software-engineering/zitadel-resources-operator
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update crd
All checks were successful
Build and Publish / build-release (push) Successful in 2m8s
Details

Browse Source
This commit is contained in:
HaimKortovich
2026-04-30 15:56:58 -05:00
parent 319acd90de
commit 7a4a52e917
13 changed files with 825 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

50
ops/chart/crds/action-crd.yaml
View File

@@ -49,6 +49,48 @@ spec:
apiVersion:
description: API version of the referent.
type: string
connectionRef:
properties:
apiVersion:
description: API version of the referent.
type: string
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
For example, if the object reference is to a container within a pod, this would take on a value like:
"spec.containers{name}" (where "name" refers to the name of the container that triggered
the event) or if no container name is specified "spec.containers[2]" (container with
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
kind:
description: |-
Kind of the referent.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
description: |-
Name of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
description: |-
Namespace of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
description: |-
Specific resourceVersion to which this reference is made, if any.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
description: |-
UID of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
@@ -59,6 +101,8 @@ spec:
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
id:
type: string
kind:
description: |-
Kind of the referent.
@@ -86,6 +130,12 @@ spec:
type: string
type: object
x-kubernetes-map-type: atomic
x-kubernetes-validations:
- message: must provide either k8s object reference (name) or zitadel
ID reference (id), but not both
rule: has(self.name) == has(self.id)
- message: zitadel ID reference requires connectionRef.name
rule: '!has(self.id) || has(self.connectionRef.name)'
script:
type: string
timeout:

50
ops/chart/crds/apiapp-crd.yaml
View File

@@ -51,6 +51,48 @@ spec:
apiVersion:
description: API version of the referent.
type: string
connectionRef:
properties:
apiVersion:
description: API version of the referent.
type: string
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
For example, if the object reference is to a container within a pod, this would take on a value like:
"spec.containers{name}" (where "name" refers to the name of the container that triggered
the event) or if no container name is specified "spec.containers[2]" (container with
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
kind:
description: |-
Kind of the referent.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
description: |-
Name of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
description: |-
Namespace of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
description: |-
Specific resourceVersion to which this reference is made, if any.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
description: |-
UID of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
@@ -61,6 +103,8 @@ spec:
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
id:
type: string
kind:
description: |-
Kind of the referent.
@@ -88,6 +132,12 @@ spec:
type: string
type: object
x-kubernetes-map-type: atomic
x-kubernetes-validations:
- message: must provide either k8s object reference (name) or zitadel
ID reference (id), but not both
rule: has(self.name) == has(self.id)
- message: zitadel ID reference requires connectionRef.name
rule: '!has(self.id) || has(self.connectionRef.name)'
required:
- authMethodType
- projectRef

50
ops/chart/crds/flow-crd.yaml
View File

@@ -98,6 +98,48 @@ spec:
apiVersion:
description: API version of the referent.
type: string
connectionRef:
properties:
apiVersion:
description: API version of the referent.
type: string
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
For example, if the object reference is to a container within a pod, this would take on a value like:
"spec.containers{name}" (where "name" refers to the name of the container that triggered
the event) or if no container name is specified "spec.containers[2]" (container with
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
kind:
description: |-
Kind of the referent.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
description: |-
Name of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
description: |-
Namespace of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
description: |-
Specific resourceVersion to which this reference is made, if any.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
description: |-
UID of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
@@ -108,6 +150,8 @@ spec:
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
id:
type: string
kind:
description: |-
Kind of the referent.
@@ -135,6 +179,12 @@ spec:
type: string
type: object
x-kubernetes-map-type: atomic
x-kubernetes-validations:
- message: must provide either k8s object reference (name) or zitadel
ID reference (id), but not both
rule: has(self.name) == has(self.id)
- message: zitadel ID reference requires connectionRef.name
rule: '!has(self.id) || has(self.connectionRef.name)'
triggerType:
enum:
- TRIGGER_TYPE_POST_AUTHENTICATION

102
ops/chart/crds/machineuser-crd.yaml
View File

@@ -47,10 +47,54 @@ spec:
items:
properties:
projectRef:
description: ProjectRef can reference a project via K8s object
or direct Zitadel ID
properties:
apiVersion:
description: API version of the referent.
type: string
connectionRef:
properties:
apiVersion:
description: API version of the referent.
type: string
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
For example, if the object reference is to a container within a pod, this would take on a value like:
"spec.containers{name}" (where "name" refers to the name of the container that triggered
the event) or if no container name is specified "spec.containers[2]" (container with
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
kind:
description: |-
Kind of the referent.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
description: |-
Name of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
description: |-
Namespace of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
description: |-
Specific resourceVersion to which this reference is made, if any.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
description: |-
UID of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
@@ -61,6 +105,8 @@ spec:
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
id:
type: string
kind:
description: |-
Kind of the referent.
@@ -88,6 +134,12 @@ spec:
type: string
type: object
x-kubernetes-map-type: atomic
x-kubernetes-validations:
- message: must provide either k8s object reference (name) or
zitadel ID reference (id), but not both
rule: has(self.name) == has(self.id)
- message: zitadel ID reference requires connectionRef.name
rule: '!has(self.id) || has(self.connectionRef.name)'
roleKeys:
items:
type: string
@@ -157,6 +209,48 @@ spec:
apiVersion:
description: API version of the referent.
type: string
connectionRef:
properties:
apiVersion:
description: API version of the referent.
type: string
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
For example, if the object reference is to a container within a pod, this would take on a value like:
"spec.containers{name}" (where "name" refers to the name of the container that triggered
the event) or if no container name is specified "spec.containers[2]" (container with
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
kind:
description: |-
Kind of the referent.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
description: |-
Name of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
description: |-
Namespace of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
description: |-
Specific resourceVersion to which this reference is made, if any.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
description: |-
UID of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
@@ -167,6 +261,8 @@ spec:
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
id:
type: string
kind:
description: |-
Kind of the referent.
@@ -194,6 +290,12 @@ spec:
type: string
type: object
x-kubernetes-map-type: atomic
x-kubernetes-validations:
- message: must provide either k8s object reference (name) or zitadel
ID reference (id), but not both
rule: has(self.name) == has(self.id)
- message: zitadel ID reference requires connectionRef.name
rule: '!has(self.id) || has(self.connectionRef.name)'
username:
type: string
required:

52
ops/chart/crds/oidcapp-crd.yaml
View File

@@ -97,6 +97,48 @@ spec:
apiVersion:
description: API version of the referent.
type: string
connectionRef:
properties:
apiVersion:
description: API version of the referent.
type: string
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
For example, if the object reference is to a container within a pod, this would take on a value like:
"spec.containers{name}" (where "name" refers to the name of the container that triggered
the event) or if no container name is specified "spec.containers[2]" (container with
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
kind:
description: |-
Kind of the referent.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
description: |-
Name of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
description: |-
Namespace of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
description: |-
Specific resourceVersion to which this reference is made, if any.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
description: |-
UID of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
@@ -107,6 +149,8 @@ spec:
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
id:
type: string
kind:
description: |-
Kind of the referent.
@@ -134,6 +178,12 @@ spec:
type: string
type: object
x-kubernetes-map-type: atomic
x-kubernetes-validations:
- message: must provide either k8s object reference (name) or zitadel
ID reference (id), but not both
rule: has(self.name) == has(self.id)
- message: zitadel ID reference requires connectionRef.name
rule: '!has(self.id) || has(self.connectionRef.name)'
redirectUris:
items:
type: string
@@ -231,8 +281,6 @@ spec:
- type
type: object
type: array
required:
- appId
type: object
type: object
served: true

102
ops/chart/crds/project-crd.yaml
View File

@@ -42,10 +42,54 @@ spec:
items:
properties:
organizationRef:
description: OrganizationRef can reference an organization via
K8s object or direct Zitadel ID
properties:
apiVersion:
description: API version of the referent.
type: string
connectionRef:
properties:
apiVersion:
description: API version of the referent.
type: string
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
For example, if the object reference is to a container within a pod, this would take on a value like:
"spec.containers{name}" (where "name" refers to the name of the container that triggered
the event) or if no container name is specified "spec.containers[2]" (container with
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
kind:
description: |-
Kind of the referent.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
description: |-
Name of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
description: |-
Namespace of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
description: |-
Specific resourceVersion to which this reference is made, if any.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
description: |-
UID of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
@@ -56,6 +100,8 @@ spec:
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
id:
type: string
kind:
description: |-
Kind of the referent.
@@ -83,6 +129,12 @@ spec:
type: string
type: object
x-kubernetes-map-type: atomic
x-kubernetes-validations:
- message: must provide either k8s object reference (name) or
zitadel ID reference (id), but not both
rule: has(self.name) == has(self.id)
- message: zitadel ID reference requires connectionRef.name
rule: '!has(self.id) || has(self.connectionRef.name)'
roleKeys:
items:
type: string
@@ -103,6 +155,48 @@ spec:
apiVersion:
description: API version of the referent.
type: string
connectionRef:
properties:
apiVersion:
description: API version of the referent.
type: string
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
For example, if the object reference is to a container within a pod, this would take on a value like:
"spec.containers{name}" (where "name" refers to the name of the container that triggered
the event) or if no container name is specified "spec.containers[2]" (container with
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
kind:
description: |-
Kind of the referent.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
description: |-
Name of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
description: |-
Namespace of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
description: |-
Specific resourceVersion to which this reference is made, if any.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
description: |-
UID of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
fieldPath:
description: |-
If referring to a piece of an object instead of an entire object, this string
@@ -113,6 +207,8 @@ spec:
index 2 in this pod). This syntax is chosen only to have some well-defined way of
referencing a part of an object.
type: string
id:
type: string
kind:
description: |-
Kind of the referent.
@@ -140,6 +236,12 @@ spec:
type: string
type: object
x-kubernetes-map-type: atomic
x-kubernetes-validations:
- message: must provide either k8s object reference (name) or zitadel
ID reference (id), but not both
rule: has(self.name) == has(self.id)
- message: zitadel ID reference requires connectionRef.name
rule: '!has(self.id) || has(self.connectionRef.name)'
projectName:
type: string
projectRoleAssertion: