---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: (unknown)
  name: iamaccessboundarypolicies.iam.cnrm.cloud.google.com
spec:
  group: iam.cnrm.cloud.google.com
  names:
    kind: IAMAccessBoundaryPolicy
    listKind: IAMAccessBoundaryPolicyList
    plural: iamaccessboundarypolicies
    singular: iamaccessboundarypolicy
  scope: Namespaced
  versions:
  - name: v1beta1
    schema:
      openAPIV3Schema:
        description: IAMAccessBoundaryPolicy is the Schema for the iam API
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          spec:
            properties:
              displayName:
                description: The display name of the rule.
                type: string
              projectRef:
                properties:
                  external:
                    description: The external name of the referenced resource
                    type: string
                  kind:
                    description: Kind of the referent.
                    type: string
                  name:
                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
                    type: string
                  namespace:
                    description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
                    type: string
                type: object
              resourceID:
                description: Immutable. Optional. The name of the resource. Used for
                  creation and acquisition. When unset, the value of `metadata.name`
                  is used as the default.
                type: string
              rules:
                description: Rules to be applied.
                items:
                  properties:
                    accessBoundaryRule:
                      description: An access boundary rule in an IAM policy.
                      properties:
                        availabilityCondition:
                          description: The availability condition further constrains
                            the access allowed by the access boundary rule.
                          properties:
                            description:
                              description: |-
                                Description of the expression. This is a longer text which describes the expression,
                                e.g. when hovered over it in a UI.
                              type: string
                            expression:
                              description: Textual representation of an expression
                                in Common Expression Language syntax.
                              type: string
                            location:
                              description: |-
                                String indicating the location of the expression for error reporting,
                                e.g. a file name and a position in the file.
                              type: string
                            title:
                              description: |-
                                Title for the expression, i.e. a short string describing its purpose.
                                This can be used e.g. in UIs which allow to enter the expression.
                              type: string
                          required:
                          - expression
                          type: object
                        availablePermissions:
                          description: A list of permissions that may be allowed for
                            use on the specified resource.
                          items:
                            type: string
                          type: array
                        availableResource:
                          description: The full resource name of a Google Cloud resource
                            entity.
                          type: string
                      type: object
                    description:
                      description: The description of the rule.
                      type: string
                  type: object
                type: array
            required:
            - projectRef
            - rules
            type: object
          status:
            properties:
              conditions:
                description: |-
                  Conditions represent the latest available observations of the
                  IAMAccessBoundaryPolicy's current state.
                items:
                  properties:
                    lastTransitionTime:
                      description: Last time the condition transitioned from one status
                        to another.
                      type: string
                    message:
                      description: Human-readable message indicating details about
                        last transition.
                      type: string
                    reason:
                      description: |-
                        Unique, one-word, CamelCase reason for the condition's last
                        transition.
                      type: string
                    status:
                      description: Status is the status of the condition. Can be True,
                        False, Unknown.
                      type: string
                    type:
                      description: Type is the type of the condition.
                      type: string
                  type: object
                type: array
              etag:
                description: The hash of the resource. Used internally during updates.
                type: string
              observedGeneration:
                description: ObservedGeneration is the generation of the resource
                  that was most recently observed by the Config Connector controller.
                  If this is equal to metadata.generation, then that means that the
                  current reported status reflects the most recent desired state of
                  the resource.
                type: integer
            type: object
        type: object
    served: true
    storage: true