fix CRDs

api/v1alpha1/ref_types.go

@@ -13,7 +13,8 @@ type OIDCAppRef struct {
 }
 
 // OrganizationRef can reference an organization via K8s object or direct Zitadel ID
-// +kubebuilder:validation:XValidation:rule="has(self.name) == has(self.id)",message="must provide either k8s object reference (name) or zitadel ID reference (id), but not both"
+// +kubebuilder:validation:XValidation:rule="has(self.name) != has(self.id)",message="must provide either k8s object reference (name) or zitadel ID reference (id), but not both"
+// +kubebuilder:validation:XValidation:rule="has(self.name) || has(self.id)",message="must provide either k8s object reference (name) or zitadel ID reference (id)"
 // +kubebuilder:validation:XValidation:rule="!has(self.id) || has(self.connectionRef.name)",message="zitadel ID reference requires connectionRef.name"
 type OrganizationRef struct {
 	ObjectReference corev1.ObjectReference `json:",inline"`
@@ -22,7 +23,8 @@ type OrganizationRef struct {
 }
 
 // ProjectRef can reference a project via K8s object or direct Zitadel ID
-// +kubebuilder:validation:XValidation:rule="has(self.name) == has(self.id)",message="must provide either k8s object reference (name) or zitadel ID reference (id), but not both"
+// +kubebuilder:validation:XValidation:rule="has(self.name) != has(self.id)",message="must provide either k8s object reference (name) or zitadel ID reference (id), but not both"
+// +kubebuilder:validation:XValidation:rule="has(self.name) || has(self.id)",message="must provide either k8s object reference (name) or zitadel ID reference (id)"
 // +kubebuilder:validation:XValidation:rule="!has(self.id) || has(self.connectionRef.name)",message="zitadel ID reference requires connectionRef.name"
 type ProjectRef struct {
 	ObjectReference corev1.ObjectReference `json:",inline"`

config/crd/bases/zitadel.github.com_actions.yaml

@@ -134,7 +134,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               script:

config/crd/bases/zitadel.github.com_apiapps.yaml

@@ -136,7 +136,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
             required:

config/crd/bases/zitadel.github.com_flows.yaml

@@ -183,7 +183,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               triggerType:

config/crd/bases/zitadel.github.com_machineusers.yaml

@@ -138,7 +138,10 @@ spec:
                       x-kubernetes-validations:
                       - message: must provide either k8s object reference (name) or
                           zitadel ID reference (id), but not both
-                        rule: has(self.name) == has(self.id)
+                        rule: has(self.name) != has(self.id)
+                      - message: must provide either k8s object reference (name) or
+                          zitadel ID reference (id)
+                        rule: has(self.name) || has(self.id)
                       - message: zitadel ID reference requires connectionRef.name
                         rule: '!has(self.id) || has(self.connectionRef.name)'
                     roleKeys:
@@ -294,7 +297,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               username:

config/crd/bases/zitadel.github.com_oidcapps.yaml

@@ -182,7 +182,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               redirectUris:

config/crd/bases/zitadel.github.com_projects.yaml

@@ -133,7 +133,10 @@ spec:
                       x-kubernetes-validations:
                       - message: must provide either k8s object reference (name) or
                           zitadel ID reference (id), but not both
-                        rule: has(self.name) == has(self.id)
+                        rule: has(self.name) != has(self.id)
+                      - message: must provide either k8s object reference (name) or
+                          zitadel ID reference (id)
+                        rule: has(self.name) || has(self.id)
                       - message: zitadel ID reference requires connectionRef.name
                         rule: '!has(self.id) || has(self.connectionRef.name)'
                     roleKeys:
@@ -240,7 +243,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               projectName:

ops/chart/crds/action-crd.yaml

@@ -133,7 +133,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               script:

ops/chart/crds/apiapp-crd.yaml

@@ -135,7 +135,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
             required:

ops/chart/crds/flow-crd.yaml

@@ -182,7 +182,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               triggerType:

ops/chart/crds/machineuser-crd.yaml

@@ -137,7 +137,10 @@ spec:
                       x-kubernetes-validations:
                       - message: must provide either k8s object reference (name) or
                           zitadel ID reference (id), but not both
-                        rule: has(self.name) == has(self.id)
+                        rule: has(self.name) != has(self.id)
+                      - message: must provide either k8s object reference (name) or
+                          zitadel ID reference (id)
+                        rule: has(self.name) || has(self.id)
                       - message: zitadel ID reference requires connectionRef.name
                         rule: '!has(self.id) || has(self.connectionRef.name)'
                     roleKeys:
@@ -293,7 +296,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               username:

ops/chart/crds/oidcapp-crd.yaml

@@ -181,7 +181,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               redirectUris:

ops/chart/crds/project-crd.yaml

@@ -132,7 +132,10 @@ spec:
                       x-kubernetes-validations:
                       - message: must provide either k8s object reference (name) or
                           zitadel ID reference (id), but not both
-                        rule: has(self.name) == has(self.id)
+                        rule: has(self.name) != has(self.id)
+                      - message: must provide either k8s object reference (name) or
+                          zitadel ID reference (id)
+                        rule: has(self.name) || has(self.id)
                       - message: zitadel ID reference requires connectionRef.name
                         rule: '!has(self.id) || has(self.connectionRef.name)'
                     roleKeys:
@@ -239,7 +242,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               projectName: