Skip to content

Commit 8d08668

Browse files
jsenkojsenko
committed
chore(operator): update install file
1 parent 4b994b0 commit 8d08668

File tree

1 file changed

+69
-46
lines changed

1 file changed

+69
-46
lines changed

‎operator/install/install.yaml‎

Lines changed: 69 additions & 46 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ spec:
3131
description: |
3232
Configure authentication and authorization of Apicurio Registry.
3333
properties:
34-
anonymousReads:
34+
anonymousReadsEnabled:
3535
description: To allow anonymous users, such as REST API calls
3636
with no authentication credentials, to make read-only calls
3737
to the REST API, set the following option to true.
@@ -77,49 +77,68 @@ spec:
7777
when FROM is token.
7878
type: string
7979
type: object
80-
adminRole:
81-
description: The name of the role that indicates a user
82-
is an admin.
83-
type: string
84-
developerRole:
85-
description: The name of the role that indicates a user
86-
is a developer.
87-
type: string
8880
enabled:
8981
description: Enabled role-based authorization.
9082
type: boolean
91-
groupAccess:
83+
groupAccessEnabled:
9284
description: When owner-only authorization and group owner-only
9385
authorization are both enabled, only the user who created
9486
an artifact group has write access to that artifact
9587
group, for example, to add or remove artifacts in that
9688
group.
9789
type: boolean
98-
ownerOnly:
90+
ownerOnlyEnabled:
9991
description: When owner-only authorization is enabled,
10092
only the user who created an artifact can modify or
10193
delete that artifact.
10294
type: boolean
103-
readAccess:
95+
readAccessEnabled:
10496
description: When the authenticated read access option
10597
is enabled, Apicurio Registry grants at least read-only
10698
access to requests from any authenticated user in the
10799
same organization, regardless of their user role.
108100
type: boolean
109-
readOnlyRole:
110-
description: The name of the role that indicates a user
111-
has read-only access.
112-
type: string
113-
roleSource:
114-
description: When set to token, user roles are taken from
115-
the authentication token.
116-
type: string
101+
roles:
102+
description: Configure authorization role source and role
103+
names.
104+
properties:
105+
admin:
106+
description: The name of the role that indicates a
107+
user is an admin.
108+
type: string
109+
developer:
110+
description: The name of the role that indicates a
111+
user is a developer.
112+
type: string
113+
readOnly:
114+
description: The name of the role that indicates a
115+
user has read-only access.
116+
type: string
117+
source:
118+
description: When set to token, user roles are taken
119+
from the authentication token.
120+
type: string
121+
type: object
117122
type: object
118123
basicAuth:
119124
description: Client credentials basic auth configuration.
120125
properties:
121126
cacheExpiration:
122-
description: Client credentials token expiration time.
127+
description: |
128+
Client credentials token expiration time. This value is a string representing a duration:
129+
130+
| Abbreviation | Time Unit |
131+
|-----------------------|--------------|
132+
| ns, nano, nanos | Nanosecond |
133+
| us, µs, micro, micros | Microseconds |
134+
| ms, milli, millis | Millisecond |
135+
| s, sec, secs | Second |
136+
| m, min, mins | Minute |
137+
| h, hr, hour, hours | Hour |
138+
| d, day, days | Day |
139+
| w, wk, week, weeks | Week |
140+
141+
Example: "1min1s"
123142
type: string
124143
enabled:
125144
description: Enabled client credentials.
@@ -130,11 +149,11 @@ spec:
130149
Enable Apicurio Registry Authentication.
131150
In Identity providers like Keycloak, this is the client id used for the Quarkus backend application
132151
type: boolean
133-
logoutURL:
152+
logoutUrl:
134153
description: Apicurio Registry UI redirect URI used for redirection
135154
after logout.
136155
type: string
137-
redirectURI:
156+
redirectUri:
138157
description: Apicurio Registry UI redirect URI used for redirection
139158
after successful authentication.
140159
type: string
@@ -234,7 +253,7 @@ spec:
234253
description: |
235254
Configure features of the Apicurio Registry backend (app).
236255
properties:
237-
allowDeletes:
256+
resourceDeleteEnabled:
238257
description: |-
239258
Apicurio Registry backend 'allow deletes' feature.
240259
If the value is true, the application will be configured to allow Groups, Artifacts, and
@@ -3380,8 +3399,18 @@ spec:
33803399
description: |-
33813400
Configure SQL data source password.
33823401
3383-
If you want to reference a Secret, you can set the `APICURIO_DATASOURCE_PASSWORD` environment variable directly using the `app.env` field.
3384-
type: string
3402+
References name of a Secret that contains the password. Key `password` is assumed by default.
3403+
properties:
3404+
key:
3405+
description: Name of the key in the referenced
3406+
Secret that contain the target data. This field
3407+
might be optional if a default value has been
3408+
defined.
3409+
type: string
3410+
name:
3411+
description: Name of a Secret that is being referenced.
3412+
type: string
3413+
type: object
33853414
url:
33863415
description: |-
33873416
Configure SQL data source URL.
@@ -3412,8 +3441,12 @@ spec:
34123441
Configure tls of Apicurio Registry.
34133442
properties:
34143443
insecureRequests:
3415-
description: Whether insecure requests are allowed. Default
3416-
is <code>enabled</code>.
3444+
description: |
3445+
If insecure (i.e. http rather than https) requests are allowed. If this is `enabled` then http works as normal. `redirect` will still open the http port, but all requests will be redirected to the HTTPS port. `disabled` will prevent the HTTP port from opening at all.
3446+
enum:
3447+
- disabled
3448+
- enabled
3449+
- redirect
34173450
type: string
34183451
keystorePasswordSecretRef:
34193452
description: Name of a Secret that contains the TLS keystore
@@ -6506,14 +6539,6 @@ spec:
65066539
description: message is a human readable message indicating
65076540
details about the transition. This may be an empty string.
65086541
type: string
6509-
observedGeneration:
6510-
description: observedGeneration represents the .metadata.generation
6511-
that the condition was set based upon. For instance, if .metadata.generation
6512-
is currently 12, but the .status.conditions[x].observedGeneration
6513-
is 9, the condition is out of date with respect to the current
6514-
state of the instance.
6515-
minimum: 0
6516-
type: integer
65176542
reason:
65186543
description: reason contains a programmatic identifier indicating
65196544
the reason for the condition's last transition. Producers
@@ -6547,16 +6572,6 @@ spec:
65476572
- type
65486573
type: object
65496574
type: array
6550-
info:
6551-
description: Information about the Apicurio Registry application
6552-
properties:
6553-
appHost:
6554-
description: Apicurio Registry backend base URL
6555-
type: string
6556-
uiHost:
6557-
description: Apicurio Registry UI base URL
6558-
type: string
6559-
type: object
65606575
observedGeneration:
65616576
type: integer
65626577
type: object
@@ -6633,6 +6648,14 @@ rules:
66336648
- poddisruptionbudgets
66346649
verbs:
66356650
- '*'
6651+
- apiGroups:
6652+
- ""
6653+
resources:
6654+
- secrets
6655+
verbs:
6656+
- list
6657+
- get
6658+
- create
66366659
---
66376660
apiVersion: rbac.authorization.k8s.io/v1
66386661
kind: ClusterRoleBinding

0 commit comments

Comments
 (0)