| --- |
| apiVersion: apiextensions.k8s.io/v1 |
| kind: CustomResourceDefinition |
| metadata: |
| annotations: |
| controller-gen.kubebuilder.io/version: v0.5.0 |
| creationTimestamp: null |
| name: oauth2clients.hydra.ory.sh |
| spec: |
| group: hydra.ory.sh |
| names: |
| kind: OAuth2Client |
| listKind: OAuth2ClientList |
| plural: oauth2clients |
| singular: oauth2client |
| scope: Namespaced |
| versions: |
| - name: v1alpha1 |
| schema: |
| openAPIV3Schema: |
| description: OAuth2Client is the Schema for the oauth2clients API |
| properties: |
| apiVersion: |
| description: |
| "APIVersion defines the versioned schema of this representation |
| of an object. Servers should convert recognized schemas to the |
| latest internal value, and may reject unrecognized values. More |
| info: |
| https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" |
| type: string |
| kind: |
| description: |
| "Kind is a string value representing the REST resource this |
| object represents. Servers may infer this from the endpoint the |
| client submits requests to. Cannot be updated. In CamelCase. |
| More info: |
| https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" |
| type: string |
| metadata: |
| type: object |
| spec: |
| description: |
| OAuth2ClientSpec defines the desired state of OAuth2Client |
| properties: |
| allowedCorsOrigins: |
| description: |
| AllowedCorsOrigins is an array of allowed CORS origins |
| items: |
| description: |
| RedirectURI represents a redirect URI for the client |
| pattern: \w+:/?/?[^\s]+ |
| type: string |
| type: array |
| audience: |
| description: |
| Audience is a whitelist defining the audiences this client |
| is allowed to request tokens for |
| items: |
| type: string |
| type: array |
| clientName: |
| description: |
| ClientName is the human-readable string name of the client |
| to be presented to the end-user during authorization. |
| type: string |
| grantTypes: |
| description: |
| GrantTypes is an array of grant types the client is allowed |
| to use. |
| items: |
| description: GrantType represents an OAuth 2.0 grant type |
| enum: |
| - client_credentials |
| - authorization_code |
| - implicit |
| - refresh_token |
| type: string |
| maxItems: 4 |
| minItems: 1 |
| type: array |
| hydraAdmin: |
| description: |
| HydraAdmin is the optional configuration to use for managing |
| this client |
| properties: |
| endpoint: |
| description: |
| Endpoint is the endpoint for the hydra instance on which |
| to set up the client. This value will override the value |
| provided to `--endpoint` (defaults to `"/clients"` in |
| the application) |
| pattern: (^$|^/.*) |
| type: string |
| forwardedProto: |
| description: |
| ForwardedProto overrides the `--forwarded-proto` flag. |
| The value "off" will force this to be off even if |
| `--forwarded-proto` is specified |
| pattern: (^$|https?|off) |
| type: string |
| port: |
| description: |
| Port is the port for the hydra instance on which to set |
| up the client. This value will override the value |
| provided to `--hydra-port` |
| maximum: 65535 |
| type: integer |
| url: |
| description: |
| URL is the URL for the hydra instance on which to set up |
| the client. This value will override the value provided |
| to `--hydra-url` |
| maxLength: 64 |
| pattern: (^$|^https?://.*) |
| type: string |
| type: object |
| metadata: |
| description: Metadata is abritrary data |
| nullable: true |
| type: object |
| x-kubernetes-preserve-unknown-fields: true |
| postLogoutRedirectUris: |
| description: |
| PostLogoutRedirectURIs is an array of the post logout |
| redirect URIs allowed for the application |
| items: |
| description: |
| RedirectURI represents a redirect URI for the client |
| pattern: \w+:/?/?[^\s]+ |
| type: string |
| type: array |
| redirectUris: |
| description: |
| RedirectURIs is an array of the redirect URIs allowed for |
| the application |
| items: |
| description: |
| RedirectURI represents a redirect URI for the client |
| pattern: \w+:/?/?[^\s]+ |
| type: string |
| type: array |
| responseTypes: |
| description: |
| ResponseTypes is an array of the OAuth 2.0 response type |
| strings that the client can use at the authorization |
| endpoint. |
| items: |
| description: |
| ResponseType represents an OAuth 2.0 response type strings |
| enum: |
| - id_token |
| - code |
| - token |
| - code token |
| - code id_token |
| - id_token token |
| - code id_token token |
| type: string |
| maxItems: 3 |
| minItems: 1 |
| type: array |
| scope: |
| description: |
| Scope is a string containing a space-separated list of scope |
| values (as described in Section 3.3 of OAuth 2.0 [RFC6749]) |
| that the client can use when requesting access tokens. |
| pattern: ([a-zA-Z0-9\.\*]+\s?)+ |
| type: string |
| secretName: |
| description: |
| SecretName points to the K8s secret that contains this |
| client's ID and password |
| maxLength: 253 |
| minLength: 1 |
| pattern: '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*' |
| type: string |
| tokenEndpointAuthMethod: |
| allOf: |
| - enum: |
| - client_secret_basic |
| - client_secret_post |
| - private_key_jwt |
| - none |
| - enum: |
| - client_secret_basic |
| - client_secret_post |
| - private_key_jwt |
| - none |
| description: |
| Indication which authentication method shoud be used for the |
| token endpoint |
| type: string |
| required: |
| - grantTypes |
| - scope |
| - secretName |
| type: object |
| status: |
| description: |
| OAuth2ClientStatus defines the observed state of OAuth2Client |
| properties: |
| conditions: |
| items: |
| description: |
| OAuth2ClientCondition contains condition information for |
| an OAuth2Client |
| properties: |
| status: |
| enum: |
| - "True" |
| - "False" |
| - Unknown |
| type: string |
| type: |
| type: string |
| required: |
| - status |
| - type |
| type: object |
| type: array |
| observedGeneration: |
| description: |
| ObservedGeneration represents the most recent generation |
| observed by the daemon set controller. |
| format: int64 |
| type: integer |
| reconciliationError: |
| description: |
| ReconciliationError represents an error that occurred during |
| the reconciliation process |
| properties: |
| description: |
| description: |
| Description is the description of the reconciliation |
| error |
| type: string |
| statusCode: |
| description: |
| Code is the status code of the reconciliation error |
| type: string |
| type: object |
| type: object |
| type: object |
| served: true |
| storage: true |
| subresources: |
| status: {} |
| status: |
| acceptedNames: |
| kind: "" |
| plural: "" |
| conditions: [] |
| storedVersions: [] |