @@ schema GroupKeycloakCrossplaneIoV1alpha1GroupStatusAtProvider: name?: str + organizationId?: str + parentId?: str path?: str diff --git a/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_attribute_identity_provider_mapper.k b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_attribute_identity_provider_mapper.k new file mode 100644 index 00000000..e687677f --- /dev/null +++ b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_attribute_identity_provider_mapper.k @@ -0,0 +1,553 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema AttributeIdentityProviderMapper: + r""" + AttributeIdentityProviderMapper is the Schema for the AttributeIdentityProviderMappers API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "AttributeIdentityProviderMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.crossplane.io/v1alpha1" = "identityprovider.keycloak.crossplane.io/v1alpha1" + + kind: "AttributeIdentityProviderMapper" = "AttributeIdentityProviderMapper" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpec + + status?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatus + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpec: + r""" + AttributeIdentityProviderMapperSpec defines the desired state of AttributeIdentityProviderMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProvider + + initProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 attribute identity provider mapper spec for provider + + Attributes + ---------- + attributeName : str, default is Undefined, optional + The name of the IDP attribute to set. + OIDC Claim + attributeValue : str, default is Undefined, optional + The value to set to the attribute. You can hardcode any value like 'foo'. + User Attribute + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmSelector, default is Undefined, optional + realm selector + userSession : bool, default is Undefined, optional + Is Attribute related to a User Session. + Is Attribute Related To a User Session + """ + + + attributeName?: str + + attributeValue?: str + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmSelector + + userSession?: bool + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + attributeName : str, default is Undefined, optional + The name of the IDP attribute to set. + OIDC Claim + attributeValue : str, default is Undefined, optional + The value to set to the attribute. You can hardcode any value like 'foo'. + User Attribute + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + userSession : bool, default is Undefined, optional + Is Attribute related to a User Session. + Is Attribute Related To a User Session + """ + + + attributeName?: str + + attributeValue?: str + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmSelector + + userSession?: bool + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecProviderConfigRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatus: + r""" + AttributeIdentityProviderMapperStatus defines the observed state of AttributeIdentityProviderMapper. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatusAtProvider + + conditions?: [IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatusAtProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 attribute identity provider mapper status at provider + + Attributes + ---------- + attributeName : str, default is Undefined, optional + The name of the IDP attribute to set. + OIDC Claim + attributeValue : str, default is Undefined, optional + The value to set to the attribute. You can hardcode any value like 'foo'. + User Attribute + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + id : str, default is Undefined, optional + id + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + userSession : bool, default is Undefined, optional + Is Attribute related to a User Session. + Is Attribute Related To a User Session + """ + + + attributeName?: str + + attributeValue?: str + + extraConfig?: {str:str} + + id?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + userSession?: bool + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_group_identity_provider_mapper.k b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_group_identity_provider_mapper.k new file mode 100644 index 00000000..db97863f --- /dev/null +++ b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_group_identity_provider_mapper.k @@ -0,0 +1,523 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema GroupIdentityProviderMapper: + r""" + GroupIdentityProviderMapper is the Schema for the GroupIdentityProviderMappers API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "GroupIdentityProviderMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.crossplane.io/v1alpha1" = "identityprovider.keycloak.crossplane.io/v1alpha1" + + kind: "GroupIdentityProviderMapper" = "GroupIdentityProviderMapper" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpec + + status?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperStatus + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpec: + r""" + GroupIdentityProviderMapperSpec defines the desired state of GroupIdentityProviderMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProvider + + initProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 group identity provider mapper spec for provider + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + group : str, default is Undefined, optional + The name of the group which should be assigned to the users. + Group Name + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmSelector, default is Undefined, optional + realm selector + """ + + + extraConfig?: {str:str} + + group?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmSelector + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + group : str, default is Undefined, optional + The name of the group which should be assigned to the users. + Group Name + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + """ + + + extraConfig?: {str:str} + + group?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmSelector + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecProviderConfigRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperStatus: + r""" + GroupIdentityProviderMapperStatus defines the observed state of GroupIdentityProviderMapper. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperStatusAtProvider + + conditions?: [IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperStatusAtProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 group identity provider mapper status at provider + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + group : str, default is Undefined, optional + The name of the group which should be assigned to the users. + Group Name + id : str, default is Undefined, optional + id + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + """ + + + extraConfig?: {str:str} + + group?: str + + id?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1GroupIdentityProviderMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_importer_identity_provider_mapper.k b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_importer_identity_provider_mapper.k new file mode 100644 index 00000000..246a8826 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_importer_identity_provider_mapper.k @@ -0,0 +1,568 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema ImporterIdentityProviderMapper: + r""" + ImporterIdentityProviderMapper is the Schema for the ImporterIdentityProviderMappers API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "ImporterIdentityProviderMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.crossplane.io/v1alpha1" = "identityprovider.keycloak.crossplane.io/v1alpha1" + + kind: "ImporterIdentityProviderMapper" = "ImporterIdentityProviderMapper" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpec + + status?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatus + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpec: + r""" + ImporterIdentityProviderMapperSpec defines the desired state of ImporterIdentityProviderMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProvider + + initProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 importer identity provider mapper spec for provider + + Attributes + ---------- + attributeFriendlyName : str, default is Undefined, optional + For SAML based providers, this is the friendly name of the attribute to search for in the assertion. Conflicts with attribute_name. + Attribute Friendly Name + attributeName : str, default is Undefined, optional + For SAML based providers, this is the name of the attribute to search for in the assertion. Conflicts with attribute_friendly_name. + Attribute Name + claimName : str, default is Undefined, optional + For OIDC based providers, this is the name of the claim to use. + Claim Name + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmSelector, default is Undefined, optional + realm selector + userAttribute : str, default is Undefined, optional + The user attribute or property name to store the mapped result. + User Attribute + """ + + + attributeFriendlyName?: str + + attributeName?: str + + claimName?: str + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmSelector + + userAttribute?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + attributeFriendlyName : str, default is Undefined, optional + For SAML based providers, this is the friendly name of the attribute to search for in the assertion. Conflicts with attribute_name. + Attribute Friendly Name + attributeName : str, default is Undefined, optional + For SAML based providers, this is the name of the attribute to search for in the assertion. Conflicts with attribute_friendly_name. + Attribute Name + claimName : str, default is Undefined, optional + For OIDC based providers, this is the name of the claim to use. + Claim Name + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + userAttribute : str, default is Undefined, optional + The user attribute or property name to store the mapped result. + User Attribute + """ + + + attributeFriendlyName?: str + + attributeName?: str + + claimName?: str + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmSelector + + userAttribute?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecProviderConfigRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatus: + r""" + ImporterIdentityProviderMapperStatus defines the observed state of ImporterIdentityProviderMapper. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatusAtProvider + + conditions?: [IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatusAtProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 importer identity provider mapper status at provider + + Attributes + ---------- + attributeFriendlyName : str, default is Undefined, optional + For SAML based providers, this is the friendly name of the attribute to search for in the assertion. Conflicts with attribute_name. + Attribute Friendly Name + attributeName : str, default is Undefined, optional + For SAML based providers, this is the name of the attribute to search for in the assertion. Conflicts with attribute_friendly_name. + Attribute Name + claimName : str, default is Undefined, optional + For OIDC based providers, this is the name of the claim to use. + Claim Name + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + id : str, default is Undefined, optional + id + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + userAttribute : str, default is Undefined, optional + The user attribute or property name to store the mapped result. + User Attribute + """ + + + attributeFriendlyName?: str + + attributeName?: str + + claimName?: str + + extraConfig?: {str:str} + + id?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + userAttribute?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_kubernetes_identity_provider.k b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_kubernetes_identity_provider.k new file mode 100644 index 00000000..f62bb01e --- /dev/null +++ b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_kubernetes_identity_provider.k @@ -0,0 +1,1090 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema KubernetesIdentityProvider: + r""" + KubernetesIdentityProvider is the Schema for the KubernetesIdentityProviders API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "KubernetesIdentityProvider", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.crossplane.io/v1alpha1" = "identityprovider.keycloak.crossplane.io/v1alpha1" + + kind: "KubernetesIdentityProvider" = "KubernetesIdentityProvider" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpec + + status?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderStatus + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpec: + r""" + KubernetesIdentityProviderSpec defines the desired state of KubernetesIdentityProvider + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProvider + + initProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 kubernetes identity provider spec for provider + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + displayName : str, default is Undefined, optional + Friendly name for Identity Providers. + enabled : bool, default is Undefined, optional + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + extra config + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + firstBrokerLoginFlowAliasRef : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef, default is Undefined, optional + first broker login flow alias ref + firstBrokerLoginFlowAliasSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector, default is Undefined, optional + first broker login flow alias selector + guiOrder : str, default is Undefined, optional + GUI Order + issuer : str, default is Undefined, optional + The Kubernetes issuer URL of service account tokens. The URL /.well-known/openid-configuration must be available to Keycloak. + The issuer of the Kubernetes service account tokens. Depending your Keycloak Realm "ssl_required" setting, this may need to be an HTTPS URL. + linkOnly : bool, default is Undefined, optional + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + organizationIdRef : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector + postBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + providerId : str, default is Undefined, optional + Provider ID, is always kubernetes. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmSelector, default is Undefined, optional + realm selector + storeToken : bool, default is Undefined, optional + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + Sync Mode + trustEmail : bool, default is Undefined, optional + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + firstBrokerLoginFlowAliasRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef + + firstBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector + + guiOrder?: str + + issuer?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + organizationIdRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDRef + + organizationIdSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDSelector + + postBrokerLoginFlowAlias?: str + + providerId?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmSelector + + storeToken?: bool + + syncMode?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + displayName : str, default is Undefined, optional + Friendly name for Identity Providers. + enabled : bool, default is Undefined, optional + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + extra config + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + firstBrokerLoginFlowAliasRef : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef, default is Undefined, optional + first broker login flow alias ref + firstBrokerLoginFlowAliasSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector, default is Undefined, optional + first broker login flow alias selector + guiOrder : str, default is Undefined, optional + GUI Order + issuer : str, default is Undefined, optional + The Kubernetes issuer URL of service account tokens. The URL /.well-known/openid-configuration must be available to Keycloak. + The issuer of the Kubernetes service account tokens. Depending your Keycloak Realm "ssl_required" setting, this may need to be an HTTPS URL. + linkOnly : bool, default is Undefined, optional + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + organizationIdRef : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector + postBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + providerId : str, default is Undefined, optional + Provider ID, is always kubernetes. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + storeToken : bool, default is Undefined, optional + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + Sync Mode + trustEmail : bool, default is Undefined, optional + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + firstBrokerLoginFlowAliasRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef + + firstBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector + + guiOrder?: str + + issuer?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + organizationIdRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDRef + + organizationIdSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDSelector + + postBrokerLoginFlowAlias?: str + + providerId?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmSelector + + storeToken?: bool + + syncMode?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecProviderConfigRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderStatus: + r""" + KubernetesIdentityProviderStatus defines the observed state of KubernetesIdentityProvider. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderStatusAtProvider + + conditions?: [IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderStatusAtProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 kubernetes identity provider status at provider + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + displayName : str, default is Undefined, optional + Friendly name for Identity Providers. + enabled : bool, default is Undefined, optional + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + extra config + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + guiOrder : str, default is Undefined, optional + GUI Order + hideOnLoginPage : bool, default is Undefined, optional + This is always set to true for Kubernetes identity provider. + id : str, default is Undefined, optional + id + internalId : str, default is Undefined, optional + Internal Identity Provider Id + issuer : str, default is Undefined, optional + The Kubernetes issuer URL of service account tokens. The URL /.well-known/openid-configuration must be available to Keycloak. + The issuer of the Kubernetes service account tokens. Depending your Keycloak Realm "ssl_required" setting, this may need to be an HTTPS URL. + linkOnly : bool, default is Undefined, optional + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + postBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + providerId : str, default is Undefined, optional + Provider ID, is always kubernetes. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + storeToken : bool, default is Undefined, optional + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + Sync Mode + trustEmail : bool, default is Undefined, optional + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + guiOrder?: str + + hideOnLoginPage?: bool + + id?: str + + internalId?: str + + issuer?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + postBrokerLoginFlowAlias?: str + + providerId?: str + + realm?: str + + storeToken?: bool + + syncMode?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1KubernetesIdentityProviderStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_oidc_open_shift_v4_identity_provider.k b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_oidc_open_shift_v4_identity_provider.k new file mode 100644 index 00000000..5a11db8b --- /dev/null +++ b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_oidc_open_shift_v4_identity_provider.k @@ -0,0 +1,1407 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema OidcOpenShiftV4IdentityProvider: + r""" + OidcOpenShiftV4IdentityProvider is the Schema for the OidcOpenShiftV4IdentityProviders API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "OidcOpenShiftV4IdentityProvider", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.crossplane.io/v1alpha1" = "identityprovider.keycloak.crossplane.io/v1alpha1" + + kind: "OidcOpenShiftV4IdentityProvider" = "OidcOpenShiftV4IdentityProvider" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpec + + status?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatus + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpec: + r""" + OidcOpenShiftV4IdentityProviderSpec defines the desired state of OidcOpenShiftV4IdentityProvider + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProvider + + initProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 oidc open shift v4 identity provider spec for provider + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + When true, new users will be able to read stored tokens. This will automatically assign the broker.read-token role. Defaults to false. + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias for the OpenShift v4 identity provider. Defaults to openshift-v4. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. Defaults to openshift-v4 if not set. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + baseUrl : str, default is Undefined, optional + Base URL of the OpenShift 4 cluster, e.g. https://openshift.example.com:8443. + Base URL of the OpenShift 4 cluster, e.g. https://openshift.example.com:8443. + clientId : str, default is Undefined, optional + The client or client identifier registered within the identity provider. + Client ID. + clientSecretSecretRef : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderClientSecretSecretRef, default is Undefined, optional + client secret secret ref + defaultScopes : str, default is Undefined, optional + The scopes to be sent when asking for authorization. Defaults to user:full. + The scopes to be sent when asking for authorization. Defaults to 'user:full'. + displayName : str, default is Undefined, optional + Display name for the OpenShift v4 identity provider in the GUI. + The human-friendly name of the identity provider, used in the log in form. + enabled : bool, default is Undefined, optional + When true, users will be able to log in to this realm using this identity provider. Defaults to true. + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration to this identity provider. Use this attribute at your own risk, as custom attributes may conflict with top-level configuration attributes in future provider updates. + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The authentication flow to use when users log in for the first time through this identity provider. Defaults to first broker login. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + firstBrokerLoginFlowAliasRef : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef, default is Undefined, optional + first broker login flow alias ref + firstBrokerLoginFlowAliasSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector, default is Undefined, optional + first broker login flow alias selector + guiOrder : str, default is Undefined, optional + A number defining the order of this identity provider in the GUI. + GUI Order + hideOnLoginPage : bool, default is Undefined, optional + When true, this identity provider will be hidden on the login page. Defaults to false. + Hide On Login Page. + linkOnly : bool, default is Undefined, optional + When true, users cannot sign-in using this provider, but their existing accounts will be linked when possible. Defaults to false. + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + organizationIdRef : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector + postBrokerLoginFlowAlias : str, default is Undefined, optional + The authentication flow to use after users have successfully logged in, which can be used to perform additional user verification (such as OTP checking). Defaults to an empty string, which means no post login flow will be used. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + postBrokerLoginFlowAliasRef : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasRef, default is Undefined, optional + post broker login flow alias ref + postBrokerLoginFlowAliasSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelector, default is Undefined, optional + post broker login flow alias selector + providerId : str, default is Undefined, optional + The ID of the identity provider to use. Defaults to openshift-v4, which should be used unless you have extended Keycloak and provided your own implementation. + Provider ID; always openshift-v4 unless you have an extended custom implementation. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmSelector, default is Undefined, optional + realm selector + storeToken : bool, default is Undefined, optional + When true, tokens will be stored after authenticating users. Defaults to true. + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + The default sync mode to use for all mappers attached to this identity provider. Can be one of IMPORT, FORCE, or LEGACY. + Sync Mode + trustEmail : bool, default is Undefined, optional + When true, email addresses for users in this provider will automatically be verified regardless of the realm's email verification policy. Defaults to false. + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + baseUrl?: str + + clientId?: str + + clientSecretSecretRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderClientSecretSecretRef + + defaultScopes?: str + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + firstBrokerLoginFlowAliasRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef + + firstBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector + + guiOrder?: str + + hideOnLoginPage?: bool + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + organizationIdRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDRef + + organizationIdSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDSelector + + postBrokerLoginFlowAlias?: str + + postBrokerLoginFlowAliasRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasRef + + postBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelector + + providerId?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmSelector + + storeToken?: bool + + syncMode?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderClientSecretSecretRef: + r""" + The client or client secret registered within the identity provider. This field is able to obtain its value from vault, use $${vault.ID} format. + Client Secret. + + Attributes + ---------- + key : str, default is Undefined, required + The key to select. + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + key: str + + name: str + + namespace: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + When true, new users will be able to read stored tokens. This will automatically assign the broker.read-token role. Defaults to false. + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias for the OpenShift v4 identity provider. Defaults to openshift-v4. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. Defaults to openshift-v4 if not set. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + baseUrl : str, default is Undefined, optional + Base URL of the OpenShift 4 cluster, e.g. https://openshift.example.com:8443. + Base URL of the OpenShift 4 cluster, e.g. https://openshift.example.com:8443. + clientId : str, default is Undefined, optional + The client or client identifier registered within the identity provider. + Client ID. + clientSecretSecretRef : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderClientSecretSecretRef, default is Undefined, required + client secret secret ref + defaultScopes : str, default is Undefined, optional + The scopes to be sent when asking for authorization. Defaults to user:full. + The scopes to be sent when asking for authorization. Defaults to 'user:full'. + displayName : str, default is Undefined, optional + Display name for the OpenShift v4 identity provider in the GUI. + The human-friendly name of the identity provider, used in the log in form. + enabled : bool, default is Undefined, optional + When true, users will be able to log in to this realm using this identity provider. Defaults to true. + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration to this identity provider. Use this attribute at your own risk, as custom attributes may conflict with top-level configuration attributes in future provider updates. + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The authentication flow to use when users log in for the first time through this identity provider. Defaults to first broker login. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + firstBrokerLoginFlowAliasRef : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef, default is Undefined, optional + first broker login flow alias ref + firstBrokerLoginFlowAliasSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector, default is Undefined, optional + first broker login flow alias selector + guiOrder : str, default is Undefined, optional + A number defining the order of this identity provider in the GUI. + GUI Order + hideOnLoginPage : bool, default is Undefined, optional + When true, this identity provider will be hidden on the login page. Defaults to false. + Hide On Login Page. + linkOnly : bool, default is Undefined, optional + When true, users cannot sign-in using this provider, but their existing accounts will be linked when possible. Defaults to false. + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + organizationIdRef : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector + postBrokerLoginFlowAlias : str, default is Undefined, optional + The authentication flow to use after users have successfully logged in, which can be used to perform additional user verification (such as OTP checking). Defaults to an empty string, which means no post login flow will be used. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + postBrokerLoginFlowAliasRef : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRef, default is Undefined, optional + post broker login flow alias ref + postBrokerLoginFlowAliasSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelector, default is Undefined, optional + post broker login flow alias selector + providerId : str, default is Undefined, optional + The ID of the identity provider to use. Defaults to openshift-v4, which should be used unless you have extended Keycloak and provided your own implementation. + Provider ID; always openshift-v4 unless you have an extended custom implementation. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + storeToken : bool, default is Undefined, optional + When true, tokens will be stored after authenticating users. Defaults to true. + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + The default sync mode to use for all mappers attached to this identity provider. Can be one of IMPORT, FORCE, or LEGACY. + Sync Mode + trustEmail : bool, default is Undefined, optional + When true, email addresses for users in this provider will automatically be verified regardless of the realm's email verification policy. Defaults to false. + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + baseUrl?: str + + clientId?: str + + clientSecretSecretRef: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderClientSecretSecretRef + + defaultScopes?: str + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + firstBrokerLoginFlowAliasRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef + + firstBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector + + guiOrder?: str + + hideOnLoginPage?: bool + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + organizationIdRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDRef + + organizationIdSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDSelector + + postBrokerLoginFlowAlias?: str + + postBrokerLoginFlowAliasRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRef + + postBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelector + + providerId?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmSelector + + storeToken?: bool + + syncMode?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderClientSecretSecretRef: + r""" + The client or client secret registered within the identity provider. This field is able to obtain its value from vault, use $${vault.ID} format. + Client Secret. + + Attributes + ---------- + key : str, default is Undefined, required + The key to select. + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + key: str + + name: str + + namespace: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecProviderConfigRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatus: + r""" + OidcOpenShiftV4IdentityProviderStatus defines the observed state of OidcOpenShiftV4IdentityProvider. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatusAtProvider + + conditions?: [IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatusAtProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 oidc open shift v4 identity provider status at provider + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + When true, new users will be able to read stored tokens. This will automatically assign the broker.read-token role. Defaults to false. + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias for the OpenShift v4 identity provider. Defaults to openshift-v4. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. Defaults to openshift-v4 if not set. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + baseUrl : str, default is Undefined, optional + Base URL of the OpenShift 4 cluster, e.g. https://openshift.example.com:8443. + Base URL of the OpenShift 4 cluster, e.g. https://openshift.example.com:8443. + clientId : str, default is Undefined, optional + The client or client identifier registered within the identity provider. + Client ID. + defaultScopes : str, default is Undefined, optional + The scopes to be sent when asking for authorization. Defaults to user:full. + The scopes to be sent when asking for authorization. Defaults to 'user:full'. + displayName : str, default is Undefined, optional + Display name for the OpenShift v4 identity provider in the GUI. + The human-friendly name of the identity provider, used in the log in form. + enabled : bool, default is Undefined, optional + When true, users will be able to log in to this realm using this identity provider. Defaults to true. + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration to this identity provider. Use this attribute at your own risk, as custom attributes may conflict with top-level configuration attributes in future provider updates. + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The authentication flow to use when users log in for the first time through this identity provider. Defaults to first broker login. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + guiOrder : str, default is Undefined, optional + A number defining the order of this identity provider in the GUI. + GUI Order + hideOnLoginPage : bool, default is Undefined, optional + When true, this identity provider will be hidden on the login page. Defaults to false. + Hide On Login Page. + id : str, default is Undefined, optional + id + internalId : str, default is Undefined, optional + (Computed) The unique ID that Keycloak assigns to the identity provider upon creation. + Internal Identity Provider Id + linkOnly : bool, default is Undefined, optional + When true, users cannot sign-in using this provider, but their existing accounts will be linked when possible. Defaults to false. + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + postBrokerLoginFlowAlias : str, default is Undefined, optional + The authentication flow to use after users have successfully logged in, which can be used to perform additional user verification (such as OTP checking). Defaults to an empty string, which means no post login flow will be used. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + providerId : str, default is Undefined, optional + The ID of the identity provider to use. Defaults to openshift-v4, which should be used unless you have extended Keycloak and provided your own implementation. + Provider ID; always openshift-v4 unless you have an extended custom implementation. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + storeToken : bool, default is Undefined, optional + When true, tokens will be stored after authenticating users. Defaults to true. + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + The default sync mode to use for all mappers attached to this identity provider. Can be one of IMPORT, FORCE, or LEGACY. + Sync Mode + trustEmail : bool, default is Undefined, optional + When true, email addresses for users in this provider will automatically be verified regardless of the realm's email verification policy. Defaults to false. + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + baseUrl?: str + + clientId?: str + + defaultScopes?: str + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + guiOrder?: str + + hideOnLoginPage?: bool + + id?: str + + internalId?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + postBrokerLoginFlowAlias?: str + + providerId?: str + + realm?: str + + storeToken?: bool + + syncMode?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_role_identity_provider_mapper.k b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_role_identity_provider_mapper.k new file mode 100644 index 00000000..6446c18e --- /dev/null +++ b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_role_identity_provider_mapper.k @@ -0,0 +1,523 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema RoleIdentityProviderMapper: + r""" + RoleIdentityProviderMapper is the Schema for the RoleIdentityProviderMappers API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "RoleIdentityProviderMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.crossplane.io/v1alpha1" = "identityprovider.keycloak.crossplane.io/v1alpha1" + + kind: "RoleIdentityProviderMapper" = "RoleIdentityProviderMapper" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpec + + status?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperStatus + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpec: + r""" + RoleIdentityProviderMapperSpec defines the desired state of RoleIdentityProviderMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProvider + + initProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 role identity provider mapper spec for provider + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmSelector, default is Undefined, optional + realm selector + role : str, default is Undefined, optional + The name of the role which should be assigned to the users. + Role Name + """ + + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmSelector + + role?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + role : str, default is Undefined, optional + The name of the role which should be assigned to the users. + Role Name + """ + + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmSelector + + role?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecProviderConfigRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperStatus: + r""" + RoleIdentityProviderMapperStatus defines the observed state of RoleIdentityProviderMapper. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperStatusAtProvider + + conditions?: [IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperStatusAtProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 role identity provider mapper status at provider + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + id : str, default is Undefined, optional + id + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + role : str, default is Undefined, optional + The name of the role which should be assigned to the users. + Role Name + """ + + + extraConfig?: {str:str} + + id?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + role?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1RoleIdentityProviderMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_spiffe_identity_provider.k b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_spiffe_identity_provider.k new file mode 100644 index 00000000..0c9352e5 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_spiffe_identity_provider.k @@ -0,0 +1,1299 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema SpiffeIdentityProvider: + r""" + SpiffeIdentityProvider is the Schema for the SpiffeIdentityProviders API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "SpiffeIdentityProvider", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.crossplane.io/v1alpha1" = "identityprovider.keycloak.crossplane.io/v1alpha1" + + kind: "SpiffeIdentityProvider" = "SpiffeIdentityProvider" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpec + + status?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderStatus + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpec: + r""" + SpiffeIdentityProviderSpec defines the desired state of SpiffeIdentityProvider + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProvider + + initProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 spiffe identity provider spec for provider + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + bundleEndpoint : str, default is Undefined, optional + The SPIFFE bundle endpoint or OpenID Connect JWKS endpoint exposing SPIFFE public keys. Depending on your Keycloak Realm ssl_required setting, this may need to be an HTTPS URL. + The SPIFFE bundle endpoint or OpenID Connect JWKS endpoint exposing SPIFFE public keys. Depending on your Keycloak Realm "ssl_required" setting, this may need to be an HTTPS URL. + displayName : str, default is Undefined, optional + Friendly name for Identity Providers. + enabled : bool, default is Undefined, optional + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + extra config + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + firstBrokerLoginFlowAliasRef : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef, default is Undefined, optional + first broker login flow alias ref + firstBrokerLoginFlowAliasSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector, default is Undefined, optional + first broker login flow alias selector + guiOrder : str, default is Undefined, optional + GUI Order + linkOnly : bool, default is Undefined, optional + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + organizationIdRef : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector + postBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + postBrokerLoginFlowAliasRef : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasRef, default is Undefined, optional + post broker login flow alias ref + postBrokerLoginFlowAliasSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelector, default is Undefined, optional + post broker login flow alias selector + providerId : str, default is Undefined, optional + Provider ID, is always spiffe. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmSelector, default is Undefined, optional + realm selector + storeToken : bool, default is Undefined, optional + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + Sync Mode + trustDomain : str, default is Undefined, optional + The SPIFFE trust domain. This must use the spiffe:// scheme. + The SPIFFE trust domain. This must use the spiffe:// scheme. + trustEmail : bool, default is Undefined, optional + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + bundleEndpoint?: str + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + firstBrokerLoginFlowAliasRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef + + firstBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector + + guiOrder?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + organizationIdRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDRef + + organizationIdSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDSelector + + postBrokerLoginFlowAlias?: str + + postBrokerLoginFlowAliasRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasRef + + postBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelector + + providerId?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmSelector + + storeToken?: bool + + syncMode?: str + + trustDomain?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + bundleEndpoint : str, default is Undefined, optional + The SPIFFE bundle endpoint or OpenID Connect JWKS endpoint exposing SPIFFE public keys. Depending on your Keycloak Realm ssl_required setting, this may need to be an HTTPS URL. + The SPIFFE bundle endpoint or OpenID Connect JWKS endpoint exposing SPIFFE public keys. Depending on your Keycloak Realm "ssl_required" setting, this may need to be an HTTPS URL. + displayName : str, default is Undefined, optional + Friendly name for Identity Providers. + enabled : bool, default is Undefined, optional + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + extra config + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + firstBrokerLoginFlowAliasRef : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef, default is Undefined, optional + first broker login flow alias ref + firstBrokerLoginFlowAliasSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector, default is Undefined, optional + first broker login flow alias selector + guiOrder : str, default is Undefined, optional + GUI Order + linkOnly : bool, default is Undefined, optional + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + organizationIdRef : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector + postBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + postBrokerLoginFlowAliasRef : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRef, default is Undefined, optional + post broker login flow alias ref + postBrokerLoginFlowAliasSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelector, default is Undefined, optional + post broker login flow alias selector + providerId : str, default is Undefined, optional + Provider ID, is always spiffe. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + storeToken : bool, default is Undefined, optional + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + Sync Mode + trustDomain : str, default is Undefined, optional + The SPIFFE trust domain. This must use the spiffe:// scheme. + The SPIFFE trust domain. This must use the spiffe:// scheme. + trustEmail : bool, default is Undefined, optional + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + bundleEndpoint?: str + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + firstBrokerLoginFlowAliasRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef + + firstBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector + + guiOrder?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + organizationIdRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDRef + + organizationIdSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDSelector + + postBrokerLoginFlowAlias?: str + + postBrokerLoginFlowAliasRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRef + + postBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelector + + providerId?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmSelector + + storeToken?: bool + + syncMode?: str + + trustDomain?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecProviderConfigRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderStatus: + r""" + SpiffeIdentityProviderStatus defines the observed state of SpiffeIdentityProvider. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderStatusAtProvider + + conditions?: [IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderStatusAtProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 spiffe identity provider status at provider + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + bundleEndpoint : str, default is Undefined, optional + The SPIFFE bundle endpoint or OpenID Connect JWKS endpoint exposing SPIFFE public keys. Depending on your Keycloak Realm ssl_required setting, this may need to be an HTTPS URL. + The SPIFFE bundle endpoint or OpenID Connect JWKS endpoint exposing SPIFFE public keys. Depending on your Keycloak Realm "ssl_required" setting, this may need to be an HTTPS URL. + displayName : str, default is Undefined, optional + Friendly name for Identity Providers. + enabled : bool, default is Undefined, optional + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + extra config + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + guiOrder : str, default is Undefined, optional + GUI Order + hideOnLoginPage : bool, default is Undefined, optional + This is always set to true for SPIFFE identity provider. + id : str, default is Undefined, optional + id + internalId : str, default is Undefined, optional + Internal Identity Provider Id + linkOnly : bool, default is Undefined, optional + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + postBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + providerId : str, default is Undefined, optional + Provider ID, is always spiffe. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + storeToken : bool, default is Undefined, optional + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + Sync Mode + trustDomain : str, default is Undefined, optional + The SPIFFE trust domain. This must use the spiffe:// scheme. + The SPIFFE trust domain. This must use the spiffe:// scheme. + trustEmail : bool, default is Undefined, optional + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + bundleEndpoint?: str + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + guiOrder?: str + + hideOnLoginPage?: bool + + id?: str + + internalId?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + postBrokerLoginFlowAlias?: str + + providerId?: str + + realm?: str + + storeToken?: bool + + syncMode?: str + + trustDomain?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1SpiffeIdentityProviderStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_template_importer_identity_provider_mapper.k b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_template_importer_identity_provider_mapper.k new file mode 100644 index 00000000..ae8ba3b8 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_template_importer_identity_provider_mapper.k @@ -0,0 +1,523 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema TemplateImporterIdentityProviderMapper: + r""" + TemplateImporterIdentityProviderMapper is the Schema for the TemplateImporterIdentityProviderMappers API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "TemplateImporterIdentityProviderMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.crossplane.io/v1alpha1" = "identityprovider.keycloak.crossplane.io/v1alpha1" + + kind: "TemplateImporterIdentityProviderMapper" = "TemplateImporterIdentityProviderMapper" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpec + + status?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatus + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpec: + r""" + TemplateImporterIdentityProviderMapperSpec defines the desired state of TemplateImporterIdentityProviderMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProvider + + initProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 template importer identity provider mapper spec for provider + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmSelector, default is Undefined, optional + realm selector + template : str, default is Undefined, optional + Template to use to format the username to import. Substitutions are enclosed in ${}. For example: '$${ALIAS}.$${CLAIM.sub}'. ALIAS is the provider alias. CLAIM. references an ID or Access token claim. + Username For Template Import + """ + + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmSelector + + template?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + template : str, default is Undefined, optional + Template to use to format the username to import. Substitutions are enclosed in ${}. For example: '$${ALIAS}.$${CLAIM.sub}'. ALIAS is the provider alias. CLAIM. references an ID or Access token claim. + Username For Template Import + """ + + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmSelector + + template?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecProviderConfigRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatus: + r""" + TemplateImporterIdentityProviderMapperStatus defines the observed state of TemplateImporterIdentityProviderMapper. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatusAtProvider + + conditions?: [IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatusAtProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 template importer identity provider mapper status at provider + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + id : str, default is Undefined, optional + id + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + template : str, default is Undefined, optional + Template to use to format the username to import. Substitutions are enclosed in ${}. For example: '$${ALIAS}.$${CLAIM.sub}'. ALIAS is the provider alias. CLAIM. references an ID or Access token claim. + Username For Template Import + """ + + + extraConfig?: {str:str} + + id?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + template?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_to_role_identity_provider_mapper.k b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_to_role_identity_provider_mapper.k new file mode 100644 index 00000000..76695491 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/identityprovider/v1alpha1/identityprovider_keycloak_crossplane_io_v1alpha1_to_role_identity_provider_mapper.k @@ -0,0 +1,598 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema ToRoleIdentityProviderMapper: + r""" + ToRoleIdentityProviderMapper is the Schema for the ToRoleIdentityProviderMappers API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "ToRoleIdentityProviderMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.crossplane.io/v1alpha1" = "identityprovider.keycloak.crossplane.io/v1alpha1" + + kind: "ToRoleIdentityProviderMapper" = "ToRoleIdentityProviderMapper" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpec + + status?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatus + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpec: + r""" + ToRoleIdentityProviderMapperSpec defines the desired state of ToRoleIdentityProviderMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProvider + + initProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 to role identity provider mapper spec for provider + + Attributes + ---------- + attributeFriendlyName : str, default is Undefined, optional + Attribute Friendly Name. Conflicts with attribute_name. + Attribute Friendly Name + attributeName : str, default is Undefined, optional + Attribute Name. + Attribute Name + attributeValue : str, default is Undefined, optional + Attribute Value. + Attribute Value + claimName : str, default is Undefined, optional + OIDC Claim Name + OIDC Claim Name + claimValue : str, default is Undefined, optional + OIDC Claim Value + OIDC Claim Value + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmSelector, default is Undefined, optional + realm selector + role : str, default is Undefined, optional + Role Name. + Role Name + """ + + + attributeFriendlyName?: str + + attributeName?: str + + attributeValue?: str + + claimName?: str + + claimValue?: str + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmSelector + + role?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + attributeFriendlyName : str, default is Undefined, optional + Attribute Friendly Name. Conflicts with attribute_name. + Attribute Friendly Name + attributeName : str, default is Undefined, optional + Attribute Name. + Attribute Name + attributeValue : str, default is Undefined, optional + Attribute Value. + Attribute Value + claimName : str, default is Undefined, optional + OIDC Claim Name + OIDC Claim Name + claimValue : str, default is Undefined, optional + OIDC Claim Value + OIDC Claim Value + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + realmRef : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + role : str, default is Undefined, optional + Role Name. + Role Name + """ + + + attributeFriendlyName?: str + + attributeName?: str + + attributeValue?: str + + claimName?: str + + claimValue?: str + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmSelector + + role?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecProviderConfigRefPolicy + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatus: + r""" + ToRoleIdentityProviderMapperStatus defines the observed state of ToRoleIdentityProviderMapper. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatusAtProvider + + conditions?: [IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatusAtProvider: + r""" + identityprovider keycloak crossplane io v1alpha1 to role identity provider mapper status at provider + + Attributes + ---------- + attributeFriendlyName : str, default is Undefined, optional + Attribute Friendly Name. Conflicts with attribute_name. + Attribute Friendly Name + attributeName : str, default is Undefined, optional + Attribute Name. + Attribute Name + attributeValue : str, default is Undefined, optional + Attribute Value. + Attribute Value + claimName : str, default is Undefined, optional + OIDC Claim Name + OIDC Claim Name + claimValue : str, default is Undefined, optional + OIDC Claim Value + OIDC Claim Value + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + id : str, default is Undefined, optional + id + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + role : str, default is Undefined, optional + Role Name. + Role Name + """ + + + attributeFriendlyName?: str + + attributeName?: str + + attributeValue?: str + + claimName?: str + + claimValue?: str + + extraConfig?: {str:str} + + id?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + role?: str + + +schema IdentityproviderKeycloakCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/ldap/v1alpha1/ldap_keycloak_crossplane_io_v1alpha1_user_model_hardcoded_attribute_mapper.k b/crossplane_provider_keycloak/cluster/ldap/v1alpha1/ldap_keycloak_crossplane_io_v1alpha1_user_model_hardcoded_attribute_mapper.k new file mode 100644 index 00000000..a75cc9c8 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/ldap/v1alpha1/ldap_keycloak_crossplane_io_v1alpha1_user_model_hardcoded_attribute_mapper.k @@ -0,0 +1,720 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema UserModelHardcodedAttributeMapper: + r""" + UserModelHardcodedAttributeMapper is the Schema for the UserModelHardcodedAttributeMappers API. + + Attributes + ---------- + apiVersion : str, default is "ldap.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "UserModelHardcodedAttributeMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpec, default is Undefined, required + spec + status : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "ldap.keycloak.crossplane.io/v1alpha1" = "ldap.keycloak.crossplane.io/v1alpha1" + + kind: "UserModelHardcodedAttributeMapper" = "UserModelHardcodedAttributeMapper" + + metadata?: v1.ObjectMeta + + spec: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpec + + status?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatus + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpec: + r""" + UserModelHardcodedAttributeMapperSpec defines the desired state of UserModelHardcodedAttributeMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProvider, default is Undefined, required + for provider + initProvider : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProvider + + initProvider?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecWriteConnectionSecretToRef + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProvider: + r""" + ldap keycloak crossplane io v1alpha1 user model hardcoded attribute mapper spec for provider + + Attributes + ---------- + attributeName : str, default is Undefined, optional + The name of the user model attribute to set. + Name of the user schema attribute + attributeValue : str, default is Undefined, optional + The value to set to model attribute. You can hardcode any value like 'foo'. + Value of the attribute. You can hardcode any value like 'foo' + ldapUserFederationId : str, default is Undefined, optional + The ID of the LDAP user federation provider to attach this mapper to. + The ldap user federation provider to attach this mapper to. + ldapUserFederationIdRef : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDRef, default is Undefined, optional + ldap user federation Id ref + ldapUserFederationIdSelector : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDSelector, default is Undefined, optional + ldap user federation Id selector + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + Display name of the mapper when displayed in the console. + realmId : str, default is Undefined, optional + The realm that this LDAP mapper will exist in. + The realm in which the ldap user federation provider exists. + realmIdRef : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + attributeName?: str + + attributeValue?: str + + ldapUserFederationId?: str + + ldapUserFederationIdRef?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDRef + + ldapUserFederationIdSelector?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDSelector + + name?: str + + realmId?: str + + realmIdRef?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDRef + + realmIdSelector?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDSelector + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDRef: + r""" + Reference to a UserFederation in ldap to populate ldapUserFederationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDRefPolicy + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDSelector: + r""" + Selector for a UserFederation in ldap to populate ldapUserFederationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDSelectorPolicy + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDRefPolicy + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDSelectorPolicy + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + attributeName : str, default is Undefined, optional + The name of the user model attribute to set. + Name of the user schema attribute + attributeValue : str, default is Undefined, optional + The value to set to model attribute. You can hardcode any value like 'foo'. + Value of the attribute. You can hardcode any value like 'foo' + ldapUserFederationId : str, default is Undefined, optional + The ID of the LDAP user federation provider to attach this mapper to. + The ldap user federation provider to attach this mapper to. + ldapUserFederationIdRef : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDRef, default is Undefined, optional + ldap user federation Id ref + ldapUserFederationIdSelector : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDSelector, default is Undefined, optional + ldap user federation Id selector + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + Display name of the mapper when displayed in the console. + realmId : str, default is Undefined, optional + The realm that this LDAP mapper will exist in. + The realm in which the ldap user federation provider exists. + realmIdRef : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + attributeName?: str + + attributeValue?: str + + ldapUserFederationId?: str + + ldapUserFederationIdRef?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDRef + + ldapUserFederationIdSelector?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDSelector + + name?: str + + realmId?: str + + realmIdRef?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDRef + + realmIdSelector?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDSelector + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDRef: + r""" + Reference to a UserFederation in ldap to populate ldapUserFederationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDRefPolicy + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDSelector: + r""" + Selector for a UserFederation in ldap to populate ldapUserFederationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDSelectorPolicy + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDRefPolicy + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDSelectorPolicy + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecProviderConfigRefPolicy + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatus: + r""" + UserModelHardcodedAttributeMapperStatus defines the observed state of UserModelHardcodedAttributeMapper. + + Attributes + ---------- + atProvider : LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatusAtProvider + + conditions?: [LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatusAtProvider: + r""" + ldap keycloak crossplane io v1alpha1 user model hardcoded attribute mapper status at provider + + Attributes + ---------- + attributeName : str, default is Undefined, optional + The name of the user model attribute to set. + Name of the user schema attribute + attributeValue : str, default is Undefined, optional + The value to set to model attribute. You can hardcode any value like 'foo'. + Value of the attribute. You can hardcode any value like 'foo' + id : str, default is Undefined, optional + id + ldapUserFederationId : str, default is Undefined, optional + The ID of the LDAP user federation provider to attach this mapper to. + The ldap user federation provider to attach this mapper to. + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + Display name of the mapper when displayed in the console. + realmId : str, default is Undefined, optional + The realm that this LDAP mapper will exist in. + The realm in which the ldap user federation provider exists. + """ + + + attributeName?: str + + attributeValue?: str + + id?: str + + ldapUserFederationId?: str + + name?: str + + realmId?: str + + +schema LdapKeycloakCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/oidc/v1alpha1/oidc_keycloak_crossplane_io_v1alpha1_google_identity_provider.k b/crossplane_provider_keycloak/cluster/oidc/v1alpha1/oidc_keycloak_crossplane_io_v1alpha1_google_identity_provider.k index a3e5d4d4..d20e1a00 100644 --- a/crossplane_provider_keycloak/cluster/oidc/v1alpha1/oidc_keycloak_crossplane_io_v1alpha1_google_identity_provider.k +++ b/crossplane_provider_keycloak/cluster/oidc/v1alpha1/oidc_keycloak_crossplane_io_v1alpha1_google_identity_provider.k @@ -138,6 +138,9 @@ schema OidcKeycloakCrossplaneIoV1alpha1GoogleIdentityProviderSpecForProvider: linkOnly : bool, default is Undefined, optional When true, users cannot sign-in using this provider, but their existing accounts will be linked when possible. Defaults to false. If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + loginHint : str, default is Undefined, optional + Pass login_hint to the Google identity provider. Set to "true" to forward the login_hint query parameter from the inbound OIDC request to Google. The underlying Keycloak attribute loginHint is a boolean string, so the value should be "true" or "false". + Pass login_hint to identity provider. Set to "true" to forward the login_hint client note (the underlying loginHint config attribute is a boolean string). orgDomain : str, default is Undefined, optional org domain orgRedirectModeEmailMatches : bool, default is Undefined, optional @@ -215,6 +218,8 @@ schema OidcKeycloakCrossplaneIoV1alpha1GoogleIdentityProviderSpecForProvider: linkOnly?: bool + loginHint?: str + orgDomain?: str orgRedirectModeEmailMatches?: bool @@ -622,6 +627,9 @@ schema OidcKeycloakCrossplaneIoV1alpha1GoogleIdentityProviderSpecInitProvider: linkOnly : bool, default is Undefined, optional When true, users cannot sign-in using this provider, but their existing accounts will be linked when possible. Defaults to false. If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + loginHint : str, default is Undefined, optional + Pass login_hint to the Google identity provider. Set to "true" to forward the login_hint query parameter from the inbound OIDC request to Google. The underlying Keycloak attribute loginHint is a boolean string, so the value should be "true" or "false". + Pass login_hint to identity provider. Set to "true" to forward the login_hint client note (the underlying loginHint config attribute is a boolean string). orgDomain : str, default is Undefined, optional org domain orgRedirectModeEmailMatches : bool, default is Undefined, optional @@ -699,6 +707,8 @@ schema OidcKeycloakCrossplaneIoV1alpha1GoogleIdentityProviderSpecInitProvider: linkOnly?: bool + loginHint?: str + orgDomain?: str orgRedirectModeEmailMatches?: bool @@ -1183,6 +1193,9 @@ schema OidcKeycloakCrossplaneIoV1alpha1GoogleIdentityProviderStatusAtProvider: linkOnly : bool, default is Undefined, optional When true, users cannot sign-in using this provider, but their existing accounts will be linked when possible. Defaults to false. If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + loginHint : str, default is Undefined, optional + Pass login_hint to the Google identity provider. Set to "true" to forward the login_hint query parameter from the inbound OIDC request to Google. The underlying Keycloak attribute loginHint is a boolean string, so the value should be "true" or "false". + Pass login_hint to identity provider. Set to "true" to forward the login_hint client note (the underlying loginHint config attribute is a boolean string). orgDomain : str, default is Undefined, optional org domain orgRedirectModeEmailMatches : bool, default is Undefined, optional @@ -1248,6 +1261,8 @@ schema OidcKeycloakCrossplaneIoV1alpha1GoogleIdentityProviderStatusAtProvider: linkOnly?: bool + loginHint?: str + orgDomain?: str orgRedirectModeEmailMatches?: bool diff --git a/crossplane_provider_keycloak/cluster/openidclient/v1alpha1/openidclient_keycloak_crossplane_io_v1alpha1_client.k b/crossplane_provider_keycloak/cluster/openidclient/v1alpha1/openidclient_keycloak_crossplane_io_v1alpha1_client.k index f0481d9c..7daadae4 100644 --- a/crossplane_provider_keycloak/cluster/openidclient/v1alpha1/openidclient_keycloak_crossplane_io_v1alpha1_client.k +++ b/crossplane_provider_keycloak/cluster/openidclient/v1alpha1/openidclient_keycloak_crossplane_io_v1alpha1_client.k @@ -172,6 +172,10 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientSpecForProvider: The maximum amount of time a client has to finish the device code flow before it expires. oauth2DevicePollingInterval : str, default is Undefined, optional The minimum amount of time in seconds that the client should wait between polling requests to the token endpoint. + oauth2JwtAuthorizationGrantEnabled : bool, default is Undefined, optional + When false, this client will not be able to initiate a login or obtain access tokens. Defaults to true. + oauth2JwtAuthorizationGrantIdp : str, default is Undefined, optional + oauth2 jwt authorization grant idp pkceCodeChallengeMethod : str, default is Undefined, optional The challenge method to use for Proof Key for Code Exchange. Can be either plain or S256 or set to empty value “. realmId : str, default is Undefined, optional @@ -285,6 +289,10 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientSpecForProvider: oauth2DevicePollingInterval?: str + oauth2JwtAuthorizationGrantEnabled?: bool + + oauth2JwtAuthorizationGrantIdp?: str + pkceCodeChallengeMethod?: str realmId?: str @@ -783,6 +791,10 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientSpecInitProvider: The maximum amount of time a client has to finish the device code flow before it expires. oauth2DevicePollingInterval : str, default is Undefined, optional The minimum amount of time in seconds that the client should wait between polling requests to the token endpoint. + oauth2JwtAuthorizationGrantEnabled : bool, default is Undefined, optional + When false, this client will not be able to initiate a login or obtain access tokens. Defaults to true. + oauth2JwtAuthorizationGrantIdp : str, default is Undefined, optional + oauth2 jwt authorization grant idp pkceCodeChallengeMethod : str, default is Undefined, optional The challenge method to use for Proof Key for Code Exchange. Can be either plain or S256 or set to empty value “. realmId : str, default is Undefined, optional @@ -896,6 +908,10 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientSpecInitProvider: oauth2DevicePollingInterval?: str + oauth2JwtAuthorizationGrantEnabled?: bool + + oauth2JwtAuthorizationGrantIdp?: str + pkceCodeChallengeMethod?: str realmId?: str @@ -1472,6 +1488,10 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientStatusAtProvider: The maximum amount of time a client has to finish the device code flow before it expires. oauth2DevicePollingInterval : str, default is Undefined, optional The minimum amount of time in seconds that the client should wait between polling requests to the token endpoint. + oauth2JwtAuthorizationGrantEnabled : bool, default is Undefined, optional + When false, this client will not be able to initiate a login or obtain access tokens. Defaults to true. + oauth2JwtAuthorizationGrantIdp : str, default is Undefined, optional + oauth2 jwt authorization grant idp pkceCodeChallengeMethod : str, default is Undefined, optional The challenge method to use for Proof Key for Code Exchange. Can be either plain or S256 or set to empty value “. realmId : str, default is Undefined, optional @@ -1583,6 +1603,10 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientStatusAtProvider: oauth2DevicePollingInterval?: str + oauth2JwtAuthorizationGrantEnabled?: bool + + oauth2JwtAuthorizationGrantIdp?: str + pkceCodeChallengeMethod?: str realmId?: str diff --git a/crossplane_provider_keycloak/cluster/openidclient/v1alpha1/openidclient_keycloak_crossplane_io_v1alpha1_client_authorization_permission.k b/crossplane_provider_keycloak/cluster/openidclient/v1alpha1/openidclient_keycloak_crossplane_io_v1alpha1_client_authorization_permission.k index 8db07bdd..d42ae69a 100644 --- a/crossplane_provider_keycloak/cluster/openidclient/v1alpha1/openidclient_keycloak_crossplane_io_v1alpha1_client_authorization_permission.k +++ b/crossplane_provider_keycloak/cluster/openidclient/v1alpha1/openidclient_keycloak_crossplane_io_v1alpha1_client_authorization_permission.k @@ -90,10 +90,22 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec Attributes ---------- + clientPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + clientPoliciesRefs : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesRefsItems0], default is Undefined, optional + References to ClientClientPolicy in openidclient to populate clientPolicies. + clientPoliciesSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesSelector, default is Undefined, optional + client policies selector decisionStrategy : str, default is Undefined, optional The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. Defaults to UNANIMOUS. description : str, default is Undefined, optional A description for the authorization permission. + groupPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + groupPoliciesRefs : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesRefsItems0], default is Undefined, optional + References to ClientGroupPolicy in openidclient to populate groupPolicies. + groupPoliciesSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesSelector, default is Undefined, optional + group policies selector name : str, default is Undefined, optional The name of the permission. policies : [str], default is Undefined, optional @@ -104,6 +116,12 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec realm Id ref realmIdSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelector, default is Undefined, optional realm Id selector + regexPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + regexPoliciesRefs : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesRefsItems0], default is Undefined, optional + References to ClientRegexPolicy in openidclient to populate regexPolicies. + regexPoliciesSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesSelector, default is Undefined, optional + regex policies selector resourceServerId : str, default is Undefined, optional The ID of the resource server. resourceServerIdRef : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRef, default is Undefined, optional @@ -114,61 +132,1233 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec When specified, this permission will be evaluated for all instances of a given resource type. Conflicts with resources. resources : [str], default is Undefined, optional A list of resource IDs that this permission must be applied to. Conflicts with resource_type. + resourcesRefs : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesRefsItems0], default is Undefined, optional + References to ClientAuthorizationResource in openidclient to populate resources. + resourcesSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesSelector, default is Undefined, optional + resources selector + rolePolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + rolePoliciesRefs : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesRefsItems0], default is Undefined, optional + References to ClientRolePolicy in openidclient to populate rolePolicies. + rolePoliciesSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesSelector, default is Undefined, optional + role policies selector scopes : [str], default is Undefined, optional A list of scope IDs that this permission must be applied to. $type : str, default is Undefined, optional The type of permission, can be one of resource or scope. + userPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + userPoliciesRefs : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesRefsItems0], default is Undefined, optional + References to ClientUserPolicy in openidclient to populate userPolicies. + userPoliciesSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesSelector, default is Undefined, optional + user policies selector + """ + + + clientPolicies?: [str] + + clientPoliciesRefs?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesRefsItems0] + + clientPoliciesSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesSelector + + decisionStrategy?: str + + description?: str + + groupPolicies?: [str] + + groupPoliciesRefs?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesRefsItems0] + + groupPoliciesSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesSelector + + name?: str + + policies?: [str] + + realmId?: str + + realmIdRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRef + + realmIdSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelector + + regexPolicies?: [str] + + regexPoliciesRefs?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesRefsItems0] + + regexPoliciesSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesSelector + + resourceServerId?: str + + resourceServerIdRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRef + + resourceServerIdSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelector + + resourceType?: str + + resources?: [str] + + resourcesRefs?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesRefsItems0] + + resourcesSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesSelector + + rolePolicies?: [str] + + rolePoliciesRefs?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesRefsItems0] + + rolePoliciesSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesSelector + + scopes?: [str] + + $type?: str + + userPolicies?: [str] + + userPoliciesRefs?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesRefsItems0] + + userPoliciesSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesSelector + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesRefsItems0: + r""" + A Reference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesRefsItems0Policy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesSelector: + r""" + Selector for a list of ClientClientPolicy in openidclient to populate clientPolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesRefsItems0: + r""" + A Reference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesRefsItems0Policy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesSelector: + r""" + Selector for a list of ClientGroupPolicy in openidclient to populate groupPolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRefPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesRefsItems0: + r""" + A Reference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesRefsItems0Policy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesSelector: + r""" + Selector for a list of ClientRegexPolicy in openidclient to populate regexPolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRef: + r""" + Reference to a Client in openidclient to populate resourceServerId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRefPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelector: + r""" + Selector for a Client in openidclient to populate resourceServerId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesRefsItems0: + r""" + A Reference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesRefsItems0Policy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesSelector: + r""" + Selector for a list of ClientAuthorizationResource in openidclient to populate resources. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesRefsItems0: + r""" + A Reference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesRefsItems0Policy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesSelector: + r""" + Selector for a list of ClientRolePolicy in openidclient to populate rolePolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesRefsItems0: + r""" + A Reference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesRefsItems0Policy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesSelector: + r""" + Selector for a list of ClientUserPolicy in openidclient to populate userPolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + clientPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + clientPoliciesRefs : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesRefsItems0], default is Undefined, optional + References to ClientClientPolicy in openidclient to populate clientPolicies. + clientPoliciesSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesSelector, default is Undefined, optional + client policies selector + decisionStrategy : str, default is Undefined, optional + The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. Defaults to UNANIMOUS. + description : str, default is Undefined, optional + A description for the authorization permission. + groupPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + groupPoliciesRefs : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesRefsItems0], default is Undefined, optional + References to ClientGroupPolicy in openidclient to populate groupPolicies. + groupPoliciesSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesSelector, default is Undefined, optional + group policies selector + name : str, default is Undefined, optional + The name of the permission. + policies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + realmId : str, default is Undefined, optional + The realm this group exists in. + realmIdRef : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + regexPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + regexPoliciesRefs : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesRefsItems0], default is Undefined, optional + References to ClientRegexPolicy in openidclient to populate regexPolicies. + regexPoliciesSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesSelector, default is Undefined, optional + regex policies selector + resourceServerId : str, default is Undefined, optional + The ID of the resource server. + resourceServerIdRef : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRef, default is Undefined, optional + resource server Id ref + resourceServerIdSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelector, default is Undefined, optional + resource server Id selector + resourceType : str, default is Undefined, optional + When specified, this permission will be evaluated for all instances of a given resource type. Conflicts with resources. + resources : [str], default is Undefined, optional + A list of resource IDs that this permission must be applied to. Conflicts with resource_type. + resourcesRefs : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesRefsItems0], default is Undefined, optional + References to ClientAuthorizationResource in openidclient to populate resources. + resourcesSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesSelector, default is Undefined, optional + resources selector + rolePolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + rolePoliciesRefs : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesRefsItems0], default is Undefined, optional + References to ClientRolePolicy in openidclient to populate rolePolicies. + rolePoliciesSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesSelector, default is Undefined, optional + role policies selector + scopes : [str], default is Undefined, optional + A list of scope IDs that this permission must be applied to. + $type : str, default is Undefined, optional + The type of permission, can be one of resource or scope. + userPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + userPoliciesRefs : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesRefsItems0], default is Undefined, optional + References to ClientUserPolicy in openidclient to populate userPolicies. + userPoliciesSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesSelector, default is Undefined, optional + user policies selector + """ + + + clientPolicies?: [str] + + clientPoliciesRefs?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesRefsItems0] + + clientPoliciesSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesSelector + + decisionStrategy?: str + + description?: str + + groupPolicies?: [str] + + groupPoliciesRefs?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesRefsItems0] + + groupPoliciesSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesSelector + + name?: str + + policies?: [str] + + realmId?: str + + realmIdRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelector + + regexPolicies?: [str] + + regexPoliciesRefs?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesRefsItems0] + + regexPoliciesSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesSelector + + resourceServerId?: str + + resourceServerIdRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRef + + resourceServerIdSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelector + + resourceType?: str + + resources?: [str] + + resourcesRefs?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesRefsItems0] + + resourcesSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesSelector + + rolePolicies?: [str] + + rolePoliciesRefs?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesRefsItems0] + + rolePoliciesSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesSelector + + scopes?: [str] + + $type?: str + + userPolicies?: [str] + + userPoliciesRefs?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesRefsItems0] + + userPoliciesSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesSelector + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesRefsItems0: + r""" + A Reference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesRefsItems0Policy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesSelector: + r""" + Selector for a list of ClientClientPolicy in openidclient to populate clientPolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesRefsItems0: + r""" + A Reference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesRefsItems0Policy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesSelector: + r""" + Selector for a list of ClientGroupPolicy in openidclient to populate groupPolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy """ - decisionStrategy?: str + name: str - description?: str + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRefPolicy - name?: str - policies?: [str] +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. - realmId?: str + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ - realmIdRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRef - realmIdSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelector + resolution?: "Required" | "Optional" = "Required" - resourceServerId?: str + resolve?: "Always" | "IfNotPresent" - resourceServerIdRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRef - resourceServerIdSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelector +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. - resourceType?: str + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ - resources?: [str] - scopes?: [str] + matchControllerRef?: bool - $type?: str + matchLabels?: {str:str} + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelectorPolicy -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRef: + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelectorPolicy: r""" - Reference to a Realm in realm to populate realmId. + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesRefsItems0: + r""" + A Reference to a named object. Attributes ---------- name : str, default is Undefined, required Name of the referenced object. - policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesRefsItems0Policy, default is Undefined, optional policy """ name: str - policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRefPolicy + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesRefsItems0Policy -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRefPolicy: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesRefsItems0Policy: r""" Policies for referencing. @@ -192,9 +1382,9 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelector: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesSelector: r""" - Selector for a Realm in realm to populate realmId. + Selector for a list of ClientRegexPolicy in openidclient to populate regexPolicies. Attributes ---------- @@ -203,7 +1393,7 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec as the selecting object is selected. matchLabels : {str:str}, default is Undefined, optional MatchLabels ensures an object with matching labels is selected. - policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesSelectorPolicy, default is Undefined, optional policy """ @@ -212,10 +1402,10 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec matchLabels?: {str:str} - policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelectorPolicy + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesSelectorPolicy -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelectorPolicy: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesSelectorPolicy: r""" Policies for selection. @@ -239,7 +1429,7 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRef: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRef: r""" Reference to a Client in openidclient to populate resourceServerId. @@ -247,17 +1437,17 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec ---------- name : str, default is Undefined, required Name of the referenced object. - policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRefPolicy, default is Undefined, optional + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRefPolicy, default is Undefined, optional policy """ name: str - policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRefPolicy + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRefPolicy -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRefPolicy: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRefPolicy: r""" Policies for referencing. @@ -281,7 +1471,7 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelector: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelector: r""" Selector for a Client in openidclient to populate resourceServerId. @@ -292,7 +1482,7 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec as the selecting object is selected. matchLabels : {str:str}, default is Undefined, optional MatchLabels ensures an object with matching labels is selected. - policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelectorPolicy, default is Undefined, optional + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelectorPolicy, default is Undefined, optional policy """ @@ -301,10 +1491,10 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec matchLabels?: {str:str} - policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelectorPolicy + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelectorPolicy -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelectorPolicy: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelectorPolicy: r""" Policies for selection. @@ -328,100 +1518,114 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProvider: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesRefsItems0: r""" - THIS IS A BETA FIELD. It will be honored - unless the Management Policies feature flag is disabled. - InitProvider holds the same fields as ForProvider, with the exception - of Identifier and other resource reference fields. The fields that are - in InitProvider are merged into ForProvider when the resource is created. - The same fields are also added to the terraform ignore_changes hook, to - avoid updating them after creation. This is useful for fields that are - required on creation, but we do not desire to update them after creation, - for example because of an external controller is managing them, like an - autoscaler. + A Reference to a named object. Attributes ---------- - decisionStrategy : str, default is Undefined, optional - The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. Defaults to UNANIMOUS. - description : str, default is Undefined, optional - A description for the authorization permission. - name : str, default is Undefined, optional - The name of the permission. - policies : [str], default is Undefined, optional - A list of policy IDs that must be applied to the scopes defined by this permission. - realmId : str, default is Undefined, optional - The realm this group exists in. - realmIdRef : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRef, default is Undefined, optional - realm Id ref - realmIdSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelector, default is Undefined, optional - realm Id selector - resourceServerId : str, default is Undefined, optional - The ID of the resource server. - resourceServerIdRef : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRef, default is Undefined, optional - resource server Id ref - resourceServerIdSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelector, default is Undefined, optional - resource server Id selector - resourceType : str, default is Undefined, optional - When specified, this permission will be evaluated for all instances of a given resource type. Conflicts with resources. - resources : [str], default is Undefined, optional - A list of resource IDs that this permission must be applied to. Conflicts with resource_type. - scopes : [str], default is Undefined, optional - A list of scope IDs that this permission must be applied to. - $type : str, default is Undefined, optional - The type of permission, can be one of resource or scope. + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesRefsItems0Policy, default is Undefined, optional + policy """ - decisionStrategy?: str + name: str - description?: str + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesRefsItems0Policy - name?: str - policies?: [str] +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesRefsItems0Policy: + r""" + Policies for referencing. - realmId?: str + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ - realmIdRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRef - realmIdSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelector + resolution?: "Required" | "Optional" = "Required" - resourceServerId?: str + resolve?: "Always" | "IfNotPresent" - resourceServerIdRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRef - resourceServerIdSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelector +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesSelector: + r""" + Selector for a list of ClientAuthorizationResource in openidclient to populate resources. - resourceType?: str + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesSelectorPolicy, default is Undefined, optional + policy + """ - resources?: [str] - scopes?: [str] + matchControllerRef?: bool - $type?: str + matchLabels?: {str:str} + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesSelectorPolicy -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRef: + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesSelectorPolicy: r""" - Reference to a Realm in realm to populate realmId. + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesRefsItems0: + r""" + A Reference to a named object. Attributes ---------- name : str, default is Undefined, required Name of the referenced object. - policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesRefsItems0Policy, default is Undefined, optional policy """ name: str - policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRefPolicy + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesRefsItems0Policy -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRefPolicy: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesRefsItems0Policy: r""" Policies for referencing. @@ -445,9 +1649,9 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelector: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesSelector: r""" - Selector for a Realm in realm to populate realmId. + Selector for a list of ClientRolePolicy in openidclient to populate rolePolicies. Attributes ---------- @@ -456,7 +1660,7 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec as the selecting object is selected. matchLabels : {str:str}, default is Undefined, optional MatchLabels ensures an object with matching labels is selected. - policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesSelectorPolicy, default is Undefined, optional policy """ @@ -465,10 +1669,10 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec matchLabels?: {str:str} - policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelectorPolicy + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesSelectorPolicy -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelectorPolicy: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesSelectorPolicy: r""" Policies for selection. @@ -492,25 +1696,25 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRef: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesRefsItems0: r""" - Reference to a Client in openidclient to populate resourceServerId. + A Reference to a named object. Attributes ---------- name : str, default is Undefined, required Name of the referenced object. - policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRefPolicy, default is Undefined, optional + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesRefsItems0Policy, default is Undefined, optional policy """ name: str - policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRefPolicy + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesRefsItems0Policy -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRefPolicy: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesRefsItems0Policy: r""" Policies for referencing. @@ -534,9 +1738,9 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelector: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesSelector: r""" - Selector for a Client in openidclient to populate resourceServerId. + Selector for a list of ClientUserPolicy in openidclient to populate userPolicies. Attributes ---------- @@ -545,7 +1749,7 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec as the selecting object is selected. matchLabels : {str:str}, default is Undefined, optional MatchLabels ensures an object with matching labels is selected. - policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelectorPolicy, default is Undefined, optional + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesSelectorPolicy, default is Undefined, optional policy """ @@ -554,10 +1758,10 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpec matchLabels?: {str:str} - policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelectorPolicy + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesSelectorPolicy -schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelectorPolicy: +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesSelectorPolicy: r""" Policies for selection. @@ -676,10 +1880,14 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionStat Attributes ---------- + clientPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. decisionStrategy : str, default is Undefined, optional The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. Defaults to UNANIMOUS. description : str, default is Undefined, optional A description for the authorization permission. + groupPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. id : str, default is Undefined, optional Permission ID representing the permission. name : str, default is Undefined, optional @@ -688,23 +1896,33 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionStat A list of policy IDs that must be applied to the scopes defined by this permission. realmId : str, default is Undefined, optional The realm this group exists in. + regexPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. resourceServerId : str, default is Undefined, optional The ID of the resource server. resourceType : str, default is Undefined, optional When specified, this permission will be evaluated for all instances of a given resource type. Conflicts with resources. resources : [str], default is Undefined, optional A list of resource IDs that this permission must be applied to. Conflicts with resource_type. + rolePolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. scopes : [str], default is Undefined, optional A list of scope IDs that this permission must be applied to. $type : str, default is Undefined, optional The type of permission, can be one of resource or scope. + userPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. """ + clientPolicies?: [str] + decisionStrategy?: str description?: str + groupPolicies?: [str] + id?: str name?: str @@ -713,16 +1931,22 @@ schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionStat realmId?: str + regexPolicies?: [str] + resourceServerId?: str resourceType?: str resources?: [str] + rolePolicies?: [str] + scopes?: [str] $type?: str + userPolicies?: [str] + schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientAuthorizationPermissionStatusConditionsItems0: r""" diff --git a/crossplane_provider_keycloak/cluster/openidclient/v1alpha1/openidclient_keycloak_crossplane_io_v1alpha1_client_regex_policy.k b/crossplane_provider_keycloak/cluster/openidclient/v1alpha1/openidclient_keycloak_crossplane_io_v1alpha1_client_regex_policy.k new file mode 100644 index 00000000..001fb70c --- /dev/null +++ b/crossplane_provider_keycloak/cluster/openidclient/v1alpha1/openidclient_keycloak_crossplane_io_v1alpha1_client_regex_policy.k @@ -0,0 +1,753 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema ClientRegexPolicy: + r""" + ClientRegexPolicy is the Schema for the ClientRegexPolicys API. + + Attributes + ---------- + apiVersion : str, default is "openidclient.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "ClientRegexPolicy", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpec, default is Undefined, required + spec + status : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicyStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidclient.keycloak.crossplane.io/v1alpha1" = "openidclient.keycloak.crossplane.io/v1alpha1" + + kind: "ClientRegexPolicy" = "ClientRegexPolicy" + + metadata?: v1.ObjectMeta + + spec: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpec + + status?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicyStatus + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpec: + r""" + ClientRegexPolicySpec defines the desired state of ClientRegexPolicy + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProvider, default is Undefined, required + for provider + initProvider : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProvider + + initProvider?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecWriteConnectionSecretToRef + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProvider: + r""" + openidclient keycloak crossplane io v1alpha1 client regex policy spec for provider + + Attributes + ---------- + decisionStrategy : str, default is Undefined, optional + The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. + description : str, default is Undefined, optional + A description for the authorization policy. + logic : str, default is Undefined, optional + The logic, can be one of POSITIVE or NEGATIVE. Defaults to POSITIVE. + name : str, default is Undefined, optional + The name of the policy. + pattern : str, default is Undefined, optional + The Regex pattern. + realmId : str, default is Undefined, optional + The realm this policy exists in. + realmIdRef : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + resourceServerId : str, default is Undefined, optional + The ID of the resource server. + resourceServerIdRef : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDRef, default is Undefined, optional + resource server Id ref + resourceServerIdSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDSelector, default is Undefined, optional + resource server Id selector + targetClaim : str, default is Undefined, optional + The name of the target claim in the token. + targetContextAttributes : bool, default is Undefined, optional + true if policy should be evaluated on context attributes instead of identity attributes. + """ + + + decisionStrategy?: str + + description?: str + + logic?: str + + name?: str + + pattern?: str + + realmId?: str + + realmIdRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDRef + + realmIdSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDSelector + + resourceServerId?: str + + resourceServerIdRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDRef + + resourceServerIdSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDSelector + + targetClaim?: str + + targetContextAttributes?: bool + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDRefPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDRef: + r""" + Reference to a Client in openidclient to populate resourceServerId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDRefPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDSelector: + r""" + Selector for a Client in openidclient to populate resourceServerId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + decisionStrategy : str, default is Undefined, optional + The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. + description : str, default is Undefined, optional + A description for the authorization policy. + logic : str, default is Undefined, optional + The logic, can be one of POSITIVE or NEGATIVE. Defaults to POSITIVE. + name : str, default is Undefined, optional + The name of the policy. + pattern : str, default is Undefined, optional + The Regex pattern. + realmId : str, default is Undefined, optional + The realm this policy exists in. + realmIdRef : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + resourceServerId : str, default is Undefined, optional + The ID of the resource server. + resourceServerIdRef : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDRef, default is Undefined, optional + resource server Id ref + resourceServerIdSelector : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDSelector, default is Undefined, optional + resource server Id selector + targetClaim : str, default is Undefined, optional + The name of the target claim in the token. + targetContextAttributes : bool, default is Undefined, optional + true if policy should be evaluated on context attributes instead of identity attributes. + """ + + + decisionStrategy?: str + + description?: str + + logic?: str + + name?: str + + pattern?: str + + realmId?: str + + realmIdRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDRef + + realmIdSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDSelector + + resourceServerId?: str + + resourceServerIdRef?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDRef + + resourceServerIdSelector?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDSelector + + targetClaim?: str + + targetContextAttributes?: bool + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDRefPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDRef: + r""" + Reference to a Client in openidclient to populate resourceServerId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDRefPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDSelector: + r""" + Selector for a Client in openidclient to populate resourceServerId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDSelectorPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecProviderConfigRefPolicy + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicySpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicyStatus: + r""" + ClientRegexPolicyStatus defines the observed state of ClientRegexPolicy. + + Attributes + ---------- + atProvider : OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicyStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicyStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicyStatusAtProvider + + conditions?: [OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicyStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicyStatusAtProvider: + r""" + openidclient keycloak crossplane io v1alpha1 client regex policy status at provider + + Attributes + ---------- + decisionStrategy : str, default is Undefined, optional + The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. + description : str, default is Undefined, optional + A description for the authorization policy. + id : str, default is Undefined, optional + Policy ID representing the Regex policy. + logic : str, default is Undefined, optional + The logic, can be one of POSITIVE or NEGATIVE. Defaults to POSITIVE. + name : str, default is Undefined, optional + The name of the policy. + pattern : str, default is Undefined, optional + The Regex pattern. + realmId : str, default is Undefined, optional + The realm this policy exists in. + resourceServerId : str, default is Undefined, optional + The ID of the resource server. + targetClaim : str, default is Undefined, optional + The name of the target claim in the token. + targetContextAttributes : bool, default is Undefined, optional + true if policy should be evaluated on context attributes instead of identity attributes. + """ + + + decisionStrategy?: str + + description?: str + + id?: str + + logic?: str + + name?: str + + pattern?: str + + realmId?: str + + resourceServerId?: str + + targetClaim?: str + + targetContextAttributes?: bool + + +schema OpenidclientKeycloakCrossplaneIoV1alpha1ClientRegexPolicyStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_audience_protocol_mapper.k b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_audience_protocol_mapper.k new file mode 100644 index 00000000..057c1ec1 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_audience_protocol_mapper.k @@ -0,0 +1,959 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema AudienceProtocolMapper: + r""" + AudienceProtocolMapper is the Schema for the AudienceProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "AudienceProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.crossplane.io/v1alpha1" = "openidgroup.keycloak.crossplane.io/v1alpha1" + + kind: "AudienceProtocolMapper" = "AudienceProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpec + + status?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperStatus + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpec: + r""" + AudienceProtocolMapperSpec defines the desired state of AudienceProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 audience protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the audience should be included in the aud claim for the id token. Defaults to true. + Indicates if this claim should be added to the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the audience should be included in the aud claim for the id token. Defaults to true. + Indicates if this claim should be added to the id token. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + includedClientAudience : str, default is Undefined, optional + A client ID to include within the token's aud claim. Conflicts with included_custom_audience. One of included_client_audience or included_custom_audience must be specified. + A client ID to include within the token's `aud` claim. Cannot be used with included_custom_audience + includedCustomAudience : str, default is Undefined, optional + A custom audience to include within the token's aud claim. Conflicts with included_client_audience. One of included_client_audience or included_custom_audience must be specified. + A custom audience to include within the token's `aud` claim. Cannot be used with included_custom_audience + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDSelector + + includedClientAudience?: str + + includedCustomAudience?: str + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the audience should be included in the aud claim for the id token. Defaults to true. + Indicates if this claim should be added to the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the audience should be included in the aud claim for the id token. Defaults to true. + Indicates if this claim should be added to the id token. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + includedClientAudience : str, default is Undefined, optional + A client ID to include within the token's aud claim. Conflicts with included_custom_audience. One of included_client_audience or included_custom_audience must be specified. + A client ID to include within the token's `aud` claim. Cannot be used with included_custom_audience + includedCustomAudience : str, default is Undefined, optional + A custom audience to include within the token's aud claim. Conflicts with included_client_audience. One of included_client_audience or included_custom_audience must be specified. + A custom audience to include within the token's `aud` claim. Cannot be used with included_custom_audience + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDSelector + + includedClientAudience?: str + + includedCustomAudience?: str + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecProviderConfigRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperStatus: + r""" + AudienceProtocolMapperStatus defines the observed state of AudienceProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperStatusAtProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 audience protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the audience should be included in the aud claim for the id token. Defaults to true. + Indicates if this claim should be added to the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the audience should be included in the aud claim for the id token. Defaults to true. + Indicates if this claim should be added to the id token. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + includedClientAudience : str, default is Undefined, optional + A client ID to include within the token's aud claim. Conflicts with included_custom_audience. One of included_client_audience or included_custom_audience must be specified. + A client ID to include within the token's `aud` claim. Cannot be used with included_custom_audience + includedCustomAudience : str, default is Undefined, optional + A custom audience to include within the token's aud claim. Conflicts with included_client_audience. One of included_client_audience or included_custom_audience must be specified. + A custom audience to include within the token's `aud` claim. Cannot be used with included_custom_audience + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + clientId?: str + + clientScopeId?: str + + id?: str + + includedClientAudience?: str + + includedCustomAudience?: str + + name?: str + + realmId?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_audience_resolve_protocol_mapper.k b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_audience_resolve_protocol_mapper.k new file mode 100644 index 00000000..ab0a6b5c --- /dev/null +++ b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_audience_resolve_protocol_mapper.k @@ -0,0 +1,899 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema AudienceResolveProtocolMapper: + r""" + AudienceResolveProtocolMapper is the Schema for the AudienceResolveProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "AudienceResolveProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.crossplane.io/v1alpha1" = "openidgroup.keycloak.crossplane.io/v1alpha1" + + kind: "AudienceResolveProtocolMapper" = "AudienceResolveProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpec + + status?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatus + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpec: + r""" + AudienceResolveProtocolMapperSpec defines the desired state of AudienceResolveProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 audience resolve protocol mapper spec for provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. Defaults to "audience resolve". + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. Defaults to "audience resolve". + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecProviderConfigRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatus: + r""" + AudienceResolveProtocolMapperStatus defines the observed state of AudienceResolveProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatusAtProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 audience resolve protocol mapper status at provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. Defaults to "audience resolve". + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + """ + + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_full_name_protocol_mapper.k b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_full_name_protocol_mapper.k new file mode 100644 index 00000000..f2661c15 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_full_name_protocol_mapper.k @@ -0,0 +1,935 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema FullNameProtocolMapper: + r""" + FullNameProtocolMapper is the Schema for the FullNameProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "FullNameProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.crossplane.io/v1alpha1" = "openidgroup.keycloak.crossplane.io/v1alpha1" + + kind: "FullNameProtocolMapper" = "FullNameProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpec + + status?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperStatus + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpec: + r""" + FullNameProtocolMapperSpec defines the desired state of FullNameProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 full name protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the access token. Defaults to true. + addToIdToken : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the id token. Defaults to true. + addToUserinfo : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the UserInfo response body. Defaults to true. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the access token. Defaults to true. + addToIdToken : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the id token. Defaults to true. + addToUserinfo : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the UserInfo response body. Defaults to true. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecProviderConfigRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperStatus: + r""" + FullNameProtocolMapperStatus defines the observed state of FullNameProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperStatusAtProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 full name protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the access token. Defaults to true. + addToIdToken : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the id token. Defaults to true. + addToUserinfo : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the UserInfo response body. Defaults to true. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1FullNameProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_hardcoded_claim_protocol_mapper.k b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_hardcoded_claim_protocol_mapper.k new file mode 100644 index 00000000..c0db5fe2 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_hardcoded_claim_protocol_mapper.k @@ -0,0 +1,983 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema HardcodedClaimProtocolMapper: + r""" + HardcodedClaimProtocolMapper is the Schema for the HardcodedClaimProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "HardcodedClaimProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.crossplane.io/v1alpha1" = "openidgroup.keycloak.crossplane.io/v1alpha1" + + kind: "HardcodedClaimProtocolMapper" = "HardcodedClaimProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpec + + status?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatus + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpec: + r""" + HardcodedClaimProtocolMapperSpec defines the desired state of HardcodedClaimProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 hardcoded claim protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValue : str, default is Undefined, optional + The hardcoded value of the claim. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValue?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValue : str, default is Undefined, optional + The hardcoded value of the claim. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValue?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecProviderConfigRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatus: + r""" + HardcodedClaimProtocolMapperStatus defines the observed state of HardcodedClaimProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatusAtProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 hardcoded claim protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValue : str, default is Undefined, optional + The hardcoded value of the claim. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValue?: str + + claimValueType?: str + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_hardcoded_role_protocol_mapper.k b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_hardcoded_role_protocol_mapper.k new file mode 100644 index 00000000..f05223fe --- /dev/null +++ b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_hardcoded_role_protocol_mapper.k @@ -0,0 +1,1105 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema HardcodedRoleProtocolMapper: + r""" + HardcodedRoleProtocolMapper is the Schema for the HardcodedRoleProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "HardcodedRoleProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.crossplane.io/v1alpha1" = "openidgroup.keycloak.crossplane.io/v1alpha1" + + kind: "HardcodedRoleProtocolMapper" = "HardcodedRoleProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpec + + status?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatus + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpec: + r""" + HardcodedRoleProtocolMapperSpec defines the desired state of HardcodedRoleProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 hardcoded role protocol mapper spec for provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + roleId : str, default is Undefined, optional + The ID of the role to map to an access token. + roleIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDRef, default is Undefined, optional + role Id ref + roleIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDSelector, default is Undefined, optional + role Id selector + """ + + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDSelector + + roleId?: str + + roleIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDRef + + roleIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDRef: + r""" + Reference to a Role in role to populate roleId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDSelector: + r""" + Selector for a Role in role to populate roleId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + roleId : str, default is Undefined, optional + The ID of the role to map to an access token. + roleIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDRef, default is Undefined, optional + role Id ref + roleIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDSelector, default is Undefined, optional + role Id selector + """ + + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDSelector + + roleId?: str + + roleIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDRef + + roleIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDRef: + r""" + Reference to a Role in role to populate roleId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDSelector: + r""" + Selector for a Role in role to populate roleId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecProviderConfigRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatus: + r""" + HardcodedRoleProtocolMapperStatus defines the observed state of HardcodedRoleProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatusAtProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 hardcoded role protocol mapper status at provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + roleId : str, default is Undefined, optional + The ID of the role to map to an access token. + """ + + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + roleId?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_sub_protocol_mapper.k b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_sub_protocol_mapper.k new file mode 100644 index 00000000..90cf1e38 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_sub_protocol_mapper.k @@ -0,0 +1,929 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema SubProtocolMapper: + r""" + SubProtocolMapper is the Schema for the SubProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "SubProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.crossplane.io/v1alpha1" = "openidgroup.keycloak.crossplane.io/v1alpha1" + + kind: "SubProtocolMapper" = "SubProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpec + + status?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperStatus + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpec: + r""" + SubProtocolMapperSpec defines the desired state of SubProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 sub protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the sub claim should be added to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the sub claim should be added to the token introspection response. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response body. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToTokenIntrospection?: bool + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the sub claim should be added to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the sub claim should be added to the token introspection response. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response body. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToTokenIntrospection?: bool + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecProviderConfigRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperStatus: + r""" + SubProtocolMapperStatus defines the observed state of SubProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperStatusAtProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 sub protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the sub claim should be added to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the sub claim should be added to the token introspection response. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response body. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + """ + + + addToAccessToken?: bool + + addToTokenIntrospection?: bool + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1SubProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_attribute_protocol_mapper.k b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_attribute_protocol_mapper.k new file mode 100644 index 00000000..dfef0ce7 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_attribute_protocol_mapper.k @@ -0,0 +1,1028 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema UserAttributeProtocolMapper: + r""" + UserAttributeProtocolMapper is the Schema for the UserAttributeProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "UserAttributeProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.crossplane.io/v1alpha1" = "openidgroup.keycloak.crossplane.io/v1alpha1" + + kind: "UserAttributeProtocolMapper" = "UserAttributeProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpec + + status?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperStatus + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpec: + r""" + UserAttributeProtocolMapperSpec defines the desired state of UserAttributeProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 user attribute protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the token introspection response. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response. + addToUserinfo : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + aggregateAttributes : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates if attribute values should be aggregated within the group attributes + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + multivalued : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + userAttribute : str, default is Undefined, optional + The custom user attribute to map a claim for. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + aggregateAttributes?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDSelector + + multivalued?: bool + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDSelector + + userAttribute?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the token introspection response. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response. + addToUserinfo : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + aggregateAttributes : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates if attribute values should be aggregated within the group attributes + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + multivalued : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + userAttribute : str, default is Undefined, optional + The custom user attribute to map a claim for. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + aggregateAttributes?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDSelector + + multivalued?: bool + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDSelector + + userAttribute?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecProviderConfigRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperStatus: + r""" + UserAttributeProtocolMapperStatus defines the observed state of UserAttributeProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperStatusAtProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 user attribute protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the token introspection response. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response. + addToUserinfo : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + aggregateAttributes : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates if attribute values should be aggregated within the group attributes + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + multivalued : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + userAttribute : str, default is Undefined, optional + The custom user attribute to map a claim for. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + aggregateAttributes?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientScopeId?: str + + id?: str + + multivalued?: bool + + name?: str + + realmId?: str + + userAttribute?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserAttributeProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_client_role_protocol_mapper.k b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_client_role_protocol_mapper.k new file mode 100644 index 00000000..99ec5d7d --- /dev/null +++ b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_client_role_protocol_mapper.k @@ -0,0 +1,1210 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema UserClientRoleProtocolMapper: + r""" + UserClientRoleProtocolMapper is the Schema for the UserClientRoleProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "UserClientRoleProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.crossplane.io/v1alpha1" = "openidgroup.keycloak.crossplane.io/v1alpha1" + + kind: "UserClientRoleProtocolMapper" = "UserClientRoleProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpec + + status?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatus + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpec: + r""" + UserClientRoleProtocolMapperSpec defines the desired state of UserClientRoleProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 user client role protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdForRoleMappings : str, default is Undefined, optional + The Client ID for role mappings. Just client roles of this client will be added to the token. If this is unset, client roles of all clients will be added to the token. + Client ID for role mappings. + clientIdForRoleMappingsRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsRef, default is Undefined, optional + client Id for role mappings ref + clientIdForRoleMappingsSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsSelector, default is Undefined, optional + client Id for role mappings selector + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientRolePrefix : str, default is Undefined, optional + A prefix for each Client Role. + Prefix that will be added to each client role. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + multivalued : bool, default is Undefined, optional + Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdForRoleMappings?: str + + clientIdForRoleMappingsRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsRef + + clientIdForRoleMappingsSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsSelector + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDSelector + + clientRolePrefix?: str + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDSelector + + multivalued?: bool + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsRef: + r""" + Reference to a Client in openidclient to populate clientIdForRoleMappings. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsSelector: + r""" + Selector for a Client in openidclient to populate clientIdForRoleMappings. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdForRoleMappings : str, default is Undefined, optional + The Client ID for role mappings. Just client roles of this client will be added to the token. If this is unset, client roles of all clients will be added to the token. + Client ID for role mappings. + clientIdForRoleMappingsRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsRef, default is Undefined, optional + client Id for role mappings ref + clientIdForRoleMappingsSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsSelector, default is Undefined, optional + client Id for role mappings selector + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientRolePrefix : str, default is Undefined, optional + A prefix for each Client Role. + Prefix that will be added to each client role. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + multivalued : bool, default is Undefined, optional + Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdForRoleMappings?: str + + clientIdForRoleMappingsRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsRef + + clientIdForRoleMappingsSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsSelector + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDSelector + + clientRolePrefix?: str + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDSelector + + multivalued?: bool + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDSelector + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsRef: + r""" + Reference to a Client in openidclient to populate clientIdForRoleMappings. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsSelector: + r""" + Selector for a Client in openidclient to populate clientIdForRoleMappings. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecProviderConfigRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatus: + r""" + UserClientRoleProtocolMapperStatus defines the observed state of UserClientRoleProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatusAtProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 user client role protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdForRoleMappings : str, default is Undefined, optional + The Client ID for role mappings. Just client roles of this client will be added to the token. If this is unset, client roles of all clients will be added to the token. + Client ID for role mappings. + clientRolePrefix : str, default is Undefined, optional + A prefix for each Client Role. + Prefix that will be added to each client role. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + multivalued : bool, default is Undefined, optional + Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdForRoleMappings?: str + + clientRolePrefix?: str + + clientScopeId?: str + + id?: str + + multivalued?: bool + + name?: str + + realmId?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_property_protocol_mapper.k b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_property_protocol_mapper.k new file mode 100644 index 00000000..53de0f2c --- /dev/null +++ b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_property_protocol_mapper.k @@ -0,0 +1,983 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema UserPropertyProtocolMapper: + r""" + UserPropertyProtocolMapper is the Schema for the UserPropertyProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "UserPropertyProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.crossplane.io/v1alpha1" = "openidgroup.keycloak.crossplane.io/v1alpha1" + + kind: "UserPropertyProtocolMapper" = "UserPropertyProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpec + + status?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperStatus + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpec: + r""" + UserPropertyProtocolMapperSpec defines the desired state of UserPropertyProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 user property protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the property should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the property should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the property should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. client_scope_id - The client scope this protocol mapper is attached to. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + userProperty : str, default is Undefined, optional + The built-in user property (such as email) to map a claim for. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDSelector + + userProperty?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the property should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the property should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the property should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. client_scope_id - The client scope this protocol mapper is attached to. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + userProperty : str, default is Undefined, optional + The built-in user property (such as email) to map a claim for. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDSelector + + userProperty?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecProviderConfigRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperStatus: + r""" + UserPropertyProtocolMapperStatus defines the observed state of UserPropertyProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperStatusAtProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 user property protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the property should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the property should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the property should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. client_scope_id - The client scope this protocol mapper is attached to. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + userProperty : str, default is Undefined, optional + The built-in user property (such as email) to map a claim for. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + userProperty?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserPropertyProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_realm_role_protocol_mapper.k b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_realm_role_protocol_mapper.k new file mode 100644 index 00000000..fce431dd --- /dev/null +++ b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_realm_role_protocol_mapper.k @@ -0,0 +1,1016 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema UserRealmRoleProtocolMapper: + r""" + UserRealmRoleProtocolMapper is the Schema for the UserRealmRoleProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "UserRealmRoleProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.crossplane.io/v1alpha1" = "openidgroup.keycloak.crossplane.io/v1alpha1" + + kind: "UserRealmRoleProtocolMapper" = "UserRealmRoleProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpec + + status?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatus + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpec: + r""" + UserRealmRoleProtocolMapperSpec defines the desired state of UserRealmRoleProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 user realm role protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the Token Introspection response body. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response body. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + multivalued : bool, default is Undefined, optional + Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + realmRolePrefix : str, default is Undefined, optional + A prefix for each Realm Role. + Prefix that will be added to each realm role. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDSelector + + multivalued?: bool + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDSelector + + realmRolePrefix?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the Token Introspection response body. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response body. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + multivalued : bool, default is Undefined, optional + Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + realmRolePrefix : str, default is Undefined, optional + A prefix for each Realm Role. + Prefix that will be added to each realm role. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDSelector + + multivalued?: bool + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDSelector + + realmRolePrefix?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecProviderConfigRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatus: + r""" + UserRealmRoleProtocolMapperStatus defines the observed state of UserRealmRoleProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatusAtProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 user realm role protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the Token Introspection response body. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response body. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + multivalued : bool, default is Undefined, optional + Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmRolePrefix : str, default is Undefined, optional + A prefix for each Realm Role. + Prefix that will be added to each realm role. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientScopeId?: str + + id?: str + + multivalued?: bool + + name?: str + + realmId?: str + + realmRolePrefix?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_session_note_protocol_mapper.k b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_session_note_protocol_mapper.k new file mode 100644 index 00000000..6afdbf38 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/openidgroup/v1alpha1/openidgroup_keycloak_crossplane_io_v1alpha1_user_session_note_protocol_mapper.k @@ -0,0 +1,1001 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema UserSessionNoteProtocolMapper: + r""" + UserSessionNoteProtocolMapper is the Schema for the UserSessionNoteProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "UserSessionNoteProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.crossplane.io/v1alpha1" = "openidgroup.keycloak.crossplane.io/v1alpha1" + + kind: "UserSessionNoteProtocolMapper" = "UserSessionNoteProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpec + + status?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatus + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpec: + r""" + UserSessionNoteProtocolMapperSpec defines the desired state of UserSessionNoteProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 user session note protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the token introspection response. Defaults to true. + Indicates if the session note should be a claim in the token introspection response. + addToUserinfo : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the session note should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + sessionNote : str, default is Undefined, optional + String value being the name of stored user session note within the UserSessionModel.note map. + String value being the name of stored user session note within the UserSessionModel.note map. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDSelector + + sessionNote?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the token introspection response. Defaults to true. + Indicates if the session note should be a claim in the token introspection response. + addToUserinfo : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the session note should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + sessionNote : str, default is Undefined, optional + String value being the name of stored user session note within the UserSessionModel.note map. + String value being the name of stored user session note within the UserSessionModel.note map. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDSelector + + sessionNote?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecProviderConfigRefPolicy + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatus: + r""" + UserSessionNoteProtocolMapperStatus defines the observed state of UserSessionNoteProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatusAtProvider: + r""" + openidgroup keycloak crossplane io v1alpha1 user session note protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the token introspection response. Defaults to true. + Indicates if the session note should be a claim in the token introspection response. + addToUserinfo : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the session note should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + sessionNote : str, default is Undefined, optional + String value being the name of stored user session note within the UserSessionModel.note map. + String value being the name of stored user session note within the UserSessionModel.note map. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + sessionNote?: str + + +schema OpenidgroupKeycloakCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_client_policy_profile.k b/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_client_policy_profile.k new file mode 100644 index 00000000..1e97e315 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_client_policy_profile.k @@ -0,0 +1,553 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema ClientPolicyProfile: + r""" + ClientPolicyProfile is the Schema for the ClientPolicyProfiles API. + + Attributes + ---------- + apiVersion : str, default is "realm.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "ClientPolicyProfile", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpec, default is Undefined, required + spec + status : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileStatus, default is Undefined, optional + status + """ + + + apiVersion: "realm.keycloak.crossplane.io/v1alpha1" = "realm.keycloak.crossplane.io/v1alpha1" + + kind: "ClientPolicyProfile" = "ClientPolicyProfile" + + metadata?: v1.ObjectMeta + + spec: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpec + + status?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileStatus + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpec: + r""" + ClientPolicyProfileSpec defines the desired state of ClientPolicyProfile + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProvider, default is Undefined, required + for provider + initProvider : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProvider + + initProvider?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecProviderConfigRef + + writeConnectionSecretToRef?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecWriteConnectionSecretToRef + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProvider: + r""" + realm keycloak crossplane io v1alpha1 client policy profile spec for provider + + Attributes + ---------- + description : str, default is Undefined, optional + description + executor : [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderExecutorItems0], default is Undefined, optional + An ordered list of executors + name : str, default is Undefined, optional + The name of the attribute. + realmId : str, default is Undefined, optional + The realm id. + realmIdRef : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + description?: str + + executor?: [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderExecutorItems0] + + name?: str + + realmId?: str + + realmIdRef?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDRef + + realmIdSelector?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDSelector + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderExecutorItems0: + r""" + realm keycloak crossplane io v1alpha1 client policy profile spec for provider executor items0 + + Attributes + ---------- + configuration : {str:str}, default is Undefined, optional + - A map of configuration values + name : str, default is Undefined, optional + The name of the attribute. + """ + + + configuration?: {str:str} + + name?: str + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDRefPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDSelectorPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + description : str, default is Undefined, optional + description + executor : [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderExecutorItems0], default is Undefined, optional + An ordered list of executors + name : str, default is Undefined, optional + The name of the attribute. + realmId : str, default is Undefined, optional + The realm id. + realmIdRef : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + description?: str + + executor?: [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderExecutorItems0] + + name?: str + + realmId?: str + + realmIdRef?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDRef + + realmIdSelector?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDSelector + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderExecutorItems0: + r""" + realm keycloak crossplane io v1alpha1 client policy profile spec init provider executor items0 + + Attributes + ---------- + configuration : {str:str}, default is Undefined, optional + - A map of configuration values + name : str, default is Undefined, optional + The name of the attribute. + """ + + + configuration?: {str:str} + + name?: str + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDRefPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDSelectorPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecProviderConfigRefPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileStatus: + r""" + ClientPolicyProfileStatus defines the observed state of ClientPolicyProfile. + + Attributes + ---------- + atProvider : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileStatusAtProvider, default is Undefined, optional + at provider + conditions : [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileStatusAtProvider + + conditions?: [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileStatusConditionsItems0] + + observedGeneration?: int + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileStatusAtProvider: + r""" + realm keycloak crossplane io v1alpha1 client policy profile status at provider + + Attributes + ---------- + description : str, default is Undefined, optional + description + executor : [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileStatusAtProviderExecutorItems0], default is Undefined, optional + An ordered list of executors + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The name of the attribute. + realmId : str, default is Undefined, optional + The realm id. + """ + + + description?: str + + executor?: [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileStatusAtProviderExecutorItems0] + + id?: str + + name?: str + + realmId?: str + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileStatusAtProviderExecutorItems0: + r""" + realm keycloak crossplane io v1alpha1 client policy profile status at provider executor items0 + + Attributes + ---------- + configuration : {str:str}, default is Undefined, optional + - A map of configuration values + name : str, default is Undefined, optional + The name of the attribute. + """ + + + configuration?: {str:str} + + name?: str + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfileStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_client_policy_profile_policy.k b/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_client_policy_profile_policy.k new file mode 100644 index 00000000..ebed62c0 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_client_policy_profile_policy.k @@ -0,0 +1,771 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema ClientPolicyProfilePolicy: + r""" + ClientPolicyProfilePolicy is the Schema for the ClientPolicyProfilePolicys API. + + Attributes + ---------- + apiVersion : str, default is "realm.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "ClientPolicyProfilePolicy", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpec, default is Undefined, required + spec + status : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatus, default is Undefined, optional + status + """ + + + apiVersion: "realm.keycloak.crossplane.io/v1alpha1" = "realm.keycloak.crossplane.io/v1alpha1" + + kind: "ClientPolicyProfilePolicy" = "ClientPolicyProfilePolicy" + + metadata?: v1.ObjectMeta + + spec: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpec + + status?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatus + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpec: + r""" + ClientPolicyProfilePolicySpec defines the desired state of ClientPolicyProfilePolicy + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProvider, default is Undefined, required + for provider + initProvider : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProvider + + initProvider?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecProviderConfigRef + + writeConnectionSecretToRef?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecWriteConnectionSecretToRef + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProvider: + r""" + realm keycloak crossplane io v1alpha1 client policy profile policy spec for provider + + Attributes + ---------- + condition : [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderConditionItems0], default is Undefined, optional + An ordered list of condition + description : str, default is Undefined, optional + description + enabled : bool, default is Undefined, optional + enabled + name : str, default is Undefined, optional + The name of the attribute. + profiles : [str], default is Undefined, optional + profiles + profilesRefs : [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesRefsItems0], default is Undefined, optional + References to ClientPolicyProfile in realm to populate profiles. + profilesSelector : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesSelector, default is Undefined, optional + profiles selector + realmId : str, default is Undefined, optional + The realm id. + realmIdRef : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + condition?: [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderConditionItems0] + + description?: str + + enabled?: bool + + name?: str + + profiles?: [str] + + profilesRefs?: [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesRefsItems0] + + profilesSelector?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesSelector + + realmId?: str + + realmIdRef?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDRef + + realmIdSelector?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDSelector + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderConditionItems0: + r""" + realm keycloak crossplane io v1alpha1 client policy profile policy spec for provider condition items0 + + Attributes + ---------- + configuration : {str:str}, default is Undefined, optional + - A map of configuration values + name : str, default is Undefined, optional + The name of the attribute. + """ + + + configuration?: {str:str} + + name?: str + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesRefsItems0: + r""" + A Reference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesRefsItems0Policy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesSelector: + r""" + Selector for a list of ClientPolicyProfile in realm to populate profiles. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesSelectorPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDRefPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDSelectorPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + condition : [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderConditionItems0], default is Undefined, optional + An ordered list of condition + description : str, default is Undefined, optional + description + enabled : bool, default is Undefined, optional + enabled + name : str, default is Undefined, optional + The name of the attribute. + profiles : [str], default is Undefined, optional + profiles + profilesRefs : [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesRefsItems0], default is Undefined, optional + References to ClientPolicyProfile in realm to populate profiles. + profilesSelector : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesSelector, default is Undefined, optional + profiles selector + realmId : str, default is Undefined, optional + The realm id. + realmIdRef : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + condition?: [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderConditionItems0] + + description?: str + + enabled?: bool + + name?: str + + profiles?: [str] + + profilesRefs?: [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesRefsItems0] + + profilesSelector?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesSelector + + realmId?: str + + realmIdRef?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDRef + + realmIdSelector?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDSelector + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderConditionItems0: + r""" + realm keycloak crossplane io v1alpha1 client policy profile policy spec init provider condition items0 + + Attributes + ---------- + configuration : {str:str}, default is Undefined, optional + - A map of configuration values + name : str, default is Undefined, optional + The name of the attribute. + """ + + + configuration?: {str:str} + + name?: str + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesRefsItems0: + r""" + A Reference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesRefsItems0Policy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesSelector: + r""" + Selector for a list of ClientPolicyProfile in realm to populate profiles. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesSelectorPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDRefPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDSelectorPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecProviderConfigRefPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatus: + r""" + ClientPolicyProfilePolicyStatus defines the observed state of ClientPolicyProfilePolicy. + + Attributes + ---------- + atProvider : RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusAtProvider, default is Undefined, optional + at provider + conditions : [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusAtProvider + + conditions?: [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusConditionsItems0] + + observedGeneration?: int + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusAtProvider: + r""" + realm keycloak crossplane io v1alpha1 client policy profile policy status at provider + + Attributes + ---------- + condition : [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusAtProviderConditionItems0], default is Undefined, optional + An ordered list of condition + description : str, default is Undefined, optional + description + enabled : bool, default is Undefined, optional + enabled + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The name of the attribute. + profiles : [str], default is Undefined, optional + profiles + realmId : str, default is Undefined, optional + The realm id. + """ + + + condition?: [RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusAtProviderConditionItems0] + + description?: str + + enabled?: bool + + id?: str + + name?: str + + profiles?: [str] + + realmId?: str + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusAtProviderConditionItems0: + r""" + realm keycloak crossplane io v1alpha1 client policy profile policy status at provider condition items0 + + Attributes + ---------- + configuration : {str:str}, default is Undefined, optional + - A map of configuration values + name : str, default is Undefined, optional + The name of the attribute. + """ + + + configuration?: {str:str} + + name?: str + + +schema RealmKeycloakCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_realm.k b/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_realm.k index ee22550c..50509750 100644 --- a/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_realm.k +++ b/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_realm.k @@ -370,6 +370,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecForProviderOtpPolicyItems0: algorithm : str, default is Undefined, optional What hashing algorithm should be used to generate the OTP, Valid options are HmacSHA1,HmacSHA256 and HmacSHA512. Defaults to HmacSHA1. What hashing algorithm should be used to generate the OTP. + codeReusable : bool, default is Undefined, optional + Possibility to use the same OTP code again after successful authentication. Defaults to false. digits : float, default is Undefined, optional How many digits the OTP have. Defaults to 6. initialCounter : float, default is Undefined, optional @@ -386,6 +388,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecForProviderOtpPolicyItems0: algorithm?: str + codeReusable?: bool + digits?: float initialCounter?: float @@ -404,7 +408,7 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecForProviderSMTPServerItems0: Attributes ---------- allowUtf8 : bool, default is Undefined, optional - allow Utf8 + When true, allows UTF-8 in the local part of the email address. Defaults to false. auth : [RealmKeycloakCrossplaneIoV1alpha1RealmSpecForProviderSMTPServerItems0AuthItems0], default is Undefined, optional Enables authentication to the SMTP server. Cannot be set alongside token_auth. This block supports the following arguments: envelopeFrom : str, default is Undefined, optional @@ -571,6 +575,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecForProviderSecurityDefensesItem Attributes ---------- + bruteForceStrategy : str, default is Undefined, optional + brute force strategy failureResetTimeSeconds : float, default is Undefined, optional When will failure count be reset? maxFailureWaitSeconds : float, default is Undefined, optional @@ -590,6 +596,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecForProviderSecurityDefensesItem """ + bruteForceStrategy?: str + failureResetTimeSeconds?: float maxFailureWaitSeconds?: float @@ -669,6 +677,9 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecForProviderWebAuthnPasswordless The timeout value for creating a user's public key credential in seconds. When set to 0, this timeout option is not adapted. Defaults to 0. extraOrigins : [str], default is Undefined, optional A set of extra origins for non-web applications. + passwordlessPasskeysEnabled : bool, default is Undefined, optional + When true, Keycloak will enable passwordless passkey support. This attribute is only valid inside a web_authn_passwordless_policy block and requires a Keycloak version that supports passwordless passkeys. Defaults to false. + Enable passkeys for passwordless WebAuthn authentication relyingPartyEntityName : str, default is Undefined, optional A human-readable server name for the WebAuthn Relying Party. Defaults to keycloak. relyingPartyId : str, default is Undefined, optional @@ -697,6 +708,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecForProviderWebAuthnPasswordless extraOrigins?: [str] + passwordlessPasskeysEnabled?: bool + relyingPartyEntityName?: str relyingPartyId?: str @@ -1062,6 +1075,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecInitProviderOtpPolicyItems0: algorithm : str, default is Undefined, optional What hashing algorithm should be used to generate the OTP, Valid options are HmacSHA1,HmacSHA256 and HmacSHA512. Defaults to HmacSHA1. What hashing algorithm should be used to generate the OTP. + codeReusable : bool, default is Undefined, optional + Possibility to use the same OTP code again after successful authentication. Defaults to false. digits : float, default is Undefined, optional How many digits the OTP have. Defaults to 6. initialCounter : float, default is Undefined, optional @@ -1078,6 +1093,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecInitProviderOtpPolicyItems0: algorithm?: str + codeReusable?: bool + digits?: float initialCounter?: float @@ -1096,7 +1113,7 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecInitProviderSMTPServerItems0: Attributes ---------- allowUtf8 : bool, default is Undefined, optional - allow Utf8 + When true, allows UTF-8 in the local part of the email address. Defaults to false. auth : [RealmKeycloakCrossplaneIoV1alpha1RealmSpecInitProviderSMTPServerItems0AuthItems0], default is Undefined, optional Enables authentication to the SMTP server. Cannot be set alongside token_auth. This block supports the following arguments: envelopeFrom : str, default is Undefined, optional @@ -1263,6 +1280,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecInitProviderSecurityDefensesIte Attributes ---------- + bruteForceStrategy : str, default is Undefined, optional + brute force strategy failureResetTimeSeconds : float, default is Undefined, optional When will failure count be reset? maxFailureWaitSeconds : float, default is Undefined, optional @@ -1282,6 +1301,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecInitProviderSecurityDefensesIte """ + bruteForceStrategy?: str + failureResetTimeSeconds?: float maxFailureWaitSeconds?: float @@ -1361,6 +1382,9 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecInitProviderWebAuthnPasswordles The timeout value for creating a user's public key credential in seconds. When set to 0, this timeout option is not adapted. Defaults to 0. extraOrigins : [str], default is Undefined, optional A set of extra origins for non-web applications. + passwordlessPasskeysEnabled : bool, default is Undefined, optional + When true, Keycloak will enable passwordless passkey support. This attribute is only valid inside a web_authn_passwordless_policy block and requires a Keycloak version that supports passwordless passkeys. Defaults to false. + Enable passkeys for passwordless WebAuthn authentication relyingPartyEntityName : str, default is Undefined, optional A human-readable server name for the WebAuthn Relying Party. Defaults to keycloak. relyingPartyId : str, default is Undefined, optional @@ -1389,6 +1413,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmSpecInitProviderWebAuthnPasswordles extraOrigins?: [str] + passwordlessPasskeysEnabled?: bool + relyingPartyEntityName?: str relyingPartyId?: str @@ -1838,6 +1864,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmStatusAtProviderOtpPolicyItems0: algorithm : str, default is Undefined, optional What hashing algorithm should be used to generate the OTP, Valid options are HmacSHA1,HmacSHA256 and HmacSHA512. Defaults to HmacSHA1. What hashing algorithm should be used to generate the OTP. + codeReusable : bool, default is Undefined, optional + Possibility to use the same OTP code again after successful authentication. Defaults to false. digits : float, default is Undefined, optional How many digits the OTP have. Defaults to 6. initialCounter : float, default is Undefined, optional @@ -1854,6 +1882,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmStatusAtProviderOtpPolicyItems0: algorithm?: str + codeReusable?: bool + digits?: float initialCounter?: float @@ -1872,7 +1902,7 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmStatusAtProviderSMTPServerItems0: Attributes ---------- allowUtf8 : bool, default is Undefined, optional - allow Utf8 + When true, allows UTF-8 in the local part of the email address. Defaults to false. auth : [RealmKeycloakCrossplaneIoV1alpha1RealmStatusAtProviderSMTPServerItems0AuthItems0], default is Undefined, optional Enables authentication to the SMTP server. Cannot be set alongside token_auth. This block supports the following arguments: envelopeFrom : str, default is Undefined, optional @@ -1987,6 +2017,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmStatusAtProviderSecurityDefensesIte Attributes ---------- + bruteForceStrategy : str, default is Undefined, optional + brute force strategy failureResetTimeSeconds : float, default is Undefined, optional When will failure count be reset? maxFailureWaitSeconds : float, default is Undefined, optional @@ -2006,6 +2038,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmStatusAtProviderSecurityDefensesIte """ + bruteForceStrategy?: str + failureResetTimeSeconds?: float maxFailureWaitSeconds?: float @@ -2085,6 +2119,9 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmStatusAtProviderWebAuthnPasswordles The timeout value for creating a user's public key credential in seconds. When set to 0, this timeout option is not adapted. Defaults to 0. extraOrigins : [str], default is Undefined, optional A set of extra origins for non-web applications. + passwordlessPasskeysEnabled : bool, default is Undefined, optional + When true, Keycloak will enable passwordless passkey support. This attribute is only valid inside a web_authn_passwordless_policy block and requires a Keycloak version that supports passwordless passkeys. Defaults to false. + Enable passkeys for passwordless WebAuthn authentication relyingPartyEntityName : str, default is Undefined, optional A human-readable server name for the WebAuthn Relying Party. Defaults to keycloak. relyingPartyId : str, default is Undefined, optional @@ -2113,6 +2150,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1RealmStatusAtProviderWebAuthnPasswordles extraOrigins?: [str] + passwordlessPasskeysEnabled?: bool + relyingPartyEntityName?: str relyingPartyId?: str diff --git a/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_realm_localization.k b/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_realm_localization.k new file mode 100644 index 00000000..0985f534 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_realm_localization.k @@ -0,0 +1,496 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema RealmLocalization: + r""" + RealmLocalization is the Schema for the RealmLocalizations API. + + Attributes + ---------- + apiVersion : str, default is "realm.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "RealmLocalization", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpec, default is Undefined, required + spec + status : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationStatus, default is Undefined, optional + status + """ + + + apiVersion: "realm.keycloak.crossplane.io/v1alpha1" = "realm.keycloak.crossplane.io/v1alpha1" + + kind: "RealmLocalization" = "RealmLocalization" + + metadata?: v1.ObjectMeta + + spec: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpec + + status?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationStatus + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpec: + r""" + RealmLocalizationSpec defines the desired state of RealmLocalization + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProvider, default is Undefined, required + for provider + initProvider : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProvider + + initProvider?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecProviderConfigRef + + writeConnectionSecretToRef?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecWriteConnectionSecretToRef + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProvider: + r""" + realm keycloak crossplane io v1alpha1 realm localization spec for provider + + Attributes + ---------- + locale : str, default is Undefined, optional + The locale (language code) the texts apply to. + The locale for the localization texts. + realmId : str, default is Undefined, optional + The ID of the realm the user profile applies to. + The ID of the realm the localization texts apply to. + realmIdRef : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + texts : {str:str}, default is Undefined, optional + A map of translation keys to values. + The mapping of localization texts keys to values. + """ + + + locale?: str + + realmId?: str + + realmIdRef?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDRef + + realmIdSelector?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDSelector + + texts?: {str:str} + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDRefPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDSelectorPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + locale : str, default is Undefined, optional + The locale (language code) the texts apply to. + The locale for the localization texts. + realmId : str, default is Undefined, optional + The ID of the realm the user profile applies to. + The ID of the realm the localization texts apply to. + realmIdRef : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + texts : {str:str}, default is Undefined, optional + A map of translation keys to values. + The mapping of localization texts keys to values. + """ + + + locale?: str + + realmId?: str + + realmIdRef?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDRef + + realmIdSelector?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDSelector + + texts?: {str:str} + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDRefPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDSelectorPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecProviderConfigRefPolicy + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationStatus: + r""" + RealmLocalizationStatus defines the observed state of RealmLocalization. + + Attributes + ---------- + atProvider : RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationStatusAtProvider, default is Undefined, optional + at provider + conditions : [RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationStatusAtProvider + + conditions?: [RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationStatusConditionsItems0] + + observedGeneration?: int + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationStatusAtProvider: + r""" + realm keycloak crossplane io v1alpha1 realm localization status at provider + + Attributes + ---------- + id : str, default is Undefined, optional + id + locale : str, default is Undefined, optional + The locale (language code) the texts apply to. + The locale for the localization texts. + realmId : str, default is Undefined, optional + The ID of the realm the user profile applies to. + The ID of the realm the localization texts apply to. + texts : {str:str}, default is Undefined, optional + A map of translation keys to values. + The mapping of localization texts keys to values. + """ + + + id?: str + + locale?: str + + realmId?: str + + texts?: {str:str} + + +schema RealmKeycloakCrossplaneIoV1alpha1RealmLocalizationStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_user_profile.k b/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_user_profile.k index 6a0f164b..c37ca365 100644 --- a/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_user_profile.k +++ b/crossplane_provider_keycloak/cluster/realm/v1alpha1/realm_keycloak_crossplane_io_v1alpha1_user_profile.k @@ -126,6 +126,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1UserProfileSpecForProviderAttributeItems ---------- annotations : {str:str}, default is Undefined, optional A map of annotations for the attribute. Values can be a String or a json object. + defaultValue : str, default is Undefined, optional + The default value of the attribute. Only applied with Keycloak 26.4.0 or later. displayName : str, default is Undefined, optional The display name of the attribute. enabledWhenScope : [str], default is Undefined, optional @@ -149,6 +151,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1UserProfileSpecForProviderAttributeItems annotations?: {str:str} + defaultValue?: str + displayName?: str enabledWhenScope?: [str] @@ -370,6 +374,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1UserProfileSpecInitProviderAttributeItem ---------- annotations : {str:str}, default is Undefined, optional A map of annotations for the attribute. Values can be a String or a json object. + defaultValue : str, default is Undefined, optional + The default value of the attribute. Only applied with Keycloak 26.4.0 or later. displayName : str, default is Undefined, optional The display name of the attribute. enabledWhenScope : [str], default is Undefined, optional @@ -393,6 +399,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1UserProfileSpecInitProviderAttributeItem annotations?: {str:str} + defaultValue?: str + displayName?: str enabledWhenScope?: [str] @@ -690,6 +698,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1UserProfileStatusAtProviderAttributeItem ---------- annotations : {str:str}, default is Undefined, optional A map of annotations for the attribute. Values can be a String or a json object. + defaultValue : str, default is Undefined, optional + The default value of the attribute. Only applied with Keycloak 26.4.0 or later. displayName : str, default is Undefined, optional The display name of the attribute. enabledWhenScope : [str], default is Undefined, optional @@ -713,6 +723,8 @@ schema RealmKeycloakCrossplaneIoV1alpha1UserProfileStatusAtProviderAttributeItem annotations?: {str:str} + defaultValue?: str + displayName?: str enabledWhenScope?: [str] diff --git a/crossplane_provider_keycloak/cluster/samlclient/v1alpha1/samlclient_keycloak_crossplane_io_v1alpha1_saml_user_attribute_protocol_mapper.k b/crossplane_provider_keycloak/cluster/samlclient/v1alpha1/samlclient_keycloak_crossplane_io_v1alpha1_saml_user_attribute_protocol_mapper.k new file mode 100644 index 00000000..b9fd045e --- /dev/null +++ b/crossplane_provider_keycloak/cluster/samlclient/v1alpha1/samlclient_keycloak_crossplane_io_v1alpha1_saml_user_attribute_protocol_mapper.k @@ -0,0 +1,950 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema SamlUserAttributeProtocolMapper: + r""" + SamlUserAttributeProtocolMapper is the Schema for the SamlUserAttributeProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "samlclient.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "SamlUserAttributeProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpec, default is Undefined, required + spec + status : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "samlclient.keycloak.crossplane.io/v1alpha1" = "samlclient.keycloak.crossplane.io/v1alpha1" + + kind: "SamlUserAttributeProtocolMapper" = "SamlUserAttributeProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpec + + status?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatus + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpec: + r""" + SamlUserAttributeProtocolMapperSpec defines the desired state of SamlUserAttributeProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProvider + + initProvider?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecWriteConnectionSecretToRef + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProvider: + r""" + samlclient keycloak crossplane io v1alpha1 saml user attribute protocol mapper spec for provider + + Attributes + ---------- + aggregateAttributes : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates if attribute values should be aggregated within the group attributes + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + clientIdRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + clientScopeIdRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + friendlyName : str, default is Undefined, optional + An optional human-friendly name for this attribute. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + realmIdRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + samlAttributeName : str, default is Undefined, optional + The name of the SAML attribute. + samlAttributeNameFormat : str, default is Undefined, optional + The SAML attribute Name Format. Can be one of Unspecified, Basic, or URI Reference. + userAttribute : str, default is Undefined, optional + The custom user attribute to map. + """ + + + aggregateAttributes?: bool + + clientId?: str + + clientIdRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDSelector + + friendlyName?: str + + name?: str + + realmId?: str + + realmIdRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDSelector + + samlAttributeName?: str + + samlAttributeNameFormat?: str + + userAttribute?: str + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in samlclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in samlclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + aggregateAttributes : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates if attribute values should be aggregated within the group attributes + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + clientIdRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + clientScopeIdRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + friendlyName : str, default is Undefined, optional + An optional human-friendly name for this attribute. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + realmIdRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + samlAttributeName : str, default is Undefined, optional + The name of the SAML attribute. + samlAttributeNameFormat : str, default is Undefined, optional + The SAML attribute Name Format. Can be one of Unspecified, Basic, or URI Reference. + userAttribute : str, default is Undefined, optional + The custom user attribute to map. + """ + + + aggregateAttributes?: bool + + clientId?: str + + clientIdRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDSelector + + friendlyName?: str + + name?: str + + realmId?: str + + realmIdRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDSelector + + samlAttributeName?: str + + samlAttributeNameFormat?: str + + userAttribute?: str + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in samlclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in samlclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecProviderConfigRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatus: + r""" + SamlUserAttributeProtocolMapperStatus defines the observed state of SamlUserAttributeProtocolMapper. + + Attributes + ---------- + atProvider : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatusAtProvider + + conditions?: [SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatusAtProvider: + r""" + samlclient keycloak crossplane io v1alpha1 saml user attribute protocol mapper status at provider + + Attributes + ---------- + aggregateAttributes : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates if attribute values should be aggregated within the group attributes + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + friendlyName : str, default is Undefined, optional + An optional human-friendly name for this attribute. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + samlAttributeName : str, default is Undefined, optional + The name of the SAML attribute. + samlAttributeNameFormat : str, default is Undefined, optional + The SAML attribute Name Format. Can be one of Unspecified, Basic, or URI Reference. + userAttribute : str, default is Undefined, optional + The custom user attribute to map. + """ + + + aggregateAttributes?: bool + + clientId?: str + + clientScopeId?: str + + friendlyName?: str + + id?: str + + name?: str + + realmId?: str + + samlAttributeName?: str + + samlAttributeNameFormat?: str + + userAttribute?: str + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/samlclient/v1alpha1/samlclient_keycloak_crossplane_io_v1alpha1_saml_user_property_protocol_mapper.k b/crossplane_provider_keycloak/cluster/samlclient/v1alpha1/samlclient_keycloak_crossplane_io_v1alpha1_saml_user_property_protocol_mapper.k new file mode 100644 index 00000000..39381169 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/samlclient/v1alpha1/samlclient_keycloak_crossplane_io_v1alpha1_saml_user_property_protocol_mapper.k @@ -0,0 +1,935 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema SamlUserPropertyProtocolMapper: + r""" + SamlUserPropertyProtocolMapper is the Schema for the SamlUserPropertyProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "samlclient.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "SamlUserPropertyProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpec, default is Undefined, required + spec + status : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "samlclient.keycloak.crossplane.io/v1alpha1" = "samlclient.keycloak.crossplane.io/v1alpha1" + + kind: "SamlUserPropertyProtocolMapper" = "SamlUserPropertyProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpec + + status?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatus + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpec: + r""" + SamlUserPropertyProtocolMapperSpec defines the desired state of SamlUserPropertyProtocolMapper + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProvider + + initProvider?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecWriteConnectionSecretToRef + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProvider: + r""" + samlclient keycloak crossplane io v1alpha1 saml user property protocol mapper spec for provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + clientIdRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + clientScopeIdRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + friendlyName : str, default is Undefined, optional + An optional human-friendly name for this attribute. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + realmIdRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + samlAttributeName : str, default is Undefined, optional + The name of the SAML attribute. + samlAttributeNameFormat : str, default is Undefined, optional + The SAML attribute Name Format. Can be one of Unspecified, Basic, or URI Reference. + userProperty : str, default is Undefined, optional + The property of the Keycloak user model to map. + """ + + + clientId?: str + + clientIdRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDSelector + + friendlyName?: str + + name?: str + + realmId?: str + + realmIdRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDSelector + + samlAttributeName?: str + + samlAttributeNameFormat?: str + + userProperty?: str + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in samlclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in samlclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + clientIdRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + clientScopeIdRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + friendlyName : str, default is Undefined, optional + An optional human-friendly name for this attribute. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + realmIdRef : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + samlAttributeName : str, default is Undefined, optional + The name of the SAML attribute. + samlAttributeNameFormat : str, default is Undefined, optional + The SAML attribute Name Format. Can be one of Unspecified, Basic, or URI Reference. + userProperty : str, default is Undefined, optional + The property of the Keycloak user model to map. + """ + + + clientId?: str + + clientIdRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDSelector + + friendlyName?: str + + name?: str + + realmId?: str + + realmIdRef?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDSelector + + samlAttributeName?: str + + samlAttributeNameFormat?: str + + userProperty?: str + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in samlclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in samlclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecProviderConfigRefPolicy + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatus: + r""" + SamlUserPropertyProtocolMapperStatus defines the observed state of SamlUserPropertyProtocolMapper. + + Attributes + ---------- + atProvider : SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatusAtProvider + + conditions?: [SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatusAtProvider: + r""" + samlclient keycloak crossplane io v1alpha1 saml user property protocol mapper status at provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + friendlyName : str, default is Undefined, optional + An optional human-friendly name for this attribute. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + samlAttributeName : str, default is Undefined, optional + The name of the SAML attribute. + samlAttributeNameFormat : str, default is Undefined, optional + The SAML attribute Name Format. Can be one of Unspecified, Basic, or URI Reference. + userProperty : str, default is Undefined, optional + The property of the Keycloak user model to map. + """ + + + clientId?: str + + clientScopeId?: str + + friendlyName?: str + + id?: str + + name?: str + + realmId?: str + + samlAttributeName?: str + + samlAttributeNameFormat?: str + + userProperty?: str + + +schema SamlclientKeycloakCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/cluster/workflow/v1alpha1/workflow_keycloak_crossplane_io_v1alpha1_workflow.k b/crossplane_provider_keycloak/cluster/workflow/v1alpha1/workflow_keycloak_crossplane_io_v1alpha1_workflow.k new file mode 100644 index 00000000..f35e83e7 --- /dev/null +++ b/crossplane_provider_keycloak/cluster/workflow/v1alpha1/workflow_keycloak_crossplane_io_v1alpha1_workflow.k @@ -0,0 +1,646 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema Workflow: + r""" + Workflow is the Schema for the Workflows API. + + Attributes + ---------- + apiVersion : str, default is "workflow.keycloak.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "Workflow", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpec, default is Undefined, required + spec + status : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowStatus, default is Undefined, optional + status + """ + + + apiVersion: "workflow.keycloak.crossplane.io/v1alpha1" = "workflow.keycloak.crossplane.io/v1alpha1" + + kind: "Workflow" = "Workflow" + + metadata?: v1.ObjectMeta + + spec: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpec + + status?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowStatus + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpec: + r""" + WorkflowSpec defines the desired state of Workflow + + Attributes + ---------- + deletionPolicy : str, default is "Delete", optional + DeletionPolicy specifies what will happen to the underlying external + when this managed resource is deleted - either "Delete" or "Orphan" the + external resource. + This field is planned to be deprecated in favor of the ManagementPolicies + field in a future release. Currently, both could be set independently and + non-default values would be honored if the feature flag is enabled. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + forProvider : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProvider, default is Undefined, required + for provider + initProvider : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + This field is planned to replace the DeletionPolicy field in a future + release. Currently, both could be set independently and non-default + values would be honored if the feature flag is enabled. If both are + custom, the DeletionPolicy field will be ignored. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + deletionPolicy?: "Orphan" | "Delete" = "Delete" + + forProvider: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProvider + + initProvider?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecProviderConfigRef + + writeConnectionSecretToRef?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecWriteConnectionSecretToRef + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProvider: + r""" + workflow keycloak crossplane io v1alpha1 workflow spec for provider + + Attributes + ---------- + cancelInProgress : str, default is Undefined, optional + Event that cancels an in-progress workflow execution. + Event that cancels an in-progress workflow execution. + conditions : str, default is Undefined, optional + An expression that must evaluate to true for the workflow to run (e.g. has-role('some-role')). + Expression that must be satisfied for the workflow to run. + enabled : bool, default is Undefined, optional + Whether the workflow is enabled. Defaults to true. + Whether the workflow is enabled. + name : str, default is Undefined, optional + The name of the workflow. + The name of the workflow. + on : str, default is Undefined, optional + The realm event that triggers the workflow. Supported values: user_created, user_removed, user_authenticated, user_federated_identity_added, user_federated_identity_removed, user_group_membership_added, user_group_membership_removed, user_role_granted, user_role_revoked. + The event that triggers the workflow. Supported values: user_created, user_removed, user_authenticated, user_federated_identity_added, user_federated_identity_removed, user_group_membership_added, user_group_membership_removed, user_role_granted, user_role_revoked. + realm : str, default is Undefined, optional + The realm this workflow exists in. Changing this forces a new resource. + The realm this workflow belongs to. + realmRef : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderRealmSelector, default is Undefined, optional + realm selector + restartInProgress : str, default is Undefined, optional + Event that restarts an in-progress workflow execution. + Event that restarts an in-progress workflow execution. + step : [WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderStepItems0], default is Undefined, optional + One or more step blocks defining the actions to execute, in order. + Ordered list of steps to execute. + """ + + + cancelInProgress?: str + + conditions?: str + + enabled?: bool + + name?: str + + on?: str + + realm?: str + + realmRef?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderRealmRef + + realmSelector?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderRealmSelector + + restartInProgress?: str + + step?: [WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderStepItems0] + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderRealmRefPolicy + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderRealmSelectorPolicy + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecForProviderStepItems0: + r""" + workflow keycloak crossplane io v1alpha1 workflow spec for provider step items0 + + Attributes + ---------- + after : str, default is Undefined, optional + Delay in milliseconds before executing this step. + Delay in milliseconds before executing this step. + config : {str:str}, default is Undefined, optional + A map of key-value pairs configuring the step (e.g. emailTemplate for notify-user). + Key-value configuration for the step. + uses : str, default is Undefined, optional + The step type. Built-in values: disable-user, delete-user, notify-user, set-user-required-action, set-user-attribute. + The step type to execute (e.g. disable-user, delete-user, notify-user). + """ + + + after?: str + + config?: {str:str} + + uses?: str + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + cancelInProgress : str, default is Undefined, optional + Event that cancels an in-progress workflow execution. + Event that cancels an in-progress workflow execution. + conditions : str, default is Undefined, optional + An expression that must evaluate to true for the workflow to run (e.g. has-role('some-role')). + Expression that must be satisfied for the workflow to run. + enabled : bool, default is Undefined, optional + Whether the workflow is enabled. Defaults to true. + Whether the workflow is enabled. + name : str, default is Undefined, optional + The name of the workflow. + The name of the workflow. + on : str, default is Undefined, optional + The realm event that triggers the workflow. Supported values: user_created, user_removed, user_authenticated, user_federated_identity_added, user_federated_identity_removed, user_group_membership_added, user_group_membership_removed, user_role_granted, user_role_revoked. + The event that triggers the workflow. Supported values: user_created, user_removed, user_authenticated, user_federated_identity_added, user_federated_identity_removed, user_group_membership_added, user_group_membership_removed, user_role_granted, user_role_revoked. + realm : str, default is Undefined, optional + The realm this workflow exists in. Changing this forces a new resource. + The realm this workflow belongs to. + realmRef : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + restartInProgress : str, default is Undefined, optional + Event that restarts an in-progress workflow execution. + Event that restarts an in-progress workflow execution. + step : [WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderStepItems0], default is Undefined, optional + One or more step blocks defining the actions to execute, in order. + Ordered list of steps to execute. + """ + + + cancelInProgress?: str + + conditions?: str + + enabled?: bool + + name?: str + + on?: str + + realm?: str + + realmRef?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmRef + + realmSelector?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmSelector + + restartInProgress?: str + + step?: [WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderStepItems0] + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmRefPolicy + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + policy : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + policy?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmSelectorPolicy + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecInitProviderStepItems0: + r""" + workflow keycloak crossplane io v1alpha1 workflow spec init provider step items0 + + Attributes + ---------- + after : str, default is Undefined, optional + Delay in milliseconds before executing this step. + Delay in milliseconds before executing this step. + config : {str:str}, default is Undefined, optional + A map of key-value pairs configuring the step (e.g. emailTemplate for notify-user). + Key-value configuration for the step. + uses : str, default is Undefined, optional + The step type. Built-in values: disable-user, delete-user, notify-user, set-user-required-action, set-user-attribute. + The step type to execute (e.g. disable-user, delete-user, notify-user). + """ + + + after?: str + + config?: {str:str} + + uses?: str + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + policy : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecProviderConfigRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + policy?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecProviderConfigRefPolicy + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecProviderConfigRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + namespace : str, default is Undefined, required + Namespace of the secret. + """ + + + name: str + + namespace: str + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowStatus: + r""" + WorkflowStatus defines the observed state of Workflow. + + Attributes + ---------- + atProvider : WorkflowKeycloakCrossplaneIoV1alpha1WorkflowStatusAtProvider, default is Undefined, optional + at provider + conditions : [WorkflowKeycloakCrossplaneIoV1alpha1WorkflowStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: WorkflowKeycloakCrossplaneIoV1alpha1WorkflowStatusAtProvider + + conditions?: [WorkflowKeycloakCrossplaneIoV1alpha1WorkflowStatusConditionsItems0] + + observedGeneration?: int + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowStatusAtProvider: + r""" + workflow keycloak crossplane io v1alpha1 workflow status at provider + + Attributes + ---------- + cancelInProgress : str, default is Undefined, optional + Event that cancels an in-progress workflow execution. + Event that cancels an in-progress workflow execution. + conditions : str, default is Undefined, optional + An expression that must evaluate to true for the workflow to run (e.g. has-role('some-role')). + Expression that must be satisfied for the workflow to run. + enabled : bool, default is Undefined, optional + Whether the workflow is enabled. Defaults to true. + Whether the workflow is enabled. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The name of the workflow. + The name of the workflow. + on : str, default is Undefined, optional + The realm event that triggers the workflow. Supported values: user_created, user_removed, user_authenticated, user_federated_identity_added, user_federated_identity_removed, user_group_membership_added, user_group_membership_removed, user_role_granted, user_role_revoked. + The event that triggers the workflow. Supported values: user_created, user_removed, user_authenticated, user_federated_identity_added, user_federated_identity_removed, user_group_membership_added, user_group_membership_removed, user_role_granted, user_role_revoked. + realm : str, default is Undefined, optional + The realm this workflow exists in. Changing this forces a new resource. + The realm this workflow belongs to. + restartInProgress : str, default is Undefined, optional + Event that restarts an in-progress workflow execution. + Event that restarts an in-progress workflow execution. + step : [WorkflowKeycloakCrossplaneIoV1alpha1WorkflowStatusAtProviderStepItems0], default is Undefined, optional + One or more step blocks defining the actions to execute, in order. + Ordered list of steps to execute. + """ + + + cancelInProgress?: str + + conditions?: str + + enabled?: bool + + id?: str + + name?: str + + on?: str + + realm?: str + + restartInProgress?: str + + step?: [WorkflowKeycloakCrossplaneIoV1alpha1WorkflowStatusAtProviderStepItems0] + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowStatusAtProviderStepItems0: + r""" + workflow keycloak crossplane io v1alpha1 workflow status at provider step items0 + + Attributes + ---------- + after : str, default is Undefined, optional + Delay in milliseconds before executing this step. + Delay in milliseconds before executing this step. + config : {str:str}, default is Undefined, optional + A map of key-value pairs configuring the step (e.g. emailTemplate for notify-user). + Key-value configuration for the step. + uses : str, default is Undefined, optional + The step type. Built-in values: disable-user, delete-user, notify-user, set-user-required-action, set-user-attribute. + The step type to execute (e.g. disable-user, delete-user, notify-user). + """ + + + after?: str + + config?: {str:str} + + uses?: str + + +schema WorkflowKeycloakCrossplaneIoV1alpha1WorkflowStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/kcl.mod b/crossplane_provider_keycloak/kcl.mod index 34be134c..17cc1fee 100644 --- a/crossplane_provider_keycloak/kcl.mod +++ b/crossplane_provider_keycloak/kcl.mod @@ -1,7 +1,7 @@ [package] name = "crossplane_provider_keycloak" -edition = "v0.11.0" -version = "2.16.0" +edition = "v0.11.2" +version = "2.24.1" [dependencies] k8s = "1.32.4" diff --git a/crossplane_provider_keycloak/namespaced/client/v1alpha1/client_keycloakm_crossplane_io_v1alpha1_generic_client_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/client/v1alpha1/client_keycloakm_crossplane_io_v1alpha1_generic_client_protocol_mapper.k new file mode 100644 index 00000000..eeeea233 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/client/v1alpha1/client_keycloakm_crossplane_io_v1alpha1_generic_client_protocol_mapper.k @@ -0,0 +1,1391 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema GenericClientProtocolMapper: + r""" + GenericClientProtocolMapper is the Schema for the GenericClientProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "client.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "GenericClientProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpec, default is Undefined, required + spec + status : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "client.keycloak.m.crossplane.io/v1alpha1" = "client.keycloak.m.crossplane.io/v1alpha1" + + kind: "GenericClientProtocolMapper" = "GenericClientProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpec + + status?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperStatus + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpec: + r""" + GenericClientProtocolMapperSpec defines the desired state of GenericClientProtocolMapper + + Attributes + ---------- + forProvider : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProvider + + initProvider?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecWriteConnectionSecretToRef + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProvider: + r""" + client keycloakm crossplane io v1alpha1 generic client protocol mapper spec for provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper is attached to. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + config : {str:str}, default is Undefined, optional + A map with key / value pairs for configuring the protocol mapper. The supported keys depends on the protocol mapper. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + $protocol : str, default is Undefined, optional + The type of client (either openid-connect or saml). The type must match the type of the client. + The protocol of the client (openid-connect / saml). + protocolMapper : str, default is Undefined, optional + The name of the protocol mapper. The protocol mapper must be compatible with the specified client. + The type of the protocol mapper. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + samlClientId : str, default is Undefined, optional + The client this protocol mapper is attached to. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + samlClientIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDRef, default is Undefined, optional + saml client Id ref + samlClientIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDSelector, default is Undefined, optional + saml client Id selector + samlClientScopeId : str, default is Undefined, optional + The mapper's associated client scope. Cannot be used at the same time as client_id. + samlClientScopeIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDRef, default is Undefined, optional + saml client scope Id ref + samlClientScopeIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDSelector, default is Undefined, optional + saml client scope Id selector + """ + + + clientId?: str + + clientIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDSelector + + config?: {str:str} + + name?: str + + $protocol?: str + + protocolMapper?: str + + realmId?: str + + realmIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDSelector + + samlClientId?: str + + samlClientIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDRef + + samlClientIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDSelector + + samlClientScopeId?: str + + samlClientScopeIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDRef + + samlClientScopeIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDSelector + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDRef: + r""" + Reference to a Client in samlclient to populate samlClientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDSelector: + r""" + Selector for a Client in samlclient to populate samlClientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecForProviderSamlClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper is attached to. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + config : {str:str}, default is Undefined, optional + A map with key / value pairs for configuring the protocol mapper. The supported keys depends on the protocol mapper. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + $protocol : str, default is Undefined, optional + The type of client (either openid-connect or saml). The type must match the type of the client. + The protocol of the client (openid-connect / saml). + protocolMapper : str, default is Undefined, optional + The name of the protocol mapper. The protocol mapper must be compatible with the specified client. + The type of the protocol mapper. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + samlClientId : str, default is Undefined, optional + The client this protocol mapper is attached to. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + samlClientIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDRef, default is Undefined, optional + saml client Id ref + samlClientIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDSelector, default is Undefined, optional + saml client Id selector + samlClientScopeId : str, default is Undefined, optional + The mapper's associated client scope. Cannot be used at the same time as client_id. + samlClientScopeIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDRef, default is Undefined, optional + saml client scope Id ref + samlClientScopeIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDSelector, default is Undefined, optional + saml client scope Id selector + """ + + + clientId?: str + + clientIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDSelector + + config?: {str:str} + + name?: str + + $protocol?: str + + protocolMapper?: str + + realmId?: str + + realmIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDSelector + + samlClientId?: str + + samlClientIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDRef + + samlClientIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDSelector + + samlClientScopeId?: str + + samlClientScopeIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDRef + + samlClientScopeIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDSelector + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDRef: + r""" + Reference to a Client in samlclient to populate samlClientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDSelector: + r""" + Selector for a Client in samlclient to populate samlClientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecInitProviderSamlClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperStatus: + r""" + GenericClientProtocolMapperStatus defines the observed state of GenericClientProtocolMapper. + + Attributes + ---------- + atProvider : ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperStatusAtProvider + + conditions?: [ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperStatusAtProvider: + r""" + client keycloakm crossplane io v1alpha1 generic client protocol mapper status at provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper is attached to. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The mapper's associated client scope. Cannot be used at the same time as client_id. + config : {str:str}, default is Undefined, optional + A map with key / value pairs for configuring the protocol mapper. The supported keys depends on the protocol mapper. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + $protocol : str, default is Undefined, optional + The type of client (either openid-connect or saml). The type must match the type of the client. + The protocol of the client (openid-connect / saml). + protocolMapper : str, default is Undefined, optional + The name of the protocol mapper. The protocol mapper must be compatible with the specified client. + The type of the protocol mapper. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + samlClientId : str, default is Undefined, optional + The client this protocol mapper is attached to. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + samlClientScopeId : str, default is Undefined, optional + The mapper's associated client scope. Cannot be used at the same time as client_id. + """ + + + clientId?: str + + clientScopeId?: str + + config?: {str:str} + + id?: str + + name?: str + + $protocol?: str + + protocolMapper?: str + + realmId?: str + + samlClientId?: str + + samlClientScopeId?: str + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/client/v1alpha1/client_keycloakm_crossplane_io_v1alpha1_generic_client_role_mapper.k b/crossplane_provider_keycloak/namespaced/client/v1alpha1/client_keycloakm_crossplane_io_v1alpha1_generic_client_role_mapper.k new file mode 100644 index 00000000..49537abf --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/client/v1alpha1/client_keycloakm_crossplane_io_v1alpha1_generic_client_role_mapper.k @@ -0,0 +1,1565 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema GenericClientRoleMapper: + r""" + GenericClientRoleMapper is the Schema for the GenericClientRoleMappers API. + + Attributes + ---------- + apiVersion : str, default is "client.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "GenericClientRoleMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpec, default is Undefined, required + spec + status : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "client.keycloak.m.crossplane.io/v1alpha1" = "client.keycloak.m.crossplane.io/v1alpha1" + + kind: "GenericClientRoleMapper" = "GenericClientRoleMapper" + + metadata?: v1.ObjectMeta + + spec: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpec + + status?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperStatus + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpec: + r""" + GenericClientRoleMapperSpec defines the desired state of GenericClientRoleMapper + + Attributes + ---------- + forProvider : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProvider, default is Undefined, required + for provider + initProvider : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProvider + + initProvider?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecWriteConnectionSecretToRef + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProvider: + r""" + client keycloakm crossplane io v1alpha1 generic client role mapper spec for provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The ID of the client this role mapper should be added to. Conflicts with client_scope_id. This argument is required if client_scope_id is not set. + The destination client of the role. Cannot be used at the same time as client_scope_id. + clientIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The ID of the client scope this role mapper should be added to. Conflicts with client_id. This argument is required if client_id is not set. + The destination client scope of the role. Cannot be used at the same time as client_id. + clientScopeIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + realmId : str, default is Undefined, optional + The realm this role mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + roleId : str, default is Undefined, optional + The ID of the role to be added to this role mapper. + Id of the role to assign + roleIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDRef, default is Undefined, optional + role Id ref + roleIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDSelector, default is Undefined, optional + role Id selector + samlClientId : str, default is Undefined, optional + The ID of the client this role mapper should be added to. Conflicts with client_scope_id. This argument is required if client_scope_id is not set. + The destination client of the role. Cannot be used at the same time as client_scope_id. + samlClientIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDRef, default is Undefined, optional + saml client Id ref + samlClientIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDSelector, default is Undefined, optional + saml client Id selector + samlClientScopeId : str, default is Undefined, optional + The ID of the client scope this role mapper should be added to. Conflicts with client_id. This argument is required if client_id is not set. + The destination client scope of the role. Cannot be used at the same time as client_id. + samlClientScopeIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDRef, default is Undefined, optional + saml client scope Id ref + samlClientScopeIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDSelector, default is Undefined, optional + saml client scope Id selector + """ + + + clientId?: str + + clientIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDRef + + clientIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDSelector + + realmId?: str + + realmIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDRef + + realmIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDSelector + + roleId?: str + + roleIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDRef + + roleIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDSelector + + samlClientId?: str + + samlClientIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDRef + + samlClientIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDSelector + + samlClientScopeId?: str + + samlClientScopeIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDRef + + samlClientScopeIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDSelector + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDRef: + r""" + Reference to a Role in role to populate roleId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDSelector: + r""" + Selector for a Role in role to populate roleId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderRoleIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDRef: + r""" + Reference to a Client in samlclient to populate samlClientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDSelector: + r""" + Selector for a Client in samlclient to populate samlClientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecForProviderSamlClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + clientId : str, default is Undefined, optional + The ID of the client this role mapper should be added to. Conflicts with client_scope_id. This argument is required if client_scope_id is not set. + The destination client of the role. Cannot be used at the same time as client_scope_id. + clientIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The ID of the client scope this role mapper should be added to. Conflicts with client_id. This argument is required if client_id is not set. + The destination client scope of the role. Cannot be used at the same time as client_id. + clientScopeIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + realmId : str, default is Undefined, optional + The realm this role mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + roleId : str, default is Undefined, optional + The ID of the role to be added to this role mapper. + Id of the role to assign + roleIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDRef, default is Undefined, optional + role Id ref + roleIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDSelector, default is Undefined, optional + role Id selector + samlClientId : str, default is Undefined, optional + The ID of the client this role mapper should be added to. Conflicts with client_scope_id. This argument is required if client_scope_id is not set. + The destination client of the role. Cannot be used at the same time as client_scope_id. + samlClientIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDRef, default is Undefined, optional + saml client Id ref + samlClientIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDSelector, default is Undefined, optional + saml client Id selector + samlClientScopeId : str, default is Undefined, optional + The ID of the client scope this role mapper should be added to. Conflicts with client_id. This argument is required if client_id is not set. + The destination client scope of the role. Cannot be used at the same time as client_id. + samlClientScopeIdRef : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDRef, default is Undefined, optional + saml client scope Id ref + samlClientScopeIdSelector : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDSelector, default is Undefined, optional + saml client scope Id selector + """ + + + clientId?: str + + clientIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDRef + + clientIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDSelector + + realmId?: str + + realmIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDRef + + realmIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDSelector + + roleId?: str + + roleIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDRef + + roleIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDSelector + + samlClientId?: str + + samlClientIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDRef + + samlClientIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDSelector + + samlClientScopeId?: str + + samlClientScopeIdRef?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDRef + + samlClientScopeIdSelector?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDSelector + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDRef: + r""" + Reference to a Role in role to populate roleId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDSelector: + r""" + Selector for a Role in role to populate roleId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderRoleIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDRef: + r""" + Reference to a Client in samlclient to populate samlClientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDSelector: + r""" + Selector for a Client in samlclient to populate samlClientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDRefPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate samlClientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDSelectorPolicy + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecInitProviderSamlClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperStatus: + r""" + GenericClientRoleMapperStatus defines the observed state of GenericClientRoleMapper. + + Attributes + ---------- + atProvider : ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperStatusAtProvider + + conditions?: [ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperStatusAtProvider: + r""" + client keycloakm crossplane io v1alpha1 generic client role mapper status at provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The ID of the client this role mapper should be added to. Conflicts with client_scope_id. This argument is required if client_scope_id is not set. + The destination client of the role. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The ID of the client scope this role mapper should be added to. Conflicts with client_id. This argument is required if client_id is not set. + The destination client scope of the role. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + realmId : str, default is Undefined, optional + The realm this role mapper exists within. + The realm id where the associated client or client scope exists. + roleId : str, default is Undefined, optional + The ID of the role to be added to this role mapper. + Id of the role to assign + samlClientId : str, default is Undefined, optional + The ID of the client this role mapper should be added to. Conflicts with client_scope_id. This argument is required if client_scope_id is not set. + The destination client of the role. Cannot be used at the same time as client_scope_id. + samlClientScopeId : str, default is Undefined, optional + The ID of the client scope this role mapper should be added to. Conflicts with client_id. This argument is required if client_id is not set. + The destination client scope of the role. Cannot be used at the same time as client_id. + """ + + + clientId?: str + + clientScopeId?: str + + id?: str + + realmId?: str + + roleId?: str + + samlClientId?: str + + samlClientScopeId?: str + + +schema ClientKeycloakmCrossplaneIoV1alpha1GenericClientRoleMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/group/v1alpha1/group_keycloakm_crossplane_io_v1alpha1_group.k b/crossplane_provider_keycloak/namespaced/group/v1alpha1/group_keycloakm_crossplane_io_v1alpha1_group.k index 4d55564a..dd8cd126 100644 --- a/crossplane_provider_keycloak/namespaced/group/v1alpha1/group_keycloakm_crossplane_io_v1alpha1_group.k +++ b/crossplane_provider_keycloak/namespaced/group/v1alpha1/group_keycloakm_crossplane_io_v1alpha1_group.k @@ -82,6 +82,12 @@ schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProvider: description name : str, default is Undefined, optional The name of the group. + organizationId : str, default is Undefined, optional + The organization this group exists in. If omitted, this group will be managed as a realm group. Organization groups require Keycloak 26.6.0 or later. + organizationIdRef : GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector parentId : str, default is Undefined, optional The ID of this group's parent. If omitted, this group will be defined at the root level. parentIdRef : GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderParentIDRef, default is Undefined, optional @@ -103,6 +109,12 @@ schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProvider: name?: str + organizationId?: str + + organizationIdRef?: GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDRef + + organizationIdSelector?: GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDSelector + parentId?: str parentIdRef?: GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderParentIDRef @@ -116,6 +128,103 @@ schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProvider: realmIdSelector?: GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderRealmIDSelector +schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDRefPolicy + + +schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDSelectorPolicy + + +schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecForProviderParentIDRef: r""" Reference to a Group in group to populate parentId. @@ -331,6 +440,12 @@ schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProvider: description name : str, default is Undefined, optional The name of the group. + organizationId : str, default is Undefined, optional + The organization this group exists in. If omitted, this group will be managed as a realm group. Organization groups require Keycloak 26.6.0 or later. + organizationIdRef : GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector parentId : str, default is Undefined, optional The ID of this group's parent. If omitted, this group will be defined at the root level. parentIdRef : GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderParentIDRef, default is Undefined, optional @@ -352,6 +467,12 @@ schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProvider: name?: str + organizationId?: str + + organizationIdRef?: GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDRef + + organizationIdSelector?: GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDSelector + parentId?: str parentIdRef?: GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderParentIDRef @@ -365,6 +486,103 @@ schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProvider: realmIdSelector?: GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderRealmIDSelector +schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDRefPolicy + + +schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDSelectorPolicy + + +schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + schema GroupKeycloakmCrossplaneIoV1alpha1GroupSpecInitProviderParentIDRef: r""" Reference to a Group in group to populate parentId. @@ -634,6 +852,8 @@ schema GroupKeycloakmCrossplaneIoV1alpha1GroupStatusAtProvider: id name : str, default is Undefined, optional The name of the group. + organizationId : str, default is Undefined, optional + The organization this group exists in. If omitted, this group will be managed as a realm group. Organization groups require Keycloak 26.6.0 or later. parentId : str, default is Undefined, optional The ID of this group's parent. If omitted, this group will be defined at the root level. path : str, default is Undefined, optional @@ -651,6 +871,8 @@ schema GroupKeycloakmCrossplaneIoV1alpha1GroupStatusAtProvider: name?: str + organizationId?: str + parentId?: str path?: str diff --git a/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_attribute_identity_provider_mapper.k b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_attribute_identity_provider_mapper.k new file mode 100644 index 00000000..141b337a --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_attribute_identity_provider_mapper.k @@ -0,0 +1,527 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema AttributeIdentityProviderMapper: + r""" + AttributeIdentityProviderMapper is the Schema for the AttributeIdentityProviderMappers API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "AttributeIdentityProviderMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.m.crossplane.io/v1alpha1" = "identityprovider.keycloak.m.crossplane.io/v1alpha1" + + kind: "AttributeIdentityProviderMapper" = "AttributeIdentityProviderMapper" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpec + + status?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatus + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpec: + r""" + AttributeIdentityProviderMapperSpec defines the desired state of AttributeIdentityProviderMapper + + Attributes + ---------- + forProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProvider + + initProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 attribute identity provider mapper spec for provider + + Attributes + ---------- + attributeName : str, default is Undefined, optional + The name of the IDP attribute to set. + OIDC Claim + attributeValue : str, default is Undefined, optional + The value to set to the attribute. You can hardcode any value like 'foo'. + User Attribute + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmSelector, default is Undefined, optional + realm selector + userSession : bool, default is Undefined, optional + Is Attribute related to a User Session. + Is Attribute Related To a User Session + """ + + + attributeName?: str + + attributeValue?: str + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmSelector + + userSession?: bool + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + attributeName : str, default is Undefined, optional + The name of the IDP attribute to set. + OIDC Claim + attributeValue : str, default is Undefined, optional + The value to set to the attribute. You can hardcode any value like 'foo'. + User Attribute + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + userSession : bool, default is Undefined, optional + Is Attribute related to a User Session. + Is Attribute Related To a User Session + """ + + + attributeName?: str + + attributeValue?: str + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmSelector + + userSession?: bool + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatus: + r""" + AttributeIdentityProviderMapperStatus defines the observed state of AttributeIdentityProviderMapper. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatusAtProvider + + conditions?: [IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatusAtProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 attribute identity provider mapper status at provider + + Attributes + ---------- + attributeName : str, default is Undefined, optional + The name of the IDP attribute to set. + OIDC Claim + attributeValue : str, default is Undefined, optional + The value to set to the attribute. You can hardcode any value like 'foo'. + User Attribute + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + id : str, default is Undefined, optional + id + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + userSession : bool, default is Undefined, optional + Is Attribute related to a User Session. + Is Attribute Related To a User Session + """ + + + attributeName?: str + + attributeValue?: str + + extraConfig?: {str:str} + + id?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + userSession?: bool + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1AttributeIdentityProviderMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_group_identity_provider_mapper.k b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_group_identity_provider_mapper.k new file mode 100644 index 00000000..3490581e --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_group_identity_provider_mapper.k @@ -0,0 +1,497 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema GroupIdentityProviderMapper: + r""" + GroupIdentityProviderMapper is the Schema for the GroupIdentityProviderMappers API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "GroupIdentityProviderMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.m.crossplane.io/v1alpha1" = "identityprovider.keycloak.m.crossplane.io/v1alpha1" + + kind: "GroupIdentityProviderMapper" = "GroupIdentityProviderMapper" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpec + + status?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperStatus + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpec: + r""" + GroupIdentityProviderMapperSpec defines the desired state of GroupIdentityProviderMapper + + Attributes + ---------- + forProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProvider + + initProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 group identity provider mapper spec for provider + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + group : str, default is Undefined, optional + The name of the group which should be assigned to the users. + Group Name + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmSelector, default is Undefined, optional + realm selector + """ + + + extraConfig?: {str:str} + + group?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmSelector + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + group : str, default is Undefined, optional + The name of the group which should be assigned to the users. + Group Name + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + """ + + + extraConfig?: {str:str} + + group?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmSelector + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperStatus: + r""" + GroupIdentityProviderMapperStatus defines the observed state of GroupIdentityProviderMapper. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperStatusAtProvider + + conditions?: [IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperStatusAtProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 group identity provider mapper status at provider + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + group : str, default is Undefined, optional + The name of the group which should be assigned to the users. + Group Name + id : str, default is Undefined, optional + id + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + """ + + + extraConfig?: {str:str} + + group?: str + + id?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1GroupIdentityProviderMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_importer_identity_provider_mapper.k b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_importer_identity_provider_mapper.k new file mode 100644 index 00000000..9ce328f7 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_importer_identity_provider_mapper.k @@ -0,0 +1,542 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema ImporterIdentityProviderMapper: + r""" + ImporterIdentityProviderMapper is the Schema for the ImporterIdentityProviderMappers API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "ImporterIdentityProviderMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.m.crossplane.io/v1alpha1" = "identityprovider.keycloak.m.crossplane.io/v1alpha1" + + kind: "ImporterIdentityProviderMapper" = "ImporterIdentityProviderMapper" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpec + + status?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatus + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpec: + r""" + ImporterIdentityProviderMapperSpec defines the desired state of ImporterIdentityProviderMapper + + Attributes + ---------- + forProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProvider + + initProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 importer identity provider mapper spec for provider + + Attributes + ---------- + attributeFriendlyName : str, default is Undefined, optional + For SAML based providers, this is the friendly name of the attribute to search for in the assertion. Conflicts with attribute_name. + Attribute Friendly Name + attributeName : str, default is Undefined, optional + For SAML based providers, this is the name of the attribute to search for in the assertion. Conflicts with attribute_friendly_name. + Attribute Name + claimName : str, default is Undefined, optional + For OIDC based providers, this is the name of the claim to use. + Claim Name + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmSelector, default is Undefined, optional + realm selector + userAttribute : str, default is Undefined, optional + The user attribute or property name to store the mapped result. + User Attribute + """ + + + attributeFriendlyName?: str + + attributeName?: str + + claimName?: str + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmSelector + + userAttribute?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + attributeFriendlyName : str, default is Undefined, optional + For SAML based providers, this is the friendly name of the attribute to search for in the assertion. Conflicts with attribute_name. + Attribute Friendly Name + attributeName : str, default is Undefined, optional + For SAML based providers, this is the name of the attribute to search for in the assertion. Conflicts with attribute_friendly_name. + Attribute Name + claimName : str, default is Undefined, optional + For OIDC based providers, this is the name of the claim to use. + Claim Name + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + userAttribute : str, default is Undefined, optional + The user attribute or property name to store the mapped result. + User Attribute + """ + + + attributeFriendlyName?: str + + attributeName?: str + + claimName?: str + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmSelector + + userAttribute?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatus: + r""" + ImporterIdentityProviderMapperStatus defines the observed state of ImporterIdentityProviderMapper. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatusAtProvider + + conditions?: [IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatusAtProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 importer identity provider mapper status at provider + + Attributes + ---------- + attributeFriendlyName : str, default is Undefined, optional + For SAML based providers, this is the friendly name of the attribute to search for in the assertion. Conflicts with attribute_name. + Attribute Friendly Name + attributeName : str, default is Undefined, optional + For SAML based providers, this is the name of the attribute to search for in the assertion. Conflicts with attribute_friendly_name. + Attribute Name + claimName : str, default is Undefined, optional + For OIDC based providers, this is the name of the claim to use. + Claim Name + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + id : str, default is Undefined, optional + id + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + userAttribute : str, default is Undefined, optional + The user attribute or property name to store the mapped result. + User Attribute + """ + + + attributeFriendlyName?: str + + attributeName?: str + + claimName?: str + + extraConfig?: {str:str} + + id?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + userAttribute?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ImporterIdentityProviderMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_kubernetes_identity_provider.k b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_kubernetes_identity_provider.k new file mode 100644 index 00000000..2e608a54 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_kubernetes_identity_provider.k @@ -0,0 +1,1096 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema KubernetesIdentityProvider: + r""" + KubernetesIdentityProvider is the Schema for the KubernetesIdentityProviders API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "KubernetesIdentityProvider", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.m.crossplane.io/v1alpha1" = "identityprovider.keycloak.m.crossplane.io/v1alpha1" + + kind: "KubernetesIdentityProvider" = "KubernetesIdentityProvider" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpec + + status?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderStatus + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpec: + r""" + KubernetesIdentityProviderSpec defines the desired state of KubernetesIdentityProvider + + Attributes + ---------- + forProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProvider + + initProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 kubernetes identity provider spec for provider + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + displayName : str, default is Undefined, optional + Friendly name for Identity Providers. + enabled : bool, default is Undefined, optional + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + extra config + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + firstBrokerLoginFlowAliasRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef, default is Undefined, optional + first broker login flow alias ref + firstBrokerLoginFlowAliasSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector, default is Undefined, optional + first broker login flow alias selector + guiOrder : str, default is Undefined, optional + GUI Order + issuer : str, default is Undefined, optional + The Kubernetes issuer URL of service account tokens. The URL /.well-known/openid-configuration must be available to Keycloak. + The issuer of the Kubernetes service account tokens. Depending your Keycloak Realm "ssl_required" setting, this may need to be an HTTPS URL. + linkOnly : bool, default is Undefined, optional + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + organizationIdRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector + postBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + providerId : str, default is Undefined, optional + Provider ID, is always kubernetes. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmSelector, default is Undefined, optional + realm selector + storeToken : bool, default is Undefined, optional + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + Sync Mode + trustEmail : bool, default is Undefined, optional + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + firstBrokerLoginFlowAliasRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef + + firstBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector + + guiOrder?: str + + issuer?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + organizationIdRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDRef + + organizationIdSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDSelector + + postBrokerLoginFlowAlias?: str + + providerId?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmSelector + + storeToken?: bool + + syncMode?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + displayName : str, default is Undefined, optional + Friendly name for Identity Providers. + enabled : bool, default is Undefined, optional + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + extra config + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + firstBrokerLoginFlowAliasRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef, default is Undefined, optional + first broker login flow alias ref + firstBrokerLoginFlowAliasSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector, default is Undefined, optional + first broker login flow alias selector + guiOrder : str, default is Undefined, optional + GUI Order + issuer : str, default is Undefined, optional + The Kubernetes issuer URL of service account tokens. The URL /.well-known/openid-configuration must be available to Keycloak. + The issuer of the Kubernetes service account tokens. Depending your Keycloak Realm "ssl_required" setting, this may need to be an HTTPS URL. + linkOnly : bool, default is Undefined, optional + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + organizationIdRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector + postBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + providerId : str, default is Undefined, optional + Provider ID, is always kubernetes. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + storeToken : bool, default is Undefined, optional + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + Sync Mode + trustEmail : bool, default is Undefined, optional + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + firstBrokerLoginFlowAliasRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef + + firstBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector + + guiOrder?: str + + issuer?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + organizationIdRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDRef + + organizationIdSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDSelector + + postBrokerLoginFlowAlias?: str + + providerId?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmSelector + + storeToken?: bool + + syncMode?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderStatus: + r""" + KubernetesIdentityProviderStatus defines the observed state of KubernetesIdentityProvider. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderStatusAtProvider + + conditions?: [IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderStatusAtProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 kubernetes identity provider status at provider + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + displayName : str, default is Undefined, optional + Friendly name for Identity Providers. + enabled : bool, default is Undefined, optional + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + extra config + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + guiOrder : str, default is Undefined, optional + GUI Order + hideOnLoginPage : bool, default is Undefined, optional + This is always set to true for Kubernetes identity provider. + id : str, default is Undefined, optional + id + internalId : str, default is Undefined, optional + Internal Identity Provider Id + issuer : str, default is Undefined, optional + The Kubernetes issuer URL of service account tokens. The URL /.well-known/openid-configuration must be available to Keycloak. + The issuer of the Kubernetes service account tokens. Depending your Keycloak Realm "ssl_required" setting, this may need to be an HTTPS URL. + linkOnly : bool, default is Undefined, optional + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + postBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + providerId : str, default is Undefined, optional + Provider ID, is always kubernetes. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + storeToken : bool, default is Undefined, optional + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + Sync Mode + trustEmail : bool, default is Undefined, optional + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + guiOrder?: str + + hideOnLoginPage?: bool + + id?: str + + internalId?: str + + issuer?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + postBrokerLoginFlowAlias?: str + + providerId?: str + + realm?: str + + storeToken?: bool + + syncMode?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1KubernetesIdentityProviderStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_oidc_open_shift_v4_identity_provider.k b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_oidc_open_shift_v4_identity_provider.k new file mode 100644 index 00000000..0b9f5603 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_oidc_open_shift_v4_identity_provider.k @@ -0,0 +1,1421 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema OidcOpenShiftV4IdentityProvider: + r""" + OidcOpenShiftV4IdentityProvider is the Schema for the OidcOpenShiftV4IdentityProviders API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "OidcOpenShiftV4IdentityProvider", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.m.crossplane.io/v1alpha1" = "identityprovider.keycloak.m.crossplane.io/v1alpha1" + + kind: "OidcOpenShiftV4IdentityProvider" = "OidcOpenShiftV4IdentityProvider" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpec + + status?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatus + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpec: + r""" + OidcOpenShiftV4IdentityProviderSpec defines the desired state of OidcOpenShiftV4IdentityProvider + + Attributes + ---------- + forProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProvider + + initProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 oidc open shift v4 identity provider spec for provider + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + When true, new users will be able to read stored tokens. This will automatically assign the broker.read-token role. Defaults to false. + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias for the OpenShift v4 identity provider. Defaults to openshift-v4. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. Defaults to openshift-v4 if not set. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + baseUrl : str, default is Undefined, optional + Base URL of the OpenShift 4 cluster, e.g. https://openshift.example.com:8443. + Base URL of the OpenShift 4 cluster, e.g. https://openshift.example.com:8443. + clientId : str, default is Undefined, optional + The client or client identifier registered within the identity provider. + Client ID. + clientSecretSecretRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderClientSecretSecretRef, default is Undefined, optional + client secret secret ref + defaultScopes : str, default is Undefined, optional + The scopes to be sent when asking for authorization. Defaults to user:full. + The scopes to be sent when asking for authorization. Defaults to 'user:full'. + displayName : str, default is Undefined, optional + Display name for the OpenShift v4 identity provider in the GUI. + The human-friendly name of the identity provider, used in the log in form. + enabled : bool, default is Undefined, optional + When true, users will be able to log in to this realm using this identity provider. Defaults to true. + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration to this identity provider. Use this attribute at your own risk, as custom attributes may conflict with top-level configuration attributes in future provider updates. + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The authentication flow to use when users log in for the first time through this identity provider. Defaults to first broker login. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + firstBrokerLoginFlowAliasRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef, default is Undefined, optional + first broker login flow alias ref + firstBrokerLoginFlowAliasSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector, default is Undefined, optional + first broker login flow alias selector + guiOrder : str, default is Undefined, optional + A number defining the order of this identity provider in the GUI. + GUI Order + hideOnLoginPage : bool, default is Undefined, optional + When true, this identity provider will be hidden on the login page. Defaults to false. + Hide On Login Page. + linkOnly : bool, default is Undefined, optional + When true, users cannot sign-in using this provider, but their existing accounts will be linked when possible. Defaults to false. + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + organizationIdRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector + postBrokerLoginFlowAlias : str, default is Undefined, optional + The authentication flow to use after users have successfully logged in, which can be used to perform additional user verification (such as OTP checking). Defaults to an empty string, which means no post login flow will be used. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + postBrokerLoginFlowAliasRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasRef, default is Undefined, optional + post broker login flow alias ref + postBrokerLoginFlowAliasSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelector, default is Undefined, optional + post broker login flow alias selector + providerId : str, default is Undefined, optional + The ID of the identity provider to use. Defaults to openshift-v4, which should be used unless you have extended Keycloak and provided your own implementation. + Provider ID; always openshift-v4 unless you have an extended custom implementation. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmSelector, default is Undefined, optional + realm selector + storeToken : bool, default is Undefined, optional + When true, tokens will be stored after authenticating users. Defaults to true. + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + The default sync mode to use for all mappers attached to this identity provider. Can be one of IMPORT, FORCE, or LEGACY. + Sync Mode + trustEmail : bool, default is Undefined, optional + When true, email addresses for users in this provider will automatically be verified regardless of the realm's email verification policy. Defaults to false. + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + baseUrl?: str + + clientId?: str + + clientSecretSecretRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderClientSecretSecretRef + + defaultScopes?: str + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + firstBrokerLoginFlowAliasRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef + + firstBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector + + guiOrder?: str + + hideOnLoginPage?: bool + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + organizationIdRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDRef + + organizationIdSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDSelector + + postBrokerLoginFlowAlias?: str + + postBrokerLoginFlowAliasRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasRef + + postBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelector + + providerId?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmSelector + + storeToken?: bool + + syncMode?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderClientSecretSecretRef: + r""" + The client or client secret registered within the identity provider. This field is able to obtain its value from vault, use $${vault.ID} format. + Client Secret. + + Attributes + ---------- + key : str, default is Undefined, required + key + name : str, default is Undefined, required + Name of the secret. + """ + + + key: str + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + When true, new users will be able to read stored tokens. This will automatically assign the broker.read-token role. Defaults to false. + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias for the OpenShift v4 identity provider. Defaults to openshift-v4. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. Defaults to openshift-v4 if not set. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + baseUrl : str, default is Undefined, optional + Base URL of the OpenShift 4 cluster, e.g. https://openshift.example.com:8443. + Base URL of the OpenShift 4 cluster, e.g. https://openshift.example.com:8443. + clientId : str, default is Undefined, optional + The client or client identifier registered within the identity provider. + Client ID. + clientSecretSecretRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderClientSecretSecretRef, default is Undefined, required + client secret secret ref + defaultScopes : str, default is Undefined, optional + The scopes to be sent when asking for authorization. Defaults to user:full. + The scopes to be sent when asking for authorization. Defaults to 'user:full'. + displayName : str, default is Undefined, optional + Display name for the OpenShift v4 identity provider in the GUI. + The human-friendly name of the identity provider, used in the log in form. + enabled : bool, default is Undefined, optional + When true, users will be able to log in to this realm using this identity provider. Defaults to true. + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration to this identity provider. Use this attribute at your own risk, as custom attributes may conflict with top-level configuration attributes in future provider updates. + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The authentication flow to use when users log in for the first time through this identity provider. Defaults to first broker login. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + firstBrokerLoginFlowAliasRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef, default is Undefined, optional + first broker login flow alias ref + firstBrokerLoginFlowAliasSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector, default is Undefined, optional + first broker login flow alias selector + guiOrder : str, default is Undefined, optional + A number defining the order of this identity provider in the GUI. + GUI Order + hideOnLoginPage : bool, default is Undefined, optional + When true, this identity provider will be hidden on the login page. Defaults to false. + Hide On Login Page. + linkOnly : bool, default is Undefined, optional + When true, users cannot sign-in using this provider, but their existing accounts will be linked when possible. Defaults to false. + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + organizationIdRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector + postBrokerLoginFlowAlias : str, default is Undefined, optional + The authentication flow to use after users have successfully logged in, which can be used to perform additional user verification (such as OTP checking). Defaults to an empty string, which means no post login flow will be used. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + postBrokerLoginFlowAliasRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRef, default is Undefined, optional + post broker login flow alias ref + postBrokerLoginFlowAliasSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelector, default is Undefined, optional + post broker login flow alias selector + providerId : str, default is Undefined, optional + The ID of the identity provider to use. Defaults to openshift-v4, which should be used unless you have extended Keycloak and provided your own implementation. + Provider ID; always openshift-v4 unless you have an extended custom implementation. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + storeToken : bool, default is Undefined, optional + When true, tokens will be stored after authenticating users. Defaults to true. + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + The default sync mode to use for all mappers attached to this identity provider. Can be one of IMPORT, FORCE, or LEGACY. + Sync Mode + trustEmail : bool, default is Undefined, optional + When true, email addresses for users in this provider will automatically be verified regardless of the realm's email verification policy. Defaults to false. + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + baseUrl?: str + + clientId?: str + + clientSecretSecretRef: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderClientSecretSecretRef + + defaultScopes?: str + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + firstBrokerLoginFlowAliasRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef + + firstBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector + + guiOrder?: str + + hideOnLoginPage?: bool + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + organizationIdRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDRef + + organizationIdSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDSelector + + postBrokerLoginFlowAlias?: str + + postBrokerLoginFlowAliasRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRef + + postBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelector + + providerId?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmSelector + + storeToken?: bool + + syncMode?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderClientSecretSecretRef: + r""" + The client or client secret registered within the identity provider. This field is able to obtain its value from vault, use $${vault.ID} format. + Client Secret. + + Attributes + ---------- + key : str, default is Undefined, required + key + name : str, default is Undefined, required + Name of the secret. + """ + + + key: str + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatus: + r""" + OidcOpenShiftV4IdentityProviderStatus defines the observed state of OidcOpenShiftV4IdentityProvider. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatusAtProvider + + conditions?: [IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatusAtProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 oidc open shift v4 identity provider status at provider + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + When true, new users will be able to read stored tokens. This will automatically assign the broker.read-token role. Defaults to false. + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias for the OpenShift v4 identity provider. Defaults to openshift-v4. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. Defaults to openshift-v4 if not set. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + baseUrl : str, default is Undefined, optional + Base URL of the OpenShift 4 cluster, e.g. https://openshift.example.com:8443. + Base URL of the OpenShift 4 cluster, e.g. https://openshift.example.com:8443. + clientId : str, default is Undefined, optional + The client or client identifier registered within the identity provider. + Client ID. + defaultScopes : str, default is Undefined, optional + The scopes to be sent when asking for authorization. Defaults to user:full. + The scopes to be sent when asking for authorization. Defaults to 'user:full'. + displayName : str, default is Undefined, optional + Display name for the OpenShift v4 identity provider in the GUI. + The human-friendly name of the identity provider, used in the log in form. + enabled : bool, default is Undefined, optional + When true, users will be able to log in to this realm using this identity provider. Defaults to true. + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration to this identity provider. Use this attribute at your own risk, as custom attributes may conflict with top-level configuration attributes in future provider updates. + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The authentication flow to use when users log in for the first time through this identity provider. Defaults to first broker login. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + guiOrder : str, default is Undefined, optional + A number defining the order of this identity provider in the GUI. + GUI Order + hideOnLoginPage : bool, default is Undefined, optional + When true, this identity provider will be hidden on the login page. Defaults to false. + Hide On Login Page. + id : str, default is Undefined, optional + id + internalId : str, default is Undefined, optional + (Computed) The unique ID that Keycloak assigns to the identity provider upon creation. + Internal Identity Provider Id + linkOnly : bool, default is Undefined, optional + When true, users cannot sign-in using this provider, but their existing accounts will be linked when possible. Defaults to false. + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + postBrokerLoginFlowAlias : str, default is Undefined, optional + The authentication flow to use after users have successfully logged in, which can be used to perform additional user verification (such as OTP checking). Defaults to an empty string, which means no post login flow will be used. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + providerId : str, default is Undefined, optional + The ID of the identity provider to use. Defaults to openshift-v4, which should be used unless you have extended Keycloak and provided your own implementation. + Provider ID; always openshift-v4 unless you have an extended custom implementation. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + storeToken : bool, default is Undefined, optional + When true, tokens will be stored after authenticating users. Defaults to true. + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + The default sync mode to use for all mappers attached to this identity provider. Can be one of IMPORT, FORCE, or LEGACY. + Sync Mode + trustEmail : bool, default is Undefined, optional + When true, email addresses for users in this provider will automatically be verified regardless of the realm's email verification policy. Defaults to false. + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + baseUrl?: str + + clientId?: str + + defaultScopes?: str + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + guiOrder?: str + + hideOnLoginPage?: bool + + id?: str + + internalId?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + postBrokerLoginFlowAlias?: str + + providerId?: str + + realm?: str + + storeToken?: bool + + syncMode?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1OidcOpenShiftV4IdentityProviderStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_role_identity_provider_mapper.k b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_role_identity_provider_mapper.k new file mode 100644 index 00000000..a25404f8 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_role_identity_provider_mapper.k @@ -0,0 +1,497 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema RoleIdentityProviderMapper: + r""" + RoleIdentityProviderMapper is the Schema for the RoleIdentityProviderMappers API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "RoleIdentityProviderMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.m.crossplane.io/v1alpha1" = "identityprovider.keycloak.m.crossplane.io/v1alpha1" + + kind: "RoleIdentityProviderMapper" = "RoleIdentityProviderMapper" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpec + + status?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperStatus + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpec: + r""" + RoleIdentityProviderMapperSpec defines the desired state of RoleIdentityProviderMapper + + Attributes + ---------- + forProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProvider + + initProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 role identity provider mapper spec for provider + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmSelector, default is Undefined, optional + realm selector + role : str, default is Undefined, optional + The name of the role which should be assigned to the users. + Role Name + """ + + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmSelector + + role?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + role : str, default is Undefined, optional + The name of the role which should be assigned to the users. + Role Name + """ + + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmSelector + + role?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperStatus: + r""" + RoleIdentityProviderMapperStatus defines the observed state of RoleIdentityProviderMapper. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperStatusAtProvider + + conditions?: [IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperStatusAtProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 role identity provider mapper status at provider + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + A map of key/value pairs to add extra configuration attributes to this mapper. Use this attribute at your own risk, as it may conflict with top-level configuration attributes in future provider updates. + id : str, default is Undefined, optional + id + identityProviderAlias : str, default is Undefined, optional + The IDP alias of the attribute to set. + IDP Alias + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + IDP Mapper Name + realm : str, default is Undefined, optional + The realm ID that this mapper will exist in. + Realm Name + role : str, default is Undefined, optional + The name of the role which should be assigned to the users. + Role Name + """ + + + extraConfig?: {str:str} + + id?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + role?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1RoleIdentityProviderMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_spiffe_identity_provider.k b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_spiffe_identity_provider.k new file mode 100644 index 00000000..32a87577 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_spiffe_identity_provider.k @@ -0,0 +1,1321 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema SpiffeIdentityProvider: + r""" + SpiffeIdentityProvider is the Schema for the SpiffeIdentityProviders API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "SpiffeIdentityProvider", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.m.crossplane.io/v1alpha1" = "identityprovider.keycloak.m.crossplane.io/v1alpha1" + + kind: "SpiffeIdentityProvider" = "SpiffeIdentityProvider" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpec + + status?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderStatus + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpec: + r""" + SpiffeIdentityProviderSpec defines the desired state of SpiffeIdentityProvider + + Attributes + ---------- + forProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProvider + + initProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 spiffe identity provider spec for provider + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + bundleEndpoint : str, default is Undefined, optional + The SPIFFE bundle endpoint or OpenID Connect JWKS endpoint exposing SPIFFE public keys. Depending on your Keycloak Realm ssl_required setting, this may need to be an HTTPS URL. + The SPIFFE bundle endpoint or OpenID Connect JWKS endpoint exposing SPIFFE public keys. Depending on your Keycloak Realm "ssl_required" setting, this may need to be an HTTPS URL. + displayName : str, default is Undefined, optional + Friendly name for Identity Providers. + enabled : bool, default is Undefined, optional + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + extra config + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + firstBrokerLoginFlowAliasRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef, default is Undefined, optional + first broker login flow alias ref + firstBrokerLoginFlowAliasSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector, default is Undefined, optional + first broker login flow alias selector + guiOrder : str, default is Undefined, optional + GUI Order + linkOnly : bool, default is Undefined, optional + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + organizationIdRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector + postBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + postBrokerLoginFlowAliasRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasRef, default is Undefined, optional + post broker login flow alias ref + postBrokerLoginFlowAliasSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelector, default is Undefined, optional + post broker login flow alias selector + providerId : str, default is Undefined, optional + Provider ID, is always spiffe. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmSelector, default is Undefined, optional + realm selector + storeToken : bool, default is Undefined, optional + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + Sync Mode + trustDomain : str, default is Undefined, optional + The SPIFFE trust domain. This must use the spiffe:// scheme. + The SPIFFE trust domain. This must use the spiffe:// scheme. + trustEmail : bool, default is Undefined, optional + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + bundleEndpoint?: str + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + firstBrokerLoginFlowAliasRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef + + firstBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector + + guiOrder?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + organizationIdRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDRef + + organizationIdSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDSelector + + postBrokerLoginFlowAlias?: str + + postBrokerLoginFlowAliasRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasRef + + postBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelector + + providerId?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmSelector + + storeToken?: bool + + syncMode?: str + + trustDomain?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderFirstBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderPostBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + bundleEndpoint : str, default is Undefined, optional + The SPIFFE bundle endpoint or OpenID Connect JWKS endpoint exposing SPIFFE public keys. Depending on your Keycloak Realm ssl_required setting, this may need to be an HTTPS URL. + The SPIFFE bundle endpoint or OpenID Connect JWKS endpoint exposing SPIFFE public keys. Depending on your Keycloak Realm "ssl_required" setting, this may need to be an HTTPS URL. + displayName : str, default is Undefined, optional + Friendly name for Identity Providers. + enabled : bool, default is Undefined, optional + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + extra config + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + firstBrokerLoginFlowAliasRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef, default is Undefined, optional + first broker login flow alias ref + firstBrokerLoginFlowAliasSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector, default is Undefined, optional + first broker login flow alias selector + guiOrder : str, default is Undefined, optional + GUI Order + linkOnly : bool, default is Undefined, optional + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + organizationIdRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDRef, default is Undefined, optional + organization Id ref + organizationIdSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDSelector, default is Undefined, optional + organization Id selector + postBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + postBrokerLoginFlowAliasRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRef, default is Undefined, optional + post broker login flow alias ref + postBrokerLoginFlowAliasSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelector, default is Undefined, optional + post broker login flow alias selector + providerId : str, default is Undefined, optional + Provider ID, is always spiffe. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + storeToken : bool, default is Undefined, optional + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + Sync Mode + trustDomain : str, default is Undefined, optional + The SPIFFE trust domain. This must use the spiffe:// scheme. + The SPIFFE trust domain. This must use the spiffe:// scheme. + trustEmail : bool, default is Undefined, optional + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + bundleEndpoint?: str + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + firstBrokerLoginFlowAliasRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef + + firstBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector + + guiOrder?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + organizationIdRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDRef + + organizationIdSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDSelector + + postBrokerLoginFlowAlias?: str + + postBrokerLoginFlowAliasRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRef + + postBrokerLoginFlowAliasSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelector + + providerId?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmSelector + + storeToken?: bool + + syncMode?: str + + trustDomain?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate firstBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderFirstBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDRef: + r""" + Reference to a Organization in organization to populate organizationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDSelector: + r""" + Selector for a Organization in organization to populate organizationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderOrganizationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRef: + r""" + Reference to a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelector: + r""" + Selector for a Flow in authenticationflow to populate postBrokerLoginFlowAlias. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderPostBrokerLoginFlowAliasSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderStatus: + r""" + SpiffeIdentityProviderStatus defines the observed state of SpiffeIdentityProvider. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderStatusAtProvider + + conditions?: [IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderStatusAtProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 spiffe identity provider status at provider + + Attributes + ---------- + addReadTokenRoleOnCreate : bool, default is Undefined, optional + Enable/disable if new users can read any stored tokens. This assigns the broker.read-token role. + alias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + The alias uniquely identifies an identity provider and it is also used to build the redirect uri. + authenticateByDefault : bool, default is Undefined, optional + Enable/disable authenticate users by default. + bundleEndpoint : str, default is Undefined, optional + The SPIFFE bundle endpoint or OpenID Connect JWKS endpoint exposing SPIFFE public keys. Depending on your Keycloak Realm ssl_required setting, this may need to be an HTTPS URL. + The SPIFFE bundle endpoint or OpenID Connect JWKS endpoint exposing SPIFFE public keys. Depending on your Keycloak Realm "ssl_required" setting, this may need to be an HTTPS URL. + displayName : str, default is Undefined, optional + Friendly name for Identity Providers. + enabled : bool, default is Undefined, optional + Enable/disable this identity provider. + extraConfig : {str:str}, default is Undefined, optional + extra config + firstBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after first login with this identity provider. Term 'First Login' means that there is not yet existing Keycloak account linked with the authenticated identity provider account. + guiOrder : str, default is Undefined, optional + GUI Order + hideOnLoginPage : bool, default is Undefined, optional + This is always set to true for SPIFFE identity provider. + id : str, default is Undefined, optional + id + internalId : str, default is Undefined, optional + Internal Identity Provider Id + linkOnly : bool, default is Undefined, optional + If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + orgDomain : str, default is Undefined, optional + org domain + orgRedirectModeEmailMatches : bool, default is Undefined, optional + org redirect mode email matches + organizationId : str, default is Undefined, optional + ID of organization with which this identity is linked. + postBrokerLoginFlowAlias : str, default is Undefined, optional + The alias uniquely identifies an identity provider, and it is also used to build the redirect uri. + Alias of authentication flow, which is triggered after each login with this identity provider. Useful if you want additional verification of each user authenticated with this identity provider (for example OTP). Leave this empty if you don't want any additional authenticators to be triggered after login with this identity provider. Also note, that authenticator implementations must assume that user is already set in ClientSession as identity provider already set it. + providerId : str, default is Undefined, optional + Provider ID, is always spiffe. + realm : str, default is Undefined, optional + The name of the realm. This is unique across Keycloak. + Realm Name + storeToken : bool, default is Undefined, optional + Enable/disable if tokens must be stored after authenticating users. + syncMode : str, default is Undefined, optional + Sync Mode + trustDomain : str, default is Undefined, optional + The SPIFFE trust domain. This must use the spiffe:// scheme. + The SPIFFE trust domain. This must use the spiffe:// scheme. + trustEmail : bool, default is Undefined, optional + If enabled then email provided by this provider is not verified even if verification is enabled for the realm. + """ + + + addReadTokenRoleOnCreate?: bool + + alias?: str + + authenticateByDefault?: bool + + bundleEndpoint?: str + + displayName?: str + + enabled?: bool + + extraConfig?: {str:str} + + firstBrokerLoginFlowAlias?: str + + guiOrder?: str + + hideOnLoginPage?: bool + + id?: str + + internalId?: str + + linkOnly?: bool + + orgDomain?: str + + orgRedirectModeEmailMatches?: bool + + organizationId?: str + + postBrokerLoginFlowAlias?: str + + providerId?: str + + realm?: str + + storeToken?: bool + + syncMode?: str + + trustDomain?: str + + trustEmail?: bool + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1SpiffeIdentityProviderStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_template_importer_identity_provider_mapper.k b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_template_importer_identity_provider_mapper.k new file mode 100644 index 00000000..b9520133 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_template_importer_identity_provider_mapper.k @@ -0,0 +1,497 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema TemplateImporterIdentityProviderMapper: + r""" + TemplateImporterIdentityProviderMapper is the Schema for the TemplateImporterIdentityProviderMappers API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "TemplateImporterIdentityProviderMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.m.crossplane.io/v1alpha1" = "identityprovider.keycloak.m.crossplane.io/v1alpha1" + + kind: "TemplateImporterIdentityProviderMapper" = "TemplateImporterIdentityProviderMapper" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpec + + status?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatus + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpec: + r""" + TemplateImporterIdentityProviderMapperSpec defines the desired state of TemplateImporterIdentityProviderMapper + + Attributes + ---------- + forProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProvider + + initProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 template importer identity provider mapper spec for provider + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmSelector, default is Undefined, optional + realm selector + template : str, default is Undefined, optional + Template to use to format the username to import. Substitutions are enclosed in ${}. For example: '$${ALIAS}.$${CLAIM.sub}'. ALIAS is the provider alias. CLAIM. references an ID or Access token claim. + Username For Template Import + """ + + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmSelector + + template?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + template : str, default is Undefined, optional + Template to use to format the username to import. Substitutions are enclosed in ${}. For example: '$${ALIAS}.$${CLAIM.sub}'. ALIAS is the provider alias. CLAIM. references an ID or Access token claim. + Username For Template Import + """ + + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmSelector + + template?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatus: + r""" + TemplateImporterIdentityProviderMapperStatus defines the observed state of TemplateImporterIdentityProviderMapper. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatusAtProvider + + conditions?: [IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatusAtProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 template importer identity provider mapper status at provider + + Attributes + ---------- + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + id : str, default is Undefined, optional + id + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + template : str, default is Undefined, optional + Template to use to format the username to import. Substitutions are enclosed in ${}. For example: '$${ALIAS}.$${CLAIM.sub}'. ALIAS is the provider alias. CLAIM. references an ID or Access token claim. + Username For Template Import + """ + + + extraConfig?: {str:str} + + id?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + template?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1TemplateImporterIdentityProviderMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_to_role_identity_provider_mapper.k b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_to_role_identity_provider_mapper.k new file mode 100644 index 00000000..98d7695c --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/identityprovider/v1alpha1/identityprovider_keycloakm_crossplane_io_v1alpha1_to_role_identity_provider_mapper.k @@ -0,0 +1,572 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema ToRoleIdentityProviderMapper: + r""" + ToRoleIdentityProviderMapper is the Schema for the ToRoleIdentityProviderMappers API. + + Attributes + ---------- + apiVersion : str, default is "identityprovider.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "ToRoleIdentityProviderMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpec, default is Undefined, required + spec + status : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "identityprovider.keycloak.m.crossplane.io/v1alpha1" = "identityprovider.keycloak.m.crossplane.io/v1alpha1" + + kind: "ToRoleIdentityProviderMapper" = "ToRoleIdentityProviderMapper" + + metadata?: v1.ObjectMeta + + spec: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpec + + status?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatus + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpec: + r""" + ToRoleIdentityProviderMapperSpec defines the desired state of ToRoleIdentityProviderMapper + + Attributes + ---------- + forProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProvider, default is Undefined, required + for provider + initProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProvider + + initProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecWriteConnectionSecretToRef + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 to role identity provider mapper spec for provider + + Attributes + ---------- + attributeFriendlyName : str, default is Undefined, optional + Attribute Friendly Name. Conflicts with attribute_name. + Attribute Friendly Name + attributeName : str, default is Undefined, optional + Attribute Name. + Attribute Name + attributeValue : str, default is Undefined, optional + Attribute Value. + Attribute Value + claimName : str, default is Undefined, optional + OIDC Claim Name + OIDC Claim Name + claimValue : str, default is Undefined, optional + OIDC Claim Value + OIDC Claim Value + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmSelector, default is Undefined, optional + realm selector + role : str, default is Undefined, optional + Role Name. + Role Name + """ + + + attributeFriendlyName?: str + + attributeName?: str + + attributeValue?: str + + claimName?: str + + claimValue?: str + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmSelector + + role?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + attributeFriendlyName : str, default is Undefined, optional + Attribute Friendly Name. Conflicts with attribute_name. + Attribute Friendly Name + attributeName : str, default is Undefined, optional + Attribute Name. + Attribute Name + attributeValue : str, default is Undefined, optional + Attribute Value. + Attribute Value + claimName : str, default is Undefined, optional + OIDC Claim Name + OIDC Claim Name + claimValue : str, default is Undefined, optional + OIDC Claim Value + OIDC Claim Value + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + realmRef : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + role : str, default is Undefined, optional + Role Name. + Role Name + """ + + + attributeFriendlyName?: str + + attributeName?: str + + attributeValue?: str + + claimName?: str + + claimValue?: str + + extraConfig?: {str:str} + + identityProviderAlias?: str + + name?: str + + realm?: str + + realmRef?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmRef + + realmSelector?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmSelector + + role?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmRefPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmSelectorPolicy + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatus: + r""" + ToRoleIdentityProviderMapperStatus defines the observed state of ToRoleIdentityProviderMapper. + + Attributes + ---------- + atProvider : IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatusAtProvider + + conditions?: [IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatusAtProvider: + r""" + identityprovider keycloakm crossplane io v1alpha1 to role identity provider mapper status at provider + + Attributes + ---------- + attributeFriendlyName : str, default is Undefined, optional + Attribute Friendly Name. Conflicts with attribute_name. + Attribute Friendly Name + attributeName : str, default is Undefined, optional + Attribute Name. + Attribute Name + attributeValue : str, default is Undefined, optional + Attribute Value. + Attribute Value + claimName : str, default is Undefined, optional + OIDC Claim Name + OIDC Claim Name + claimValue : str, default is Undefined, optional + OIDC Claim Value + OIDC Claim Value + extraConfig : {str:str}, default is Undefined, optional + Key/value attributes to add to the identity provider mapper model that is persisted to Keycloak. This can be used to extend the base model with new Keycloak features. + id : str, default is Undefined, optional + id + identityProviderAlias : str, default is Undefined, optional + The alias of the associated identity provider. + IDP Alias + name : str, default is Undefined, optional + The name of the mapper. + IDP Mapper Name + realm : str, default is Undefined, optional + The name of the realm. + Realm Name + role : str, default is Undefined, optional + Role Name. + Role Name + """ + + + attributeFriendlyName?: str + + attributeName?: str + + attributeValue?: str + + claimName?: str + + claimValue?: str + + extraConfig?: {str:str} + + id?: str + + identityProviderAlias?: str + + name?: str + + realm?: str + + role?: str + + +schema IdentityproviderKeycloakmCrossplaneIoV1alpha1ToRoleIdentityProviderMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/ldap/v1alpha1/ldap_keycloakm_crossplane_io_v1alpha1_user_model_hardcoded_attribute_mapper.k b/crossplane_provider_keycloak/namespaced/ldap/v1alpha1/ldap_keycloakm_crossplane_io_v1alpha1_user_model_hardcoded_attribute_mapper.k new file mode 100644 index 00000000..e2a11271 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/ldap/v1alpha1/ldap_keycloakm_crossplane_io_v1alpha1_user_model_hardcoded_attribute_mapper.k @@ -0,0 +1,710 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema UserModelHardcodedAttributeMapper: + r""" + UserModelHardcodedAttributeMapper is the Schema for the UserModelHardcodedAttributeMappers API. + + Attributes + ---------- + apiVersion : str, default is "ldap.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "UserModelHardcodedAttributeMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpec, default is Undefined, required + spec + status : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "ldap.keycloak.m.crossplane.io/v1alpha1" = "ldap.keycloak.m.crossplane.io/v1alpha1" + + kind: "UserModelHardcodedAttributeMapper" = "UserModelHardcodedAttributeMapper" + + metadata?: v1.ObjectMeta + + spec: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpec + + status?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatus + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpec: + r""" + UserModelHardcodedAttributeMapperSpec defines the desired state of UserModelHardcodedAttributeMapper + + Attributes + ---------- + forProvider : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProvider, default is Undefined, required + for provider + initProvider : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProvider + + initProvider?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecWriteConnectionSecretToRef + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProvider: + r""" + ldap keycloakm crossplane io v1alpha1 user model hardcoded attribute mapper spec for provider + + Attributes + ---------- + attributeName : str, default is Undefined, optional + The name of the user model attribute to set. + Name of the user schema attribute + attributeValue : str, default is Undefined, optional + The value to set to model attribute. You can hardcode any value like 'foo'. + Value of the attribute. You can hardcode any value like 'foo' + ldapUserFederationId : str, default is Undefined, optional + The ID of the LDAP user federation provider to attach this mapper to. + The ldap user federation provider to attach this mapper to. + ldapUserFederationIdRef : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDRef, default is Undefined, optional + ldap user federation Id ref + ldapUserFederationIdSelector : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDSelector, default is Undefined, optional + ldap user federation Id selector + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + Display name of the mapper when displayed in the console. + realmId : str, default is Undefined, optional + The realm that this LDAP mapper will exist in. + The realm in which the ldap user federation provider exists. + realmIdRef : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + attributeName?: str + + attributeValue?: str + + ldapUserFederationId?: str + + ldapUserFederationIdRef?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDRef + + ldapUserFederationIdSelector?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDSelector + + name?: str + + realmId?: str + + realmIdRef?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDRef + + realmIdSelector?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDSelector + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDRef: + r""" + Reference to a UserFederation in ldap to populate ldapUserFederationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDRefPolicy + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDSelector: + r""" + Selector for a UserFederation in ldap to populate ldapUserFederationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDSelectorPolicy + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderLdapUserFederationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDRefPolicy + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDSelectorPolicy + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + attributeName : str, default is Undefined, optional + The name of the user model attribute to set. + Name of the user schema attribute + attributeValue : str, default is Undefined, optional + The value to set to model attribute. You can hardcode any value like 'foo'. + Value of the attribute. You can hardcode any value like 'foo' + ldapUserFederationId : str, default is Undefined, optional + The ID of the LDAP user federation provider to attach this mapper to. + The ldap user federation provider to attach this mapper to. + ldapUserFederationIdRef : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDRef, default is Undefined, optional + ldap user federation Id ref + ldapUserFederationIdSelector : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDSelector, default is Undefined, optional + ldap user federation Id selector + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + Display name of the mapper when displayed in the console. + realmId : str, default is Undefined, optional + The realm that this LDAP mapper will exist in. + The realm in which the ldap user federation provider exists. + realmIdRef : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + attributeName?: str + + attributeValue?: str + + ldapUserFederationId?: str + + ldapUserFederationIdRef?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDRef + + ldapUserFederationIdSelector?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDSelector + + name?: str + + realmId?: str + + realmIdRef?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDRef + + realmIdSelector?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDSelector + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDRef: + r""" + Reference to a UserFederation in ldap to populate ldapUserFederationId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDRefPolicy + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDSelector: + r""" + Selector for a UserFederation in ldap to populate ldapUserFederationId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDSelectorPolicy + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderLdapUserFederationIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDRefPolicy + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDSelectorPolicy + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatus: + r""" + UserModelHardcodedAttributeMapperStatus defines the observed state of UserModelHardcodedAttributeMapper. + + Attributes + ---------- + atProvider : LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatusAtProvider + + conditions?: [LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatusAtProvider: + r""" + ldap keycloakm crossplane io v1alpha1 user model hardcoded attribute mapper status at provider + + Attributes + ---------- + attributeName : str, default is Undefined, optional + The name of the user model attribute to set. + Name of the user schema attribute + attributeValue : str, default is Undefined, optional + The value to set to model attribute. You can hardcode any value like 'foo'. + Value of the attribute. You can hardcode any value like 'foo' + id : str, default is Undefined, optional + id + ldapUserFederationId : str, default is Undefined, optional + The ID of the LDAP user federation provider to attach this mapper to. + The ldap user federation provider to attach this mapper to. + name : str, default is Undefined, optional + Display name of this mapper when displayed in the console. + Display name of the mapper when displayed in the console. + realmId : str, default is Undefined, optional + The realm that this LDAP mapper will exist in. + The realm in which the ldap user federation provider exists. + """ + + + attributeName?: str + + attributeValue?: str + + id?: str + + ldapUserFederationId?: str + + name?: str + + realmId?: str + + +schema LdapKeycloakmCrossplaneIoV1alpha1UserModelHardcodedAttributeMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/oidc/v1alpha1/oidc_keycloakm_crossplane_io_v1alpha1_google_identity_provider.k b/crossplane_provider_keycloak/namespaced/oidc/v1alpha1/oidc_keycloakm_crossplane_io_v1alpha1_google_identity_provider.k index e6a3cbe6..03f38baf 100644 --- a/crossplane_provider_keycloak/namespaced/oidc/v1alpha1/oidc_keycloakm_crossplane_io_v1alpha1_google_identity_provider.k +++ b/crossplane_provider_keycloak/namespaced/oidc/v1alpha1/oidc_keycloakm_crossplane_io_v1alpha1_google_identity_provider.k @@ -124,6 +124,9 @@ schema OidcKeycloakmCrossplaneIoV1alpha1GoogleIdentityProviderSpecForProvider: linkOnly : bool, default is Undefined, optional When true, users cannot sign-in using this provider, but their existing accounts will be linked when possible. Defaults to false. If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + loginHint : str, default is Undefined, optional + Pass login_hint to the Google identity provider. Set to "true" to forward the login_hint query parameter from the inbound OIDC request to Google. The underlying Keycloak attribute loginHint is a boolean string, so the value should be "true" or "false". + Pass login_hint to identity provider. Set to "true" to forward the login_hint client note (the underlying loginHint config attribute is a boolean string). orgDomain : str, default is Undefined, optional org domain orgRedirectModeEmailMatches : bool, default is Undefined, optional @@ -201,6 +204,8 @@ schema OidcKeycloakmCrossplaneIoV1alpha1GoogleIdentityProviderSpecForProvider: linkOnly?: bool + loginHint?: str + orgDomain?: str orgRedirectModeEmailMatches?: bool @@ -624,6 +629,9 @@ schema OidcKeycloakmCrossplaneIoV1alpha1GoogleIdentityProviderSpecInitProvider: linkOnly : bool, default is Undefined, optional When true, users cannot sign-in using this provider, but their existing accounts will be linked when possible. Defaults to false. If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + loginHint : str, default is Undefined, optional + Pass login_hint to the Google identity provider. Set to "true" to forward the login_hint query parameter from the inbound OIDC request to Google. The underlying Keycloak attribute loginHint is a boolean string, so the value should be "true" or "false". + Pass login_hint to identity provider. Set to "true" to forward the login_hint client note (the underlying loginHint config attribute is a boolean string). orgDomain : str, default is Undefined, optional org domain orgRedirectModeEmailMatches : bool, default is Undefined, optional @@ -701,6 +709,8 @@ schema OidcKeycloakmCrossplaneIoV1alpha1GoogleIdentityProviderSpecInitProvider: linkOnly?: bool + loginHint?: str + orgDomain?: str orgRedirectModeEmailMatches?: bool @@ -1173,6 +1183,9 @@ schema OidcKeycloakmCrossplaneIoV1alpha1GoogleIdentityProviderStatusAtProvider: linkOnly : bool, default is Undefined, optional When true, users cannot sign-in using this provider, but their existing accounts will be linked when possible. Defaults to false. If true, users cannot log in through this provider. They can only link to this provider. This is useful if you don't want to allow login from the provider, but want to integrate with a provider + loginHint : str, default is Undefined, optional + Pass login_hint to the Google identity provider. Set to "true" to forward the login_hint query parameter from the inbound OIDC request to Google. The underlying Keycloak attribute loginHint is a boolean string, so the value should be "true" or "false". + Pass login_hint to identity provider. Set to "true" to forward the login_hint client note (the underlying loginHint config attribute is a boolean string). orgDomain : str, default is Undefined, optional org domain orgRedirectModeEmailMatches : bool, default is Undefined, optional @@ -1238,6 +1251,8 @@ schema OidcKeycloakmCrossplaneIoV1alpha1GoogleIdentityProviderStatusAtProvider: linkOnly?: bool + loginHint?: str + orgDomain?: str orgRedirectModeEmailMatches?: bool diff --git a/crossplane_provider_keycloak/namespaced/openidclient/v1alpha1/openidclient_keycloakm_crossplane_io_v1alpha1_client.k b/crossplane_provider_keycloak/namespaced/openidclient/v1alpha1/openidclient_keycloakm_crossplane_io_v1alpha1_client.k index 2c428d7c..e72ce416 100644 --- a/crossplane_provider_keycloak/namespaced/openidclient/v1alpha1/openidclient_keycloakm_crossplane_io_v1alpha1_client.k +++ b/crossplane_provider_keycloak/namespaced/openidclient/v1alpha1/openidclient_keycloakm_crossplane_io_v1alpha1_client.k @@ -158,6 +158,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientSpecForProvider: The maximum amount of time a client has to finish the device code flow before it expires. oauth2DevicePollingInterval : str, default is Undefined, optional The minimum amount of time in seconds that the client should wait between polling requests to the token endpoint. + oauth2JwtAuthorizationGrantEnabled : bool, default is Undefined, optional + When false, this client will not be able to initiate a login or obtain access tokens. Defaults to true. + oauth2JwtAuthorizationGrantIdp : str, default is Undefined, optional + oauth2 jwt authorization grant idp pkceCodeChallengeMethod : str, default is Undefined, optional The challenge method to use for Proof Key for Code Exchange. Can be either plain or S256 or set to empty value “. realmId : str, default is Undefined, optional @@ -271,6 +275,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientSpecForProvider: oauth2DevicePollingInterval?: str + oauth2JwtAuthorizationGrantEnabled?: bool + + oauth2JwtAuthorizationGrantIdp?: str + pkceCodeChallengeMethod?: str realmId?: str @@ -785,6 +793,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientSpecInitProvider: The maximum amount of time a client has to finish the device code flow before it expires. oauth2DevicePollingInterval : str, default is Undefined, optional The minimum amount of time in seconds that the client should wait between polling requests to the token endpoint. + oauth2JwtAuthorizationGrantEnabled : bool, default is Undefined, optional + When false, this client will not be able to initiate a login or obtain access tokens. Defaults to true. + oauth2JwtAuthorizationGrantIdp : str, default is Undefined, optional + oauth2 jwt authorization grant idp pkceCodeChallengeMethod : str, default is Undefined, optional The challenge method to use for Proof Key for Code Exchange. Can be either plain or S256 or set to empty value “. realmId : str, default is Undefined, optional @@ -898,6 +910,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientSpecInitProvider: oauth2DevicePollingInterval?: str + oauth2JwtAuthorizationGrantEnabled?: bool + + oauth2JwtAuthorizationGrantIdp?: str + pkceCodeChallengeMethod?: str realmId?: str @@ -1462,6 +1478,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientStatusAtProvider: The maximum amount of time a client has to finish the device code flow before it expires. oauth2DevicePollingInterval : str, default is Undefined, optional The minimum amount of time in seconds that the client should wait between polling requests to the token endpoint. + oauth2JwtAuthorizationGrantEnabled : bool, default is Undefined, optional + When false, this client will not be able to initiate a login or obtain access tokens. Defaults to true. + oauth2JwtAuthorizationGrantIdp : str, default is Undefined, optional + oauth2 jwt authorization grant idp pkceCodeChallengeMethod : str, default is Undefined, optional The challenge method to use for Proof Key for Code Exchange. Can be either plain or S256 or set to empty value “. realmId : str, default is Undefined, optional @@ -1573,6 +1593,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientStatusAtProvider: oauth2DevicePollingInterval?: str + oauth2JwtAuthorizationGrantEnabled?: bool + + oauth2JwtAuthorizationGrantIdp?: str + pkceCodeChallengeMethod?: str realmId?: str diff --git a/crossplane_provider_keycloak/namespaced/openidclient/v1alpha1/openidclient_keycloakm_crossplane_io_v1alpha1_client_authorization_permission.k b/crossplane_provider_keycloak/namespaced/openidclient/v1alpha1/openidclient_keycloakm_crossplane_io_v1alpha1_client_authorization_permission.k index 6542f556..478eea0c 100644 --- a/crossplane_provider_keycloak/namespaced/openidclient/v1alpha1/openidclient_keycloakm_crossplane_io_v1alpha1_client_authorization_permission.k +++ b/crossplane_provider_keycloak/namespaced/openidclient/v1alpha1/openidclient_keycloakm_crossplane_io_v1alpha1_client_authorization_permission.k @@ -76,10 +76,22 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe Attributes ---------- + clientPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + clientPoliciesRefs : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesRefsItems0], default is Undefined, optional + References to ClientClientPolicy in openidclient to populate clientPolicies. + clientPoliciesSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesSelector, default is Undefined, optional + client policies selector decisionStrategy : str, default is Undefined, optional The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. Defaults to UNANIMOUS. description : str, default is Undefined, optional A description for the authorization permission. + groupPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + groupPoliciesRefs : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesRefsItems0], default is Undefined, optional + References to ClientGroupPolicy in openidclient to populate groupPolicies. + groupPoliciesSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesSelector, default is Undefined, optional + group policies selector name : str, default is Undefined, optional The name of the permission. policies : [str], default is Undefined, optional @@ -90,6 +102,12 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe realm Id ref realmIdSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelector, default is Undefined, optional realm Id selector + regexPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + regexPoliciesRefs : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesRefsItems0], default is Undefined, optional + References to ClientRegexPolicy in openidclient to populate regexPolicies. + regexPoliciesSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesSelector, default is Undefined, optional + regex policies selector resourceServerId : str, default is Undefined, optional The ID of the resource server. resourceServerIdRef : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRef, default is Undefined, optional @@ -100,45 +118,1305 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe When specified, this permission will be evaluated for all instances of a given resource type. Conflicts with resources. resources : [str], default is Undefined, optional A list of resource IDs that this permission must be applied to. Conflicts with resource_type. + resourcesRefs : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesRefsItems0], default is Undefined, optional + References to ClientAuthorizationResource in openidclient to populate resources. + resourcesSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesSelector, default is Undefined, optional + resources selector + rolePolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + rolePoliciesRefs : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesRefsItems0], default is Undefined, optional + References to ClientRolePolicy in openidclient to populate rolePolicies. + rolePoliciesSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesSelector, default is Undefined, optional + role policies selector scopes : [str], default is Undefined, optional A list of scope IDs that this permission must be applied to. $type : str, default is Undefined, optional The type of permission, can be one of resource or scope. + userPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + userPoliciesRefs : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesRefsItems0], default is Undefined, optional + References to ClientUserPolicy in openidclient to populate userPolicies. + userPoliciesSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesSelector, default is Undefined, optional + user policies selector + """ + + + clientPolicies?: [str] + + clientPoliciesRefs?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesRefsItems0] + + clientPoliciesSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesSelector + + decisionStrategy?: str + + description?: str + + groupPolicies?: [str] + + groupPoliciesRefs?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesRefsItems0] + + groupPoliciesSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesSelector + + name?: str + + policies?: [str] + + realmId?: str + + realmIdRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRef + + realmIdSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelector + + regexPolicies?: [str] + + regexPoliciesRefs?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesRefsItems0] + + regexPoliciesSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesSelector + + resourceServerId?: str + + resourceServerIdRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRef + + resourceServerIdSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelector + + resourceType?: str + + resources?: [str] + + resourcesRefs?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesRefsItems0] + + resourcesSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesSelector + + rolePolicies?: [str] + + rolePoliciesRefs?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesRefsItems0] + + rolePoliciesSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesSelector + + scopes?: [str] + + $type?: str + + userPolicies?: [str] + + userPoliciesRefs?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesRefsItems0] + + userPoliciesSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesSelector + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesRefsItems0: + r""" + A NamespacedReference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesRefsItems0Policy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesSelector: + r""" + Selector for a list of ClientClientPolicy in openidclient to populate clientPolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderClientPoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesRefsItems0: + r""" + A NamespacedReference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesRefsItems0Policy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesSelector: + r""" + Selector for a list of ClientGroupPolicy in openidclient to populate groupPolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderGroupPoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRefPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesRefsItems0: + r""" + A NamespacedReference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesRefsItems0Policy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesSelector: + r""" + Selector for a list of ClientRegexPolicy in openidclient to populate regexPolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRegexPoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRef: + r""" + Reference to a Client in openidclient to populate resourceServerId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRefPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelector: + r""" + Selector for a Client in openidclient to populate resourceServerId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesRefsItems0: + r""" + A NamespacedReference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesRefsItems0Policy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesSelector: + r""" + Selector for a list of ClientAuthorizationResource in openidclient to populate resources. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourcesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesRefsItems0: + r""" + A NamespacedReference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesRefsItems0Policy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesSelector: + r""" + Selector for a list of ClientRolePolicy in openidclient to populate rolePolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRolePoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesRefsItems0: + r""" + A NamespacedReference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesRefsItems0Policy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesSelector: + r""" + Selector for a list of ClientUserPolicy in openidclient to populate userPolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderUserPoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + clientPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + clientPoliciesRefs : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesRefsItems0], default is Undefined, optional + References to ClientClientPolicy in openidclient to populate clientPolicies. + clientPoliciesSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesSelector, default is Undefined, optional + client policies selector + decisionStrategy : str, default is Undefined, optional + The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. Defaults to UNANIMOUS. + description : str, default is Undefined, optional + A description for the authorization permission. + groupPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + groupPoliciesRefs : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesRefsItems0], default is Undefined, optional + References to ClientGroupPolicy in openidclient to populate groupPolicies. + groupPoliciesSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesSelector, default is Undefined, optional + group policies selector + name : str, default is Undefined, optional + The name of the permission. + policies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + realmId : str, default is Undefined, optional + The realm this group exists in. + realmIdRef : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + regexPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + regexPoliciesRefs : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesRefsItems0], default is Undefined, optional + References to ClientRegexPolicy in openidclient to populate regexPolicies. + regexPoliciesSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesSelector, default is Undefined, optional + regex policies selector + resourceServerId : str, default is Undefined, optional + The ID of the resource server. + resourceServerIdRef : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRef, default is Undefined, optional + resource server Id ref + resourceServerIdSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelector, default is Undefined, optional + resource server Id selector + resourceType : str, default is Undefined, optional + When specified, this permission will be evaluated for all instances of a given resource type. Conflicts with resources. + resources : [str], default is Undefined, optional + A list of resource IDs that this permission must be applied to. Conflicts with resource_type. + resourcesRefs : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesRefsItems0], default is Undefined, optional + References to ClientAuthorizationResource in openidclient to populate resources. + resourcesSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesSelector, default is Undefined, optional + resources selector + rolePolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + rolePoliciesRefs : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesRefsItems0], default is Undefined, optional + References to ClientRolePolicy in openidclient to populate rolePolicies. + rolePoliciesSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesSelector, default is Undefined, optional + role policies selector + scopes : [str], default is Undefined, optional + A list of scope IDs that this permission must be applied to. + $type : str, default is Undefined, optional + The type of permission, can be one of resource or scope. + userPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. + userPoliciesRefs : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesRefsItems0], default is Undefined, optional + References to ClientUserPolicy in openidclient to populate userPolicies. + userPoliciesSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesSelector, default is Undefined, optional + user policies selector + """ + + + clientPolicies?: [str] + + clientPoliciesRefs?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesRefsItems0] + + clientPoliciesSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesSelector + + decisionStrategy?: str + + description?: str + + groupPolicies?: [str] + + groupPoliciesRefs?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesRefsItems0] + + groupPoliciesSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesSelector + + name?: str + + policies?: [str] + + realmId?: str + + realmIdRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelector + + regexPolicies?: [str] + + regexPoliciesRefs?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesRefsItems0] + + regexPoliciesSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesSelector + + resourceServerId?: str + + resourceServerIdRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRef + + resourceServerIdSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelector + + resourceType?: str + + resources?: [str] + + resourcesRefs?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesRefsItems0] + + resourcesSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesSelector + + rolePolicies?: [str] + + rolePoliciesRefs?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesRefsItems0] + + rolePoliciesSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesSelector + + scopes?: [str] + + $type?: str + + userPolicies?: [str] + + userPoliciesRefs?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesRefsItems0] + + userPoliciesSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesSelector + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesRefsItems0: + r""" + A NamespacedReference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesRefsItems0Policy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesSelector: + r""" + Selector for a list of ClientClientPolicy in openidclient to populate clientPolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderClientPoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesRefsItems0: + r""" + A NamespacedReference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesRefsItems0Policy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesSelector: + r""" + Selector for a list of ClientGroupPolicy in openidclient to populate groupPolicies. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderGroupPoliciesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy """ - decisionStrategy?: str + name: str - description?: str + namespace?: str - name?: str + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRefPolicy - policies?: [str] - realmId?: str +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. - realmIdRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRef + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ - realmIdSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelector - resourceServerId?: str + resolution?: "Required" | "Optional" = "Required" - resourceServerIdRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRef + resolve?: "Always" | "IfNotPresent" - resourceServerIdSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelector - resourceType?: str +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. - resources?: [str] + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ - scopes?: [str] - $type?: str + matchControllerRef?: bool + matchLabels?: {str:str} -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRef: + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelectorPolicy: r""" - Reference to a Realm in realm to populate realmId. + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesRefsItems0: + r""" + A NamespacedReference to a named object. Attributes ---------- @@ -146,7 +1424,7 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe Name of the referenced object. namespace : str, default is Undefined, optional Namespace of the referenced object - policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesRefsItems0Policy, default is Undefined, optional policy """ @@ -155,10 +1433,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe namespace?: str - policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRefPolicy + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesRefsItems0Policy -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDRefPolicy: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesRefsItems0Policy: r""" Policies for referencing. @@ -182,9 +1460,9 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelector: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesSelector: r""" - Selector for a Realm in realm to populate realmId. + Selector for a list of ClientRegexPolicy in openidclient to populate regexPolicies. Attributes ---------- @@ -195,7 +1473,7 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe MatchLabels ensures an object with matching labels is selected. namespace : str, default is Undefined, optional Namespace for the selector - policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesSelectorPolicy, default is Undefined, optional policy """ @@ -206,10 +1484,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe namespace?: str - policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelectorPolicy + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesSelectorPolicy -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderRealmIDSelectorPolicy: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRegexPoliciesSelectorPolicy: r""" Policies for selection. @@ -233,7 +1511,7 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRef: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRef: r""" Reference to a Client in openidclient to populate resourceServerId. @@ -243,7 +1521,7 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe Name of the referenced object. namespace : str, default is Undefined, optional Namespace of the referenced object - policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRefPolicy, default is Undefined, optional + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRefPolicy, default is Undefined, optional policy """ @@ -252,10 +1530,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe namespace?: str - policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRefPolicy + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRefPolicy -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDRefPolicy: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRefPolicy: r""" Policies for referencing. @@ -279,7 +1557,7 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelector: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelector: r""" Selector for a Client in openidclient to populate resourceServerId. @@ -292,7 +1570,7 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe MatchLabels ensures an object with matching labels is selected. namespace : str, default is Undefined, optional Namespace for the selector - policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelectorPolicy, default is Undefined, optional + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelectorPolicy, default is Undefined, optional policy """ @@ -303,10 +1581,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe namespace?: str - policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelectorPolicy + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelectorPolicy -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecForProviderResourceServerIDSelectorPolicy: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelectorPolicy: r""" Policies for selection. @@ -330,84 +1608,106 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProvider: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesRefsItems0: r""" - THIS IS A BETA FIELD. It will be honored - unless the Management Policies feature flag is disabled. - InitProvider holds the same fields as ForProvider, with the exception - of Identifier and other resource reference fields. The fields that are - in InitProvider are merged into ForProvider when the resource is created. - The same fields are also added to the terraform ignore_changes hook, to - avoid updating them after creation. This is useful for fields that are - required on creation, but we do not desire to update them after creation, - for example because of an external controller is managing them, like an - autoscaler. + A NamespacedReference to a named object. Attributes ---------- - decisionStrategy : str, default is Undefined, optional - The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. Defaults to UNANIMOUS. - description : str, default is Undefined, optional - A description for the authorization permission. - name : str, default is Undefined, optional - The name of the permission. - policies : [str], default is Undefined, optional - A list of policy IDs that must be applied to the scopes defined by this permission. - realmId : str, default is Undefined, optional - The realm this group exists in. - realmIdRef : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRef, default is Undefined, optional - realm Id ref - realmIdSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelector, default is Undefined, optional - realm Id selector - resourceServerId : str, default is Undefined, optional - The ID of the resource server. - resourceServerIdRef : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRef, default is Undefined, optional - resource server Id ref - resourceServerIdSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelector, default is Undefined, optional - resource server Id selector - resourceType : str, default is Undefined, optional - When specified, this permission will be evaluated for all instances of a given resource type. Conflicts with resources. - resources : [str], default is Undefined, optional - A list of resource IDs that this permission must be applied to. Conflicts with resource_type. - scopes : [str], default is Undefined, optional - A list of scope IDs that this permission must be applied to. - $type : str, default is Undefined, optional - The type of permission, can be one of resource or scope. + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesRefsItems0Policy, default is Undefined, optional + policy """ - decisionStrategy?: str + name: str - description?: str + namespace?: str - name?: str + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesRefsItems0Policy - policies?: [str] - realmId?: str +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesRefsItems0Policy: + r""" + Policies for referencing. - realmIdRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRef + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ - realmIdSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelector - resourceServerId?: str + resolution?: "Required" | "Optional" = "Required" - resourceServerIdRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRef + resolve?: "Always" | "IfNotPresent" - resourceServerIdSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelector - resourceType?: str +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesSelector: + r""" + Selector for a list of ClientAuthorizationResource in openidclient to populate resources. - resources?: [str] + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesSelectorPolicy, default is Undefined, optional + policy + """ - scopes?: [str] - $type?: str + matchControllerRef?: bool + matchLabels?: {str:str} -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRef: + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourcesSelectorPolicy: r""" - Reference to a Realm in realm to populate realmId. + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesRefsItems0: + r""" + A NamespacedReference to a named object. Attributes ---------- @@ -415,7 +1715,7 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe Name of the referenced object. namespace : str, default is Undefined, optional Namespace of the referenced object - policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesRefsItems0Policy, default is Undefined, optional policy """ @@ -424,10 +1724,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe namespace?: str - policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRefPolicy + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesRefsItems0Policy -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDRefPolicy: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesRefsItems0Policy: r""" Policies for referencing. @@ -451,9 +1751,9 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelector: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesSelector: r""" - Selector for a Realm in realm to populate realmId. + Selector for a list of ClientRolePolicy in openidclient to populate rolePolicies. Attributes ---------- @@ -464,7 +1764,7 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe MatchLabels ensures an object with matching labels is selected. namespace : str, default is Undefined, optional Namespace for the selector - policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesSelectorPolicy, default is Undefined, optional policy """ @@ -475,10 +1775,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe namespace?: str - policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelectorPolicy + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesSelectorPolicy -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRealmIDSelectorPolicy: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderRolePoliciesSelectorPolicy: r""" Policies for selection. @@ -502,9 +1802,9 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRef: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesRefsItems0: r""" - Reference to a Client in openidclient to populate resourceServerId. + A NamespacedReference to a named object. Attributes ---------- @@ -512,7 +1812,7 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe Name of the referenced object. namespace : str, default is Undefined, optional Namespace of the referenced object - policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRefPolicy, default is Undefined, optional + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesRefsItems0Policy, default is Undefined, optional policy """ @@ -521,10 +1821,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe namespace?: str - policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRefPolicy + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesRefsItems0Policy -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDRefPolicy: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesRefsItems0Policy: r""" Policies for referencing. @@ -548,9 +1848,9 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe resolve?: "Always" | "IfNotPresent" -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelector: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesSelector: r""" - Selector for a Client in openidclient to populate resourceServerId. + Selector for a list of ClientUserPolicy in openidclient to populate userPolicies. Attributes ---------- @@ -561,7 +1861,7 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe MatchLabels ensures an object with matching labels is selected. namespace : str, default is Undefined, optional Namespace for the selector - policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelectorPolicy, default is Undefined, optional + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesSelectorPolicy, default is Undefined, optional policy """ @@ -572,10 +1872,10 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpe namespace?: str - policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelectorPolicy + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesSelectorPolicy -schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderResourceServerIDSelectorPolicy: +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSpecInitProviderUserPoliciesSelectorPolicy: r""" Policies for selection. @@ -666,10 +1966,14 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSta Attributes ---------- + clientPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. decisionStrategy : str, default is Undefined, optional The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. Defaults to UNANIMOUS. description : str, default is Undefined, optional A description for the authorization permission. + groupPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. id : str, default is Undefined, optional Permission ID representing the permission. name : str, default is Undefined, optional @@ -678,23 +1982,33 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSta A list of policy IDs that must be applied to the scopes defined by this permission. realmId : str, default is Undefined, optional The realm this group exists in. + regexPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. resourceServerId : str, default is Undefined, optional The ID of the resource server. resourceType : str, default is Undefined, optional When specified, this permission will be evaluated for all instances of a given resource type. Conflicts with resources. resources : [str], default is Undefined, optional A list of resource IDs that this permission must be applied to. Conflicts with resource_type. + rolePolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. scopes : [str], default is Undefined, optional A list of scope IDs that this permission must be applied to. $type : str, default is Undefined, optional The type of permission, can be one of resource or scope. + userPolicies : [str], default is Undefined, optional + A list of policy IDs that must be applied to the scopes defined by this permission. """ + clientPolicies?: [str] + decisionStrategy?: str description?: str + groupPolicies?: [str] + id?: str name?: str @@ -703,16 +2017,22 @@ schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionSta realmId?: str + regexPolicies?: [str] + resourceServerId?: str resourceType?: str resources?: [str] + rolePolicies?: [str] + scopes?: [str] $type?: str + userPolicies?: [str] + schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientAuthorizationPermissionStatusConditionsItems0: r""" diff --git a/crossplane_provider_keycloak/namespaced/openidclient/v1alpha1/openidclient_keycloakm_crossplane_io_v1alpha1_client_regex_policy.k b/crossplane_provider_keycloak/namespaced/openidclient/v1alpha1/openidclient_keycloakm_crossplane_io_v1alpha1_client_regex_policy.k new file mode 100644 index 00000000..68731f86 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/openidclient/v1alpha1/openidclient_keycloakm_crossplane_io_v1alpha1_client_regex_policy.k @@ -0,0 +1,743 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema ClientRegexPolicy: + r""" + ClientRegexPolicy is the Schema for the ClientRegexPolicys API. + + Attributes + ---------- + apiVersion : str, default is "openidclient.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "ClientRegexPolicy", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpec, default is Undefined, required + spec + status : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicyStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidclient.keycloak.m.crossplane.io/v1alpha1" = "openidclient.keycloak.m.crossplane.io/v1alpha1" + + kind: "ClientRegexPolicy" = "ClientRegexPolicy" + + metadata?: v1.ObjectMeta + + spec: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpec + + status?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicyStatus + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpec: + r""" + ClientRegexPolicySpec defines the desired state of ClientRegexPolicy + + Attributes + ---------- + forProvider : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProvider, default is Undefined, required + for provider + initProvider : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProvider + + initProvider?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecWriteConnectionSecretToRef + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProvider: + r""" + openidclient keycloakm crossplane io v1alpha1 client regex policy spec for provider + + Attributes + ---------- + decisionStrategy : str, default is Undefined, optional + The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. + description : str, default is Undefined, optional + A description for the authorization policy. + logic : str, default is Undefined, optional + The logic, can be one of POSITIVE or NEGATIVE. Defaults to POSITIVE. + name : str, default is Undefined, optional + The name of the policy. + pattern : str, default is Undefined, optional + The Regex pattern. + realmId : str, default is Undefined, optional + The realm this policy exists in. + realmIdRef : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + resourceServerId : str, default is Undefined, optional + The ID of the resource server. + resourceServerIdRef : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDRef, default is Undefined, optional + resource server Id ref + resourceServerIdSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDSelector, default is Undefined, optional + resource server Id selector + targetClaim : str, default is Undefined, optional + The name of the target claim in the token. + targetContextAttributes : bool, default is Undefined, optional + true if policy should be evaluated on context attributes instead of identity attributes. + """ + + + decisionStrategy?: str + + description?: str + + logic?: str + + name?: str + + pattern?: str + + realmId?: str + + realmIdRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDRef + + realmIdSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDSelector + + resourceServerId?: str + + resourceServerIdRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDRef + + resourceServerIdSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDSelector + + targetClaim?: str + + targetContextAttributes?: bool + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDRefPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDRef: + r""" + Reference to a Client in openidclient to populate resourceServerId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDRefPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDSelector: + r""" + Selector for a Client in openidclient to populate resourceServerId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecForProviderResourceServerIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + decisionStrategy : str, default is Undefined, optional + The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. + description : str, default is Undefined, optional + A description for the authorization policy. + logic : str, default is Undefined, optional + The logic, can be one of POSITIVE or NEGATIVE. Defaults to POSITIVE. + name : str, default is Undefined, optional + The name of the policy. + pattern : str, default is Undefined, optional + The Regex pattern. + realmId : str, default is Undefined, optional + The realm this policy exists in. + realmIdRef : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + resourceServerId : str, default is Undefined, optional + The ID of the resource server. + resourceServerIdRef : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDRef, default is Undefined, optional + resource server Id ref + resourceServerIdSelector : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDSelector, default is Undefined, optional + resource server Id selector + targetClaim : str, default is Undefined, optional + The name of the target claim in the token. + targetContextAttributes : bool, default is Undefined, optional + true if policy should be evaluated on context attributes instead of identity attributes. + """ + + + decisionStrategy?: str + + description?: str + + logic?: str + + name?: str + + pattern?: str + + realmId?: str + + realmIdRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDRef + + realmIdSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDSelector + + resourceServerId?: str + + resourceServerIdRef?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDRef + + resourceServerIdSelector?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDSelector + + targetClaim?: str + + targetContextAttributes?: bool + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDRefPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDRef: + r""" + Reference to a Client in openidclient to populate resourceServerId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDRefPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDSelector: + r""" + Selector for a Client in openidclient to populate resourceServerId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDSelectorPolicy + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecInitProviderResourceServerIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicySpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicyStatus: + r""" + ClientRegexPolicyStatus defines the observed state of ClientRegexPolicy. + + Attributes + ---------- + atProvider : OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicyStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicyStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicyStatusAtProvider + + conditions?: [OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicyStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicyStatusAtProvider: + r""" + openidclient keycloakm crossplane io v1alpha1 client regex policy status at provider + + Attributes + ---------- + decisionStrategy : str, default is Undefined, optional + The decision strategy, can be one of UNANIMOUS, AFFIRMATIVE, or CONSENSUS. + description : str, default is Undefined, optional + A description for the authorization policy. + id : str, default is Undefined, optional + Policy ID representing the Regex policy. + logic : str, default is Undefined, optional + The logic, can be one of POSITIVE or NEGATIVE. Defaults to POSITIVE. + name : str, default is Undefined, optional + The name of the policy. + pattern : str, default is Undefined, optional + The Regex pattern. + realmId : str, default is Undefined, optional + The realm this policy exists in. + resourceServerId : str, default is Undefined, optional + The ID of the resource server. + targetClaim : str, default is Undefined, optional + The name of the target claim in the token. + targetContextAttributes : bool, default is Undefined, optional + true if policy should be evaluated on context attributes instead of identity attributes. + """ + + + decisionStrategy?: str + + description?: str + + id?: str + + logic?: str + + name?: str + + pattern?: str + + realmId?: str + + resourceServerId?: str + + targetClaim?: str + + targetContextAttributes?: bool + + +schema OpenidclientKeycloakmCrossplaneIoV1alpha1ClientRegexPolicyStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_audience_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_audience_protocol_mapper.k new file mode 100644 index 00000000..d87cabac --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_audience_protocol_mapper.k @@ -0,0 +1,965 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema AudienceProtocolMapper: + r""" + AudienceProtocolMapper is the Schema for the AudienceProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "AudienceProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.m.crossplane.io/v1alpha1" = "openidgroup.keycloak.m.crossplane.io/v1alpha1" + + kind: "AudienceProtocolMapper" = "AudienceProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpec + + status?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperStatus + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpec: + r""" + AudienceProtocolMapperSpec defines the desired state of AudienceProtocolMapper + + Attributes + ---------- + forProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 audience protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the audience should be included in the aud claim for the id token. Defaults to true. + Indicates if this claim should be added to the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the audience should be included in the aud claim for the id token. Defaults to true. + Indicates if this claim should be added to the id token. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + includedClientAudience : str, default is Undefined, optional + A client ID to include within the token's aud claim. Conflicts with included_custom_audience. One of included_client_audience or included_custom_audience must be specified. + A client ID to include within the token's `aud` claim. Cannot be used with included_custom_audience + includedCustomAudience : str, default is Undefined, optional + A custom audience to include within the token's aud claim. Conflicts with included_client_audience. One of included_client_audience or included_custom_audience must be specified. + A custom audience to include within the token's `aud` claim. Cannot be used with included_custom_audience + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDSelector + + includedClientAudience?: str + + includedCustomAudience?: str + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the audience should be included in the aud claim for the id token. Defaults to true. + Indicates if this claim should be added to the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the audience should be included in the aud claim for the id token. Defaults to true. + Indicates if this claim should be added to the id token. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + includedClientAudience : str, default is Undefined, optional + A client ID to include within the token's aud claim. Conflicts with included_custom_audience. One of included_client_audience or included_custom_audience must be specified. + A client ID to include within the token's `aud` claim. Cannot be used with included_custom_audience + includedCustomAudience : str, default is Undefined, optional + A custom audience to include within the token's aud claim. Conflicts with included_client_audience. One of included_client_audience or included_custom_audience must be specified. + A custom audience to include within the token's `aud` claim. Cannot be used with included_custom_audience + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDSelector + + includedClientAudience?: str + + includedCustomAudience?: str + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperStatus: + r""" + AudienceProtocolMapperStatus defines the observed state of AudienceProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperStatusAtProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 audience protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the audience should be included in the aud claim for the id token. Defaults to true. + Indicates if this claim should be added to the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the audience should be included in the aud claim for the id token. Defaults to true. + Indicates if this claim should be added to the id token. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + includedClientAudience : str, default is Undefined, optional + A client ID to include within the token's aud claim. Conflicts with included_custom_audience. One of included_client_audience or included_custom_audience must be specified. + A client ID to include within the token's `aud` claim. Cannot be used with included_custom_audience + includedCustomAudience : str, default is Undefined, optional + A custom audience to include within the token's aud claim. Conflicts with included_client_audience. One of included_client_audience or included_custom_audience must be specified. + A custom audience to include within the token's `aud` claim. Cannot be used with included_custom_audience + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + clientId?: str + + clientScopeId?: str + + id?: str + + includedClientAudience?: str + + includedCustomAudience?: str + + name?: str + + realmId?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_audience_resolve_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_audience_resolve_protocol_mapper.k new file mode 100644 index 00000000..d441bd5f --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_audience_resolve_protocol_mapper.k @@ -0,0 +1,905 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema AudienceResolveProtocolMapper: + r""" + AudienceResolveProtocolMapper is the Schema for the AudienceResolveProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "AudienceResolveProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.m.crossplane.io/v1alpha1" = "openidgroup.keycloak.m.crossplane.io/v1alpha1" + + kind: "AudienceResolveProtocolMapper" = "AudienceResolveProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpec + + status?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatus + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpec: + r""" + AudienceResolveProtocolMapperSpec defines the desired state of AudienceResolveProtocolMapper + + Attributes + ---------- + forProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 audience resolve protocol mapper spec for provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. Defaults to "audience resolve". + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. Defaults to "audience resolve". + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatus: + r""" + AudienceResolveProtocolMapperStatus defines the observed state of AudienceResolveProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatusAtProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 audience resolve protocol mapper status at provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. Defaults to "audience resolve". + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + """ + + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1AudienceResolveProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_full_name_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_full_name_protocol_mapper.k new file mode 100644 index 00000000..07163699 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_full_name_protocol_mapper.k @@ -0,0 +1,941 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema FullNameProtocolMapper: + r""" + FullNameProtocolMapper is the Schema for the FullNameProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "FullNameProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.m.crossplane.io/v1alpha1" = "openidgroup.keycloak.m.crossplane.io/v1alpha1" + + kind: "FullNameProtocolMapper" = "FullNameProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpec + + status?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperStatus + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpec: + r""" + FullNameProtocolMapperSpec defines the desired state of FullNameProtocolMapper + + Attributes + ---------- + forProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 full name protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the access token. Defaults to true. + addToIdToken : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the id token. Defaults to true. + addToUserinfo : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the UserInfo response body. Defaults to true. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the access token. Defaults to true. + addToIdToken : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the id token. Defaults to true. + addToUserinfo : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the UserInfo response body. Defaults to true. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperStatus: + r""" + FullNameProtocolMapperStatus defines the observed state of FullNameProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperStatusAtProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 full name protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the access token. Defaults to true. + addToIdToken : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the id token. Defaults to true. + addToUserinfo : bool, default is Undefined, optional + Indicates if the user's full name should be added as a claim to the UserInfo response body. Defaults to true. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1FullNameProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_hardcoded_claim_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_hardcoded_claim_protocol_mapper.k new file mode 100644 index 00000000..486866d2 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_hardcoded_claim_protocol_mapper.k @@ -0,0 +1,989 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema HardcodedClaimProtocolMapper: + r""" + HardcodedClaimProtocolMapper is the Schema for the HardcodedClaimProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "HardcodedClaimProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.m.crossplane.io/v1alpha1" = "openidgroup.keycloak.m.crossplane.io/v1alpha1" + + kind: "HardcodedClaimProtocolMapper" = "HardcodedClaimProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpec + + status?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatus + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpec: + r""" + HardcodedClaimProtocolMapperSpec defines the desired state of HardcodedClaimProtocolMapper + + Attributes + ---------- + forProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 hardcoded claim protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValue : str, default is Undefined, optional + The hardcoded value of the claim. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValue?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValue : str, default is Undefined, optional + The hardcoded value of the claim. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValue?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatus: + r""" + HardcodedClaimProtocolMapperStatus defines the observed state of HardcodedClaimProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatusAtProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 hardcoded claim protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValue : str, default is Undefined, optional + The hardcoded value of the claim. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValue?: str + + claimValueType?: str + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedClaimProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_hardcoded_role_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_hardcoded_role_protocol_mapper.k new file mode 100644 index 00000000..b4afe0dc --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_hardcoded_role_protocol_mapper.k @@ -0,0 +1,1127 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema HardcodedRoleProtocolMapper: + r""" + HardcodedRoleProtocolMapper is the Schema for the HardcodedRoleProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "HardcodedRoleProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.m.crossplane.io/v1alpha1" = "openidgroup.keycloak.m.crossplane.io/v1alpha1" + + kind: "HardcodedRoleProtocolMapper" = "HardcodedRoleProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpec + + status?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatus + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpec: + r""" + HardcodedRoleProtocolMapperSpec defines the desired state of HardcodedRoleProtocolMapper + + Attributes + ---------- + forProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 hardcoded role protocol mapper spec for provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + roleId : str, default is Undefined, optional + The ID of the role to map to an access token. + roleIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDRef, default is Undefined, optional + role Id ref + roleIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDSelector, default is Undefined, optional + role Id selector + """ + + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDSelector + + roleId?: str + + roleIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDRef + + roleIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDRef: + r""" + Reference to a Role in role to populate roleId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDSelector: + r""" + Selector for a Role in role to populate roleId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecForProviderRoleIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + roleId : str, default is Undefined, optional + The ID of the role to map to an access token. + roleIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDRef, default is Undefined, optional + role Id ref + roleIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDSelector, default is Undefined, optional + role Id selector + """ + + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDSelector + + roleId?: str + + roleIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDRef + + roleIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDRef: + r""" + Reference to a Role in role to populate roleId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDSelector: + r""" + Selector for a Role in role to populate roleId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecInitProviderRoleIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatus: + r""" + HardcodedRoleProtocolMapperStatus defines the observed state of HardcodedRoleProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatusAtProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 hardcoded role protocol mapper status at provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + roleId : str, default is Undefined, optional + The ID of the role to map to an access token. + """ + + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + roleId?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1HardcodedRoleProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_sub_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_sub_protocol_mapper.k new file mode 100644 index 00000000..84753d2e --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_sub_protocol_mapper.k @@ -0,0 +1,935 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema SubProtocolMapper: + r""" + SubProtocolMapper is the Schema for the SubProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "SubProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.m.crossplane.io/v1alpha1" = "openidgroup.keycloak.m.crossplane.io/v1alpha1" + + kind: "SubProtocolMapper" = "SubProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpec + + status?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperStatus + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpec: + r""" + SubProtocolMapperSpec defines the desired state of SubProtocolMapper + + Attributes + ---------- + forProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 sub protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the sub claim should be added to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the sub claim should be added to the token introspection response. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response body. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToTokenIntrospection?: bool + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the sub claim should be added to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the sub claim should be added to the token introspection response. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response body. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToTokenIntrospection?: bool + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperStatus: + r""" + SubProtocolMapperStatus defines the observed state of SubProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperStatusAtProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 sub protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the sub claim should be added to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the sub claim should be added to the token introspection response. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response body. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + """ + + + addToAccessToken?: bool + + addToTokenIntrospection?: bool + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1SubProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_attribute_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_attribute_protocol_mapper.k new file mode 100644 index 00000000..65340a2c --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_attribute_protocol_mapper.k @@ -0,0 +1,1034 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema UserAttributeProtocolMapper: + r""" + UserAttributeProtocolMapper is the Schema for the UserAttributeProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "UserAttributeProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.m.crossplane.io/v1alpha1" = "openidgroup.keycloak.m.crossplane.io/v1alpha1" + + kind: "UserAttributeProtocolMapper" = "UserAttributeProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpec + + status?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperStatus + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpec: + r""" + UserAttributeProtocolMapperSpec defines the desired state of UserAttributeProtocolMapper + + Attributes + ---------- + forProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 user attribute protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the token introspection response. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response. + addToUserinfo : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + aggregateAttributes : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates if attribute values should be aggregated within the group attributes + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + multivalued : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + userAttribute : str, default is Undefined, optional + The custom user attribute to map a claim for. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + aggregateAttributes?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDSelector + + multivalued?: bool + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDSelector + + userAttribute?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the token introspection response. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response. + addToUserinfo : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + aggregateAttributes : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates if attribute values should be aggregated within the group attributes + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + multivalued : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + userAttribute : str, default is Undefined, optional + The custom user attribute to map a claim for. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + aggregateAttributes?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDSelector + + multivalued?: bool + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDSelector + + userAttribute?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperStatus: + r""" + UserAttributeProtocolMapperStatus defines the observed state of UserAttributeProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperStatusAtProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 user attribute protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the token introspection response. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response. + addToUserinfo : bool, default is Undefined, optional + Indicates if the attribute should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + aggregateAttributes : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates if attribute values should be aggregated within the group attributes + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + multivalued : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + userAttribute : str, default is Undefined, optional + The custom user attribute to map a claim for. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + aggregateAttributes?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientScopeId?: str + + id?: str + + multivalued?: bool + + name?: str + + realmId?: str + + userAttribute?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserAttributeProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_client_role_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_client_role_protocol_mapper.k new file mode 100644 index 00000000..faa1c22b --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_client_role_protocol_mapper.k @@ -0,0 +1,1232 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema UserClientRoleProtocolMapper: + r""" + UserClientRoleProtocolMapper is the Schema for the UserClientRoleProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "UserClientRoleProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.m.crossplane.io/v1alpha1" = "openidgroup.keycloak.m.crossplane.io/v1alpha1" + + kind: "UserClientRoleProtocolMapper" = "UserClientRoleProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpec + + status?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatus + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpec: + r""" + UserClientRoleProtocolMapperSpec defines the desired state of UserClientRoleProtocolMapper + + Attributes + ---------- + forProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 user client role protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdForRoleMappings : str, default is Undefined, optional + The Client ID for role mappings. Just client roles of this client will be added to the token. If this is unset, client roles of all clients will be added to the token. + Client ID for role mappings. + clientIdForRoleMappingsRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsRef, default is Undefined, optional + client Id for role mappings ref + clientIdForRoleMappingsSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsSelector, default is Undefined, optional + client Id for role mappings selector + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientRolePrefix : str, default is Undefined, optional + A prefix for each Client Role. + Prefix that will be added to each client role. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + multivalued : bool, default is Undefined, optional + Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdForRoleMappings?: str + + clientIdForRoleMappingsRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsRef + + clientIdForRoleMappingsSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsSelector + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDSelector + + clientRolePrefix?: str + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDSelector + + multivalued?: bool + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsRef: + r""" + Reference to a Client in openidclient to populate clientIdForRoleMappings. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsSelector: + r""" + Selector for a Client in openidclient to populate clientIdForRoleMappings. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDForRoleMappingsSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdForRoleMappings : str, default is Undefined, optional + The Client ID for role mappings. Just client roles of this client will be added to the token. If this is unset, client roles of all clients will be added to the token. + Client ID for role mappings. + clientIdForRoleMappingsRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsRef, default is Undefined, optional + client Id for role mappings ref + clientIdForRoleMappingsSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsSelector, default is Undefined, optional + client Id for role mappings selector + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientRolePrefix : str, default is Undefined, optional + A prefix for each Client Role. + Prefix that will be added to each client role. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + multivalued : bool, default is Undefined, optional + Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdForRoleMappings?: str + + clientIdForRoleMappingsRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsRef + + clientIdForRoleMappingsSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsSelector + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDSelector + + clientRolePrefix?: str + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDSelector + + multivalued?: bool + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDSelector + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsRef: + r""" + Reference to a Client in openidclient to populate clientIdForRoleMappings. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsSelector: + r""" + Selector for a Client in openidclient to populate clientIdForRoleMappings. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDForRoleMappingsSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatus: + r""" + UserClientRoleProtocolMapperStatus defines the observed state of UserClientRoleProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatusAtProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 user client role protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdForRoleMappings : str, default is Undefined, optional + The Client ID for role mappings. Just client roles of this client will be added to the token. If this is unset, client roles of all clients will be added to the token. + Client ID for role mappings. + clientRolePrefix : str, default is Undefined, optional + A prefix for each Client Role. + Prefix that will be added to each client role. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + multivalued : bool, default is Undefined, optional + Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdForRoleMappings?: str + + clientRolePrefix?: str + + clientScopeId?: str + + id?: str + + multivalued?: bool + + name?: str + + realmId?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserClientRoleProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_property_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_property_protocol_mapper.k new file mode 100644 index 00000000..150d0251 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_property_protocol_mapper.k @@ -0,0 +1,989 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema UserPropertyProtocolMapper: + r""" + UserPropertyProtocolMapper is the Schema for the UserPropertyProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "UserPropertyProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.m.crossplane.io/v1alpha1" = "openidgroup.keycloak.m.crossplane.io/v1alpha1" + + kind: "UserPropertyProtocolMapper" = "UserPropertyProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpec + + status?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperStatus + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpec: + r""" + UserPropertyProtocolMapperSpec defines the desired state of UserPropertyProtocolMapper + + Attributes + ---------- + forProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 user property protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the property should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the property should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the property should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. client_scope_id - The client scope this protocol mapper is attached to. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + userProperty : str, default is Undefined, optional + The built-in user property (such as email) to map a claim for. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDSelector + + userProperty?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the property should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the property should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the property should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. client_scope_id - The client scope this protocol mapper is attached to. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + userProperty : str, default is Undefined, optional + The built-in user property (such as email) to map a claim for. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDSelector + + userProperty?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperStatus: + r""" + UserPropertyProtocolMapperStatus defines the observed state of UserPropertyProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperStatusAtProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 user property protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the property should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the property should be a claim in the id token. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the property should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. client_scope_id - The client scope this protocol mapper is attached to. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + userProperty : str, default is Undefined, optional + The built-in user property (such as email) to map a claim for. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + userProperty?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserPropertyProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_realm_role_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_realm_role_protocol_mapper.k new file mode 100644 index 00000000..2e27e5ed --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_realm_role_protocol_mapper.k @@ -0,0 +1,1022 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema UserRealmRoleProtocolMapper: + r""" + UserRealmRoleProtocolMapper is the Schema for the UserRealmRoleProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "UserRealmRoleProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.m.crossplane.io/v1alpha1" = "openidgroup.keycloak.m.crossplane.io/v1alpha1" + + kind: "UserRealmRoleProtocolMapper" = "UserRealmRoleProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpec + + status?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatus + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpec: + r""" + UserRealmRoleProtocolMapperSpec defines the desired state of UserRealmRoleProtocolMapper + + Attributes + ---------- + forProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 user realm role protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the Token Introspection response body. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response body. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + multivalued : bool, default is Undefined, optional + Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + realmRolePrefix : str, default is Undefined, optional + A prefix for each Realm Role. + Prefix that will be added to each realm role. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDSelector + + multivalued?: bool + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDSelector + + realmRolePrefix?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the Token Introspection response body. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response body. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + multivalued : bool, default is Undefined, optional + Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + realmRolePrefix : str, default is Undefined, optional + A prefix for each Realm Role. + Prefix that will be added to each realm role. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDSelector + + multivalued?: bool + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDSelector + + realmRolePrefix?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatus: + r""" + UserRealmRoleProtocolMapperStatus defines the observed state of UserRealmRoleProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatusAtProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 user realm role protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the Token Introspection response body. Defaults to true. + Indicates if the attribute should be a claim in the token introspection response body. + addToUserinfo : bool, default is Undefined, optional + Indicates if the property should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the attribute should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + multivalued : bool, default is Undefined, optional + Indicates if attribute supports multiple values. If true, then the list of all values of this attribute will be set as claim. If false, then just first value will be set as claim. Defaults to false. + Indicates whether this attribute is a single value or an array of values. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmRolePrefix : str, default is Undefined, optional + A prefix for each Realm Role. + Prefix that will be added to each realm role. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientScopeId?: str + + id?: str + + multivalued?: bool + + name?: str + + realmId?: str + + realmRolePrefix?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserRealmRoleProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_session_note_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_session_note_protocol_mapper.k new file mode 100644 index 00000000..793ceef2 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/openidgroup/v1alpha1/openidgroup_keycloakm_crossplane_io_v1alpha1_user_session_note_protocol_mapper.k @@ -0,0 +1,1007 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema UserSessionNoteProtocolMapper: + r""" + UserSessionNoteProtocolMapper is the Schema for the UserSessionNoteProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "openidgroup.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "UserSessionNoteProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpec, default is Undefined, required + spec + status : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "openidgroup.keycloak.m.crossplane.io/v1alpha1" = "openidgroup.keycloak.m.crossplane.io/v1alpha1" + + kind: "UserSessionNoteProtocolMapper" = "UserSessionNoteProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpec + + status?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatus + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpec: + r""" + UserSessionNoteProtocolMapperSpec defines the desired state of UserSessionNoteProtocolMapper + + Attributes + ---------- + forProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProvider + + initProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecWriteConnectionSecretToRef + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 user session note protocol mapper spec for provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the token introspection response. Defaults to true. + Indicates if the session note should be a claim in the token introspection response. + addToUserinfo : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the session note should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + sessionNote : str, default is Undefined, optional + String value being the name of stored user session note within the UserSessionModel.note map. + String value being the name of stored user session note within the UserSessionModel.note map. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDSelector + + sessionNote?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the token introspection response. Defaults to true. + Indicates if the session note should be a claim in the token introspection response. + addToUserinfo : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the session note should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + clientScopeIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + realmIdRef : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + sessionNote : str, default is Undefined, optional + String value being the name of stored user session note within the UserSessionModel.note map. + String value being the name of stored user session note within the UserSessionModel.note map. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDSelector + + name?: str + + realmId?: str + + realmIdRef?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDSelector + + sessionNote?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in openidclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in openidclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in openidclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatus: + r""" + UserSessionNoteProtocolMapperStatus defines the observed state of UserSessionNoteProtocolMapper. + + Attributes + ---------- + atProvider : OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatusAtProvider + + conditions?: [OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatusAtProvider: + r""" + openidgroup keycloakm crossplane io v1alpha1 user session note protocol mapper status at provider + + Attributes + ---------- + addToAccessToken : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the access token. Defaults to true. + Indicates if the attribute should be a claim in the access token. + addToIdToken : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the id token. Defaults to true. + Indicates if the attribute should be a claim in the id token. + addToTokenIntrospection : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the token introspection response. Defaults to true. + Indicates if the session note should be a claim in the token introspection response. + addToUserinfo : bool, default is Undefined, optional + Indicates if the session note should be added as a claim to the UserInfo response body. Defaults to true. + Indicates if the session note should appear in the userinfo response body. + claimName : str, default is Undefined, optional + The name of the claim to insert into a token. + claimValueType : str, default is Undefined, optional + The claim type used when serializing JSON tokens. Can be one of String, JSON, long, int, or boolean. Defaults to String. + Claim type used when serializing tokens. + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + The mapper's associated client. Cannot be used at the same time as client_scope_id. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + The mapper's associated client scope. Cannot be used at the same time as client_id. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + A human-friendly name that will appear in the Keycloak console. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + The realm id where the associated client or client scope exists. + sessionNote : str, default is Undefined, optional + String value being the name of stored user session note within the UserSessionModel.note map. + String value being the name of stored user session note within the UserSessionModel.note map. + """ + + + addToAccessToken?: bool + + addToIdToken?: bool + + addToTokenIntrospection?: bool + + addToUserinfo?: bool + + claimName?: str + + claimValueType?: str + + clientId?: str + + clientScopeId?: str + + id?: str + + name?: str + + realmId?: str + + sessionNote?: str + + +schema OpenidgroupKeycloakmCrossplaneIoV1alpha1UserSessionNoteProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_client_policy_profile.k b/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_client_policy_profile.k new file mode 100644 index 00000000..cdd098f0 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_client_policy_profile.k @@ -0,0 +1,527 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema ClientPolicyProfile: + r""" + ClientPolicyProfile is the Schema for the ClientPolicyProfiles API. + + Attributes + ---------- + apiVersion : str, default is "realm.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "ClientPolicyProfile", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpec, default is Undefined, required + spec + status : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileStatus, default is Undefined, optional + status + """ + + + apiVersion: "realm.keycloak.m.crossplane.io/v1alpha1" = "realm.keycloak.m.crossplane.io/v1alpha1" + + kind: "ClientPolicyProfile" = "ClientPolicyProfile" + + metadata?: v1.ObjectMeta + + spec: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpec + + status?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileStatus + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpec: + r""" + ClientPolicyProfileSpec defines the desired state of ClientPolicyProfile + + Attributes + ---------- + forProvider : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProvider, default is Undefined, required + for provider + initProvider : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProvider + + initProvider?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecProviderConfigRef + + writeConnectionSecretToRef?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecWriteConnectionSecretToRef + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProvider: + r""" + realm keycloakm crossplane io v1alpha1 client policy profile spec for provider + + Attributes + ---------- + description : str, default is Undefined, optional + description + executor : [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderExecutorItems0], default is Undefined, optional + An ordered list of executors + name : str, default is Undefined, optional + The name of the attribute. + realmId : str, default is Undefined, optional + The realm id. + realmIdRef : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + description?: str + + executor?: [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderExecutorItems0] + + name?: str + + realmId?: str + + realmIdRef?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDRef + + realmIdSelector?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDSelector + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderExecutorItems0: + r""" + realm keycloakm crossplane io v1alpha1 client policy profile spec for provider executor items0 + + Attributes + ---------- + configuration : {str:str}, default is Undefined, optional + - A map of configuration values + name : str, default is Undefined, optional + The name of the attribute. + """ + + + configuration?: {str:str} + + name?: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDRefPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDSelectorPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + description : str, default is Undefined, optional + description + executor : [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderExecutorItems0], default is Undefined, optional + An ordered list of executors + name : str, default is Undefined, optional + The name of the attribute. + realmId : str, default is Undefined, optional + The realm id. + realmIdRef : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + description?: str + + executor?: [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderExecutorItems0] + + name?: str + + realmId?: str + + realmIdRef?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDRef + + realmIdSelector?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDSelector + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderExecutorItems0: + r""" + realm keycloakm crossplane io v1alpha1 client policy profile spec init provider executor items0 + + Attributes + ---------- + configuration : {str:str}, default is Undefined, optional + - A map of configuration values + name : str, default is Undefined, optional + The name of the attribute. + """ + + + configuration?: {str:str} + + name?: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDRefPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDSelectorPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileStatus: + r""" + ClientPolicyProfileStatus defines the observed state of ClientPolicyProfile. + + Attributes + ---------- + atProvider : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileStatusAtProvider, default is Undefined, optional + at provider + conditions : [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileStatusAtProvider + + conditions?: [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileStatusConditionsItems0] + + observedGeneration?: int + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileStatusAtProvider: + r""" + realm keycloakm crossplane io v1alpha1 client policy profile status at provider + + Attributes + ---------- + description : str, default is Undefined, optional + description + executor : [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileStatusAtProviderExecutorItems0], default is Undefined, optional + An ordered list of executors + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The name of the attribute. + realmId : str, default is Undefined, optional + The realm id. + """ + + + description?: str + + executor?: [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileStatusAtProviderExecutorItems0] + + id?: str + + name?: str + + realmId?: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileStatusAtProviderExecutorItems0: + r""" + realm keycloakm crossplane io v1alpha1 client policy profile status at provider executor items0 + + Attributes + ---------- + configuration : {str:str}, default is Undefined, optional + - A map of configuration values + name : str, default is Undefined, optional + The name of the attribute. + """ + + + configuration?: {str:str} + + name?: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfileStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_client_policy_profile_policy.k b/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_client_policy_profile_policy.k new file mode 100644 index 00000000..a9ad4e5e --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_client_policy_profile_policy.k @@ -0,0 +1,761 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema ClientPolicyProfilePolicy: + r""" + ClientPolicyProfilePolicy is the Schema for the ClientPolicyProfilePolicys API. + + Attributes + ---------- + apiVersion : str, default is "realm.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "ClientPolicyProfilePolicy", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpec, default is Undefined, required + spec + status : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatus, default is Undefined, optional + status + """ + + + apiVersion: "realm.keycloak.m.crossplane.io/v1alpha1" = "realm.keycloak.m.crossplane.io/v1alpha1" + + kind: "ClientPolicyProfilePolicy" = "ClientPolicyProfilePolicy" + + metadata?: v1.ObjectMeta + + spec: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpec + + status?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatus + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpec: + r""" + ClientPolicyProfilePolicySpec defines the desired state of ClientPolicyProfilePolicy + + Attributes + ---------- + forProvider : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProvider, default is Undefined, required + for provider + initProvider : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProvider + + initProvider?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecProviderConfigRef + + writeConnectionSecretToRef?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecWriteConnectionSecretToRef + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProvider: + r""" + realm keycloakm crossplane io v1alpha1 client policy profile policy spec for provider + + Attributes + ---------- + condition : [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderConditionItems0], default is Undefined, optional + An ordered list of condition + description : str, default is Undefined, optional + description + enabled : bool, default is Undefined, optional + enabled + name : str, default is Undefined, optional + The name of the attribute. + profiles : [str], default is Undefined, optional + profiles + profilesRefs : [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesRefsItems0], default is Undefined, optional + References to ClientPolicyProfile in realm to populate profiles. + profilesSelector : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesSelector, default is Undefined, optional + profiles selector + realmId : str, default is Undefined, optional + The realm id. + realmIdRef : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + condition?: [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderConditionItems0] + + description?: str + + enabled?: bool + + name?: str + + profiles?: [str] + + profilesRefs?: [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesRefsItems0] + + profilesSelector?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesSelector + + realmId?: str + + realmIdRef?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDRef + + realmIdSelector?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDSelector + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderConditionItems0: + r""" + realm keycloakm crossplane io v1alpha1 client policy profile policy spec for provider condition items0 + + Attributes + ---------- + configuration : {str:str}, default is Undefined, optional + - A map of configuration values + name : str, default is Undefined, optional + The name of the attribute. + """ + + + configuration?: {str:str} + + name?: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesRefsItems0: + r""" + A NamespacedReference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesRefsItems0Policy + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesSelector: + r""" + Selector for a list of ClientPolicyProfile in realm to populate profiles. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesSelectorPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderProfilesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDRefPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDSelectorPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + condition : [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderConditionItems0], default is Undefined, optional + An ordered list of condition + description : str, default is Undefined, optional + description + enabled : bool, default is Undefined, optional + enabled + name : str, default is Undefined, optional + The name of the attribute. + profiles : [str], default is Undefined, optional + profiles + profilesRefs : [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesRefsItems0], default is Undefined, optional + References to ClientPolicyProfile in realm to populate profiles. + profilesSelector : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesSelector, default is Undefined, optional + profiles selector + realmId : str, default is Undefined, optional + The realm id. + realmIdRef : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + """ + + + condition?: [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderConditionItems0] + + description?: str + + enabled?: bool + + name?: str + + profiles?: [str] + + profilesRefs?: [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesRefsItems0] + + profilesSelector?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesSelector + + realmId?: str + + realmIdRef?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDRef + + realmIdSelector?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDSelector + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderConditionItems0: + r""" + realm keycloakm crossplane io v1alpha1 client policy profile policy spec init provider condition items0 + + Attributes + ---------- + configuration : {str:str}, default is Undefined, optional + - A map of configuration values + name : str, default is Undefined, optional + The name of the attribute. + """ + + + configuration?: {str:str} + + name?: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesRefsItems0: + r""" + A NamespacedReference to a named object. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesRefsItems0Policy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesRefsItems0Policy + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesRefsItems0Policy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesSelector: + r""" + Selector for a list of ClientPolicyProfile in realm to populate profiles. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesSelectorPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderProfilesSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDRefPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDSelectorPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicySpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatus: + r""" + ClientPolicyProfilePolicyStatus defines the observed state of ClientPolicyProfilePolicy. + + Attributes + ---------- + atProvider : RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusAtProvider, default is Undefined, optional + at provider + conditions : [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusAtProvider + + conditions?: [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusConditionsItems0] + + observedGeneration?: int + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusAtProvider: + r""" + realm keycloakm crossplane io v1alpha1 client policy profile policy status at provider + + Attributes + ---------- + condition : [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusAtProviderConditionItems0], default is Undefined, optional + An ordered list of condition + description : str, default is Undefined, optional + description + enabled : bool, default is Undefined, optional + enabled + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The name of the attribute. + profiles : [str], default is Undefined, optional + profiles + realmId : str, default is Undefined, optional + The realm id. + """ + + + condition?: [RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusAtProviderConditionItems0] + + description?: str + + enabled?: bool + + id?: str + + name?: str + + profiles?: [str] + + realmId?: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusAtProviderConditionItems0: + r""" + realm keycloakm crossplane io v1alpha1 client policy profile policy status at provider condition items0 + + Attributes + ---------- + configuration : {str:str}, default is Undefined, optional + - A map of configuration values + name : str, default is Undefined, optional + The name of the attribute. + """ + + + configuration?: {str:str} + + name?: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1ClientPolicyProfilePolicyStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_realm.k b/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_realm.k index ee7ca0f5..5df53933 100644 --- a/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_realm.k +++ b/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_realm.k @@ -356,6 +356,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecForProviderOtpPolicyItems0: algorithm : str, default is Undefined, optional What hashing algorithm should be used to generate the OTP, Valid options are HmacSHA1,HmacSHA256 and HmacSHA512. Defaults to HmacSHA1. What hashing algorithm should be used to generate the OTP. + codeReusable : bool, default is Undefined, optional + Possibility to use the same OTP code again after successful authentication. Defaults to false. digits : float, default is Undefined, optional How many digits the OTP have. Defaults to 6. initialCounter : float, default is Undefined, optional @@ -372,6 +374,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecForProviderOtpPolicyItems0: algorithm?: str + codeReusable?: bool + digits?: float initialCounter?: float @@ -390,7 +394,7 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecForProviderSMTPServerItems0: Attributes ---------- allowUtf8 : bool, default is Undefined, optional - allow Utf8 + When true, allows UTF-8 in the local part of the email address. Defaults to false. auth : [RealmKeycloakmCrossplaneIoV1alpha1RealmSpecForProviderSMTPServerItems0AuthItems0], default is Undefined, optional Enables authentication to the SMTP server. Cannot be set alongside token_auth. This block supports the following arguments: envelopeFrom : str, default is Undefined, optional @@ -549,6 +553,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecForProviderSecurityDefensesIte Attributes ---------- + bruteForceStrategy : str, default is Undefined, optional + brute force strategy failureResetTimeSeconds : float, default is Undefined, optional When will failure count be reset? maxFailureWaitSeconds : float, default is Undefined, optional @@ -568,6 +574,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecForProviderSecurityDefensesIte """ + bruteForceStrategy?: str + failureResetTimeSeconds?: float maxFailureWaitSeconds?: float @@ -647,6 +655,9 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecForProviderWebAuthnPasswordles The timeout value for creating a user's public key credential in seconds. When set to 0, this timeout option is not adapted. Defaults to 0. extraOrigins : [str], default is Undefined, optional A set of extra origins for non-web applications. + passwordlessPasskeysEnabled : bool, default is Undefined, optional + When true, Keycloak will enable passwordless passkey support. This attribute is only valid inside a web_authn_passwordless_policy block and requires a Keycloak version that supports passwordless passkeys. Defaults to false. + Enable passkeys for passwordless WebAuthn authentication relyingPartyEntityName : str, default is Undefined, optional A human-readable server name for the WebAuthn Relying Party. Defaults to keycloak. relyingPartyId : str, default is Undefined, optional @@ -675,6 +686,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecForProviderWebAuthnPasswordles extraOrigins?: [str] + passwordlessPasskeysEnabled?: bool + relyingPartyEntityName?: str relyingPartyId?: str @@ -1040,6 +1053,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecInitProviderOtpPolicyItems0: algorithm : str, default is Undefined, optional What hashing algorithm should be used to generate the OTP, Valid options are HmacSHA1,HmacSHA256 and HmacSHA512. Defaults to HmacSHA1. What hashing algorithm should be used to generate the OTP. + codeReusable : bool, default is Undefined, optional + Possibility to use the same OTP code again after successful authentication. Defaults to false. digits : float, default is Undefined, optional How many digits the OTP have. Defaults to 6. initialCounter : float, default is Undefined, optional @@ -1056,6 +1071,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecInitProviderOtpPolicyItems0: algorithm?: str + codeReusable?: bool + digits?: float initialCounter?: float @@ -1074,7 +1091,7 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecInitProviderSMTPServerItems0: Attributes ---------- allowUtf8 : bool, default is Undefined, optional - allow Utf8 + When true, allows UTF-8 in the local part of the email address. Defaults to false. auth : [RealmKeycloakmCrossplaneIoV1alpha1RealmSpecInitProviderSMTPServerItems0AuthItems0], default is Undefined, optional Enables authentication to the SMTP server. Cannot be set alongside token_auth. This block supports the following arguments: envelopeFrom : str, default is Undefined, optional @@ -1233,6 +1250,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecInitProviderSecurityDefensesIt Attributes ---------- + bruteForceStrategy : str, default is Undefined, optional + brute force strategy failureResetTimeSeconds : float, default is Undefined, optional When will failure count be reset? maxFailureWaitSeconds : float, default is Undefined, optional @@ -1252,6 +1271,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecInitProviderSecurityDefensesIt """ + bruteForceStrategy?: str + failureResetTimeSeconds?: float maxFailureWaitSeconds?: float @@ -1331,6 +1352,9 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecInitProviderWebAuthnPasswordle The timeout value for creating a user's public key credential in seconds. When set to 0, this timeout option is not adapted. Defaults to 0. extraOrigins : [str], default is Undefined, optional A set of extra origins for non-web applications. + passwordlessPasskeysEnabled : bool, default is Undefined, optional + When true, Keycloak will enable passwordless passkey support. This attribute is only valid inside a web_authn_passwordless_policy block and requires a Keycloak version that supports passwordless passkeys. Defaults to false. + Enable passkeys for passwordless WebAuthn authentication relyingPartyEntityName : str, default is Undefined, optional A human-readable server name for the WebAuthn Relying Party. Defaults to keycloak. relyingPartyId : str, default is Undefined, optional @@ -1359,6 +1383,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmSpecInitProviderWebAuthnPasswordle extraOrigins?: [str] + passwordlessPasskeysEnabled?: bool + relyingPartyEntityName?: str relyingPartyId?: str @@ -1780,6 +1806,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmStatusAtProviderOtpPolicyItems0: algorithm : str, default is Undefined, optional What hashing algorithm should be used to generate the OTP, Valid options are HmacSHA1,HmacSHA256 and HmacSHA512. Defaults to HmacSHA1. What hashing algorithm should be used to generate the OTP. + codeReusable : bool, default is Undefined, optional + Possibility to use the same OTP code again after successful authentication. Defaults to false. digits : float, default is Undefined, optional How many digits the OTP have. Defaults to 6. initialCounter : float, default is Undefined, optional @@ -1796,6 +1824,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmStatusAtProviderOtpPolicyItems0: algorithm?: str + codeReusable?: bool + digits?: float initialCounter?: float @@ -1814,7 +1844,7 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmStatusAtProviderSMTPServerItems0: Attributes ---------- allowUtf8 : bool, default is Undefined, optional - allow Utf8 + When true, allows UTF-8 in the local part of the email address. Defaults to false. auth : [RealmKeycloakmCrossplaneIoV1alpha1RealmStatusAtProviderSMTPServerItems0AuthItems0], default is Undefined, optional Enables authentication to the SMTP server. Cannot be set alongside token_auth. This block supports the following arguments: envelopeFrom : str, default is Undefined, optional @@ -1929,6 +1959,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmStatusAtProviderSecurityDefensesIt Attributes ---------- + bruteForceStrategy : str, default is Undefined, optional + brute force strategy failureResetTimeSeconds : float, default is Undefined, optional When will failure count be reset? maxFailureWaitSeconds : float, default is Undefined, optional @@ -1948,6 +1980,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmStatusAtProviderSecurityDefensesIt """ + bruteForceStrategy?: str + failureResetTimeSeconds?: float maxFailureWaitSeconds?: float @@ -2027,6 +2061,9 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmStatusAtProviderWebAuthnPasswordle The timeout value for creating a user's public key credential in seconds. When set to 0, this timeout option is not adapted. Defaults to 0. extraOrigins : [str], default is Undefined, optional A set of extra origins for non-web applications. + passwordlessPasskeysEnabled : bool, default is Undefined, optional + When true, Keycloak will enable passwordless passkey support. This attribute is only valid inside a web_authn_passwordless_policy block and requires a Keycloak version that supports passwordless passkeys. Defaults to false. + Enable passkeys for passwordless WebAuthn authentication relyingPartyEntityName : str, default is Undefined, optional A human-readable server name for the WebAuthn Relying Party. Defaults to keycloak. relyingPartyId : str, default is Undefined, optional @@ -2055,6 +2092,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1RealmStatusAtProviderWebAuthnPasswordle extraOrigins?: [str] + passwordlessPasskeysEnabled?: bool + relyingPartyEntityName?: str relyingPartyId?: str diff --git a/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_realm_localization.k b/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_realm_localization.k new file mode 100644 index 00000000..9932fd3c --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_realm_localization.k @@ -0,0 +1,470 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema RealmLocalization: + r""" + RealmLocalization is the Schema for the RealmLocalizations API. + + Attributes + ---------- + apiVersion : str, default is "realm.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "RealmLocalization", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpec, default is Undefined, required + spec + status : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationStatus, default is Undefined, optional + status + """ + + + apiVersion: "realm.keycloak.m.crossplane.io/v1alpha1" = "realm.keycloak.m.crossplane.io/v1alpha1" + + kind: "RealmLocalization" = "RealmLocalization" + + metadata?: v1.ObjectMeta + + spec: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpec + + status?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationStatus + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpec: + r""" + RealmLocalizationSpec defines the desired state of RealmLocalization + + Attributes + ---------- + forProvider : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProvider, default is Undefined, required + for provider + initProvider : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProvider + + initProvider?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecProviderConfigRef + + writeConnectionSecretToRef?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecWriteConnectionSecretToRef + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProvider: + r""" + realm keycloakm crossplane io v1alpha1 realm localization spec for provider + + Attributes + ---------- + locale : str, default is Undefined, optional + The locale (language code) the texts apply to. + The locale for the localization texts. + realmId : str, default is Undefined, optional + The ID of the realm the user profile applies to. + The ID of the realm the localization texts apply to. + realmIdRef : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + texts : {str:str}, default is Undefined, optional + A map of translation keys to values. + The mapping of localization texts keys to values. + """ + + + locale?: str + + realmId?: str + + realmIdRef?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDRef + + realmIdSelector?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDSelector + + texts?: {str:str} + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDRefPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDSelectorPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + locale : str, default is Undefined, optional + The locale (language code) the texts apply to. + The locale for the localization texts. + realmId : str, default is Undefined, optional + The ID of the realm the user profile applies to. + The ID of the realm the localization texts apply to. + realmIdRef : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + texts : {str:str}, default is Undefined, optional + A map of translation keys to values. + The mapping of localization texts keys to values. + """ + + + locale?: str + + realmId?: str + + realmIdRef?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDRef + + realmIdSelector?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDSelector + + texts?: {str:str} + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDRefPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDSelectorPolicy + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationStatus: + r""" + RealmLocalizationStatus defines the observed state of RealmLocalization. + + Attributes + ---------- + atProvider : RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationStatusAtProvider, default is Undefined, optional + at provider + conditions : [RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationStatusAtProvider + + conditions?: [RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationStatusConditionsItems0] + + observedGeneration?: int + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationStatusAtProvider: + r""" + realm keycloakm crossplane io v1alpha1 realm localization status at provider + + Attributes + ---------- + id : str, default is Undefined, optional + id + locale : str, default is Undefined, optional + The locale (language code) the texts apply to. + The locale for the localization texts. + realmId : str, default is Undefined, optional + The ID of the realm the user profile applies to. + The ID of the realm the localization texts apply to. + texts : {str:str}, default is Undefined, optional + A map of translation keys to values. + The mapping of localization texts keys to values. + """ + + + id?: str + + locale?: str + + realmId?: str + + texts?: {str:str} + + +schema RealmKeycloakmCrossplaneIoV1alpha1RealmLocalizationStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_user_profile.k b/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_user_profile.k index d1d01957..442c7b94 100644 --- a/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_user_profile.k +++ b/crossplane_provider_keycloak/namespaced/realm/v1alpha1/realm_keycloakm_crossplane_io_v1alpha1_user_profile.k @@ -112,6 +112,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1UserProfileSpecForProviderAttributeItem ---------- annotations : {str:str}, default is Undefined, optional A map of annotations for the attribute. Values can be a String or a json object. + defaultValue : str, default is Undefined, optional + The default value of the attribute. Only applied with Keycloak 26.4.0 or later. displayName : str, default is Undefined, optional The display name of the attribute. enabledWhenScope : [str], default is Undefined, optional @@ -135,6 +137,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1UserProfileSpecForProviderAttributeItem annotations?: {str:str} + defaultValue?: str + displayName?: str enabledWhenScope?: [str] @@ -364,6 +368,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1UserProfileSpecInitProviderAttributeIte ---------- annotations : {str:str}, default is Undefined, optional A map of annotations for the attribute. Values can be a String or a json object. + defaultValue : str, default is Undefined, optional + The default value of the attribute. Only applied with Keycloak 26.4.0 or later. displayName : str, default is Undefined, optional The display name of the attribute. enabledWhenScope : [str], default is Undefined, optional @@ -387,6 +393,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1UserProfileSpecInitProviderAttributeIte annotations?: {str:str} + defaultValue?: str + displayName?: str enabledWhenScope?: [str] @@ -664,6 +672,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1UserProfileStatusAtProviderAttributeIte ---------- annotations : {str:str}, default is Undefined, optional A map of annotations for the attribute. Values can be a String or a json object. + defaultValue : str, default is Undefined, optional + The default value of the attribute. Only applied with Keycloak 26.4.0 or later. displayName : str, default is Undefined, optional The display name of the attribute. enabledWhenScope : [str], default is Undefined, optional @@ -687,6 +697,8 @@ schema RealmKeycloakmCrossplaneIoV1alpha1UserProfileStatusAtProviderAttributeIte annotations?: {str:str} + defaultValue?: str + displayName?: str enabledWhenScope?: [str] diff --git a/crossplane_provider_keycloak/namespaced/samlclient/v1alpha1/samlclient_keycloakm_crossplane_io_v1alpha1_saml_user_attribute_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/samlclient/v1alpha1/samlclient_keycloakm_crossplane_io_v1alpha1_saml_user_attribute_protocol_mapper.k new file mode 100644 index 00000000..11dbeb70 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/samlclient/v1alpha1/samlclient_keycloakm_crossplane_io_v1alpha1_saml_user_attribute_protocol_mapper.k @@ -0,0 +1,956 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema SamlUserAttributeProtocolMapper: + r""" + SamlUserAttributeProtocolMapper is the Schema for the SamlUserAttributeProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "samlclient.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "SamlUserAttributeProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpec, default is Undefined, required + spec + status : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "samlclient.keycloak.m.crossplane.io/v1alpha1" = "samlclient.keycloak.m.crossplane.io/v1alpha1" + + kind: "SamlUserAttributeProtocolMapper" = "SamlUserAttributeProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpec + + status?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatus + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpec: + r""" + SamlUserAttributeProtocolMapperSpec defines the desired state of SamlUserAttributeProtocolMapper + + Attributes + ---------- + forProvider : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProvider + + initProvider?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecWriteConnectionSecretToRef + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProvider: + r""" + samlclient keycloakm crossplane io v1alpha1 saml user attribute protocol mapper spec for provider + + Attributes + ---------- + aggregateAttributes : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates if attribute values should be aggregated within the group attributes + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + clientIdRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + clientScopeIdRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + friendlyName : str, default is Undefined, optional + An optional human-friendly name for this attribute. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + realmIdRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + samlAttributeName : str, default is Undefined, optional + The name of the SAML attribute. + samlAttributeNameFormat : str, default is Undefined, optional + The SAML attribute Name Format. Can be one of Unspecified, Basic, or URI Reference. + userAttribute : str, default is Undefined, optional + The custom user attribute to map. + """ + + + aggregateAttributes?: bool + + clientId?: str + + clientIdRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDSelector + + friendlyName?: str + + name?: str + + realmId?: str + + realmIdRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDSelector + + samlAttributeName?: str + + samlAttributeNameFormat?: str + + userAttribute?: str + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in samlclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDRefPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in samlclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + aggregateAttributes : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates if attribute values should be aggregated within the group attributes + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + clientIdRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + clientScopeIdRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + friendlyName : str, default is Undefined, optional + An optional human-friendly name for this attribute. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + realmIdRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + samlAttributeName : str, default is Undefined, optional + The name of the SAML attribute. + samlAttributeNameFormat : str, default is Undefined, optional + The SAML attribute Name Format. Can be one of Unspecified, Basic, or URI Reference. + userAttribute : str, default is Undefined, optional + The custom user attribute to map. + """ + + + aggregateAttributes?: bool + + clientId?: str + + clientIdRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDSelector + + friendlyName?: str + + name?: str + + realmId?: str + + realmIdRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDSelector + + samlAttributeName?: str + + samlAttributeNameFormat?: str + + userAttribute?: str + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in samlclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in samlclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatus: + r""" + SamlUserAttributeProtocolMapperStatus defines the observed state of SamlUserAttributeProtocolMapper. + + Attributes + ---------- + atProvider : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatusAtProvider + + conditions?: [SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatusAtProvider: + r""" + samlclient keycloakm crossplane io v1alpha1 saml user attribute protocol mapper status at provider + + Attributes + ---------- + aggregateAttributes : bool, default is Undefined, optional + Indicates whether this attribute is a single value or an array of values. Defaults to false. + Indicates if attribute values should be aggregated within the group attributes + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + friendlyName : str, default is Undefined, optional + An optional human-friendly name for this attribute. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + samlAttributeName : str, default is Undefined, optional + The name of the SAML attribute. + samlAttributeNameFormat : str, default is Undefined, optional + The SAML attribute Name Format. Can be one of Unspecified, Basic, or URI Reference. + userAttribute : str, default is Undefined, optional + The custom user attribute to map. + """ + + + aggregateAttributes?: bool + + clientId?: str + + clientScopeId?: str + + friendlyName?: str + + id?: str + + name?: str + + realmId?: str + + samlAttributeName?: str + + samlAttributeNameFormat?: str + + userAttribute?: str + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserAttributeProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/samlclient/v1alpha1/samlclient_keycloakm_crossplane_io_v1alpha1_saml_user_property_protocol_mapper.k b/crossplane_provider_keycloak/namespaced/samlclient/v1alpha1/samlclient_keycloakm_crossplane_io_v1alpha1_saml_user_property_protocol_mapper.k new file mode 100644 index 00000000..c1c5eee8 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/samlclient/v1alpha1/samlclient_keycloakm_crossplane_io_v1alpha1_saml_user_property_protocol_mapper.k @@ -0,0 +1,941 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema SamlUserPropertyProtocolMapper: + r""" + SamlUserPropertyProtocolMapper is the Schema for the SamlUserPropertyProtocolMappers API. + + Attributes + ---------- + apiVersion : str, default is "samlclient.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "SamlUserPropertyProtocolMapper", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpec, default is Undefined, required + spec + status : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatus, default is Undefined, optional + status + """ + + + apiVersion: "samlclient.keycloak.m.crossplane.io/v1alpha1" = "samlclient.keycloak.m.crossplane.io/v1alpha1" + + kind: "SamlUserPropertyProtocolMapper" = "SamlUserPropertyProtocolMapper" + + metadata?: v1.ObjectMeta + + spec: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpec + + status?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatus + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpec: + r""" + SamlUserPropertyProtocolMapperSpec defines the desired state of SamlUserPropertyProtocolMapper + + Attributes + ---------- + forProvider : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProvider, default is Undefined, required + for provider + initProvider : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProvider + + initProvider?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecProviderConfigRef + + writeConnectionSecretToRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecWriteConnectionSecretToRef + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProvider: + r""" + samlclient keycloakm crossplane io v1alpha1 saml user property protocol mapper spec for provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + clientIdRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + clientScopeIdRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + friendlyName : str, default is Undefined, optional + An optional human-friendly name for this attribute. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + realmIdRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDSelector, default is Undefined, optional + realm Id selector + samlAttributeName : str, default is Undefined, optional + The name of the SAML attribute. + samlAttributeNameFormat : str, default is Undefined, optional + The SAML attribute Name Format. Can be one of Unspecified, Basic, or URI Reference. + userProperty : str, default is Undefined, optional + The property of the Keycloak user model to map. + """ + + + clientId?: str + + clientIdRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDRef + + clientIdSelector?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDRef + + clientScopeIdSelector?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDSelector + + friendlyName?: str + + name?: str + + realmId?: str + + realmIdRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDRef + + realmIdSelector?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDSelector + + samlAttributeName?: str + + samlAttributeNameFormat?: str + + userProperty?: str + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDRef: + r""" + Reference to a Client in samlclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDRefPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDSelector: + r""" + Selector for a Client in samlclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDSelectorPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDRefPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDSelectorPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDRefPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDSelectorPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecForProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + clientIdRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDRef, default is Undefined, optional + client Id ref + clientIdSelector : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDSelector, default is Undefined, optional + client Id selector + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + clientScopeIdRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDRef, default is Undefined, optional + client scope Id ref + clientScopeIdSelector : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDSelector, default is Undefined, optional + client scope Id selector + friendlyName : str, default is Undefined, optional + An optional human-friendly name for this attribute. + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + realmIdRef : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDRef, default is Undefined, optional + realm Id ref + realmIdSelector : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDSelector, default is Undefined, optional + realm Id selector + samlAttributeName : str, default is Undefined, optional + The name of the SAML attribute. + samlAttributeNameFormat : str, default is Undefined, optional + The SAML attribute Name Format. Can be one of Unspecified, Basic, or URI Reference. + userProperty : str, default is Undefined, optional + The property of the Keycloak user model to map. + """ + + + clientId?: str + + clientIdRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDRef + + clientIdSelector?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDSelector + + clientScopeId?: str + + clientScopeIdRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDRef + + clientScopeIdSelector?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDSelector + + friendlyName?: str + + name?: str + + realmId?: str + + realmIdRef?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDRef + + realmIdSelector?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDSelector + + samlAttributeName?: str + + samlAttributeNameFormat?: str + + userProperty?: str + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDRef: + r""" + Reference to a Client in samlclient to populate clientId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDRefPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDSelector: + r""" + Selector for a Client in samlclient to populate clientId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDSelectorPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDRef: + r""" + Reference to a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDRefPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDSelector: + r""" + Selector for a ClientScope in samlclient to populate clientScopeId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderClientScopeIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDRef: + r""" + Reference to a Realm in realm to populate realmId. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDRefPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDSelector: + r""" + Selector for a Realm in realm to populate realmId. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDSelectorPolicy + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecInitProviderRealmIDSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatus: + r""" + SamlUserPropertyProtocolMapperStatus defines the observed state of SamlUserPropertyProtocolMapper. + + Attributes + ---------- + atProvider : SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatusAtProvider, default is Undefined, optional + at provider + conditions : [SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatusAtProvider + + conditions?: [SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatusConditionsItems0] + + observedGeneration?: int + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatusAtProvider: + r""" + samlclient keycloakm crossplane io v1alpha1 saml user property protocol mapper status at provider + + Attributes + ---------- + clientId : str, default is Undefined, optional + The client this protocol mapper should be attached to. Conflicts with client_scope_id. One of client_id or client_scope_id must be specified. + clientScopeId : str, default is Undefined, optional + The client scope this protocol mapper should be attached to. Conflicts with client_id. One of client_id or client_scope_id must be specified. + friendlyName : str, default is Undefined, optional + An optional human-friendly name for this attribute. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The display name of this protocol mapper in the GUI. + realmId : str, default is Undefined, optional + The realm this protocol mapper exists within. + samlAttributeName : str, default is Undefined, optional + The name of the SAML attribute. + samlAttributeNameFormat : str, default is Undefined, optional + The SAML attribute Name Format. Can be one of Unspecified, Basic, or URI Reference. + userProperty : str, default is Undefined, optional + The property of the Keycloak user model to map. + """ + + + clientId?: str + + clientScopeId?: str + + friendlyName?: str + + id?: str + + name?: str + + realmId?: str + + samlAttributeName?: str + + samlAttributeNameFormat?: str + + userProperty?: str + + +schema SamlclientKeycloakmCrossplaneIoV1alpha1SamlUserPropertyProtocolMapperStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + + diff --git a/crossplane_provider_keycloak/namespaced/workflow/v1alpha1/workflow_keycloakm_crossplane_io_v1alpha1_workflow.k b/crossplane_provider_keycloak/namespaced/workflow/v1alpha1/workflow_keycloakm_crossplane_io_v1alpha1_workflow.k new file mode 100644 index 00000000..0d8ed276 --- /dev/null +++ b/crossplane_provider_keycloak/namespaced/workflow/v1alpha1/workflow_keycloakm_crossplane_io_v1alpha1_workflow.k @@ -0,0 +1,620 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" +import k8s.apimachinery.pkg.apis.meta.v1 + + +schema Workflow: + r""" + Workflow is the Schema for the Workflows API. + + Attributes + ---------- + apiVersion : str, default is "workflow.keycloak.m.crossplane.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "Workflow", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpec, default is Undefined, required + spec + status : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowStatus, default is Undefined, optional + status + """ + + + apiVersion: "workflow.keycloak.m.crossplane.io/v1alpha1" = "workflow.keycloak.m.crossplane.io/v1alpha1" + + kind: "Workflow" = "Workflow" + + metadata?: v1.ObjectMeta + + spec: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpec + + status?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowStatus + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpec: + r""" + WorkflowSpec defines the desired state of Workflow + + Attributes + ---------- + forProvider : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProvider, default is Undefined, required + for provider + initProvider : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProvider, default is Undefined, optional + init provider + managementPolicies : [str], default is ["*"], optional + THIS IS A BETA FIELD. It is on by default but can be opted out + through a Crossplane feature flag. + ManagementPolicies specify the array of actions Crossplane is allowed to + take on the managed and external resources. + See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 + and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md + providerConfigRef : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecProviderConfigRef, default is Undefined, optional + provider config ref + writeConnectionSecretToRef : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecWriteConnectionSecretToRef, default is Undefined, optional + write connection secret to ref + """ + + + forProvider: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProvider + + initProvider?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProvider + + managementPolicies?: [str] = ["*"] + + providerConfigRef?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecProviderConfigRef + + writeConnectionSecretToRef?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecWriteConnectionSecretToRef + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProvider: + r""" + workflow keycloakm crossplane io v1alpha1 workflow spec for provider + + Attributes + ---------- + cancelInProgress : str, default is Undefined, optional + Event that cancels an in-progress workflow execution. + Event that cancels an in-progress workflow execution. + conditions : str, default is Undefined, optional + An expression that must evaluate to true for the workflow to run (e.g. has-role('some-role')). + Expression that must be satisfied for the workflow to run. + enabled : bool, default is Undefined, optional + Whether the workflow is enabled. Defaults to true. + Whether the workflow is enabled. + name : str, default is Undefined, optional + The name of the workflow. + The name of the workflow. + on : str, default is Undefined, optional + The realm event that triggers the workflow. Supported values: user_created, user_removed, user_authenticated, user_federated_identity_added, user_federated_identity_removed, user_group_membership_added, user_group_membership_removed, user_role_granted, user_role_revoked. + The event that triggers the workflow. Supported values: user_created, user_removed, user_authenticated, user_federated_identity_added, user_federated_identity_removed, user_group_membership_added, user_group_membership_removed, user_role_granted, user_role_revoked. + realm : str, default is Undefined, optional + The realm this workflow exists in. Changing this forces a new resource. + The realm this workflow belongs to. + realmRef : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderRealmSelector, default is Undefined, optional + realm selector + restartInProgress : str, default is Undefined, optional + Event that restarts an in-progress workflow execution. + Event that restarts an in-progress workflow execution. + step : [WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderStepItems0], default is Undefined, optional + One or more step blocks defining the actions to execute, in order. + Ordered list of steps to execute. + """ + + + cancelInProgress?: str + + conditions?: str + + enabled?: bool + + name?: str + + on?: str + + realm?: str + + realmRef?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderRealmRef + + realmSelector?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderRealmSelector + + restartInProgress?: str + + step?: [WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderStepItems0] + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderRealmRefPolicy + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderRealmSelectorPolicy + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecForProviderStepItems0: + r""" + workflow keycloakm crossplane io v1alpha1 workflow spec for provider step items0 + + Attributes + ---------- + after : str, default is Undefined, optional + Delay in milliseconds before executing this step. + Delay in milliseconds before executing this step. + config : {str:str}, default is Undefined, optional + A map of key-value pairs configuring the step (e.g. emailTemplate for notify-user). + Key-value configuration for the step. + uses : str, default is Undefined, optional + The step type. Built-in values: disable-user, delete-user, notify-user, set-user-required-action, set-user-attribute. + The step type to execute (e.g. disable-user, delete-user, notify-user). + """ + + + after?: str + + config?: {str:str} + + uses?: str + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProvider: + r""" + THIS IS A BETA FIELD. It will be honored + unless the Management Policies feature flag is disabled. + InitProvider holds the same fields as ForProvider, with the exception + of Identifier and other resource reference fields. The fields that are + in InitProvider are merged into ForProvider when the resource is created. + The same fields are also added to the terraform ignore_changes hook, to + avoid updating them after creation. This is useful for fields that are + required on creation, but we do not desire to update them after creation, + for example because of an external controller is managing them, like an + autoscaler. + + Attributes + ---------- + cancelInProgress : str, default is Undefined, optional + Event that cancels an in-progress workflow execution. + Event that cancels an in-progress workflow execution. + conditions : str, default is Undefined, optional + An expression that must evaluate to true for the workflow to run (e.g. has-role('some-role')). + Expression that must be satisfied for the workflow to run. + enabled : bool, default is Undefined, optional + Whether the workflow is enabled. Defaults to true. + Whether the workflow is enabled. + name : str, default is Undefined, optional + The name of the workflow. + The name of the workflow. + on : str, default is Undefined, optional + The realm event that triggers the workflow. Supported values: user_created, user_removed, user_authenticated, user_federated_identity_added, user_federated_identity_removed, user_group_membership_added, user_group_membership_removed, user_role_granted, user_role_revoked. + The event that triggers the workflow. Supported values: user_created, user_removed, user_authenticated, user_federated_identity_added, user_federated_identity_removed, user_group_membership_added, user_group_membership_removed, user_role_granted, user_role_revoked. + realm : str, default is Undefined, optional + The realm this workflow exists in. Changing this forces a new resource. + The realm this workflow belongs to. + realmRef : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmRef, default is Undefined, optional + realm ref + realmSelector : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmSelector, default is Undefined, optional + realm selector + restartInProgress : str, default is Undefined, optional + Event that restarts an in-progress workflow execution. + Event that restarts an in-progress workflow execution. + step : [WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderStepItems0], default is Undefined, optional + One or more step blocks defining the actions to execute, in order. + Ordered list of steps to execute. + """ + + + cancelInProgress?: str + + conditions?: str + + enabled?: bool + + name?: str + + on?: str + + realm?: str + + realmRef?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmRef + + realmSelector?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmSelector + + restartInProgress?: str + + step?: [WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderStepItems0] + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmRef: + r""" + Reference to a Realm in realm to populate realm. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the referenced object. + namespace : str, default is Undefined, optional + Namespace of the referenced object + policy : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmRefPolicy, default is Undefined, optional + policy + """ + + + name: str + + namespace?: str + + policy?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmRefPolicy + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmRefPolicy: + r""" + Policies for referencing. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmSelector: + r""" + Selector for a Realm in realm to populate realm. + + Attributes + ---------- + matchControllerRef : bool, default is Undefined, optional + MatchControllerRef ensures an object with the same controller reference + as the selecting object is selected. + matchLabels : {str:str}, default is Undefined, optional + MatchLabels ensures an object with matching labels is selected. + namespace : str, default is Undefined, optional + Namespace for the selector + policy : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmSelectorPolicy, default is Undefined, optional + policy + """ + + + matchControllerRef?: bool + + matchLabels?: {str:str} + + namespace?: str + + policy?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmSelectorPolicy + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderRealmSelectorPolicy: + r""" + Policies for selection. + + Attributes + ---------- + resolution : str, default is "Required", optional + Resolution specifies whether resolution of this reference is required. + The default is 'Required', which means the reconcile will fail if the + reference cannot be resolved. 'Optional' means this reference will be + a no-op if it cannot be resolved. + resolve : str, default is Undefined, optional + Resolve specifies when this reference should be resolved. The default + is 'IfNotPresent', which will attempt to resolve the reference only when + the corresponding field is not present. Use 'Always' to resolve the + reference on every reconcile. + """ + + + resolution?: "Required" | "Optional" = "Required" + + resolve?: "Always" | "IfNotPresent" + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecInitProviderStepItems0: + r""" + workflow keycloakm crossplane io v1alpha1 workflow spec init provider step items0 + + Attributes + ---------- + after : str, default is Undefined, optional + Delay in milliseconds before executing this step. + Delay in milliseconds before executing this step. + config : {str:str}, default is Undefined, optional + A map of key-value pairs configuring the step (e.g. emailTemplate for notify-user). + Key-value configuration for the step. + uses : str, default is Undefined, optional + The step type. Built-in values: disable-user, delete-user, notify-user, set-user-required-action, set-user-attribute. + The step type to execute (e.g. disable-user, delete-user, notify-user). + """ + + + after?: str + + config?: {str:str} + + uses?: str + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecProviderConfigRef: + r""" + ProviderConfigReference specifies how the provider that will be used to + create, observe, update, and delete this managed resource should be + configured. + + Attributes + ---------- + kind : str, default is Undefined, required + Kind of the referenced object. + name : str, default is Undefined, required + Name of the referenced object. + """ + + + kind: str + + name: str + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowSpecWriteConnectionSecretToRef: + r""" + WriteConnectionSecretToReference specifies the namespace and name of a + Secret to which any connection details for this managed resource should + be written. Connection details frequently include the endpoint, username, + and password required to connect to the managed resource. + + Attributes + ---------- + name : str, default is Undefined, required + Name of the secret. + """ + + + name: str + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowStatus: + r""" + WorkflowStatus defines the observed state of Workflow. + + Attributes + ---------- + atProvider : WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowStatusAtProvider, default is Undefined, optional + at provider + conditions : [WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowStatusConditionsItems0], default is Undefined, optional + Conditions of the resource. + observedGeneration : int, default is Undefined, optional + ObservedGeneration is the latest metadata.generation + which resulted in either a ready state, or stalled due to error + it can not recover from without human intervention. + """ + + + atProvider?: WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowStatusAtProvider + + conditions?: [WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowStatusConditionsItems0] + + observedGeneration?: int + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowStatusAtProvider: + r""" + workflow keycloakm crossplane io v1alpha1 workflow status at provider + + Attributes + ---------- + cancelInProgress : str, default is Undefined, optional + Event that cancels an in-progress workflow execution. + Event that cancels an in-progress workflow execution. + conditions : str, default is Undefined, optional + An expression that must evaluate to true for the workflow to run (e.g. has-role('some-role')). + Expression that must be satisfied for the workflow to run. + enabled : bool, default is Undefined, optional + Whether the workflow is enabled. Defaults to true. + Whether the workflow is enabled. + id : str, default is Undefined, optional + id + name : str, default is Undefined, optional + The name of the workflow. + The name of the workflow. + on : str, default is Undefined, optional + The realm event that triggers the workflow. Supported values: user_created, user_removed, user_authenticated, user_federated_identity_added, user_federated_identity_removed, user_group_membership_added, user_group_membership_removed, user_role_granted, user_role_revoked. + The event that triggers the workflow. Supported values: user_created, user_removed, user_authenticated, user_federated_identity_added, user_federated_identity_removed, user_group_membership_added, user_group_membership_removed, user_role_granted, user_role_revoked. + realm : str, default is Undefined, optional + The realm this workflow exists in. Changing this forces a new resource. + The realm this workflow belongs to. + restartInProgress : str, default is Undefined, optional + Event that restarts an in-progress workflow execution. + Event that restarts an in-progress workflow execution. + step : [WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowStatusAtProviderStepItems0], default is Undefined, optional + One or more step blocks defining the actions to execute, in order. + Ordered list of steps to execute. + """ + + + cancelInProgress?: str + + conditions?: str + + enabled?: bool + + id?: str + + name?: str + + on?: str + + realm?: str + + restartInProgress?: str + + step?: [WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowStatusAtProviderStepItems0] + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowStatusAtProviderStepItems0: + r""" + workflow keycloakm crossplane io v1alpha1 workflow status at provider step items0 + + Attributes + ---------- + after : str, default is Undefined, optional + Delay in milliseconds before executing this step. + Delay in milliseconds before executing this step. + config : {str:str}, default is Undefined, optional + A map of key-value pairs configuring the step (e.g. emailTemplate for notify-user). + Key-value configuration for the step. + uses : str, default is Undefined, optional + The step type. Built-in values: disable-user, delete-user, notify-user, set-user-required-action, set-user-attribute. + The step type to execute (e.g. disable-user, delete-user, notify-user). + """ + + + after?: str + + config?: {str:str} + + uses?: str + + +schema WorkflowKeycloakmCrossplaneIoV1alpha1WorkflowStatusConditionsItems0: + r""" + A Condition that may apply to a resource. + + Attributes + ---------- + lastTransitionTime : str, default is Undefined, required + LastTransitionTime is the last time this condition transitioned from one + status to another. + message : str, default is Undefined, optional + A Message containing details about this condition's last transition from + one status to another, if any. + observedGeneration : int, default is Undefined, optional + ObservedGeneration represents the .metadata.generation that the condition was set based upon. + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date + with respect to the current state of the instance. + reason : str, default is Undefined, required + A Reason for this condition's last transition from one status to another. + status : str, default is Undefined, required + Status of this condition; is it currently True, False, or Unknown? + $type : str, default is Undefined, required + Type of this condition. At most one of each condition type may apply to + a resource at any point in time. + """ + + + lastTransitionTime: str + + message?: str + + observedGeneration?: int + + reason: str + + status: str + + $type: str + +