mirror of
https://github.com/outbackdingo/homelab-v.git
synced 2026-08-25 14:53:19 +00:00
111 lines
4.2 KiB
YAML
111 lines
4.2 KiB
YAML
apiVersion: apiextensions.crossplane.io/v1
|
|
kind: CompositeResourceDefinition
|
|
metadata:
|
|
name: xoidcclients.oidc.homelab.olav.ninja
|
|
spec:
|
|
group: oidc.homelab.olav.ninja
|
|
names:
|
|
kind: XOidcClient
|
|
plural: xoidcclients
|
|
versions:
|
|
- name: v1alpha1
|
|
served: true
|
|
referenceable: true
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
properties:
|
|
spec:
|
|
type: object
|
|
properties:
|
|
baseUrl:
|
|
description: Default URL to use when the auth server needs to
|
|
redirect or link back to the client.
|
|
type: string
|
|
displayName:
|
|
type: string
|
|
description: The display name of this client in the GUI
|
|
clientId:
|
|
type: string
|
|
description: The Client ID for this client, referenced in the URI during authentication and in issued tokens
|
|
clientSecretSecretRef:
|
|
description: |-
|
|
The client or client secret registered within the identity provider. This field is able to obtain its value from vault, use $${vault.ID} format.
|
|
Client Secret.
|
|
properties:
|
|
key:
|
|
description: The key to select.
|
|
type: string
|
|
name:
|
|
description: Name of the secret.
|
|
type: string
|
|
namespace:
|
|
description: Namespace of the secret.
|
|
type: string
|
|
required:
|
|
- key
|
|
- name
|
|
- namespace
|
|
type: object
|
|
description:
|
|
type: string
|
|
description: The description of this client in the GUI
|
|
defaultScopes:
|
|
type: array
|
|
items:
|
|
type: string
|
|
description: |-
|
|
The default scopes to be requested when asking for authorization
|
|
grantTypes:
|
|
type: array
|
|
items:
|
|
type: string
|
|
description: |-
|
|
A list of grant types that should be enabled for the client
|
|
postLogoutRedirectUris:
|
|
type: array
|
|
items:
|
|
type: string
|
|
description: A list of valid URIs a browser is permitted to redirect
|
|
to after a successful logout.
|
|
realm:
|
|
type: string
|
|
description: The realm this client is attached to
|
|
redirectUris:
|
|
type: array
|
|
items:
|
|
type: string
|
|
description: |-
|
|
A list of valid URIs a browser is permitted to redirect to after a successful login or logout. Simple
|
|
wildcards in the form of an asterisk can be used here. This attribute must be set if either standard_flow_enabled or implicit_flow_enabled
|
|
is set to true.
|
|
serviceAccountRoles:
|
|
type: array
|
|
items:
|
|
type: object
|
|
properties:
|
|
client:
|
|
type: string
|
|
realm:
|
|
type: string
|
|
role:
|
|
type: string
|
|
description: |-
|
|
A list of roles to assign to the clients service account
|
|
type:
|
|
type: string
|
|
description: Specifies the type of client
|
|
webOrigins:
|
|
type: array
|
|
items:
|
|
type: string
|
|
description: |-
|
|
A list of allowed CORS origins. To permit all valid
|
|
redirect URIs, add +. Note that this will not include the *
|
|
wildcard. To permit all origins, explicitly add *.
|
|
required:
|
|
- clientId
|
|
- realm
|
|
required:
|
|
- spec
|