KeycloakRoleMapping

keycloak.hostzero.com / v1beta1

apiVersion: keycloak.hostzero.com/v1beta1 kind: KeycloakRoleMapping metadata: name: example

apiVersion string

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

kind string

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

metadata object

spec object

KeycloakRoleMappingSpec defines the desired state of KeycloakRoleMapping

role object

Role defines the role to assign (inline definition) Either Role or RoleRef must be specified

clientId string

ClientID is the client ID for client-level roles (alternative to ClientRef)

clientRef object

ClientRef references a KeycloakClient for client-level roles If not specified, the role is a realm-level role

name string required

Name of the resource

namespace string

Namespace of the resource (optional, defaults to the same namespace)

name string required

Name is the role name

roleRef object

RoleRef references an existing KeycloakRole resource Either Role or RoleRef must be specified

name string required

Name of the resource

namespace string

Namespace of the resource (optional, defaults to the same namespace)

subject object required

Subject defines who the role is assigned to (user or group)

groupRef object

GroupRef references a KeycloakGroup

name string required

Name of the resource

namespace string

Namespace of the resource (optional, defaults to the same namespace)

userRef object

UserRef references a KeycloakUser

name string required

Name of the resource

namespace string

Namespace of the resource (optional, defaults to the same namespace)

status object

KeycloakRoleMappingStatus defines the observed state of KeycloakRoleMapping

conditions []object

Conditions represent the latest available observations

lastTransitionTime string required

lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.

format: date-time

message string required

message is a human readable message indicating details about the transition. This may be an empty string.

maxLength: 32768

observedGeneration integer

observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.

format: int64

minimum: 0

reason string required

reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.

pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$

minLength: 1

maxLength: 1024

status string required

status of the condition, one of True, False, Unknown.

enum: True, False, Unknown

type string required

type of condition in CamelCase or in foo.example.com/CamelCase.

pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$

maxLength: 316

instance object

Instance contains the resolved instance reference

clusterInstanceRef string

ClusterInstanceRef is the name of the cluster instance

instanceRef string

InstanceRef is the name of the namespaced instance

message string

Message contains additional information

observedGeneration integer

ObservedGeneration is the generation of the spec that was last processed

format: int64

ready boolean required

Ready indicates if the role mapping is applied

realm object

Realm contains the resolved realm reference

clusterRealmRef string

ClusterRealmRef is the name of the cluster realm

realmRef string

RealmRef is the name of the namespaced realm

resourcePath string

ResourcePath is the Keycloak API path for this role mapping

roleName string

RoleName is the resolved role name

roleType string

RoleType is either "realm" or "client"

status string

Status is a human-readable status message

subjectID string

SubjectID is the Keycloak ID of the subject

subjectType string

SubjectType is either "user" or "group"

No matches. Try .spec.role for an exact path