Skip to content

Commit 1de95b7

Browse files
aminchelohamincheloh
authored
Add/update Keycloak CRDs (#895)
1 parent e7cfe14 commit 1de95b7

4 files changed

Lines changed: 15491 additions & 200 deletions

File tree

‎k8s.keycloak.org/keycloak_v2alpha1.json‎

Lines changed: 238 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,21 @@
3333
},
3434
"type": "array"
3535
},
36+
"admin": {
37+
"description": "In this section you can find all properties related to making admin connections from the operator to the server. These settings are not used by the server.",
38+
"properties": {
39+
"tlsSecret": {
40+
"description": "If mTLS is required, this references a secret containing the client TLS configuration for the admin client. Reference: https://kubernetes.io/docs/concepts/configuration/secret/#tls-secrets.",
41+
"type": "string"
42+
}
43+
},
44+
"type": "object",
45+
"additionalProperties": false
46+
},
47+
"automountServiceAccountToken": {
48+
"description": "Set this to to false to disable automounting the default ServiceAccount Token and Service CA. This is enabled by default.",
49+
"type": "boolean"
50+
},
3651
"bootstrapAdmin": {
3752
"description": "In this section you can configure Keycloak's bootstrap admin - will be used only for initial cluster creation.",
3853
"properties": {
@@ -271,6 +286,18 @@
271286
"description": "Labels to be appended to the Service object",
272287
"type": "object"
273288
},
289+
"serviceHttpPort": {
290+
"description": "The HTTP port exposed on the Kubernetes Service. When set, the Service will use this port while the pod still listens on httpPort.",
291+
"type": "integer"
292+
},
293+
"serviceHttpsPort": {
294+
"description": "The HTTPS port exposed on the Kubernetes Service. When set, the Service will use this port while the pod still listens on httpsPort.",
295+
"type": "integer"
296+
},
297+
"serviceName": {
298+
"description": "The name of the Kubernetes Service. When not set, the name defaults to the Keycloak CR name with a \"-service\" suffix.",
299+
"type": "string"
300+
},
274301
"tlsSecret": {
275302
"description": "A secret containing the TLS configuration for HTTPS. Reference: https://kubernetes.io/docs/concepts/configuration/secret/#tls-secrets.",
276303
"type": "string"
@@ -2010,6 +2037,13 @@
20102037
"serviceMonitor": {
20112038
"description": "Configuration related to the generated ServiceMonitor",
20122039
"properties": {
2040+
"annotations": {
2041+
"additionalProperties": {
2042+
"type": "string"
2043+
},
2044+
"description": "Annotations to be appended to the Service object",
2045+
"type": "object"
2046+
},
20132047
"enabled": {
20142048
"default": true,
20152049
"description": "Enables or disables the creation of the ServiceMonitor.",
@@ -2020,6 +2054,13 @@
20202054
"description": "Interval at which metrics should be scraped",
20212055
"type": "string"
20222056
},
2057+
"labels": {
2058+
"additionalProperties": {
2059+
"type": "string"
2060+
},
2061+
"description": "Labels to be appended to the Service object",
2062+
"type": "object"
2063+
},
20232064
"scrapeTimeout": {
20242065
"default": "10s",
20252066
"description": "Timeout after which the scrape is ended",
@@ -2046,6 +2087,32 @@
20462087
"type": "object",
20472088
"additionalProperties": false
20482089
},
2090+
"telemetry": {
2091+
"description": "In this section you can configure general shared OpenTelemetry settings for Keycloak.",
2092+
"properties": {
2093+
"endpoint": {
2094+
"description": "OpenTelemetry endpoint to connect to.",
2095+
"type": "string"
2096+
},
2097+
"protocol": {
2098+
"description": "OpenTelemetry protocol used for the telemetry data (default 'grpc'). For more information, check the OpenTelemetry guide.",
2099+
"type": "string"
2100+
},
2101+
"resourceAttributes": {
2102+
"additionalProperties": {
2103+
"type": "string"
2104+
},
2105+
"description": "OpenTelemetry resource attributes present in the exported telemetry data to characterize the telemetry producer.",
2106+
"type": "object"
2107+
},
2108+
"serviceName": {
2109+
"description": "OpenTelemetry service name. Takes precedence over 'service.name' defined in the 'resourceAttributes' map.",
2110+
"type": "string"
2111+
}
2112+
},
2113+
"type": "object",
2114+
"additionalProperties": false
2115+
},
20492116
"tracing": {
20502117
"description": "In this section you can configure OpenTelemetry Tracing for Keycloak.",
20512118
"properties": {
@@ -2069,7 +2136,7 @@
20692136
"additionalProperties": {
20702137
"type": "string"
20712138
},
2072-
"description": "OpenTelemetry resource attributes present in the exported trace to characterize the telemetry producer.",
2139+
"description": "DEPRECATED - use the 'telemetry.resourceAttributes' instead. OpenTelemetry resource attributes present in the exported trace to characterize the telemetry producer.",
20732140
"type": "object"
20742141
},
20752142
"samplerRatio": {
@@ -2081,7 +2148,7 @@
20812148
"type": "string"
20822149
},
20832150
"serviceName": {
2084-
"description": "OpenTelemetry service name. Takes precedence over 'service.name' defined in the 'resourceAttributes' map.",
2151+
"description": "DEPRECATED - use the 'telemetry.serviceName' instead. OpenTelemetry service name. Takes precedence over 'service.name' defined in the 'resourceAttributes' map.",
20852152
"type": "string"
20862153
}
20872154
},
@@ -2866,6 +2933,24 @@
28662933
"type": "object",
28672934
"additionalProperties": false
28682935
},
2936+
"fileKeyRef": {
2937+
"properties": {
2938+
"key": {
2939+
"type": "string"
2940+
},
2941+
"optional": {
2942+
"type": "boolean"
2943+
},
2944+
"path": {
2945+
"type": "string"
2946+
},
2947+
"volumeName": {
2948+
"type": "string"
2949+
}
2950+
},
2951+
"type": "object",
2952+
"additionalProperties": false
2953+
},
28692954
"resourceFieldRef": {
28702955
"properties": {
28712956
"containerName": {
@@ -3453,6 +3538,33 @@
34533538
"restartPolicy": {
34543539
"type": "string"
34553540
},
3541+
"restartPolicyRules": {
3542+
"items": {
3543+
"properties": {
3544+
"action": {
3545+
"type": "string"
3546+
},
3547+
"exitCodes": {
3548+
"properties": {
3549+
"operator": {
3550+
"type": "string"
3551+
},
3552+
"values": {
3553+
"items": {
3554+
"type": "integer"
3555+
},
3556+
"type": "array"
3557+
}
3558+
},
3559+
"type": "object",
3560+
"additionalProperties": false
3561+
}
3562+
},
3563+
"type": "object",
3564+
"additionalProperties": false
3565+
},
3566+
"type": "array"
3567+
},
34563568
"securityContext": {
34573569
"properties": {
34583570
"allowPrivilegeEscalation": {
@@ -3828,6 +3940,24 @@
38283940
"type": "object",
38293941
"additionalProperties": false
38303942
},
3943+
"fileKeyRef": {
3944+
"properties": {
3945+
"key": {
3946+
"type": "string"
3947+
},
3948+
"optional": {
3949+
"type": "boolean"
3950+
},
3951+
"path": {
3952+
"type": "string"
3953+
},
3954+
"volumeName": {
3955+
"type": "string"
3956+
}
3957+
},
3958+
"type": "object",
3959+
"additionalProperties": false
3960+
},
38313961
"resourceFieldRef": {
38323962
"properties": {
38333963
"containerName": {
@@ -4415,6 +4545,33 @@
44154545
"restartPolicy": {
44164546
"type": "string"
44174547
},
4548+
"restartPolicyRules": {
4549+
"items": {
4550+
"properties": {
4551+
"action": {
4552+
"type": "string"
4553+
},
4554+
"exitCodes": {
4555+
"properties": {
4556+
"operator": {
4557+
"type": "string"
4558+
},
4559+
"values": {
4560+
"items": {
4561+
"type": "integer"
4562+
},
4563+
"type": "array"
4564+
}
4565+
},
4566+
"type": "object",
4567+
"additionalProperties": false
4568+
}
4569+
},
4570+
"type": "object",
4571+
"additionalProperties": false
4572+
},
4573+
"type": "array"
4574+
},
44184575
"securityContext": {
44194576
"properties": {
44204577
"allowPrivilegeEscalation": {
@@ -4734,6 +4891,9 @@
47344891
"hostname": {
47354892
"type": "string"
47364893
},
4894+
"hostnameOverride": {
4895+
"type": "string"
4896+
},
47374897
"imagePullSecrets": {
47384898
"items": {
47394899
"properties": {
@@ -4799,6 +4959,24 @@
47994959
"type": "object",
48004960
"additionalProperties": false
48014961
},
4962+
"fileKeyRef": {
4963+
"properties": {
4964+
"key": {
4965+
"type": "string"
4966+
},
4967+
"optional": {
4968+
"type": "boolean"
4969+
},
4970+
"path": {
4971+
"type": "string"
4972+
},
4973+
"volumeName": {
4974+
"type": "string"
4975+
}
4976+
},
4977+
"type": "object",
4978+
"additionalProperties": false
4979+
},
48024980
"resourceFieldRef": {
48034981
"properties": {
48044982
"containerName": {
@@ -5386,6 +5564,33 @@
53865564
"restartPolicy": {
53875565
"type": "string"
53885566
},
5567+
"restartPolicyRules": {
5568+
"items": {
5569+
"properties": {
5570+
"action": {
5571+
"type": "string"
5572+
},
5573+
"exitCodes": {
5574+
"properties": {
5575+
"operator": {
5576+
"type": "string"
5577+
},
5578+
"values": {
5579+
"items": {
5580+
"type": "integer"
5581+
},
5582+
"type": "array"
5583+
}
5584+
},
5585+
"type": "object",
5586+
"additionalProperties": false
5587+
}
5588+
},
5589+
"type": "object",
5590+
"additionalProperties": false
5591+
},
5592+
"type": "array"
5593+
},
53895594
"securityContext": {
53905595
"properties": {
53915596
"allowPrivilegeEscalation": {
@@ -6923,6 +7128,30 @@
69237128
"type": "object",
69247129
"additionalProperties": false
69257130
},
7131+
"podCertificate": {
7132+
"properties": {
7133+
"certificateChainPath": {
7134+
"type": "string"
7135+
},
7136+
"credentialBundlePath": {
7137+
"type": "string"
7138+
},
7139+
"keyPath": {
7140+
"type": "string"
7141+
},
7142+
"keyType": {
7143+
"type": "string"
7144+
},
7145+
"maxExpirationSeconds": {
7146+
"type": "integer"
7147+
},
7148+
"signerName": {
7149+
"type": "string"
7150+
}
7151+
},
7152+
"type": "object",
7153+
"additionalProperties": false
7154+
},
69267155
"secret": {
69277156
"properties": {
69287157
"items": {
@@ -7182,6 +7411,13 @@
71827411
"update": {
71837412
"description": "Configuration related to Keycloak deployment updates.",
71847413
"properties": {
7414+
"labels": {
7415+
"additionalProperties": {
7416+
"type": "string"
7417+
},
7418+
"description": "Optionally set to add additional labels to the Job created for the update.",
7419+
"type": "object"
7420+
},
71857421
"revision": {
71867422
"description": "When use the Explicit strategy, the revision signals if a rolling update can be used or not.",
71877423
"type": "string"

0 commit comments

Comments
 (0)