---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.15.0
  name: keycloakrealmidentityproviders.v1.edp.epam.com
spec:
  group: v1.edp.epam.com
  names:
    kind: KeycloakRealmIdentityProvider
    listKind: KeycloakRealmIdentityProviderList
    plural: keycloakrealmidentityproviders
    singular: keycloakrealmidentityprovider
  scope: Namespaced
  versions:
  - additionalPrinterColumns:
    - description: Reconcilation status
      jsonPath: .status.value
      name: Status
      type: string
    name: v1
    schema:
      openAPIV3Schema:
        description: KeycloakRealmIdentityProvider is the Schema for the keycloak
          realm identity provider API.
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          spec:
            description: KeycloakRealmIdentityProviderSpec defines the desired state
              of KeycloakRealmIdentityProvider.
            properties:
              addReadTokenRoleOnCreate:
                description: AddReadTokenRoleOnCreate is a flag to add read token
                  role on create.
                type: boolean
              alias:
                description: Alias is a alias of identity provider.
                type: string
              authenticateByDefault:
                description: AuthenticateByDefault is a flag to authenticate by default.
                type: boolean
              config:
                additionalProperties:
                  type: string
                description: |-
                  Config is a map of identity provider configuration.
                  Map key is a name of configuration property, map value is a value of configuration property.
                  Any value can be a reference to k8s secret, in this case value should be in format $secretName:secretKey.
                example:
                  clientId: provider-client
                  clientSecret: $clientSecret:secretKey
                type: object
              displayName:
                description: DisplayName is a display name of identity provider.
                type: string
              enabled:
                description: Enabled is a flag to enable/disable identity provider.
                type: boolean
              firstBrokerLoginFlowAlias:
                description: FirstBrokerLoginFlowAlias is a first broker login flow
                  alias.
                type: string
              linkOnly:
                description: LinkOnly is a flag to link only.
                type: boolean
              mappers:
                description: Mappers is a list of identity provider mappers.
                items:
                  properties:
                    config:
                      additionalProperties:
                        type: string
                      description: Config is a map of identity provider mapper configuration.
                      nullable: true
                      type: object
                    identityProviderAlias:
                      description: IdentityProviderAlias is a identity provider alias.
                      type: string
                    identityProviderMapper:
                      description: IdentityProviderMapper is a identity provider mapper.
                      type: string
                    name:
                      description: Name is a name of identity provider mapper.
                      type: string
                  type: object
                nullable: true
                type: array
              providerId:
                description: ProviderID is a provider ID of identity provider.
                type: string
              realm:
                description: |-
                  Deprecated: use RealmRef instead.
                  Realm is name of KeycloakRealm custom resource.
                type: string
              realmRef:
                description: RealmRef is reference to Realm custom resource.
                properties:
                  kind:
                    description: Kind specifies the kind of the Keycloak resource.
                    enum:
                    - KeycloakRealm
                    - ClusterKeycloakRealm
                    type: string
                  name:
                    description: Name specifies the name of the Keycloak resource.
                    type: string
                type: object
              storeToken:
                description: StoreToken is a flag to store token.
                type: boolean
              trustEmail:
                description: TrustEmail is a flag to trust email.
                type: boolean
            required:
            - alias
            - config
            - enabled
            - providerId
            type: object
          status:
            description: KeycloakRealmIdentityProviderStatus defines the observed
              state of KeycloakRealmIdentityProvider.
            properties:
              failureCount:
                format: int64
                type: integer
              value:
                type: string
            type: object
        type: object
    served: true
    storage: true
    subresources:
      status: {}
