update crd

ops/chart/crds/flow-crd.yaml

@@ -98,6 +98,48 @@ spec:
                   apiVersion:
                     description: API version of the referent.
                     type: string
+                  connectionRef:
+                    properties:
+                      apiVersion:
+                        description: API version of the referent.
+                        type: string
+                      fieldPath:
+                        description: |-
+                          If referring to a piece of an object instead of an entire object, this string
+                          should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
+                          For example, if the object reference is to a container within a pod, this would take on a value like:
+                          "spec.containers{name}" (where "name" refers to the name of the container that triggered
+                          the event) or if no container name is specified "spec.containers[2]" (container with
+                          index 2 in this pod). This syntax is chosen only to have some well-defined way of
+                          referencing a part of an object.
+                        type: string
+                      kind:
+                        description: |-
+                          Kind of the referent.
+                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+                        type: string
+                      name:
+                        description: |-
+                          Name of the referent.
+                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                        type: string
+                      namespace:
+                        description: |-
+                          Namespace of the referent.
+                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
+                        type: string
+                      resourceVersion:
+                        description: |-
+                          Specific resourceVersion to which this reference is made, if any.
+                          More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
+                        type: string
+                      uid:
+                        description: |-
+                          UID of the referent.
+                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
                   fieldPath:
                     description: |-
                       If referring to a piece of an object instead of an entire object, this string
@@ -108,6 +150,8 @@ spec:
                       index 2 in this pod). This syntax is chosen only to have some well-defined way of
                       referencing a part of an object.
                     type: string
+                  id:
+                    type: string
                   kind:
                     description: |-
                       Kind of the referent.
@@ -135,6 +179,12 @@ spec:
                     type: string
                 type: object
                 x-kubernetes-map-type: atomic
+                x-kubernetes-validations:
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id), but not both
+                  rule: has(self.name) == has(self.id)
+                - message: zitadel ID reference requires connectionRef.name
+                  rule: '!has(self.id) || has(self.connectionRef.name)'
               triggerType:
                 enum:
                 - TRIGGER_TYPE_POST_AUTHENTICATION