fix CRDs

ops/chart/crds/action-crd.yaml

@@ -133,7 +133,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               script:

ops/chart/crds/apiapp-crd.yaml

@@ -135,7 +135,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
             required:

ops/chart/crds/flow-crd.yaml

@@ -182,7 +182,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               triggerType:

ops/chart/crds/machineuser-crd.yaml

@@ -137,7 +137,10 @@ spec:
                       x-kubernetes-validations:
                       - message: must provide either k8s object reference (name) or
                           zitadel ID reference (id), but not both
-                        rule: has(self.name) == has(self.id)
+                        rule: has(self.name) != has(self.id)
+                      - message: must provide either k8s object reference (name) or
+                          zitadel ID reference (id)
+                        rule: has(self.name) || has(self.id)
                       - message: zitadel ID reference requires connectionRef.name
                         rule: '!has(self.id) || has(self.connectionRef.name)'
                     roleKeys:
@@ -293,7 +296,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               username:

ops/chart/crds/oidcapp-crd.yaml

@@ -181,7 +181,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               redirectUris:

ops/chart/crds/project-crd.yaml

@@ -132,7 +132,10 @@ spec:
                       x-kubernetes-validations:
                       - message: must provide either k8s object reference (name) or
                           zitadel ID reference (id), but not both
-                        rule: has(self.name) == has(self.id)
+                        rule: has(self.name) != has(self.id)
+                      - message: must provide either k8s object reference (name) or
+                          zitadel ID reference (id)
+                        rule: has(self.name) || has(self.id)
                       - message: zitadel ID reference requires connectionRef.name
                         rule: '!has(self.id) || has(self.connectionRef.name)'
                     roleKeys:
@@ -239,7 +242,10 @@ spec:
                 x-kubernetes-validations:
                 - message: must provide either k8s object reference (name) or zitadel
                     ID reference (id), but not both
-                  rule: has(self.name) == has(self.id)
+                  rule: has(self.name) != has(self.id)
+                - message: must provide either k8s object reference (name) or zitadel
+                    ID reference (id)
+                  rule: has(self.name) || has(self.id)
                 - message: zitadel ID reference requires connectionRef.name
                   rule: '!has(self.id) || has(self.connectionRef.name)'
               projectName: