1# Copyright 2020 Google LLC
2#
3# Licensed under the Apache License, Version 2.0 (the "License");
4# you may not use this file except in compliance with the License.
5# You may obtain a copy of the License at
6#
7# http://www.apache.org/licenses/LICENSE-2.0
8#
9# Unless required by applicable law or agreed to in writing, software
10# distributed under the License is distributed on an "AS IS" BASIS,
11# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12# See the License for the specific language governing permissions and
13# limitations under the License.
14
15apiVersion: apiextensions.k8s.io/v1
16kind: CustomResourceDefinition
17metadata:
18 annotations:
19 cnrm.cloud.google.com/version: 1.106.0
20 creationTimestamp: null
21 labels:
22 cnrm.cloud.google.com/dcl2crd: "true"
23 cnrm.cloud.google.com/managed-by-kcc: "true"
24 cnrm.cloud.google.com/stability-level: stable
25 cnrm.cloud.google.com/system: "true"
26 name: identityplatformoauthidpconfigs.identityplatform.cnrm.cloud.google.com
27spec:
28 group: identityplatform.cnrm.cloud.google.com
29 names:
30 categories:
31 - gcp
32 kind: IdentityPlatformOAuthIDPConfig
33 plural: identityplatformoauthidpconfigs
34 shortNames:
35 - gcpidentityplatformoauthidpconfig
36 - gcpidentityplatformoauthidpconfigs
37 singular: identityplatformoauthidpconfig
38 scope: Namespaced
39 versions:
40 - additionalPrinterColumns:
41 - jsonPath: .metadata.creationTimestamp
42 name: Age
43 type: date
44 - description: When 'True', the most recent reconcile of the resource succeeded
45 jsonPath: .status.conditions[?(@.type=='Ready')].status
46 name: Ready
47 type: string
48 - description: The reason for the value in 'Ready'
49 jsonPath: .status.conditions[?(@.type=='Ready')].reason
50 name: Status
51 type: string
52 - description: The last transition time for the value in 'Status'
53 jsonPath: .status.conditions[?(@.type=='Ready')].lastTransitionTime
54 name: Status Age
55 type: date
56 name: v1beta1
57 schema:
58 openAPIV3Schema:
59 properties:
60 apiVersion:
61 description: 'apiVersion defines the versioned schema of this representation
62 of an object. Servers should convert recognized schemas to the latest
63 internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources'
64 type: string
65 kind:
66 description: 'kind is a string value representing the REST resource this
67 object represents. Servers may infer this from the endpoint the client
68 submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds'
69 type: string
70 metadata:
71 type: object
72 spec:
73 properties:
74 clientId:
75 description: The client id of an OAuth client.
76 type: string
77 clientSecret:
78 description: The client secret of the OAuth client, to enable OIDC
79 code flow.
80 oneOf:
81 - not:
82 required:
83 - valueFrom
84 required:
85 - value
86 - not:
87 required:
88 - value
89 required:
90 - valueFrom
91 properties:
92 value:
93 description: Value of the field. Cannot be used if 'valueFrom'
94 is specified.
95 type: string
96 valueFrom:
97 description: Source for the field's value. Cannot be used if 'value'
98 is specified.
99 properties:
100 secretKeyRef:
101 description: Reference to a value with the given key in the
102 given Secret in the resource's namespace.
103 properties:
104 key:
105 description: Key that identifies the value to be extracted.
106 type: string
107 name:
108 description: Name of the Secret to extract a value from.
109 type: string
110 required:
111 - name
112 - key
113 type: object
114 type: object
115 type: object
116 displayName:
117 description: The config's display name set by developers.
118 type: string
119 enabled:
120 description: True if allows the user to sign in with the provider.
121 type: boolean
122 issuer:
123 description: For OIDC Idps, the issuer identifier.
124 type: string
125 resourceID:
126 description: Immutable. Optional. The name of the resource. Used for
127 creation and acquisition. When unset, the value of `metadata.name`
128 is used as the default.
129 type: string
130 responseType:
131 description: 'The multiple response type to request for in the OAuth
132 authorization flow. This can possibly be a combination of set bits
133 (e.g.: {id\_token, token}).'
134 properties:
135 code:
136 description: If true, authorization code is returned from IdP's
137 authorization endpoint.
138 type: boolean
139 idToken:
140 description: If true, ID token is returned from IdP's authorization
141 endpoint.
142 type: boolean
143 token:
144 description: If true, access token is returned from IdP's authorization
145 endpoint.
146 type: boolean
147 type: object
148 type: object
149 status:
150 properties:
151 conditions:
152 description: Conditions represent the latest available observation
153 of the resource's current state.
154 items:
155 properties:
156 lastTransitionTime:
157 description: Last time the condition transitioned from one status
158 to another.
159 type: string
160 message:
161 description: Human-readable message indicating details about
162 last transition.
163 type: string
164 reason:
165 description: Unique, one-word, CamelCase reason for the condition's
166 last transition.
167 type: string
168 status:
169 description: Status is the status of the condition. Can be True,
170 False, Unknown.
171 type: string
172 type:
173 description: Type is the type of the condition.
174 type: string
175 type: object
176 type: array
177 observedGeneration:
178 description: ObservedGeneration is the generation of the resource
179 that was most recently observed by the Config Connector controller.
180 If this is equal to metadata.generation, then that means that the
181 current reported status reflects the most recent desired state of
182 the resource.
183 type: integer
184 type: object
185 type: object
186 served: true
187 storage: true
188 subresources:
189 status: {}
190status:
191 acceptedNames:
192 kind: ""
193 plural: ""
194 conditions: []
195 storedVersions: []
View as plain text