v1alpha2

package
v0.19.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jul 23, 2026 License: MIT Imports: 3 Imported by: 0

Documentation

Overview

Package v1alpha2 contains API Schema definitions for the zitadel.truvity.io v1alpha2 API group. +kubebuilder:object:generate=true +groupName=zitadel.truvity.io

Index

Constants

This section is empty.

Variables

View Source 
var (
	// GroupVersion is group version used to register these objects.
	GroupVersion = schema.GroupVersion{Group: "zitadel.truvity.io", Version: "v1alpha2"}

	// SchemeBuilder is used to add go types to the GroupVersionResource scheme.
	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)

	// AddToScheme adds the types in this group-version to the given scheme.
	AddToScheme = SchemeBuilder.AddToScheme
)

Functions

This section is empty.

Types

type APIApp added in v0.11.0 

type APIApp struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   APIAppSpec   `json:"spec,omitempty"`
	Status APIAppStatus `json:"status,omitempty"`
}

APIApp is the Schema for the apiapps API.

func (*APIApp) DeepCopy added in v0.11.0 

func (in *APIApp) DeepCopy() *APIApp

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIApp.

func (*APIApp) DeepCopyInto added in v0.11.0 

func (in *APIApp) DeepCopyInto(out *APIApp)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*APIApp) DeepCopyObject added in v0.11.0 

func (in *APIApp) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*APIApp) DisplayName added in v0.11.0 

func (a *APIApp) DisplayName() string

DisplayName returns the app display name for Zitadel. Falls back to the Kubernetes resource name if spec.name is empty.

type APIAppList added in v0.11.0 

type APIAppList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []APIApp `json:"items"`
}

APIAppList contains a list of APIApp.

func (*APIAppList) DeepCopy added in v0.11.0 

func (in *APIAppList) DeepCopy() *APIAppList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIAppList.

func (*APIAppList) DeepCopyInto added in v0.11.0 

func (in *APIAppList) DeepCopyInto(out *APIAppList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*APIAppList) DeepCopyObject added in v0.11.0 

func (in *APIAppList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type APIAppSpec added in v0.11.0 

type APIAppSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// ProjectRef references a Project CR managed by this operator.
	// Mutually exclusive with ProjectId.
	// +optional
	ProjectRef *ResourceRef `json:"projectRef,omitempty"`

	// ProjectId references a pre-existing Zitadel project by raw ID.
	// Mutually exclusive with ProjectRef.
	// +optional
	ProjectId string `json:"projectId,omitempty"`

	// Name is the display name of the application in Zitadel.
	// If empty, the Kubernetes resource name is used.
	// +optional
	Name string `json:"name,omitempty"`

	// AuthMethod is the API authentication method.
	// +kubebuilder:validation:Enum=basic;private_key_jwt
	AuthMethod string `json:"authMethod"`

	// SecretRef references the Secret where the client credentials will be stored.
	SecretRef SecretRefSpec `json:"secretRef"`
}

APIAppSpec defines the desired state of APIApp.

func (*APIAppSpec) DeepCopy added in v0.11.0 

func (in *APIAppSpec) DeepCopy() *APIAppSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIAppSpec.

func (*APIAppSpec) DeepCopyInto added in v0.11.0 

func (in *APIAppSpec) DeepCopyInto(out *APIAppSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type APIAppStatus added in v0.11.0 

type APIAppStatus struct {
	// ApplicationId is the Zitadel application ID.
	ApplicationId string `json:"applicationId,omitempty"`

	// ClientId is the API client ID assigned by Zitadel.
	ClientId string `json:"clientId,omitempty"`

	// ProjectId is the resolved project ID this app belongs to.
	ProjectId string `json:"projectId,omitempty"`

	// OrganizationId is the resolved organization ID (inherited from project).
	OrganizationId string `json:"organizationId,omitempty"`

	// Ready indicates whether the APIApp is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

APIAppStatus defines the observed state of APIApp.

func (*APIAppStatus) DeepCopy added in v0.11.0 

func (in *APIAppStatus) DeepCopy() *APIAppStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIAppStatus.

func (*APIAppStatus) DeepCopyInto added in v0.11.0 

func (in *APIAppStatus) DeepCopyInto(out *APIAppStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ActionCondition 

type ActionCondition struct {
	// Function is a Zitadel function condition (e.g., "/zitadel.session.v2.SessionService/SetSession").
	// Mutually exclusive with Request and Event.
	// +optional
	Function string `json:"function,omitempty"`

	// Request is a Zitadel request condition (e.g., "/zitadel.user.v2.UserService/AddHumanUser").
	// Mutually exclusive with Function and Event.
	// +optional
	Request string `json:"request,omitempty"`

	// Event is a Zitadel event condition (e.g., "user.human.added").
	// Mutually exclusive with Function and Request.
	// +optional
	Event string `json:"event,omitempty"`
}

ActionCondition defines the trigger condition for an execution.

func (*ActionCondition) DeepCopy 

func (in *ActionCondition) DeepCopy() *ActionCondition

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ActionCondition.

func (*ActionCondition) DeepCopyInto 

func (in *ActionCondition) DeepCopyInto(out *ActionCondition)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ActionExecution 

type ActionExecution struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ActionExecutionSpec   `json:"spec,omitempty"`
	Status ActionExecutionStatus `json:"status,omitempty"`
}

ActionExecution is the Schema for the actionexecutions API.

func (*ActionExecution) DeepCopy 

func (in *ActionExecution) DeepCopy() *ActionExecution

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ActionExecution.

func (*ActionExecution) DeepCopyInto 

func (in *ActionExecution) DeepCopyInto(out *ActionExecution)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ActionExecution) DeepCopyObject 

func (in *ActionExecution) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ActionExecutionList 

type ActionExecutionList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ActionExecution `json:"items"`
}

ActionExecutionList contains a list of ActionExecution.

func (*ActionExecutionList) DeepCopy 

func (in *ActionExecutionList) DeepCopy() *ActionExecutionList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ActionExecutionList.

func (*ActionExecutionList) DeepCopyInto 

func (in *ActionExecutionList) DeepCopyInto(out *ActionExecutionList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ActionExecutionList) DeepCopyObject 

func (in *ActionExecutionList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ActionExecutionSpec 

type ActionExecutionSpec struct {
	// Condition defines when the execution triggers.
	Condition ActionCondition `json:"condition"`

	// Targets is the list of target references to invoke.
	Targets []ActionExecutionTarget `json:"targets"`
}

ActionExecutionSpec defines the desired state of ActionExecution.

func (*ActionExecutionSpec) DeepCopy 

func (in *ActionExecutionSpec) DeepCopy() *ActionExecutionSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ActionExecutionSpec.

func (*ActionExecutionSpec) DeepCopyInto 

func (in *ActionExecutionSpec) DeepCopyInto(out *ActionExecutionSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ActionExecutionStatus 

type ActionExecutionStatus struct {
	// Ready indicates whether the ActionExecution is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ActionExecutionStatus defines the observed state of ActionExecution.

func (*ActionExecutionStatus) DeepCopy 

func (in *ActionExecutionStatus) DeepCopy() *ActionExecutionStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ActionExecutionStatus.

func (*ActionExecutionStatus) DeepCopyInto 

func (in *ActionExecutionStatus) DeepCopyInto(out *ActionExecutionStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ActionExecutionTarget 

type ActionExecutionTarget struct {
	// TargetRef references an ActionTarget CR managed by this operator.
	// Mutually exclusive with TargetId.
	// +optional
	TargetRef *ResourceRef `json:"targetRef,omitempty"`

	// TargetId references a pre-existing Zitadel target by raw ID.
	// Mutually exclusive with TargetRef.
	// +optional
	TargetId string `json:"targetId,omitempty"`
}

ActionExecutionTarget references a target to invoke in the execution.

func (*ActionExecutionTarget) DeepCopy 

func (in *ActionExecutionTarget) DeepCopy() *ActionExecutionTarget

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ActionExecutionTarget.

func (*ActionExecutionTarget) DeepCopyInto 

func (in *ActionExecutionTarget) DeepCopyInto(out *ActionExecutionTarget)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ActionTarget 

type ActionTarget struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ActionTargetSpec   `json:"spec,omitempty"`
	Status ActionTargetStatus `json:"status,omitempty"`
}

ActionTarget is the Schema for the actiontargets API.

func (*ActionTarget) DeepCopy 

func (in *ActionTarget) DeepCopy() *ActionTarget

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ActionTarget.

func (*ActionTarget) DeepCopyInto 

func (in *ActionTarget) DeepCopyInto(out *ActionTarget)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ActionTarget) DeepCopyObject 

func (in *ActionTarget) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ActionTarget) DisplayName 

func (a *ActionTarget) DisplayName() string

DisplayName returns the target display name for Zitadel.

type ActionTargetList 

type ActionTargetList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ActionTarget `json:"items"`
}

ActionTargetList contains a list of ActionTarget.

func (*ActionTargetList) DeepCopy 

func (in *ActionTargetList) DeepCopy() *ActionTargetList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ActionTargetList.

func (*ActionTargetList) DeepCopyInto 

func (in *ActionTargetList) DeepCopyInto(out *ActionTargetList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ActionTargetList) DeepCopyObject 

func (in *ActionTargetList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ActionTargetPayloadType added in v0.15.0 

type ActionTargetPayloadType string

ActionTargetPayloadType defines how the payload is formatted and secured. +kubebuilder:validation:Enum=json;jwt;jwe 

const (
	// ActionTargetPayloadTypeJSON sends the payload as JSON with X-ZITADEL-Signature header.
	ActionTargetPayloadTypeJSON ActionTargetPayloadType = "json"

	// ActionTargetPayloadTypeJWT sends the payload as a signed JWT.
	// The receiver can verify authenticity and integrity using the signing key.
	ActionTargetPayloadTypeJWT ActionTargetPayloadType = "jwt"

	// ActionTargetPayloadTypeJWE sends the payload as an encrypted JWT.
	ActionTargetPayloadTypeJWE ActionTargetPayloadType = "jwe"
)

type ActionTargetSpec 

type ActionTargetSpec struct {
	// Name is the display name of the target in Zitadel.
	// If empty, the Kubernetes resource name is used.
	// +optional
	Name string `json:"name,omitempty"`

	// Endpoint is the HTTP(S) URL the target will call.
	Endpoint string `json:"endpoint"`

	// Timeout is the request timeout duration (e.g., "10s", "30s").
	// +optional
	Timeout string `json:"timeout,omitempty"`

	// InterruptOnError determines whether the action flow stops if this target fails.
	// +optional
	InterruptOnError bool `json:"interruptOnError,omitempty"`

	// TargetType defines the type of target and how Zitadel treats the response.
	// - restCall: reads the response body (required for append_claims)
	// - restWebhook: only checks status code, ignores body
	// - restAsync: fire-and-forget, does not wait for response
	// Default: restCall
	// +optional
	// +kubebuilder:default=restCall
	TargetType ActionTargetType `json:"targetType,omitempty"`

	// PayloadType defines how the payload is formatted and secured.
	// - json: JSON body with X-ZITADEL-Signature header (default)
	// - jwt: signed JWT body (receiver verifies via JWKS)
	// - jwe: encrypted JWT body
	// Default: json
	// +optional
	// +kubebuilder:default=json
	PayloadType ActionTargetPayloadType `json:"payloadType,omitempty"`
}

ActionTargetSpec defines the desired state of ActionTarget.

func (*ActionTargetSpec) DeepCopy 

func (in *ActionTargetSpec) DeepCopy() *ActionTargetSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ActionTargetSpec.

func (*ActionTargetSpec) DeepCopyInto 

func (in *ActionTargetSpec) DeepCopyInto(out *ActionTargetSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ActionTargetStatus 

type ActionTargetStatus struct {
	// TargetId is the Zitadel target ID.
	TargetId string `json:"targetId,omitempty"`

	// Ready indicates whether the ActionTarget is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ActionTargetStatus defines the observed state of ActionTarget.

func (*ActionTargetStatus) DeepCopy 

func (in *ActionTargetStatus) DeepCopy() *ActionTargetStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ActionTargetStatus.

func (*ActionTargetStatus) DeepCopyInto 

func (in *ActionTargetStatus) DeepCopyInto(out *ActionTargetStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ActionTargetType added in v0.15.0 

type ActionTargetType string

ActionTargetType defines the type of target and how the response is treated. +kubebuilder:validation:Enum=restCall;restWebhook;restAsync 

const (
	// ActionTargetTypeRestCall makes a POST request and reads the response body.
	// This is required when Zitadel needs to read the response (e.g., append_claims).
	ActionTargetTypeRestCall ActionTargetType = "restCall"

	// ActionTargetTypeRestWebhook makes a POST request but ignores the response body.
	// Only the status code is checked.
	ActionTargetTypeRestWebhook ActionTargetType = "restWebhook"

	// ActionTargetTypeRestAsync makes an asynchronous POST request.
	// Zitadel does not wait for the response. Typically used for event executions.
	ActionTargetTypeRestAsync ActionTargetType = "restAsync"
)

type ApplicationKey added in v0.11.0 

type ApplicationKey struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ApplicationKeySpec   `json:"spec,omitempty"`
	Status ApplicationKeyStatus `json:"status,omitempty"`
}

ApplicationKey is the Schema for the applicationkeys API.

func (*ApplicationKey) DeepCopy added in v0.11.0 

func (in *ApplicationKey) DeepCopy() *ApplicationKey

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ApplicationKey.

func (*ApplicationKey) DeepCopyInto added in v0.11.0 

func (in *ApplicationKey) DeepCopyInto(out *ApplicationKey)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ApplicationKey) DeepCopyObject added in v0.11.0 

func (in *ApplicationKey) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ApplicationKeyList added in v0.11.0 

type ApplicationKeyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ApplicationKey `json:"items"`
}

ApplicationKeyList contains a list of ApplicationKey.

func (*ApplicationKeyList) DeepCopy added in v0.11.0 

func (in *ApplicationKeyList) DeepCopy() *ApplicationKeyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ApplicationKeyList.

func (*ApplicationKeyList) DeepCopyInto added in v0.11.0 

func (in *ApplicationKeyList) DeepCopyInto(out *ApplicationKeyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ApplicationKeyList) DeepCopyObject added in v0.11.0 

func (in *ApplicationKeyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ApplicationKeySpec added in v0.11.0 

type ApplicationKeySpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// ProjectRef references a Project CR managed by this operator.
	// Mutually exclusive with ProjectId.
	// +optional
	ProjectRef *ResourceRef `json:"projectRef,omitempty"`

	// ProjectId references a pre-existing Zitadel project by raw ID.
	// Mutually exclusive with ProjectRef.
	// +optional
	ProjectId string `json:"projectId,omitempty"`

	// AppRef references an OIDCApp or APIApp CR managed by this operator.
	// Mutually exclusive with AppId.
	// +optional
	AppRef *ResourceRef `json:"appRef,omitempty"`

	// AppId references a pre-existing Zitadel application by raw ID.
	// Mutually exclusive with AppRef.
	// +optional
	AppId string `json:"appId,omitempty"`

	// KeyType specifies the key format. Currently only JSON is supported.
	// +kubebuilder:validation:Enum=json
	// +kubebuilder:default=json
	// +optional
	KeyType string `json:"keyType,omitempty"`

	// ExpirationDate is the optional expiration timestamp for the key.
	// If not set, a 10-year expiration is used.
	// +optional
	ExpirationDate *metav1.Time `json:"expirationDate,omitempty"`

	// KeySecretRef references the Secret where the key JSON will be stored.
	KeySecretRef MachineKeySecretRef `json:"keySecretRef"`
}

ApplicationKeySpec defines the desired state of ApplicationKey.

func (*ApplicationKeySpec) DeepCopy added in v0.11.0 

func (in *ApplicationKeySpec) DeepCopy() *ApplicationKeySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ApplicationKeySpec.

func (*ApplicationKeySpec) DeepCopyInto added in v0.11.0 

func (in *ApplicationKeySpec) DeepCopyInto(out *ApplicationKeySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ApplicationKeyStatus added in v0.11.0 

type ApplicationKeyStatus struct {
	// KeyId is the Zitadel application key ID.
	KeyId string `json:"keyId,omitempty"`

	// ProjectId is the resolved project ID.
	ProjectId string `json:"projectId,omitempty"`

	// AppId is the resolved application ID.
	AppId string `json:"appId,omitempty"`

	// Ready indicates whether the ApplicationKey is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ApplicationKeyStatus defines the observed state of ApplicationKey.

func (*ApplicationKeyStatus) DeepCopy added in v0.11.0 

func (in *ApplicationKeyStatus) DeepCopy() *ApplicationKeyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ApplicationKeyStatus.

func (*ApplicationKeyStatus) DeepCopyInto added in v0.11.0 

func (in *ApplicationKeyStatus) DeepCopyInto(out *ApplicationKeyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultDomainPolicy added in v0.13.0 

type DefaultDomainPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DefaultDomainPolicySpec   `json:"spec,omitempty"`
	Status DefaultDomainPolicyStatus `json:"status,omitempty"`
}

DefaultDomainPolicy is the Schema for the defaultdomainpolicies API. It manages the instance-level default domain policy (IAM_OWNER, Admin API). Singleton per instance: reconcile reads the current default, diffs all fields, updates on drift.

func (*DefaultDomainPolicy) DeepCopy added in v0.13.0 

func (in *DefaultDomainPolicy) DeepCopy() *DefaultDomainPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultDomainPolicy.

func (*DefaultDomainPolicy) DeepCopyInto added in v0.13.0 

func (in *DefaultDomainPolicy) DeepCopyInto(out *DefaultDomainPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultDomainPolicy) DeepCopyObject added in v0.13.0 

func (in *DefaultDomainPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultDomainPolicyList added in v0.13.0 

type DefaultDomainPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DefaultDomainPolicy `json:"items"`
}

DefaultDomainPolicyList contains a list of DefaultDomainPolicy.

func (*DefaultDomainPolicyList) DeepCopy added in v0.13.0 

func (in *DefaultDomainPolicyList) DeepCopy() *DefaultDomainPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultDomainPolicyList.

func (*DefaultDomainPolicyList) DeepCopyInto added in v0.13.0 

func (in *DefaultDomainPolicyList) DeepCopyInto(out *DefaultDomainPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultDomainPolicyList) DeepCopyObject added in v0.13.0 

func (in *DefaultDomainPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultDomainPolicySpec added in v0.13.0 

type DefaultDomainPolicySpec struct {
	// UserLoginMustBeDomain requires user login names to include the org domain.
	// +optional
	UserLoginMustBeDomain *bool `json:"userLoginMustBeDomain,omitempty"`

	// ValidateOrgDomains requires organization domains to be verified via DNS.
	// +optional
	ValidateOrgDomains *bool `json:"validateOrgDomains,omitempty"`

	// SmtpSenderAddressMatchesInstanceDomain requires SMTP sender to match the instance domain.
	// +optional
	SmtpSenderAddressMatchesInstanceDomain *bool `json:"smtpSenderAddressMatchesInstanceDomain,omitempty"`
}

DefaultDomainPolicySpec defines the desired state of DefaultDomainPolicy.

func (*DefaultDomainPolicySpec) DeepCopy added in v0.13.0 

func (in *DefaultDomainPolicySpec) DeepCopy() *DefaultDomainPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultDomainPolicySpec.

func (*DefaultDomainPolicySpec) DeepCopyInto added in v0.13.0 

func (in *DefaultDomainPolicySpec) DeepCopyInto(out *DefaultDomainPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultDomainPolicyStatus added in v0.13.0 

type DefaultDomainPolicyStatus struct {
	// Ready indicates whether the DefaultDomainPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

DefaultDomainPolicyStatus defines the observed state of DefaultDomainPolicy.

func (*DefaultDomainPolicyStatus) DeepCopy added in v0.13.0 

func (in *DefaultDomainPolicyStatus) DeepCopy() *DefaultDomainPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultDomainPolicyStatus.

func (*DefaultDomainPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *DefaultDomainPolicyStatus) DeepCopyInto(out *DefaultDomainPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultLabelPolicy added in v0.13.0 

type DefaultLabelPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DefaultLabelPolicySpec   `json:"spec,omitempty"`
	Status DefaultLabelPolicyStatus `json:"status,omitempty"`
}

DefaultLabelPolicy is the Schema for the defaultlabelpolicies API. It manages the instance-level default label/branding policy (IAM_OWNER, Admin API). Singleton.

func (*DefaultLabelPolicy) DeepCopy added in v0.13.0 

func (in *DefaultLabelPolicy) DeepCopy() *DefaultLabelPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultLabelPolicy.

func (*DefaultLabelPolicy) DeepCopyInto added in v0.13.0 

func (in *DefaultLabelPolicy) DeepCopyInto(out *DefaultLabelPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultLabelPolicy) DeepCopyObject added in v0.13.0 

func (in *DefaultLabelPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultLabelPolicyList added in v0.13.0 

type DefaultLabelPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DefaultLabelPolicy `json:"items"`
}

DefaultLabelPolicyList contains a list of DefaultLabelPolicy.

func (*DefaultLabelPolicyList) DeepCopy added in v0.13.0 

func (in *DefaultLabelPolicyList) DeepCopy() *DefaultLabelPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultLabelPolicyList.

func (*DefaultLabelPolicyList) DeepCopyInto added in v0.13.0 

func (in *DefaultLabelPolicyList) DeepCopyInto(out *DefaultLabelPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultLabelPolicyList) DeepCopyObject added in v0.13.0 

func (in *DefaultLabelPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultLabelPolicySpec added in v0.13.0 

type DefaultLabelPolicySpec struct {
	LabelPolicyFields `json:",inline"`
}

DefaultLabelPolicySpec defines the desired state of DefaultLabelPolicy.

func (*DefaultLabelPolicySpec) DeepCopy added in v0.13.0 

func (in *DefaultLabelPolicySpec) DeepCopy() *DefaultLabelPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultLabelPolicySpec.

func (*DefaultLabelPolicySpec) DeepCopyInto added in v0.13.0 

func (in *DefaultLabelPolicySpec) DeepCopyInto(out *DefaultLabelPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultLabelPolicyStatus added in v0.13.0 

type DefaultLabelPolicyStatus struct {
	// Ready indicates whether the DefaultLabelPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

DefaultLabelPolicyStatus defines the observed state of DefaultLabelPolicy.

func (*DefaultLabelPolicyStatus) DeepCopy added in v0.13.0 

func (in *DefaultLabelPolicyStatus) DeepCopy() *DefaultLabelPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultLabelPolicyStatus.

func (*DefaultLabelPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *DefaultLabelPolicyStatus) DeepCopyInto(out *DefaultLabelPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultLockoutPolicy added in v0.13.0 

type DefaultLockoutPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DefaultLockoutPolicySpec   `json:"spec,omitempty"`
	Status DefaultLockoutPolicyStatus `json:"status,omitempty"`
}

DefaultLockoutPolicy is the Schema for the defaultlockoutpolicies API. It manages the instance-level default lockout policy (IAM_OWNER, Admin API). Singleton.

func (*DefaultLockoutPolicy) DeepCopy added in v0.13.0 

func (in *DefaultLockoutPolicy) DeepCopy() *DefaultLockoutPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultLockoutPolicy.

func (*DefaultLockoutPolicy) DeepCopyInto added in v0.13.0 

func (in *DefaultLockoutPolicy) DeepCopyInto(out *DefaultLockoutPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultLockoutPolicy) DeepCopyObject added in v0.13.0 

func (in *DefaultLockoutPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultLockoutPolicyList added in v0.13.0 

type DefaultLockoutPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DefaultLockoutPolicy `json:"items"`
}

DefaultLockoutPolicyList contains a list of DefaultLockoutPolicy.

func (*DefaultLockoutPolicyList) DeepCopy added in v0.13.0 

func (in *DefaultLockoutPolicyList) DeepCopy() *DefaultLockoutPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultLockoutPolicyList.

func (*DefaultLockoutPolicyList) DeepCopyInto added in v0.13.0 

func (in *DefaultLockoutPolicyList) DeepCopyInto(out *DefaultLockoutPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultLockoutPolicyList) DeepCopyObject added in v0.13.0 

func (in *DefaultLockoutPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultLockoutPolicySpec added in v0.13.0 

type DefaultLockoutPolicySpec struct {
	LockoutPolicyFields `json:",inline"`
}

DefaultLockoutPolicySpec defines the desired state of DefaultLockoutPolicy.

func (*DefaultLockoutPolicySpec) DeepCopy added in v0.13.0 

func (in *DefaultLockoutPolicySpec) DeepCopy() *DefaultLockoutPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultLockoutPolicySpec.

func (*DefaultLockoutPolicySpec) DeepCopyInto added in v0.13.0 

func (in *DefaultLockoutPolicySpec) DeepCopyInto(out *DefaultLockoutPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultLockoutPolicyStatus added in v0.13.0 

type DefaultLockoutPolicyStatus struct {
	// Ready indicates whether the DefaultLockoutPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

DefaultLockoutPolicyStatus defines the observed state of DefaultLockoutPolicy.

func (*DefaultLockoutPolicyStatus) DeepCopy added in v0.13.0 

func (in *DefaultLockoutPolicyStatus) DeepCopy() *DefaultLockoutPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultLockoutPolicyStatus.

func (*DefaultLockoutPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *DefaultLockoutPolicyStatus) DeepCopyInto(out *DefaultLockoutPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultLoginPolicy added in v0.13.0 

type DefaultLoginPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DefaultLoginPolicySpec   `json:"spec,omitempty"`
	Status DefaultLoginPolicyStatus `json:"status,omitempty"`
}

DefaultLoginPolicy is the Schema for the defaultloginpolicies API. It manages the instance-level default login policy (IAM_OWNER, Admin API). Singleton per instance: reconcile reads the current default, diffs all fields, updates on drift.

func (*DefaultLoginPolicy) DeepCopy added in v0.13.0 

func (in *DefaultLoginPolicy) DeepCopy() *DefaultLoginPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultLoginPolicy.

func (*DefaultLoginPolicy) DeepCopyInto added in v0.13.0 

func (in *DefaultLoginPolicy) DeepCopyInto(out *DefaultLoginPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultLoginPolicy) DeepCopyObject added in v0.13.0 

func (in *DefaultLoginPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultLoginPolicyList added in v0.13.0 

type DefaultLoginPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DefaultLoginPolicy `json:"items"`
}

DefaultLoginPolicyList contains a list of DefaultLoginPolicy.

func (*DefaultLoginPolicyList) DeepCopy added in v0.13.0 

func (in *DefaultLoginPolicyList) DeepCopy() *DefaultLoginPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultLoginPolicyList.

func (*DefaultLoginPolicyList) DeepCopyInto added in v0.13.0 

func (in *DefaultLoginPolicyList) DeepCopyInto(out *DefaultLoginPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultLoginPolicyList) DeepCopyObject added in v0.13.0 

func (in *DefaultLoginPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultLoginPolicySpec added in v0.13.0 

type DefaultLoginPolicySpec struct {
	// UserLogin determines whether login with username/password is allowed.
	// +optional
	UserLogin *bool `json:"userLogin,omitempty"`

	// AllowExternalIdp allows login with external identity providers.
	// +optional
	AllowExternalIdp *bool `json:"allowExternalIdp,omitempty"`

	// AllowRegister allows user self-registration.
	// +optional
	AllowRegister *bool `json:"allowRegister,omitempty"`

	// ForceMfa requires multi-factor authentication for all users.
	// +optional
	ForceMfa *bool `json:"forceMfa,omitempty"`

	// ForceMfaLocalOnly requires MFA only for local (non-IdP) users.
	// +optional
	ForceMfaLocalOnly *bool `json:"forceMfaLocalOnly,omitempty"`

	// HidePasswordReset hides the "forgot password" link on the login page.
	// +optional
	HidePasswordReset *bool `json:"hidePasswordReset,omitempty"`

	// PasswordlessType configures passwordless authentication.
	// +kubebuilder:validation:Enum=not_allowed;allowed
	// +optional
	PasswordlessType string `json:"passwordlessType,omitempty"`

	// AllowDomainDiscovery enables domain-based organization discovery.
	// +optional
	AllowDomainDiscovery *bool `json:"allowDomainDiscovery,omitempty"`

	// IgnoreUnknownUsernames prevents enumeration attacks by not revealing if a username exists.
	// +optional
	IgnoreUnknownUsernames *bool `json:"ignoreUnknownUsernames,omitempty"`

	// DefaultRedirectUri is the default redirect URI after login.
	// +optional
	DefaultRedirectUri string `json:"defaultRedirectUri,omitempty"`

	// PasswordCheckLifetime is the duration before password re-verification is required (e.g., "240h").
	// +optional
	PasswordCheckLifetime string `json:"passwordCheckLifetime,omitempty"`

	// ExternalLoginCheckLifetime is the duration before external login re-verification (e.g., "240h").
	// +optional
	ExternalLoginCheckLifetime string `json:"externalLoginCheckLifetime,omitempty"`

	// MfaInitSkipLifetime is the duration a user can skip MFA setup after login (e.g., "720h").
	// +optional
	MfaInitSkipLifetime string `json:"mfaInitSkipLifetime,omitempty"`

	// MultiFactorCheckLifetime is the duration before MFA re-verification (e.g., "12h").
	// +optional
	MultiFactorCheckLifetime string `json:"multiFactorCheckLifetime,omitempty"`

	// SecondFactorCheckLifetime is the duration before second factor re-verification (e.g., "12h").
	// +optional
	SecondFactorCheckLifetime string `json:"secondFactorCheckLifetime,omitempty"`

	// Idps is the list of identity providers allowed for login at the instance level.
	// +optional
	Idps []IdpReference `json:"idps,omitempty"`
}

DefaultLoginPolicySpec defines the desired state of DefaultLoginPolicy.

func (*DefaultLoginPolicySpec) DeepCopy added in v0.13.0 

func (in *DefaultLoginPolicySpec) DeepCopy() *DefaultLoginPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultLoginPolicySpec.

func (*DefaultLoginPolicySpec) DeepCopyInto added in v0.13.0 

func (in *DefaultLoginPolicySpec) DeepCopyInto(out *DefaultLoginPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultLoginPolicyStatus added in v0.13.0 

type DefaultLoginPolicyStatus struct {
	// Ready indicates whether the DefaultLoginPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

DefaultLoginPolicyStatus defines the observed state of DefaultLoginPolicy.

func (*DefaultLoginPolicyStatus) DeepCopy added in v0.13.0 

func (in *DefaultLoginPolicyStatus) DeepCopy() *DefaultLoginPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultLoginPolicyStatus.

func (*DefaultLoginPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *DefaultLoginPolicyStatus) DeepCopyInto(out *DefaultLoginPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultMessageText added in v0.13.0 

type DefaultMessageText struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DefaultMessageTextSpec   `json:"spec,omitempty"`
	Status DefaultMessageTextStatus `json:"status,omitempty"`
}

DefaultMessageText is the Schema for the defaultmessagetexts API. It manages instance-level default message text (IAM_OWNER, Admin API). One CR per type+language combination.

func (*DefaultMessageText) DeepCopy added in v0.13.0 

func (in *DefaultMessageText) DeepCopy() *DefaultMessageText

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultMessageText.

func (*DefaultMessageText) DeepCopyInto added in v0.13.0 

func (in *DefaultMessageText) DeepCopyInto(out *DefaultMessageText)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultMessageText) DeepCopyObject added in v0.13.0 

func (in *DefaultMessageText) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultMessageTextList added in v0.13.0 

type DefaultMessageTextList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DefaultMessageText `json:"items"`
}

DefaultMessageTextList contains a list of DefaultMessageText.

func (*DefaultMessageTextList) DeepCopy added in v0.13.0 

func (in *DefaultMessageTextList) DeepCopy() *DefaultMessageTextList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultMessageTextList.

func (*DefaultMessageTextList) DeepCopyInto added in v0.13.0 

func (in *DefaultMessageTextList) DeepCopyInto(out *DefaultMessageTextList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultMessageTextList) DeepCopyObject added in v0.13.0 

func (in *DefaultMessageTextList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultMessageTextSpec added in v0.13.0 

type DefaultMessageTextSpec struct {
	MessageTextFields `json:",inline"`
}

DefaultMessageTextSpec defines the desired state of DefaultMessageText.

func (*DefaultMessageTextSpec) DeepCopy added in v0.13.0 

func (in *DefaultMessageTextSpec) DeepCopy() *DefaultMessageTextSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultMessageTextSpec.

func (*DefaultMessageTextSpec) DeepCopyInto added in v0.13.0 

func (in *DefaultMessageTextSpec) DeepCopyInto(out *DefaultMessageTextSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultMessageTextStatus added in v0.13.0 

type DefaultMessageTextStatus struct {
	// Ready indicates whether the DefaultMessageText is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

DefaultMessageTextStatus defines the observed state of DefaultMessageText.

func (*DefaultMessageTextStatus) DeepCopy added in v0.13.0 

func (in *DefaultMessageTextStatus) DeepCopy() *DefaultMessageTextStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultMessageTextStatus.

func (*DefaultMessageTextStatus) DeepCopyInto added in v0.13.0 

func (in *DefaultMessageTextStatus) DeepCopyInto(out *DefaultMessageTextStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultNotificationPolicy added in v0.13.0 

type DefaultNotificationPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DefaultNotificationPolicySpec   `json:"spec,omitempty"`
	Status DefaultNotificationPolicyStatus `json:"status,omitempty"`
}

DefaultNotificationPolicy is the Schema for the defaultnotificationpolicies API. It manages the instance-level default notification policy (IAM_OWNER, Admin API). Singleton.

func (*DefaultNotificationPolicy) DeepCopy added in v0.13.0 

func (in *DefaultNotificationPolicy) DeepCopy() *DefaultNotificationPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultNotificationPolicy.

func (*DefaultNotificationPolicy) DeepCopyInto added in v0.13.0 

func (in *DefaultNotificationPolicy) DeepCopyInto(out *DefaultNotificationPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultNotificationPolicy) DeepCopyObject added in v0.13.0 

func (in *DefaultNotificationPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultNotificationPolicyList added in v0.13.0 

type DefaultNotificationPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DefaultNotificationPolicy `json:"items"`
}

DefaultNotificationPolicyList contains a list of DefaultNotificationPolicy.

func (*DefaultNotificationPolicyList) DeepCopy added in v0.13.0 

func (in *DefaultNotificationPolicyList) DeepCopy() *DefaultNotificationPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultNotificationPolicyList.

func (*DefaultNotificationPolicyList) DeepCopyInto added in v0.13.0 

func (in *DefaultNotificationPolicyList) DeepCopyInto(out *DefaultNotificationPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultNotificationPolicyList) DeepCopyObject added in v0.13.0 

func (in *DefaultNotificationPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultNotificationPolicySpec added in v0.13.0 

type DefaultNotificationPolicySpec struct {
	NotificationPolicyFields `json:",inline"`
}

DefaultNotificationPolicySpec defines the desired state of DefaultNotificationPolicy.

func (*DefaultNotificationPolicySpec) DeepCopy added in v0.13.0 

func (in *DefaultNotificationPolicySpec) DeepCopy() *DefaultNotificationPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultNotificationPolicySpec.

func (*DefaultNotificationPolicySpec) DeepCopyInto added in v0.13.0 

func (in *DefaultNotificationPolicySpec) DeepCopyInto(out *DefaultNotificationPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultNotificationPolicyStatus added in v0.13.0 

type DefaultNotificationPolicyStatus struct {
	// Ready indicates whether the DefaultNotificationPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

DefaultNotificationPolicyStatus defines the observed state of DefaultNotificationPolicy.

func (*DefaultNotificationPolicyStatus) DeepCopy added in v0.13.0 

func (in *DefaultNotificationPolicyStatus) DeepCopy() *DefaultNotificationPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultNotificationPolicyStatus.

func (*DefaultNotificationPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *DefaultNotificationPolicyStatus) DeepCopyInto(out *DefaultNotificationPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultOIDCSettings added in v0.13.0 

type DefaultOIDCSettings struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DefaultOIDCSettingsSpec   `json:"spec,omitempty"`
	Status DefaultOIDCSettingsStatus `json:"status,omitempty"`
}

DefaultOIDCSettings is the Schema for the defaultoidcsettings API. It manages the instance-level OIDC settings (IAM_OWNER, Admin API). Singleton.

func (*DefaultOIDCSettings) DeepCopy added in v0.13.0 

func (in *DefaultOIDCSettings) DeepCopy() *DefaultOIDCSettings

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultOIDCSettings.

func (*DefaultOIDCSettings) DeepCopyInto added in v0.13.0 

func (in *DefaultOIDCSettings) DeepCopyInto(out *DefaultOIDCSettings)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultOIDCSettings) DeepCopyObject added in v0.13.0 

func (in *DefaultOIDCSettings) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultOIDCSettingsList added in v0.13.0 

type DefaultOIDCSettingsList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DefaultOIDCSettings `json:"items"`
}

DefaultOIDCSettingsList contains a list of DefaultOIDCSettings.

func (*DefaultOIDCSettingsList) DeepCopy added in v0.13.0 

func (in *DefaultOIDCSettingsList) DeepCopy() *DefaultOIDCSettingsList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultOIDCSettingsList.

func (*DefaultOIDCSettingsList) DeepCopyInto added in v0.13.0 

func (in *DefaultOIDCSettingsList) DeepCopyInto(out *DefaultOIDCSettingsList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultOIDCSettingsList) DeepCopyObject added in v0.13.0 

func (in *DefaultOIDCSettingsList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultOIDCSettingsSpec added in v0.13.0 

type DefaultOIDCSettingsSpec struct {
	OIDCSettingsFields `json:",inline"`
}

DefaultOIDCSettingsSpec defines the desired state of DefaultOIDCSettings.

func (*DefaultOIDCSettingsSpec) DeepCopy added in v0.13.0 

func (in *DefaultOIDCSettingsSpec) DeepCopy() *DefaultOIDCSettingsSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultOIDCSettingsSpec.

func (*DefaultOIDCSettingsSpec) DeepCopyInto added in v0.13.0 

func (in *DefaultOIDCSettingsSpec) DeepCopyInto(out *DefaultOIDCSettingsSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultOIDCSettingsStatus added in v0.13.0 

type DefaultOIDCSettingsStatus struct {
	// Ready indicates whether the DefaultOIDCSettings is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

DefaultOIDCSettingsStatus defines the observed state of DefaultOIDCSettings.

func (*DefaultOIDCSettingsStatus) DeepCopy added in v0.13.0 

func (in *DefaultOIDCSettingsStatus) DeepCopy() *DefaultOIDCSettingsStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultOIDCSettingsStatus.

func (*DefaultOIDCSettingsStatus) DeepCopyInto added in v0.13.0 

func (in *DefaultOIDCSettingsStatus) DeepCopyInto(out *DefaultOIDCSettingsStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultPasswordAgePolicy added in v0.13.0 

type DefaultPasswordAgePolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DefaultPasswordAgePolicySpec   `json:"spec,omitempty"`
	Status DefaultPasswordAgePolicyStatus `json:"status,omitempty"`
}

DefaultPasswordAgePolicy is the Schema for the defaultpasswordagepolicies API. It manages the instance-level default password age policy (IAM_OWNER, Admin API). Singleton.

func (*DefaultPasswordAgePolicy) DeepCopy added in v0.13.0 

func (in *DefaultPasswordAgePolicy) DeepCopy() *DefaultPasswordAgePolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultPasswordAgePolicy.

func (*DefaultPasswordAgePolicy) DeepCopyInto added in v0.13.0 

func (in *DefaultPasswordAgePolicy) DeepCopyInto(out *DefaultPasswordAgePolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultPasswordAgePolicy) DeepCopyObject added in v0.13.0 

func (in *DefaultPasswordAgePolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultPasswordAgePolicyList added in v0.13.0 

type DefaultPasswordAgePolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DefaultPasswordAgePolicy `json:"items"`
}

DefaultPasswordAgePolicyList contains a list of DefaultPasswordAgePolicy.

func (*DefaultPasswordAgePolicyList) DeepCopy added in v0.13.0 

func (in *DefaultPasswordAgePolicyList) DeepCopy() *DefaultPasswordAgePolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultPasswordAgePolicyList.

func (*DefaultPasswordAgePolicyList) DeepCopyInto added in v0.13.0 

func (in *DefaultPasswordAgePolicyList) DeepCopyInto(out *DefaultPasswordAgePolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultPasswordAgePolicyList) DeepCopyObject added in v0.13.0 

func (in *DefaultPasswordAgePolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultPasswordAgePolicySpec added in v0.13.0 

type DefaultPasswordAgePolicySpec struct {
	PasswordAgePolicyFields `json:",inline"`
}

DefaultPasswordAgePolicySpec defines the desired state of DefaultPasswordAgePolicy.

func (*DefaultPasswordAgePolicySpec) DeepCopy added in v0.13.0 

func (in *DefaultPasswordAgePolicySpec) DeepCopy() *DefaultPasswordAgePolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultPasswordAgePolicySpec.

func (*DefaultPasswordAgePolicySpec) DeepCopyInto added in v0.13.0 

func (in *DefaultPasswordAgePolicySpec) DeepCopyInto(out *DefaultPasswordAgePolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultPasswordAgePolicyStatus added in v0.13.0 

type DefaultPasswordAgePolicyStatus struct {
	// Ready indicates whether the DefaultPasswordAgePolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

DefaultPasswordAgePolicyStatus defines the observed state of DefaultPasswordAgePolicy.

func (*DefaultPasswordAgePolicyStatus) DeepCopy added in v0.13.0 

func (in *DefaultPasswordAgePolicyStatus) DeepCopy() *DefaultPasswordAgePolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultPasswordAgePolicyStatus.

func (*DefaultPasswordAgePolicyStatus) DeepCopyInto added in v0.13.0 

func (in *DefaultPasswordAgePolicyStatus) DeepCopyInto(out *DefaultPasswordAgePolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultPasswordComplexityPolicy added in v0.13.0 

type DefaultPasswordComplexityPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DefaultPasswordComplexityPolicySpec   `json:"spec,omitempty"`
	Status DefaultPasswordComplexityPolicyStatus `json:"status,omitempty"`
}

DefaultPasswordComplexityPolicy is the Schema for the defaultpasswordcomplexitypolicies API. It manages the instance-level default password complexity policy (IAM_OWNER, Admin API). Singleton.

func (*DefaultPasswordComplexityPolicy) DeepCopy added in v0.13.0 

func (in *DefaultPasswordComplexityPolicy) DeepCopy() *DefaultPasswordComplexityPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultPasswordComplexityPolicy.

func (*DefaultPasswordComplexityPolicy) DeepCopyInto added in v0.13.0 

func (in *DefaultPasswordComplexityPolicy) DeepCopyInto(out *DefaultPasswordComplexityPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultPasswordComplexityPolicy) DeepCopyObject added in v0.13.0 

func (in *DefaultPasswordComplexityPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultPasswordComplexityPolicyList added in v0.13.0 

type DefaultPasswordComplexityPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DefaultPasswordComplexityPolicy `json:"items"`
}

DefaultPasswordComplexityPolicyList contains a list of DefaultPasswordComplexityPolicy.

func (*DefaultPasswordComplexityPolicyList) DeepCopy added in v0.13.0 

func (in *DefaultPasswordComplexityPolicyList) DeepCopy() *DefaultPasswordComplexityPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultPasswordComplexityPolicyList.

func (*DefaultPasswordComplexityPolicyList) DeepCopyInto added in v0.13.0 

func (in *DefaultPasswordComplexityPolicyList) DeepCopyInto(out *DefaultPasswordComplexityPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultPasswordComplexityPolicyList) DeepCopyObject added in v0.13.0 

func (in *DefaultPasswordComplexityPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultPasswordComplexityPolicySpec added in v0.13.0 

type DefaultPasswordComplexityPolicySpec struct {
	PasswordComplexityPolicyFields `json:",inline"`
}

DefaultPasswordComplexityPolicySpec defines the desired state of DefaultPasswordComplexityPolicy.

func (*DefaultPasswordComplexityPolicySpec) DeepCopy added in v0.13.0 

func (in *DefaultPasswordComplexityPolicySpec) DeepCopy() *DefaultPasswordComplexityPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultPasswordComplexityPolicySpec.

func (*DefaultPasswordComplexityPolicySpec) DeepCopyInto added in v0.13.0 

func (in *DefaultPasswordComplexityPolicySpec) DeepCopyInto(out *DefaultPasswordComplexityPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultPasswordComplexityPolicyStatus added in v0.13.0 

type DefaultPasswordComplexityPolicyStatus struct {
	// Ready indicates whether the DefaultPasswordComplexityPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

DefaultPasswordComplexityPolicyStatus defines the observed state of DefaultPasswordComplexityPolicy.

func (*DefaultPasswordComplexityPolicyStatus) DeepCopy added in v0.13.0 

func (in *DefaultPasswordComplexityPolicyStatus) DeepCopy() *DefaultPasswordComplexityPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultPasswordComplexityPolicyStatus.

func (*DefaultPasswordComplexityPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *DefaultPasswordComplexityPolicyStatus) DeepCopyInto(out *DefaultPasswordComplexityPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultPrivacyPolicy added in v0.13.0 

type DefaultPrivacyPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DefaultPrivacyPolicySpec   `json:"spec,omitempty"`
	Status DefaultPrivacyPolicyStatus `json:"status,omitempty"`
}

DefaultPrivacyPolicy is the Schema for the defaultprivacypolicies API. It manages the instance-level default privacy policy (IAM_OWNER, Admin API). Singleton.

func (*DefaultPrivacyPolicy) DeepCopy added in v0.13.0 

func (in *DefaultPrivacyPolicy) DeepCopy() *DefaultPrivacyPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultPrivacyPolicy.

func (*DefaultPrivacyPolicy) DeepCopyInto added in v0.13.0 

func (in *DefaultPrivacyPolicy) DeepCopyInto(out *DefaultPrivacyPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultPrivacyPolicy) DeepCopyObject added in v0.13.0 

func (in *DefaultPrivacyPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultPrivacyPolicyList added in v0.13.0 

type DefaultPrivacyPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DefaultPrivacyPolicy `json:"items"`
}

DefaultPrivacyPolicyList contains a list of DefaultPrivacyPolicy.

func (*DefaultPrivacyPolicyList) DeepCopy added in v0.13.0 

func (in *DefaultPrivacyPolicyList) DeepCopy() *DefaultPrivacyPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultPrivacyPolicyList.

func (*DefaultPrivacyPolicyList) DeepCopyInto added in v0.13.0 

func (in *DefaultPrivacyPolicyList) DeepCopyInto(out *DefaultPrivacyPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DefaultPrivacyPolicyList) DeepCopyObject added in v0.13.0 

func (in *DefaultPrivacyPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DefaultPrivacyPolicySpec added in v0.13.0 

type DefaultPrivacyPolicySpec struct {
	PrivacyPolicyFields `json:",inline"`
}

DefaultPrivacyPolicySpec defines the desired state of DefaultPrivacyPolicy.

func (*DefaultPrivacyPolicySpec) DeepCopy added in v0.13.0 

func (in *DefaultPrivacyPolicySpec) DeepCopy() *DefaultPrivacyPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultPrivacyPolicySpec.

func (*DefaultPrivacyPolicySpec) DeepCopyInto added in v0.13.0 

func (in *DefaultPrivacyPolicySpec) DeepCopyInto(out *DefaultPrivacyPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DefaultPrivacyPolicyStatus added in v0.13.0 

type DefaultPrivacyPolicyStatus struct {
	// Ready indicates whether the DefaultPrivacyPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

DefaultPrivacyPolicyStatus defines the observed state of DefaultPrivacyPolicy.

func (*DefaultPrivacyPolicyStatus) DeepCopy added in v0.13.0 

func (in *DefaultPrivacyPolicyStatus) DeepCopy() *DefaultPrivacyPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DefaultPrivacyPolicyStatus.

func (*DefaultPrivacyPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *DefaultPrivacyPolicyStatus) DeepCopyInto(out *DefaultPrivacyPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Domain added in v0.10.0 

type Domain struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DomainSpec   `json:"spec,omitempty"`
	Status DomainStatus `json:"status,omitempty"`
}

Domain is the Schema for the domains API.

func (*Domain) DeepCopy added in v0.10.0 

func (in *Domain) DeepCopy() *Domain

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Domain.

func (*Domain) DeepCopyInto added in v0.10.0 

func (in *Domain) DeepCopyInto(out *Domain)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Domain) DeepCopyObject added in v0.10.0 

func (in *Domain) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DomainList added in v0.10.0 

type DomainList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Domain `json:"items"`
}

DomainList contains a list of Domain.

func (*DomainList) DeepCopy added in v0.10.0 

func (in *DomainList) DeepCopy() *DomainList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DomainList.

func (*DomainList) DeepCopyInto added in v0.10.0 

func (in *DomainList) DeepCopyInto(out *DomainList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DomainList) DeepCopyObject added in v0.10.0 

func (in *DomainList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DomainSpec added in v0.10.0 

type DomainSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// DomainName is the domain to register for the organization (e.g., "example.com").
	DomainName string `json:"domainName"`
}

DomainSpec defines the desired state of Domain.

func (*DomainSpec) DeepCopy added in v0.10.0 

func (in *DomainSpec) DeepCopy() *DomainSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DomainSpec.

func (*DomainSpec) DeepCopyInto added in v0.10.0 

func (in *DomainSpec) DeepCopyInto(out *DomainSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DomainStatus added in v0.10.0 

type DomainStatus struct {
	// Ready indicates whether the Domain is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

DomainStatus defines the observed state of Domain.

func (*DomainStatus) DeepCopy added in v0.10.0 

func (in *DomainStatus) DeepCopy() *DomainStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DomainStatus.

func (*DomainStatus) DeepCopyInto added in v0.10.0 

func (in *DomainStatus) DeepCopyInto(out *DomainStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EmailProvider added in v0.13.0 

type EmailProvider struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   EmailProviderSpec   `json:"spec,omitempty"`
	Status EmailProviderStatus `json:"status,omitempty"`
}

EmailProvider is the Schema for the emailproviders API. It manages an instance-level email provider (IAM_OWNER, Admin API). Discriminated type: smtp or http.

func (*EmailProvider) DeepCopy added in v0.13.0 

func (in *EmailProvider) DeepCopy() *EmailProvider

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EmailProvider.

func (*EmailProvider) DeepCopyInto added in v0.13.0 

func (in *EmailProvider) DeepCopyInto(out *EmailProvider)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*EmailProvider) DeepCopyObject added in v0.13.0 

func (in *EmailProvider) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type EmailProviderList added in v0.13.0 

type EmailProviderList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []EmailProvider `json:"items"`
}

EmailProviderList contains a list of EmailProvider.

func (*EmailProviderList) DeepCopy added in v0.13.0 

func (in *EmailProviderList) DeepCopy() *EmailProviderList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EmailProviderList.

func (*EmailProviderList) DeepCopyInto added in v0.13.0 

func (in *EmailProviderList) DeepCopyInto(out *EmailProviderList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*EmailProviderList) DeepCopyObject added in v0.13.0 

func (in *EmailProviderList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type EmailProviderSpec added in v0.13.0 

type EmailProviderSpec struct {
	// Smtp configures an SMTP email provider.
	// Mutually exclusive with Http.
	// +optional
	Smtp *SmtpEmailProvider `json:"smtp,omitempty"`

	// Http configures an HTTP webhook email provider.
	// Mutually exclusive with Smtp.
	// +optional
	Http *HttpEmailProvider `json:"http,omitempty"`
}

EmailProviderSpec defines the desired state of EmailProvider. Discriminated type: exactly one of Smtp or Http must be set.

func (*EmailProviderSpec) DeepCopy added in v0.13.0 

func (in *EmailProviderSpec) DeepCopy() *EmailProviderSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EmailProviderSpec.

func (*EmailProviderSpec) DeepCopyInto added in v0.13.0 

func (in *EmailProviderSpec) DeepCopyInto(out *EmailProviderSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EmailProviderStatus added in v0.13.0 

type EmailProviderStatus struct {
	// ProviderId is the Zitadel email provider ID.
	ProviderId string `json:"providerId,omitempty"`

	// Ready indicates whether the EmailProvider is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

EmailProviderStatus defines the observed state of EmailProvider.

func (*EmailProviderStatus) DeepCopy added in v0.13.0 

func (in *EmailProviderStatus) DeepCopy() *EmailProviderStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EmailProviderStatus.

func (*EmailProviderStatus) DeepCopyInto added in v0.13.0 

func (in *EmailProviderStatus) DeepCopyInto(out *EmailProviderStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GitHubIdP added in v0.13.0 

type GitHubIdP struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   GitHubIdPSpec   `json:"spec,omitempty"`
	Status GitHubIdPStatus `json:"status,omitempty"`
}

GitHubIdP is the Schema for the githubidps API. It manages an instance-scoped GitHub identity provider (IAM_OWNER, Admin API). Uses Admin API AddGitHubProvider/UpdateGitHubProvider.

func (*GitHubIdP) DeepCopy added in v0.13.0 

func (in *GitHubIdP) DeepCopy() *GitHubIdP

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GitHubIdP.

func (*GitHubIdP) DeepCopyInto added in v0.13.0 

func (in *GitHubIdP) DeepCopyInto(out *GitHubIdP)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*GitHubIdP) DeepCopyObject added in v0.13.0 

func (in *GitHubIdP) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*GitHubIdP) DisplayName added in v0.13.0 

func (g *GitHubIdP) DisplayName() string

DisplayName returns the IdP display name for Zitadel.

type GitHubIdPList added in v0.13.0 

type GitHubIdPList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []GitHubIdP `json:"items"`
}

GitHubIdPList contains a list of GitHubIdP.

func (*GitHubIdPList) DeepCopy added in v0.13.0 

func (in *GitHubIdPList) DeepCopy() *GitHubIdPList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GitHubIdPList.

func (*GitHubIdPList) DeepCopyInto added in v0.13.0 

func (in *GitHubIdPList) DeepCopyInto(out *GitHubIdPList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*GitHubIdPList) DeepCopyObject added in v0.13.0 

func (in *GitHubIdPList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type GitHubIdPSpec added in v0.13.0 

type GitHubIdPSpec struct {
	// Name is the display name of the GitHub identity provider in Zitadel.
	Name string `json:"name"`

	// ClientId is the GitHub OAuth2 client ID.
	ClientId string `json:"clientId"`

	// ClientSecretRef references the Secret containing the GitHub OAuth2 client secret.
	ClientSecretRef SecretKeyRef `json:"clientSecretRef"`

	// Scopes are the OAuth2 scopes to request from GitHub.
	// +optional
	Scopes []string `json:"scopes,omitempty"`

	// IsLinkingAllowed allows linking existing Zitadel accounts with GitHub accounts.
	// +optional
	IsLinkingAllowed bool `json:"isLinkingAllowed,omitempty"`

	// IsCreationAllowed allows automatic user creation on first GitHub login.
	// +optional
	IsCreationAllowed bool `json:"isCreationAllowed,omitempty"`

	// IsAutoCreation enables automatic user creation (same as IsCreationAllowed in Zitadel API).
	// +optional
	IsAutoCreation bool `json:"isAutoCreation,omitempty"`

	// IsAutoUpdate enables automatic user profile update on GitHub login.
	// +optional
	IsAutoUpdate bool `json:"isAutoUpdate,omitempty"`
}

GitHubIdPSpec defines the desired state of GitHubIdP.

func (*GitHubIdPSpec) DeepCopy added in v0.13.0 

func (in *GitHubIdPSpec) DeepCopy() *GitHubIdPSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GitHubIdPSpec.

func (*GitHubIdPSpec) DeepCopyInto added in v0.13.0 

func (in *GitHubIdPSpec) DeepCopyInto(out *GitHubIdPSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GitHubIdPStatus added in v0.13.0 

type GitHubIdPStatus struct {
	// IdpID is the Zitadel identity provider ID for this GitHub IdP.
	IdpID string `json:"idpID,omitempty"`

	// Ready indicates whether the GitHubIdP is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

GitHubIdPStatus defines the observed state of GitHubIdP.

func (*GitHubIdPStatus) DeepCopy added in v0.13.0 

func (in *GitHubIdPStatus) DeepCopy() *GitHubIdPStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GitHubIdPStatus.

func (*GitHubIdPStatus) DeepCopyInto added in v0.13.0 

func (in *GitHubIdPStatus) DeepCopyInto(out *GitHubIdPStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GoogleIdP added in v0.13.0 

type GoogleIdP struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   GoogleIdPSpec   `json:"spec,omitempty"`
	Status GoogleIdPStatus `json:"status,omitempty"`
}

GoogleIdP is the Schema for the googleidps API. It manages an instance-scoped Google identity provider (IAM_OWNER, Admin API). Uses Admin API AddGoogleProvider/UpdateGoogleProvider.

func (*GoogleIdP) DeepCopy added in v0.13.0 

func (in *GoogleIdP) DeepCopy() *GoogleIdP

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoogleIdP.

func (*GoogleIdP) DeepCopyInto added in v0.13.0 

func (in *GoogleIdP) DeepCopyInto(out *GoogleIdP)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*GoogleIdP) DeepCopyObject added in v0.13.0 

func (in *GoogleIdP) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*GoogleIdP) DisplayName added in v0.13.0 

func (g *GoogleIdP) DisplayName() string

DisplayName returns the IdP display name for Zitadel.

type GoogleIdPList added in v0.13.0 

type GoogleIdPList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []GoogleIdP `json:"items"`
}

GoogleIdPList contains a list of GoogleIdP.

func (*GoogleIdPList) DeepCopy added in v0.13.0 

func (in *GoogleIdPList) DeepCopy() *GoogleIdPList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoogleIdPList.

func (*GoogleIdPList) DeepCopyInto added in v0.13.0 

func (in *GoogleIdPList) DeepCopyInto(out *GoogleIdPList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*GoogleIdPList) DeepCopyObject added in v0.13.0 

func (in *GoogleIdPList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type GoogleIdPSpec added in v0.13.0 

type GoogleIdPSpec struct {
	// Name is the display name of the Google identity provider in Zitadel.
	Name string `json:"name"`

	// ClientId is the Google OAuth2 client ID.
	ClientId string `json:"clientId"`

	// ClientSecretRef references the Secret containing the Google OAuth2 client secret.
	ClientSecretRef SecretKeyRef `json:"clientSecretRef"`

	// Scopes are the OAuth2 scopes to request from Google.
	// +optional
	Scopes []string `json:"scopes,omitempty"`

	// IsLinkingAllowed allows linking existing Zitadel accounts with Google accounts.
	// +optional
	IsLinkingAllowed bool `json:"isLinkingAllowed,omitempty"`

	// IsCreationAllowed allows automatic user creation on first Google login.
	// +optional
	IsCreationAllowed bool `json:"isCreationAllowed,omitempty"`

	// IsAutoCreation enables automatic user creation (same as IsCreationAllowed in Zitadel API).
	// +optional
	IsAutoCreation bool `json:"isAutoCreation,omitempty"`

	// IsAutoUpdate enables automatic user profile update on Google login.
	// +optional
	IsAutoUpdate bool `json:"isAutoUpdate,omitempty"`
}

GoogleIdPSpec defines the desired state of GoogleIdP.

func (*GoogleIdPSpec) DeepCopy added in v0.13.0 

func (in *GoogleIdPSpec) DeepCopy() *GoogleIdPSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoogleIdPSpec.

func (*GoogleIdPSpec) DeepCopyInto added in v0.13.0 

func (in *GoogleIdPSpec) DeepCopyInto(out *GoogleIdPSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GoogleIdPStatus added in v0.13.0 

type GoogleIdPStatus struct {
	// IdpID is the Zitadel identity provider ID for this Google IdP.
	// Exposed so that DefaultLoginPolicy.idps[].idpRef can resolve it.
	IdpID string `json:"idpID,omitempty"`

	// Ready indicates whether the GoogleIdP is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

GoogleIdPStatus defines the observed state of GoogleIdP.

func (*GoogleIdPStatus) DeepCopy added in v0.13.0 

func (in *GoogleIdPStatus) DeepCopy() *GoogleIdPStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoogleIdPStatus.

func (*GoogleIdPStatus) DeepCopyInto added in v0.13.0 

func (in *GoogleIdPStatus) DeepCopyInto(out *GoogleIdPStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type HttpEmailProvider added in v0.13.0 

type HttpEmailProvider struct {
	// Endpoint is the HTTP(S) URL that receives email notifications.
	Endpoint string `json:"endpoint"`
}

HttpEmailProvider defines HTTP webhook configuration for email delivery.

func (*HttpEmailProvider) DeepCopy added in v0.13.0 

func (in *HttpEmailProvider) DeepCopy() *HttpEmailProvider

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HttpEmailProvider.

func (*HttpEmailProvider) DeepCopyInto added in v0.13.0 

func (in *HttpEmailProvider) DeepCopyInto(out *HttpEmailProvider)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type HttpSmsProvider added in v0.13.0 

type HttpSmsProvider struct {
	// Endpoint is the HTTP(S) URL that receives SMS notifications.
	Endpoint string `json:"endpoint"`

	// Description is a human-readable description.
	// +optional
	Description string `json:"description,omitempty"`
}

HttpSmsProvider defines HTTP webhook SMS configuration.

func (*HttpSmsProvider) DeepCopy added in v0.13.0 

func (in *HttpSmsProvider) DeepCopy() *HttpSmsProvider

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HttpSmsProvider.

func (*HttpSmsProvider) DeepCopyInto added in v0.13.0 

func (in *HttpSmsProvider) DeepCopyInto(out *HttpSmsProvider)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type HumanUser added in v0.13.0 

type HumanUser struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   HumanUserSpec   `json:"spec,omitempty"`
	Status HumanUserStatus `json:"status,omitempty"`
}

HumanUser is the Schema for the humanusers API. It manages an org-scoped human user (Management API).

func (*HumanUser) DeepCopy added in v0.13.0 

func (in *HumanUser) DeepCopy() *HumanUser

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HumanUser.

func (*HumanUser) DeepCopyInto added in v0.13.0 

func (in *HumanUser) DeepCopyInto(out *HumanUser)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*HumanUser) DeepCopyObject added in v0.13.0 

func (in *HumanUser) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type HumanUserList added in v0.13.0 

type HumanUserList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []HumanUser `json:"items"`
}

HumanUserList contains a list of HumanUser.

func (*HumanUserList) DeepCopy added in v0.13.0 

func (in *HumanUserList) DeepCopy() *HumanUserList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HumanUserList.

func (*HumanUserList) DeepCopyInto added in v0.13.0 

func (in *HumanUserList) DeepCopyInto(out *HumanUserList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*HumanUserList) DeepCopyObject added in v0.13.0 

func (in *HumanUserList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type HumanUserSpec added in v0.13.0 

type HumanUserSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// UserName is the login name of the user.
	UserName string `json:"userName"`

	// FirstName is the user's first name.
	FirstName string `json:"firstName"`

	// LastName is the user's last name.
	LastName string `json:"lastName"`

	// Email is the user's email address.
	Email string `json:"email"`

	// IsEmailVerified marks the email as pre-verified.
	// +optional
	IsEmailVerified bool `json:"isEmailVerified,omitempty"`

	// DisplayName is the user's display name.
	// +optional
	DisplayName string `json:"displayName,omitempty"`

	// NickName is the user's nickname.
	// +optional
	NickName string `json:"nickName,omitempty"`

	// PreferredLanguage is the user's preferred language (BCP 47).
	// +optional
	PreferredLanguage string `json:"preferredLanguage,omitempty"`

	// Phone is the user's phone number.
	// +optional
	Phone string `json:"phone,omitempty"`

	// IsPhoneVerified marks the phone as pre-verified.
	// +optional
	IsPhoneVerified bool `json:"isPhoneVerified,omitempty"`

	// InitialPasswordSecretRef references a Secret containing the initial password.
	// +optional
	InitialPasswordSecretRef *SecretKeyRef `json:"initialPasswordSecretRef,omitempty"`
}

HumanUserSpec defines the desired state of HumanUser.

func (*HumanUserSpec) DeepCopy added in v0.13.0 

func (in *HumanUserSpec) DeepCopy() *HumanUserSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HumanUserSpec.

func (*HumanUserSpec) DeepCopyInto added in v0.13.0 

func (in *HumanUserSpec) DeepCopyInto(out *HumanUserSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type HumanUserStatus added in v0.13.0 

type HumanUserStatus struct {
	// UserId is the Zitadel user ID.
	UserId string `json:"userId,omitempty"`

	// OrganizationId is the resolved organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// Ready indicates whether the HumanUser is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

HumanUserStatus defines the observed state of HumanUser.

func (*HumanUserStatus) DeepCopy added in v0.13.0 

func (in *HumanUserStatus) DeepCopy() *HumanUserStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HumanUserStatus.

func (*HumanUserStatus) DeepCopyInto added in v0.13.0 

func (in *HumanUserStatus) DeepCopyInto(out *HumanUserStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IdentityProvider added in v0.10.0 

type IdentityProvider struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   IdentityProviderSpec   `json:"spec,omitempty"`
	Status IdentityProviderStatus `json:"status,omitempty"`
}

IdentityProvider is the Schema for the identityproviders API.

func (*IdentityProvider) DeepCopy added in v0.10.0 

func (in *IdentityProvider) DeepCopy() *IdentityProvider

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IdentityProvider.

func (*IdentityProvider) DeepCopyInto added in v0.10.0 

func (in *IdentityProvider) DeepCopyInto(out *IdentityProvider)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*IdentityProvider) DeepCopyObject added in v0.10.0 

func (in *IdentityProvider) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type IdentityProviderList added in v0.10.0 

type IdentityProviderList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []IdentityProvider `json:"items"`
}

IdentityProviderList contains a list of IdentityProvider.

func (*IdentityProviderList) DeepCopy added in v0.10.0 

func (in *IdentityProviderList) DeepCopy() *IdentityProviderList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IdentityProviderList.

func (*IdentityProviderList) DeepCopyInto added in v0.10.0 

func (in *IdentityProviderList) DeepCopyInto(out *IdentityProviderList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*IdentityProviderList) DeepCopyObject added in v0.10.0 

func (in *IdentityProviderList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type IdentityProviderSpec added in v0.10.0 

type IdentityProviderSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// Name is the display name for the identity provider.
	Name string `json:"name"`

	// Issuer is the OIDC issuer URL.
	Issuer string `json:"issuer"`

	// ClientId is the OIDC client ID.
	ClientId string `json:"clientId"`

	// ClientSecret is the OIDC client secret.
	ClientSecret string `json:"clientSecret"`

	// Scopes are the OIDC scopes to request.
	// +optional
	Scopes []string `json:"scopes,omitempty"`

	// IsAutoCreation enables automatic user creation on first login.
	// +optional
	IsAutoCreation bool `json:"isAutoCreation,omitempty"`

	// IsAutoUpdate enables automatic user profile update on login.
	// +optional
	IsAutoUpdate bool `json:"isAutoUpdate,omitempty"`

	// IsLinkingAllowed enables account linking.
	// +optional
	IsLinkingAllowed bool `json:"isLinkingAllowed,omitempty"`
}

IdentityProviderSpec defines the desired state of IdentityProvider.

func (*IdentityProviderSpec) DeepCopy added in v0.10.0 

func (in *IdentityProviderSpec) DeepCopy() *IdentityProviderSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IdentityProviderSpec.

func (*IdentityProviderSpec) DeepCopyInto added in v0.10.0 

func (in *IdentityProviderSpec) DeepCopyInto(out *IdentityProviderSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IdentityProviderStatus added in v0.10.0 

type IdentityProviderStatus struct {
	// IdpId is the Zitadel identity provider ID.
	IdpId string `json:"idpId,omitempty"`

	// Ready indicates whether the IdentityProvider is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

IdentityProviderStatus defines the observed state of IdentityProvider.

func (*IdentityProviderStatus) DeepCopy added in v0.10.0 

func (in *IdentityProviderStatus) DeepCopy() *IdentityProviderStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IdentityProviderStatus.

func (*IdentityProviderStatus) DeepCopyInto added in v0.10.0 

func (in *IdentityProviderStatus) DeepCopyInto(out *IdentityProviderStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IdpReference added in v0.13.0 

type IdpReference struct {
	// IdpRef references a GoogleIdP CR managed by this operator.
	// Mutually exclusive with IdpId.
	// +optional
	IdpRef *ResourceRef `json:"idpRef,omitempty"`

	// IdpId references a pre-existing Zitadel identity provider by raw ID.
	// Mutually exclusive with IdpRef.
	// +optional
	IdpId string `json:"idpId,omitempty"`
}

IdpReference references an identity provider either by CR reference or raw ID.

func (*IdpReference) DeepCopy added in v0.13.0 

func (in *IdpReference) DeepCopy() *IdpReference

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IdpReference.

func (*IdpReference) DeepCopyInto added in v0.13.0 

func (in *IdpReference) DeepCopyInto(out *IdpReference)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type InstanceMember added in v0.13.0 

type InstanceMember struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   InstanceMemberSpec   `json:"spec,omitempty"`
	Status InstanceMemberStatus `json:"status,omitempty"`
}

InstanceMember is the Schema for the instancemembers API. It manages an instance-level membership (Admin API).

func (*InstanceMember) DeepCopy added in v0.13.0 

func (in *InstanceMember) DeepCopy() *InstanceMember

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new InstanceMember.

func (*InstanceMember) DeepCopyInto added in v0.13.0 

func (in *InstanceMember) DeepCopyInto(out *InstanceMember)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*InstanceMember) DeepCopyObject added in v0.13.0 

func (in *InstanceMember) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type InstanceMemberList added in v0.13.0 

type InstanceMemberList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []InstanceMember `json:"items"`
}

InstanceMemberList contains a list of InstanceMember.

func (*InstanceMemberList) DeepCopy added in v0.13.0 

func (in *InstanceMemberList) DeepCopy() *InstanceMemberList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new InstanceMemberList.

func (*InstanceMemberList) DeepCopyInto added in v0.13.0 

func (in *InstanceMemberList) DeepCopyInto(out *InstanceMemberList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*InstanceMemberList) DeepCopyObject added in v0.13.0 

func (in *InstanceMemberList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type InstanceMemberSpec added in v0.13.0 

type InstanceMemberSpec struct {
	// UserRef references a MachineUser or HumanUser CR.
	// +optional
	UserRef *ResourceRef `json:"userRef,omitempty"`

	// UserId is a raw Zitadel user ID.
	// +optional
	UserId string `json:"userId,omitempty"`

	// Roles is the list of instance-level roles (e.g., IAM_OWNER, IAM_ORG_MANAGER).
	Roles []string `json:"roles"`
}

InstanceMemberSpec defines the desired state of InstanceMember.

func (*InstanceMemberSpec) DeepCopy added in v0.13.0 

func (in *InstanceMemberSpec) DeepCopy() *InstanceMemberSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new InstanceMemberSpec.

func (*InstanceMemberSpec) DeepCopyInto added in v0.13.0 

func (in *InstanceMemberSpec) DeepCopyInto(out *InstanceMemberSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type InstanceMemberStatus added in v0.13.0 

type InstanceMemberStatus struct {
	// Ready indicates whether the InstanceMember is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

InstanceMemberStatus defines the observed state of InstanceMember.

func (*InstanceMemberStatus) DeepCopy added in v0.13.0 

func (in *InstanceMemberStatus) DeepCopy() *InstanceMemberStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new InstanceMemberStatus.

func (*InstanceMemberStatus) DeepCopyInto added in v0.13.0 

func (in *InstanceMemberStatus) DeepCopyInto(out *InstanceMemberStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LabelPolicy added in v0.13.0 

type LabelPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   LabelPolicySpec   `json:"spec,omitempty"`
	Status LabelPolicyStatus `json:"status,omitempty"`
}

LabelPolicy is the Schema for the labelpolicies API. It manages an org-scoped label/branding policy (Management API).

func (*LabelPolicy) DeepCopy added in v0.13.0 

func (in *LabelPolicy) DeepCopy() *LabelPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LabelPolicy.

func (*LabelPolicy) DeepCopyInto added in v0.13.0 

func (in *LabelPolicy) DeepCopyInto(out *LabelPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*LabelPolicy) DeepCopyObject added in v0.13.0 

func (in *LabelPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type LabelPolicyFields added in v0.13.0 

type LabelPolicyFields struct {
	// PrimaryColor is the primary brand color (hex, e.g. "#5469d4").
	// +optional
	PrimaryColor string `json:"primaryColor,omitempty"`
	// BackgroundColor is the background color (hex).
	// +optional
	BackgroundColor string `json:"backgroundColor,omitempty"`
	// WarnColor is the warning color (hex).
	// +optional
	WarnColor string `json:"warnColor,omitempty"`
	// FontColor is the font color (hex).
	// +optional
	FontColor string `json:"fontColor,omitempty"`
	// PrimaryColorDark is the primary color for dark mode (hex).
	// +optional
	PrimaryColorDark string `json:"primaryColorDark,omitempty"`
	// BackgroundColorDark is the background color for dark mode (hex).
	// +optional
	BackgroundColorDark string `json:"backgroundColorDark,omitempty"`
	// WarnColorDark is the warning color for dark mode (hex).
	// +optional
	WarnColorDark string `json:"warnColorDark,omitempty"`
	// FontColorDark is the font color for dark mode (hex).
	// +optional
	FontColorDark string `json:"fontColorDark,omitempty"`
	// HideLoginNameSuffix hides the @domain suffix on the login screen.
	// +optional
	HideLoginNameSuffix bool `json:"hideLoginNameSuffix,omitempty"`
	// DisableWatermark disables the Zitadel watermark on login pages.
	// +optional
	DisableWatermark bool `json:"disableWatermark,omitempty"`
}

LabelPolicyFields contains fields shared between LabelPolicy (org) and DefaultLabelPolicy (instance).

func (*LabelPolicyFields) DeepCopy added in v0.13.0 

func (in *LabelPolicyFields) DeepCopy() *LabelPolicyFields

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LabelPolicyFields.

func (*LabelPolicyFields) DeepCopyInto added in v0.13.0 

func (in *LabelPolicyFields) DeepCopyInto(out *LabelPolicyFields)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LabelPolicyList added in v0.13.0 

type LabelPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LabelPolicy `json:"items"`
}

LabelPolicyList contains a list of LabelPolicy.

func (*LabelPolicyList) DeepCopy added in v0.13.0 

func (in *LabelPolicyList) DeepCopy() *LabelPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LabelPolicyList.

func (*LabelPolicyList) DeepCopyInto added in v0.13.0 

func (in *LabelPolicyList) DeepCopyInto(out *LabelPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*LabelPolicyList) DeepCopyObject added in v0.13.0 

func (in *LabelPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type LabelPolicySpec added in v0.13.0 

type LabelPolicySpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	LabelPolicyFields `json:",inline"`
}

LabelPolicySpec defines the desired state of LabelPolicy.

func (*LabelPolicySpec) DeepCopy added in v0.13.0 

func (in *LabelPolicySpec) DeepCopy() *LabelPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LabelPolicySpec.

func (*LabelPolicySpec) DeepCopyInto added in v0.13.0 

func (in *LabelPolicySpec) DeepCopyInto(out *LabelPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LabelPolicyStatus added in v0.13.0 

type LabelPolicyStatus struct {
	// OrganizationId is the resolved organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// Ready indicates whether the LabelPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

LabelPolicyStatus defines the observed state of LabelPolicy.

func (*LabelPolicyStatus) DeepCopy added in v0.13.0 

func (in *LabelPolicyStatus) DeepCopy() *LabelPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LabelPolicyStatus.

func (*LabelPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *LabelPolicyStatus) DeepCopyInto(out *LabelPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LockoutPolicy added in v0.13.0 

type LockoutPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   LockoutPolicySpec   `json:"spec,omitempty"`
	Status LockoutPolicyStatus `json:"status,omitempty"`
}

LockoutPolicy is the Schema for the lockoutpolicies API. It manages an org-scoped lockout policy (ORG_OWNER, Management API).

func (*LockoutPolicy) DeepCopy added in v0.13.0 

func (in *LockoutPolicy) DeepCopy() *LockoutPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LockoutPolicy.

func (*LockoutPolicy) DeepCopyInto added in v0.13.0 

func (in *LockoutPolicy) DeepCopyInto(out *LockoutPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*LockoutPolicy) DeepCopyObject added in v0.13.0 

func (in *LockoutPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type LockoutPolicyFields added in v0.13.0 

type LockoutPolicyFields struct {
	// MaxPasswordAttempts is the number of failed password attempts before
	// the account is locked. 0 disables password lockout.
	MaxPasswordAttempts uint32 `json:"maxPasswordAttempts"`
	// MaxOtpAttempts is the number of failed OTP attempts before the account
	// is locked. 0 disables OTP lockout.
	// +optional
	MaxOtpAttempts uint32 `json:"maxOtpAttempts,omitempty"`
}

LockoutPolicyFields contains fields shared between LockoutPolicy (org) and DefaultLockoutPolicy (instance).

func (*LockoutPolicyFields) DeepCopy added in v0.13.0 

func (in *LockoutPolicyFields) DeepCopy() *LockoutPolicyFields

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LockoutPolicyFields.

func (*LockoutPolicyFields) DeepCopyInto added in v0.13.0 

func (in *LockoutPolicyFields) DeepCopyInto(out *LockoutPolicyFields)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LockoutPolicyList added in v0.13.0 

type LockoutPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LockoutPolicy `json:"items"`
}

LockoutPolicyList contains a list of LockoutPolicy.

func (*LockoutPolicyList) DeepCopy added in v0.13.0 

func (in *LockoutPolicyList) DeepCopy() *LockoutPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LockoutPolicyList.

func (*LockoutPolicyList) DeepCopyInto added in v0.13.0 

func (in *LockoutPolicyList) DeepCopyInto(out *LockoutPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*LockoutPolicyList) DeepCopyObject added in v0.13.0 

func (in *LockoutPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type LockoutPolicySpec added in v0.13.0 

type LockoutPolicySpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	LockoutPolicyFields `json:",inline"`
}

LockoutPolicySpec defines the desired state of LockoutPolicy (org-scoped).

func (*LockoutPolicySpec) DeepCopy added in v0.13.0 

func (in *LockoutPolicySpec) DeepCopy() *LockoutPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LockoutPolicySpec.

func (*LockoutPolicySpec) DeepCopyInto added in v0.13.0 

func (in *LockoutPolicySpec) DeepCopyInto(out *LockoutPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LockoutPolicyStatus added in v0.13.0 

type LockoutPolicyStatus struct {
	// Ready indicates whether the LockoutPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// OrganizationId is the resolved organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

LockoutPolicyStatus defines the observed state of LockoutPolicy.

func (*LockoutPolicyStatus) DeepCopy added in v0.13.0 

func (in *LockoutPolicyStatus) DeepCopy() *LockoutPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LockoutPolicyStatus.

func (*LockoutPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *LockoutPolicyStatus) DeepCopyInto(out *LockoutPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LoginPolicy added in v0.13.0 

type LoginPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   LoginPolicySpec   `json:"spec,omitempty"`
	Status LoginPolicyStatus `json:"status,omitempty"`
}

LoginPolicy is the Schema for the loginpolicies API. It manages an org-scoped login policy (ORG_OWNER, Management API).

func (*LoginPolicy) DeepCopy added in v0.13.0 

func (in *LoginPolicy) DeepCopy() *LoginPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LoginPolicy.

func (*LoginPolicy) DeepCopyInto added in v0.13.0 

func (in *LoginPolicy) DeepCopyInto(out *LoginPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*LoginPolicy) DeepCopyObject added in v0.13.0 

func (in *LoginPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type LoginPolicyFields added in v0.13.0 

type LoginPolicyFields struct {
	// UserLogin allows username/password login.
	UserLogin *bool `json:"userLogin,omitempty"`
	// AllowExternalIdp allows login through configured external identity providers.
	AllowExternalIdp *bool `json:"allowExternalIdp,omitempty"`
	// AllowRegister allows user self-registration.
	AllowRegister *bool `json:"allowRegister,omitempty"`
	// ForceMfa requires multi-factor authentication for all users.
	ForceMfa *bool `json:"forceMfa,omitempty"`
	// ForceMfaLocalOnly requires MFA only for local (non-IdP) authentication.
	ForceMfaLocalOnly *bool `json:"forceMfaLocalOnly,omitempty"`
	// HidePasswordReset hides the password-reset link on the login form.
	HidePasswordReset *bool `json:"hidePasswordReset,omitempty"`
	// PasswordlessType enables passwordless (passkey) login.
	// +kubebuilder:validation:Enum=not_allowed;allowed
	// +optional
	PasswordlessType string `json:"passwordlessType,omitempty"`
	// AllowDomainDiscovery enables org discovery by the domain suffix of the login name.
	AllowDomainDiscovery *bool `json:"allowDomainDiscovery,omitempty"`
	// IgnoreUnknownUsernames shows the password step even for unknown users (user-enumeration hardening).
	IgnoreUnknownUsernames *bool `json:"ignoreUnknownUsernames,omitempty"`
	// DefaultRedirectUri is where users land after login when no app context exists.
	DefaultRedirectUri string `json:"defaultRedirectUri,omitempty"`
	// PasswordCheckLifetime is how long a password check stays valid (Go/Zitadel duration string, e.g. "240h").
	PasswordCheckLifetime string `json:"passwordCheckLifetime,omitempty"`
	// ExternalLoginCheckLifetime is how long an external IdP login stays valid (duration string).
	ExternalLoginCheckLifetime string `json:"externalLoginCheckLifetime,omitempty"`
	// MfaInitSkipLifetime is how long users may postpone MFA setup (duration string; "0s" = no skip).
	MfaInitSkipLifetime string `json:"mfaInitSkipLifetime,omitempty"`
	// MultiFactorCheckLifetime is how long a multi-factor check stays valid (duration string).
	MultiFactorCheckLifetime string `json:"multiFactorCheckLifetime,omitempty"`
	// SecondFactorCheckLifetime is how long a second-factor check stays valid (duration string).
	SecondFactorCheckLifetime string `json:"secondFactorCheckLifetime,omitempty"`
}

LoginPolicyFields contains fields shared between LoginPolicy (org) and DefaultLoginPolicy (instance). Unset (nil) booleans leave the corresponding Zitadel setting unchanged.

func (*LoginPolicyFields) DeepCopy added in v0.13.0 

func (in *LoginPolicyFields) DeepCopy() *LoginPolicyFields

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LoginPolicyFields.

func (*LoginPolicyFields) DeepCopyInto added in v0.13.0 

func (in *LoginPolicyFields) DeepCopyInto(out *LoginPolicyFields)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LoginPolicyList added in v0.13.0 

type LoginPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LoginPolicy `json:"items"`
}

LoginPolicyList contains a list of LoginPolicy.

func (*LoginPolicyList) DeepCopy added in v0.13.0 

func (in *LoginPolicyList) DeepCopy() *LoginPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LoginPolicyList.

func (*LoginPolicyList) DeepCopyInto added in v0.13.0 

func (in *LoginPolicyList) DeepCopyInto(out *LoginPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*LoginPolicyList) DeepCopyObject added in v0.13.0 

func (in *LoginPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type LoginPolicySpec added in v0.13.0 

type LoginPolicySpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	LoginPolicyFields `json:",inline"`

	// DisableLoginWithEmail disables login using email addresses.
	// +optional
	DisableLoginWithEmail *bool `json:"disableLoginWithEmail,omitempty"`

	// DisableLoginWithPhone disables login using phone numbers.
	// +optional
	DisableLoginWithPhone *bool `json:"disableLoginWithPhone,omitempty"`

	// SecondFactors is the list of allowed second factor types.
	// +kubebuilder:validation:Items:Enum=otp;u2f;otp_email;otp_sms
	// +optional
	SecondFactors []string `json:"secondFactors,omitempty"`

	// MultiFactors is the list of allowed multi-factor types.
	// +kubebuilder:validation:Items:Enum=u2f_with_verification
	// +optional
	MultiFactors []string `json:"multiFactors,omitempty"`

	// Idps is the list of identity providers allowed for login at the org level.
	// +optional
	Idps []IdpReference `json:"idps,omitempty"`
}

LoginPolicySpec defines the desired state of LoginPolicy (org-scoped).

func (*LoginPolicySpec) DeepCopy added in v0.13.0 

func (in *LoginPolicySpec) DeepCopy() *LoginPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LoginPolicySpec.

func (*LoginPolicySpec) DeepCopyInto added in v0.13.0 

func (in *LoginPolicySpec) DeepCopyInto(out *LoginPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LoginPolicyStatus added in v0.13.0 

type LoginPolicyStatus struct {
	// Ready indicates whether the LoginPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// OrganizationId is the resolved organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

LoginPolicyStatus defines the observed state of LoginPolicy.

func (*LoginPolicyStatus) DeepCopy added in v0.13.0 

func (in *LoginPolicyStatus) DeepCopy() *LoginPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LoginPolicyStatus.

func (*LoginPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *LoginPolicyStatus) DeepCopyInto(out *LoginPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type MachineKeySecretRef 

type MachineKeySecretRef struct {
	// Name is the name of the Secret.
	Name string `json:"name"`

	// Key is the data key within the Secret. Default: "key.json"
	// +optional
	Key string `json:"key,omitempty"`
}

MachineKeySecretRef references a Secret where the machine user key JSON will be stored.

func (*MachineKeySecretRef) DeepCopy 

func (in *MachineKeySecretRef) DeepCopy() *MachineKeySecretRef

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MachineKeySecretRef.

func (*MachineKeySecretRef) DeepCopyInto 

func (in *MachineKeySecretRef) DeepCopyInto(out *MachineKeySecretRef)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type MachineKeySpec added in v0.18.0 

type MachineKeySpec struct {
	// RotateAfter enables dual-key rotation: once the current key is older
	// than this duration, a new key is minted and swapped into the Secret;
	// the old key is revoked after RotationGrace (two keys coexist during
	// the overlap). Example: "2160h" (90 days). Empty = never rotate
	// (pre-v0.18 behavior).
	// +optional
	RotateAfter *metav1.Duration `json:"rotateAfter,omitempty"`

	// RotationGrace is how long the old key stays valid after rotation.
	// Defaults to 5m.
	// +optional
	RotationGrace *metav1.Duration `json:"rotationGrace,omitempty"`
}

MachineKeySpec configures machine key rotation.

func (*MachineKeySpec) DeepCopy added in v0.18.0 

func (in *MachineKeySpec) DeepCopy() *MachineKeySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MachineKeySpec.

func (*MachineKeySpec) DeepCopyInto added in v0.18.0 

func (in *MachineKeySpec) DeepCopyInto(out *MachineKeySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type MachineUser 

type MachineUser struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   MachineUserSpec   `json:"spec,omitempty"`
	Status MachineUserStatus `json:"status,omitempty"`
}

MachineUser is the Schema for the machineusers API.

func (*MachineUser) DeepCopy 

func (in *MachineUser) DeepCopy() *MachineUser

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MachineUser.

func (*MachineUser) DeepCopyInto 

func (in *MachineUser) DeepCopyInto(out *MachineUser)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*MachineUser) DeepCopyObject 

func (in *MachineUser) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*MachineUser) DisplayName 

func (m *MachineUser) DisplayName() string

DisplayName returns the machine user display name. Falls back to the Kubernetes resource name if spec.name is empty.

type MachineUserList 

type MachineUserList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []MachineUser `json:"items"`
}

MachineUserList contains a list of MachineUser.

func (*MachineUserList) DeepCopy 

func (in *MachineUserList) DeepCopy() *MachineUserList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MachineUserList.

func (*MachineUserList) DeepCopyInto 

func (in *MachineUserList) DeepCopyInto(out *MachineUserList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*MachineUserList) DeepCopyObject 

func (in *MachineUserList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type MachineUserSpec 

type MachineUserSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// UserName is the login name for the machine user.
	UserName string `json:"userName"`

	// Name is the display name of the machine user.
	// If empty, the Kubernetes resource name is used.
	// +optional
	Name string `json:"name,omitempty"`

	// Description is an optional description of the machine user.
	// +optional
	Description string `json:"description,omitempty"`

	// AccessTokenType specifies the access token format for this machine user.
	// +kubebuilder:validation:Enum=bearer;jwt
	// +optional
	AccessTokenType string `json:"accessTokenType,omitempty"`

	// Roles are project role grants for this machine user (v0.18, INF-426).
	// The grant target is, in order of precedence: the project named by
	// ProjectRef/ProjectId (v0.19), the namespace's resolved scope project
	// (scope maps), or a previously recorded status.projectId. Grants never
	// widen beyond the resolved scope when scope maps are active.
	// +optional
	Roles []string `json:"roles,omitempty"`

	// ProjectRef references a Project CR whose project the role grant is
	// created on (v0.19 fleet shape: declare the project in-namespace and
	// grant roles on it without scope maps). Only used with Roles.
	// Mutually exclusive with ProjectId.
	// +optional
	ProjectRef *ResourceRef `json:"projectRef,omitempty"`

	// ProjectId references a pre-existing Zitadel project by raw ID as the
	// role grant target. Only used with Roles.
	// Mutually exclusive with ProjectRef.
	// +optional
	ProjectId string `json:"projectId,omitempty"`

	// Key configures machine key lifecycle (v0.18, INF-426).
	// +optional
	Key *MachineKeySpec `json:"key,omitempty"`

	// KeySecretRef references the Secret where the generated key JSON will be stored.
	KeySecretRef MachineKeySecretRef `json:"keySecretRef"`
}

MachineUserSpec defines the desired state of MachineUser.

func (*MachineUserSpec) DeepCopy 

func (in *MachineUserSpec) DeepCopy() *MachineUserSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MachineUserSpec.

func (*MachineUserSpec) DeepCopyInto 

func (in *MachineUserSpec) DeepCopyInto(out *MachineUserSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type MachineUserStatus 

type MachineUserStatus struct {
	// UserId is the Zitadel user ID.
	UserId string `json:"userId,omitempty"`

	// OrganizationId is the resolved organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// ProjectId is the scope project the roles are granted on (v0.18).
	ProjectId string `json:"projectId,omitempty"`

	// GrantId is the Zitadel user grant carrying spec.roles (v0.18).
	GrantId string `json:"grantId,omitempty"`

	// KeyId is the current machine key (v0.18 rotation bookkeeping).
	KeyId string `json:"keyId,omitempty"`

	// KeyCreatedAt is when the current key was minted.
	KeyCreatedAt *metav1.Time `json:"keyCreatedAt,omitempty"`

	// PreviousKeyId is the rotated-out key awaiting revocation.
	PreviousKeyId string `json:"previousKeyId,omitempty"`

	// PreviousKeyRevokeAt is when the rotated-out key gets revoked.
	PreviousKeyRevokeAt *metav1.Time `json:"previousKeyRevokeAt,omitempty"`

	// Ready indicates whether the MachineUser is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

MachineUserStatus defines the observed state of MachineUser.

func (*MachineUserStatus) DeepCopy 

func (in *MachineUserStatus) DeepCopy() *MachineUserStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MachineUserStatus.

func (*MachineUserStatus) DeepCopyInto 

func (in *MachineUserStatus) DeepCopyInto(out *MachineUserStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type MessageText added in v0.13.0 

type MessageText struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   MessageTextSpec   `json:"spec,omitempty"`
	Status MessageTextStatus `json:"status,omitempty"`
}

MessageText is the Schema for the messagetexts API. It manages org-scoped custom message text (ORG_OWNER, Management API). One CR per type+language+org combination.

func (*MessageText) DeepCopy added in v0.13.0 

func (in *MessageText) DeepCopy() *MessageText

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MessageText.

func (*MessageText) DeepCopyInto added in v0.13.0 

func (in *MessageText) DeepCopyInto(out *MessageText)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*MessageText) DeepCopyObject added in v0.13.0 

func (in *MessageText) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type MessageTextFields added in v0.13.0 

type MessageTextFields struct {
	// Type is the message type.
	// +kubebuilder:validation:Enum=init;passwordReset;verifyEmail;verifyPhone;verifySmsOtp;verifyEmailOtp;domainClaimed;passwordlessRegistration;passwordChange;inviteUser
	Type string `json:"type"`

	// Language is the BCP 47 language tag (e.g., "en", "de", "fr").
	Language string `json:"language"`

	// Title is the message title.
	// +optional
	Title string `json:"title,omitempty"`

	// PreHeader is the email pre-header text.
	// +optional
	PreHeader string `json:"preHeader,omitempty"`

	// Subject is the email subject line.
	// +optional
	Subject string `json:"subject,omitempty"`

	// Greeting is the greeting line (supports {{.FirstName}} template).
	// +optional
	Greeting string `json:"greeting,omitempty"`

	// Text is the main body text (supports templates).
	// +optional
	Text string `json:"text,omitempty"`

	// ButtonText is the CTA button text.
	// +optional
	ButtonText string `json:"buttonText,omitempty"`

	// FooterText is the email footer text.
	// +optional
	FooterText string `json:"footerText,omitempty"`
}

MessageTextFields contains the text fields shared by all message text types.

func (*MessageTextFields) DeepCopy added in v0.13.0 

func (in *MessageTextFields) DeepCopy() *MessageTextFields

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MessageTextFields.

func (*MessageTextFields) DeepCopyInto added in v0.13.0 

func (in *MessageTextFields) DeepCopyInto(out *MessageTextFields)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type MessageTextList added in v0.13.0 

type MessageTextList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []MessageText `json:"items"`
}

MessageTextList contains a list of MessageText.

func (*MessageTextList) DeepCopy added in v0.13.0 

func (in *MessageTextList) DeepCopy() *MessageTextList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MessageTextList.

func (*MessageTextList) DeepCopyInto added in v0.13.0 

func (in *MessageTextList) DeepCopyInto(out *MessageTextList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*MessageTextList) DeepCopyObject added in v0.13.0 

func (in *MessageTextList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type MessageTextSpec added in v0.13.0 

type MessageTextSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	MessageTextFields `json:",inline"`
}

MessageTextSpec defines the desired state of MessageText.

func (*MessageTextSpec) DeepCopy added in v0.13.0 

func (in *MessageTextSpec) DeepCopy() *MessageTextSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MessageTextSpec.

func (*MessageTextSpec) DeepCopyInto added in v0.13.0 

func (in *MessageTextSpec) DeepCopyInto(out *MessageTextSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type MessageTextStatus added in v0.13.0 

type MessageTextStatus struct {
	// OrganizationId is the resolved organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// Ready indicates whether the MessageText is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

MessageTextStatus defines the observed state of MessageText.

func (*MessageTextStatus) DeepCopy added in v0.13.0 

func (in *MessageTextStatus) DeepCopy() *MessageTextStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MessageTextStatus.

func (*MessageTextStatus) DeepCopyInto added in v0.13.0 

func (in *MessageTextStatus) DeepCopyInto(out *MessageTextStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NotificationPolicy added in v0.13.0 

type NotificationPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   NotificationPolicySpec   `json:"spec,omitempty"`
	Status NotificationPolicyStatus `json:"status,omitempty"`
}

NotificationPolicy is the Schema for the notificationpolicies API. It manages an org-scoped notification policy (Management API).

func (*NotificationPolicy) DeepCopy added in v0.13.0 

func (in *NotificationPolicy) DeepCopy() *NotificationPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NotificationPolicy.

func (*NotificationPolicy) DeepCopyInto added in v0.13.0 

func (in *NotificationPolicy) DeepCopyInto(out *NotificationPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*NotificationPolicy) DeepCopyObject added in v0.13.0 

func (in *NotificationPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type NotificationPolicyFields added in v0.13.0 

type NotificationPolicyFields struct {
	// PasswordChange determines whether a notification is sent on password change.
	// +optional
	PasswordChange *bool `json:"passwordChange,omitempty"`
}

NotificationPolicyFields contains fields shared between NotificationPolicy (org) and DefaultNotificationPolicy (instance).

func (*NotificationPolicyFields) DeepCopy added in v0.13.0 

func (in *NotificationPolicyFields) DeepCopy() *NotificationPolicyFields

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NotificationPolicyFields.

func (*NotificationPolicyFields) DeepCopyInto added in v0.13.0 

func (in *NotificationPolicyFields) DeepCopyInto(out *NotificationPolicyFields)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NotificationPolicyList added in v0.13.0 

type NotificationPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []NotificationPolicy `json:"items"`
}

NotificationPolicyList contains a list of NotificationPolicy.

func (*NotificationPolicyList) DeepCopy added in v0.13.0 

func (in *NotificationPolicyList) DeepCopy() *NotificationPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NotificationPolicyList.

func (*NotificationPolicyList) DeepCopyInto added in v0.13.0 

func (in *NotificationPolicyList) DeepCopyInto(out *NotificationPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*NotificationPolicyList) DeepCopyObject added in v0.13.0 

func (in *NotificationPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type NotificationPolicySpec added in v0.13.0 

type NotificationPolicySpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	NotificationPolicyFields `json:",inline"`
}

NotificationPolicySpec defines the desired state of NotificationPolicy.

func (*NotificationPolicySpec) DeepCopy added in v0.13.0 

func (in *NotificationPolicySpec) DeepCopy() *NotificationPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NotificationPolicySpec.

func (*NotificationPolicySpec) DeepCopyInto added in v0.13.0 

func (in *NotificationPolicySpec) DeepCopyInto(out *NotificationPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NotificationPolicyStatus added in v0.13.0 

type NotificationPolicyStatus struct {
	// OrganizationId is the resolved organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// Ready indicates whether the NotificationPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

NotificationPolicyStatus defines the observed state of NotificationPolicy.

func (*NotificationPolicyStatus) DeepCopy added in v0.13.0 

func (in *NotificationPolicyStatus) DeepCopy() *NotificationPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NotificationPolicyStatus.

func (*NotificationPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *NotificationPolicyStatus) DeepCopyInto(out *NotificationPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type OIDCApp 

type OIDCApp struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   OIDCAppSpec   `json:"spec,omitempty"`
	Status OIDCAppStatus `json:"status,omitempty"`
}

OIDCApp is the Schema for the oidcapps API.

func (*OIDCApp) DeepCopy 

func (in *OIDCApp) DeepCopy() *OIDCApp

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OIDCApp.

func (*OIDCApp) DeepCopyInto 

func (in *OIDCApp) DeepCopyInto(out *OIDCApp)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*OIDCApp) DeepCopyObject 

func (in *OIDCApp) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*OIDCApp) DisplayName 

func (a *OIDCApp) DisplayName() string

DisplayName returns the app display name for Zitadel. Falls back to the Kubernetes resource name if spec.name is empty.

type OIDCAppList 

type OIDCAppList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []OIDCApp `json:"items"`
}

OIDCAppList contains a list of OIDCApp.

func (*OIDCAppList) DeepCopy 

func (in *OIDCAppList) DeepCopy() *OIDCAppList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OIDCAppList.

func (*OIDCAppList) DeepCopyInto 

func (in *OIDCAppList) DeepCopyInto(out *OIDCAppList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*OIDCAppList) DeepCopyObject 

func (in *OIDCAppList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type OIDCAppSpec 

type OIDCAppSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// ProjectRef references a Project CR managed by this operator.
	// Mutually exclusive with ProjectId.
	// +optional
	ProjectRef *ResourceRef `json:"projectRef,omitempty"`

	// ProjectId references a pre-existing Zitadel project by raw ID.
	// Mutually exclusive with ProjectRef.
	// +optional
	ProjectId string `json:"projectId,omitempty"`

	// Name is the display name of the application in Zitadel.
	// If empty, the Kubernetes resource name is used.
	// +optional
	Name string `json:"name,omitempty"`

	// Type is the OIDC application type.
	// +kubebuilder:validation:Enum=confidential;public
	Type string `json:"type"`

	// AuthMethod is the authentication method.
	// +kubebuilder:validation:Enum=basic;none
	AuthMethod string `json:"authMethod"`

	// RedirectUris is the exact, ordered list of allowed OAuth2/OIDC redirect
	// URIs. The operator is the single writer: server-side drift (added or
	// removed entries) is reverted to this list on every reconcile. Zitadel
	// requires https:// URIs unless the app has dev mode enabled.
	RedirectUris []string `json:"redirectUris"`

	// PostLogoutRedirectUris is the list of allowed URIs to return users to
	// after logout (RP-initiated logout). Drift-corrected like RedirectUris.
	// +optional
	PostLogoutRedirectUris []string `json:"postLogoutRedirectUris,omitempty"`

	// AccessTokenType selects the access token format: "bearer" (opaque,
	// default) or "jwt" (self-contained, locally verifiable).
	// +kubebuilder:validation:Enum=bearer;jwt
	// +optional
	AccessTokenType string `json:"accessTokenType,omitempty"`

	// AccessTokenRoleAssertion includes the user's project role claims in
	// the access token.
	// +optional
	AccessTokenRoleAssertion bool `json:"accessTokenRoleAssertion,omitempty"`

	// IdTokenRoleAssertion includes the user's project role claims in the ID token.
	// +optional
	IdTokenRoleAssertion bool `json:"idTokenRoleAssertion,omitempty"`

	// SecretRef references the Secret where the client credentials will be stored.
	SecretRef SecretRefSpec `json:"secretRef"`
}

OIDCAppSpec defines the desired state of OIDCApp.

func (*OIDCAppSpec) DeepCopy 

func (in *OIDCAppSpec) DeepCopy() *OIDCAppSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OIDCAppSpec.

func (*OIDCAppSpec) DeepCopyInto 

func (in *OIDCAppSpec) DeepCopyInto(out *OIDCAppSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type OIDCAppStatus 

type OIDCAppStatus struct {
	// ApplicationId is the Zitadel application ID.
	ApplicationId string `json:"applicationId,omitempty"`

	// ClientId is the OIDC client ID assigned by Zitadel.
	ClientId string `json:"clientId,omitempty"`

	// ProjectId is the resolved project ID this app belongs to.
	ProjectId string `json:"projectId,omitempty"`

	// OrganizationId is the resolved organization ID (inherited from project).
	OrganizationId string `json:"organizationId,omitempty"`

	// Ready indicates whether the OIDCApp is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

OIDCAppStatus defines the observed state of OIDCApp.

func (*OIDCAppStatus) DeepCopy 

func (in *OIDCAppStatus) DeepCopy() *OIDCAppStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OIDCAppStatus.

func (*OIDCAppStatus) DeepCopyInto 

func (in *OIDCAppStatus) DeepCopyInto(out *OIDCAppStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type OIDCSettingsFields added in v0.13.0 

type OIDCSettingsFields struct {
	// AccessTokenLifetime is the duration for access token validity (e.g., "12h").
	// +optional
	AccessTokenLifetime string `json:"accessTokenLifetime,omitempty"`
	// IdTokenLifetime is the duration for ID token validity (e.g., "12h").
	// +optional
	IdTokenLifetime string `json:"idTokenLifetime,omitempty"`
	// RefreshTokenIdleExpiration is the idle expiration for refresh tokens (e.g., "720h").
	// +optional
	RefreshTokenIdleExpiration string `json:"refreshTokenIdleExpiration,omitempty"`
	// RefreshTokenExpiration is the absolute expiration for refresh tokens (e.g., "2160h").
	// +optional
	RefreshTokenExpiration string `json:"refreshTokenExpiration,omitempty"`
}

OIDCSettingsFields contains fields for DefaultOIDCSettings.

func (*OIDCSettingsFields) DeepCopy added in v0.13.0 

func (in *OIDCSettingsFields) DeepCopy() *OIDCSettingsFields

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OIDCSettingsFields.

func (*OIDCSettingsFields) DeepCopyInto added in v0.13.0 

func (in *OIDCSettingsFields) DeepCopyInto(out *OIDCSettingsFields)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type OrgMember added in v0.13.0 

type OrgMember struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   OrgMemberSpec   `json:"spec,omitempty"`
	Status OrgMemberStatus `json:"status,omitempty"`
}

OrgMember is the Schema for the orgmembers API. It manages an org-scoped membership (Management API).

func (*OrgMember) DeepCopy added in v0.13.0 

func (in *OrgMember) DeepCopy() *OrgMember

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OrgMember.

func (*OrgMember) DeepCopyInto added in v0.13.0 

func (in *OrgMember) DeepCopyInto(out *OrgMember)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*OrgMember) DeepCopyObject added in v0.13.0 

func (in *OrgMember) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type OrgMemberList added in v0.13.0 

type OrgMemberList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []OrgMember `json:"items"`
}

OrgMemberList contains a list of OrgMember.

func (*OrgMemberList) DeepCopy added in v0.13.0 

func (in *OrgMemberList) DeepCopy() *OrgMemberList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OrgMemberList.

func (*OrgMemberList) DeepCopyInto added in v0.13.0 

func (in *OrgMemberList) DeepCopyInto(out *OrgMemberList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*OrgMemberList) DeepCopyObject added in v0.13.0 

func (in *OrgMemberList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type OrgMemberSpec added in v0.13.0 

type OrgMemberSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// UserRef references a MachineUser or HumanUser CR.
	// +optional
	UserRef *ResourceRef `json:"userRef,omitempty"`

	// UserId is a raw Zitadel user ID.
	// +optional
	UserId string `json:"userId,omitempty"`

	// Roles is the list of roles to assign (e.g., ORG_OWNER, ORG_ADMIN).
	Roles []string `json:"roles"`
}

OrgMemberSpec defines the desired state of OrgMember.

func (*OrgMemberSpec) DeepCopy added in v0.13.0 

func (in *OrgMemberSpec) DeepCopy() *OrgMemberSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OrgMemberSpec.

func (*OrgMemberSpec) DeepCopyInto added in v0.13.0 

func (in *OrgMemberSpec) DeepCopyInto(out *OrgMemberSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type OrgMemberStatus added in v0.13.0 

type OrgMemberStatus struct {
	// OrganizationId is the resolved organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// Ready indicates whether the OrgMember is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

OrgMemberStatus defines the observed state of OrgMember.

func (*OrgMemberStatus) DeepCopy added in v0.13.0 

func (in *OrgMemberStatus) DeepCopy() *OrgMemberStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OrgMemberStatus.

func (*OrgMemberStatus) DeepCopyInto added in v0.13.0 

func (in *OrgMemberStatus) DeepCopyInto(out *OrgMemberStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type OrgMetadata added in v0.10.0 

type OrgMetadata struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   OrgMetadataSpec   `json:"spec,omitempty"`
	Status OrgMetadataStatus `json:"status,omitempty"`
}

OrgMetadata is the Schema for the orgmetadata API.

func (*OrgMetadata) DeepCopy added in v0.10.0 

func (in *OrgMetadata) DeepCopy() *OrgMetadata

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OrgMetadata.

func (*OrgMetadata) DeepCopyInto added in v0.10.0 

func (in *OrgMetadata) DeepCopyInto(out *OrgMetadata)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*OrgMetadata) DeepCopyObject added in v0.10.0 

func (in *OrgMetadata) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type OrgMetadataList added in v0.10.0 

type OrgMetadataList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []OrgMetadata `json:"items"`
}

OrgMetadataList contains a list of OrgMetadata.

func (*OrgMetadataList) DeepCopy added in v0.10.0 

func (in *OrgMetadataList) DeepCopy() *OrgMetadataList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OrgMetadataList.

func (*OrgMetadataList) DeepCopyInto added in v0.10.0 

func (in *OrgMetadataList) DeepCopyInto(out *OrgMetadataList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*OrgMetadataList) DeepCopyObject added in v0.10.0 

func (in *OrgMetadataList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type OrgMetadataSpec added in v0.10.0 

type OrgMetadataSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// Key is the metadata key.
	Key string `json:"key"`

	// Value is the metadata value (will be stored as bytes in Zitadel).
	Value string `json:"value"`
}

OrgMetadataSpec defines the desired state of OrgMetadata.

func (*OrgMetadataSpec) DeepCopy added in v0.10.0 

func (in *OrgMetadataSpec) DeepCopy() *OrgMetadataSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OrgMetadataSpec.

func (*OrgMetadataSpec) DeepCopyInto added in v0.10.0 

func (in *OrgMetadataSpec) DeepCopyInto(out *OrgMetadataSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type OrgMetadataStatus added in v0.10.0 

type OrgMetadataStatus struct {
	// Ready indicates whether the OrgMetadata is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

OrgMetadataStatus defines the observed state of OrgMetadata.

func (*OrgMetadataStatus) DeepCopy added in v0.10.0 

func (in *OrgMetadataStatus) DeepCopy() *OrgMetadataStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OrgMetadataStatus.

func (*OrgMetadataStatus) DeepCopyInto added in v0.10.0 

func (in *OrgMetadataStatus) DeepCopyInto(out *OrgMetadataStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Organization 

type Organization struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   OrganizationSpec   `json:"spec,omitempty"`
	Status OrganizationStatus `json:"status,omitempty"`
}

Organization is the Schema for the organizations API.

func (*Organization) DeepCopy 

func (in *Organization) DeepCopy() *Organization

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Organization.

func (*Organization) DeepCopyInto 

func (in *Organization) DeepCopyInto(out *Organization)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Organization) DeepCopyObject 

func (in *Organization) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*Organization) DisplayName 

func (o *Organization) DisplayName() string

DisplayName returns the organization display name for Zitadel. Falls back to the Kubernetes resource name if spec.name is empty.

type OrganizationList 

type OrganizationList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Organization `json:"items"`
}

OrganizationList contains a list of Organization.

func (*OrganizationList) DeepCopy 

func (in *OrganizationList) DeepCopy() *OrganizationList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OrganizationList.

func (*OrganizationList) DeepCopyInto 

func (in *OrganizationList) DeepCopyInto(out *OrganizationList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*OrganizationList) DeepCopyObject 

func (in *OrganizationList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type OrganizationSpec 

type OrganizationSpec struct {
	// Name is the display name of the organization in Zitadel.
	// If empty, the Kubernetes resource name is used.
	// +optional
	Name string `json:"name,omitempty"`
}

OrganizationSpec defines the desired state of Organization.

func (*OrganizationSpec) DeepCopy 

func (in *OrganizationSpec) DeepCopy() *OrganizationSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OrganizationSpec.

func (*OrganizationSpec) DeepCopyInto 

func (in *OrganizationSpec) DeepCopyInto(out *OrganizationSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type OrganizationStatus 

type OrganizationStatus struct {
	// OrganizationId is the Zitadel organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// Ready indicates whether the Organization is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

OrganizationStatus defines the observed state of Organization.

func (*OrganizationStatus) DeepCopy 

func (in *OrganizationStatus) DeepCopy() *OrganizationStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OrganizationStatus.

func (*OrganizationStatus) DeepCopyInto 

func (in *OrganizationStatus) DeepCopyInto(out *OrganizationStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PasswordAgePolicy added in v0.13.0 

type PasswordAgePolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   PasswordAgePolicySpec   `json:"spec,omitempty"`
	Status PasswordAgePolicyStatus `json:"status,omitempty"`
}

PasswordAgePolicy is the Schema for the passwordagepolicies API. It manages an org-scoped password age policy (Management API).

func (*PasswordAgePolicy) DeepCopy added in v0.13.0 

func (in *PasswordAgePolicy) DeepCopy() *PasswordAgePolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PasswordAgePolicy.

func (*PasswordAgePolicy) DeepCopyInto added in v0.13.0 

func (in *PasswordAgePolicy) DeepCopyInto(out *PasswordAgePolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PasswordAgePolicy) DeepCopyObject added in v0.13.0 

func (in *PasswordAgePolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type PasswordAgePolicyFields added in v0.13.0 

type PasswordAgePolicyFields struct {
	// MaxAgeDays is the maximum number of days a password can be used before it must be changed.
	// 0 means no expiration.
	MaxAgeDays uint32 `json:"maxAgeDays"`
	// ExpireWarnDays is the number of days before expiration to warn the user.
	// 0 means no warning.
	// +optional
	ExpireWarnDays uint32 `json:"expireWarnDays,omitempty"`
}

PasswordAgePolicyFields contains fields shared between PasswordAgePolicy (org) and DefaultPasswordAgePolicy (instance).

func (*PasswordAgePolicyFields) DeepCopy added in v0.13.0 

func (in *PasswordAgePolicyFields) DeepCopy() *PasswordAgePolicyFields

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PasswordAgePolicyFields.

func (*PasswordAgePolicyFields) DeepCopyInto added in v0.13.0 

func (in *PasswordAgePolicyFields) DeepCopyInto(out *PasswordAgePolicyFields)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PasswordAgePolicyList added in v0.13.0 

type PasswordAgePolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PasswordAgePolicy `json:"items"`
}

PasswordAgePolicyList contains a list of PasswordAgePolicy.

func (*PasswordAgePolicyList) DeepCopy added in v0.13.0 

func (in *PasswordAgePolicyList) DeepCopy() *PasswordAgePolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PasswordAgePolicyList.

func (*PasswordAgePolicyList) DeepCopyInto added in v0.13.0 

func (in *PasswordAgePolicyList) DeepCopyInto(out *PasswordAgePolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PasswordAgePolicyList) DeepCopyObject added in v0.13.0 

func (in *PasswordAgePolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type PasswordAgePolicySpec added in v0.13.0 

type PasswordAgePolicySpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	PasswordAgePolicyFields `json:",inline"`
}

PasswordAgePolicySpec defines the desired state of PasswordAgePolicy.

func (*PasswordAgePolicySpec) DeepCopy added in v0.13.0 

func (in *PasswordAgePolicySpec) DeepCopy() *PasswordAgePolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PasswordAgePolicySpec.

func (*PasswordAgePolicySpec) DeepCopyInto added in v0.13.0 

func (in *PasswordAgePolicySpec) DeepCopyInto(out *PasswordAgePolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PasswordAgePolicyStatus added in v0.13.0 

type PasswordAgePolicyStatus struct {
	// OrganizationId is the resolved organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// Ready indicates whether the PasswordAgePolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

PasswordAgePolicyStatus defines the observed state of PasswordAgePolicy.

func (*PasswordAgePolicyStatus) DeepCopy added in v0.13.0 

func (in *PasswordAgePolicyStatus) DeepCopy() *PasswordAgePolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PasswordAgePolicyStatus.

func (*PasswordAgePolicyStatus) DeepCopyInto added in v0.13.0 

func (in *PasswordAgePolicyStatus) DeepCopyInto(out *PasswordAgePolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PasswordComplexityPolicy added in v0.13.0 

type PasswordComplexityPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   PasswordComplexityPolicySpec   `json:"spec,omitempty"`
	Status PasswordComplexityPolicyStatus `json:"status,omitempty"`
}

PasswordComplexityPolicy is the Schema for the passwordcomplexitypolicies API. It manages an org-scoped password complexity policy (ORG_OWNER, Management API).

func (*PasswordComplexityPolicy) DeepCopy added in v0.13.0 

func (in *PasswordComplexityPolicy) DeepCopy() *PasswordComplexityPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PasswordComplexityPolicy.

func (*PasswordComplexityPolicy) DeepCopyInto added in v0.13.0 

func (in *PasswordComplexityPolicy) DeepCopyInto(out *PasswordComplexityPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PasswordComplexityPolicy) DeepCopyObject added in v0.13.0 

func (in *PasswordComplexityPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type PasswordComplexityPolicyFields added in v0.13.0 

type PasswordComplexityPolicyFields struct {
	// MinLength is the minimum password length in characters.
	// +kubebuilder:validation:Minimum=1
	MinLength uint64 `json:"minLength"`
	// HasLowercase requires at least one lowercase letter.
	// +optional
	HasLowercase bool `json:"hasLowercase,omitempty"`
	// HasUppercase requires at least one uppercase letter.
	// +optional
	HasUppercase bool `json:"hasUppercase,omitempty"`
	// HasNumber requires at least one digit.
	// +optional
	HasNumber bool `json:"hasNumber,omitempty"`
	// HasSymbol requires at least one symbol character.
	// +optional
	HasSymbol bool `json:"hasSymbol,omitempty"`
}

PasswordComplexityPolicyFields contains fields shared between PasswordComplexityPolicy (org) and DefaultPasswordComplexityPolicy (instance).

func (*PasswordComplexityPolicyFields) DeepCopy added in v0.13.0 

func (in *PasswordComplexityPolicyFields) DeepCopy() *PasswordComplexityPolicyFields

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PasswordComplexityPolicyFields.

func (*PasswordComplexityPolicyFields) DeepCopyInto added in v0.13.0 

func (in *PasswordComplexityPolicyFields) DeepCopyInto(out *PasswordComplexityPolicyFields)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PasswordComplexityPolicyList added in v0.13.0 

type PasswordComplexityPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PasswordComplexityPolicy `json:"items"`
}

PasswordComplexityPolicyList contains a list of PasswordComplexityPolicy.

func (*PasswordComplexityPolicyList) DeepCopy added in v0.13.0 

func (in *PasswordComplexityPolicyList) DeepCopy() *PasswordComplexityPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PasswordComplexityPolicyList.

func (*PasswordComplexityPolicyList) DeepCopyInto added in v0.13.0 

func (in *PasswordComplexityPolicyList) DeepCopyInto(out *PasswordComplexityPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PasswordComplexityPolicyList) DeepCopyObject added in v0.13.0 

func (in *PasswordComplexityPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type PasswordComplexityPolicySpec added in v0.13.0 

type PasswordComplexityPolicySpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	PasswordComplexityPolicyFields `json:",inline"`
}

PasswordComplexityPolicySpec defines the desired state of PasswordComplexityPolicy (org-scoped).

func (*PasswordComplexityPolicySpec) DeepCopy added in v0.13.0 

func (in *PasswordComplexityPolicySpec) DeepCopy() *PasswordComplexityPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PasswordComplexityPolicySpec.

func (*PasswordComplexityPolicySpec) DeepCopyInto added in v0.13.0 

func (in *PasswordComplexityPolicySpec) DeepCopyInto(out *PasswordComplexityPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PasswordComplexityPolicyStatus added in v0.13.0 

type PasswordComplexityPolicyStatus struct {
	// Ready indicates whether the PasswordComplexityPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// OrganizationId is the resolved organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

PasswordComplexityPolicyStatus defines the observed state of PasswordComplexityPolicy.

func (*PasswordComplexityPolicyStatus) DeepCopy added in v0.13.0 

func (in *PasswordComplexityPolicyStatus) DeepCopy() *PasswordComplexityPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PasswordComplexityPolicyStatus.

func (*PasswordComplexityPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *PasswordComplexityPolicyStatus) DeepCopyInto(out *PasswordComplexityPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PersonalAccessToken added in v0.11.0 

type PersonalAccessToken struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   PersonalAccessTokenSpec   `json:"spec,omitempty"`
	Status PersonalAccessTokenStatus `json:"status,omitempty"`
}

PersonalAccessToken is the Schema for the personalaccesstokens API.

func (*PersonalAccessToken) DeepCopy added in v0.11.0 

func (in *PersonalAccessToken) DeepCopy() *PersonalAccessToken

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PersonalAccessToken.

func (*PersonalAccessToken) DeepCopyInto added in v0.11.0 

func (in *PersonalAccessToken) DeepCopyInto(out *PersonalAccessToken)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PersonalAccessToken) DeepCopyObject added in v0.11.0 

func (in *PersonalAccessToken) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type PersonalAccessTokenList added in v0.11.0 

type PersonalAccessTokenList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PersonalAccessToken `json:"items"`
}

PersonalAccessTokenList contains a list of PersonalAccessToken.

func (*PersonalAccessTokenList) DeepCopy added in v0.11.0 

func (in *PersonalAccessTokenList) DeepCopy() *PersonalAccessTokenList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PersonalAccessTokenList.

func (*PersonalAccessTokenList) DeepCopyInto added in v0.11.0 

func (in *PersonalAccessTokenList) DeepCopyInto(out *PersonalAccessTokenList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PersonalAccessTokenList) DeepCopyObject added in v0.11.0 

func (in *PersonalAccessTokenList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type PersonalAccessTokenSpec added in v0.11.0 

type PersonalAccessTokenSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// UserRef references a MachineUser CR managed by this operator.
	// Mutually exclusive with UserId.
	// +optional
	UserRef *ResourceRef `json:"userRef,omitempty"`

	// UserId references a pre-existing Zitadel user by raw ID.
	// Mutually exclusive with UserRef.
	// +optional
	UserId string `json:"userId,omitempty"`

	// ExpirationDate is the optional expiration timestamp for the token.
	// If not set, a 10-year expiration is used.
	// +optional
	ExpirationDate *metav1.Time `json:"expirationDate,omitempty"`

	// TokenSecretRef references the Secret where the PAT will be stored.
	TokenSecretRef TokenSecretRefSpec `json:"tokenSecretRef"`
}

PersonalAccessTokenSpec defines the desired state of PersonalAccessToken.

func (*PersonalAccessTokenSpec) DeepCopy added in v0.11.0 

func (in *PersonalAccessTokenSpec) DeepCopy() *PersonalAccessTokenSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PersonalAccessTokenSpec.

func (*PersonalAccessTokenSpec) DeepCopyInto added in v0.11.0 

func (in *PersonalAccessTokenSpec) DeepCopyInto(out *PersonalAccessTokenSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PersonalAccessTokenStatus added in v0.11.0 

type PersonalAccessTokenStatus struct {
	// TokenId is the Zitadel personal access token ID.
	TokenId string `json:"tokenId,omitempty"`

	// UserId is the resolved user ID.
	UserId string `json:"userId,omitempty"`

	// OrganizationId is the resolved organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// Ready indicates whether the PersonalAccessToken is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

PersonalAccessTokenStatus defines the observed state of PersonalAccessToken.

func (*PersonalAccessTokenStatus) DeepCopy added in v0.11.0 

func (in *PersonalAccessTokenStatus) DeepCopy() *PersonalAccessTokenStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PersonalAccessTokenStatus.

func (*PersonalAccessTokenStatus) DeepCopyInto added in v0.11.0 

func (in *PersonalAccessTokenStatus) DeepCopyInto(out *PersonalAccessTokenStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PrivacyPolicy added in v0.13.0 

type PrivacyPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   PrivacyPolicySpec   `json:"spec,omitempty"`
	Status PrivacyPolicyStatus `json:"status,omitempty"`
}

PrivacyPolicy is the Schema for the privacypolicies API. It manages an org-scoped privacy policy (Management API).

func (*PrivacyPolicy) DeepCopy added in v0.13.0 

func (in *PrivacyPolicy) DeepCopy() *PrivacyPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PrivacyPolicy.

func (*PrivacyPolicy) DeepCopyInto added in v0.13.0 

func (in *PrivacyPolicy) DeepCopyInto(out *PrivacyPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PrivacyPolicy) DeepCopyObject added in v0.13.0 

func (in *PrivacyPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type PrivacyPolicyFields added in v0.13.0 

type PrivacyPolicyFields struct {
	// TosLink is the URL to the Terms of Service.
	// +optional
	TosLink string `json:"tosLink,omitempty"`
	// PrivacyLink is the URL to the Privacy Policy.
	// +optional
	PrivacyLink string `json:"privacyLink,omitempty"`
	// HelpLink is the URL to the Help/Support page.
	// +optional
	HelpLink string `json:"helpLink,omitempty"`
	// SupportEmail is the support email address.
	// +optional
	SupportEmail string `json:"supportEmail,omitempty"`
	// DocsLink is the URL to the documentation.
	// +optional
	DocsLink string `json:"docsLink,omitempty"`
	// CustomLink is a custom link URL.
	// +optional
	CustomLink string `json:"customLink,omitempty"`
	// CustomLinkText is the display text for the custom link.
	// +optional
	CustomLinkText string `json:"customLinkText,omitempty"`
}

PrivacyPolicyFields contains fields shared between PrivacyPolicy (org) and DefaultPrivacyPolicy (instance).

func (*PrivacyPolicyFields) DeepCopy added in v0.13.0 

func (in *PrivacyPolicyFields) DeepCopy() *PrivacyPolicyFields

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PrivacyPolicyFields.

func (*PrivacyPolicyFields) DeepCopyInto added in v0.13.0 

func (in *PrivacyPolicyFields) DeepCopyInto(out *PrivacyPolicyFields)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PrivacyPolicyList added in v0.13.0 

type PrivacyPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PrivacyPolicy `json:"items"`
}

PrivacyPolicyList contains a list of PrivacyPolicy.

func (*PrivacyPolicyList) DeepCopy added in v0.13.0 

func (in *PrivacyPolicyList) DeepCopy() *PrivacyPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PrivacyPolicyList.

func (*PrivacyPolicyList) DeepCopyInto added in v0.13.0 

func (in *PrivacyPolicyList) DeepCopyInto(out *PrivacyPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PrivacyPolicyList) DeepCopyObject added in v0.13.0 

func (in *PrivacyPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type PrivacyPolicySpec added in v0.13.0 

type PrivacyPolicySpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	PrivacyPolicyFields `json:",inline"`
}

PrivacyPolicySpec defines the desired state of PrivacyPolicy.

func (*PrivacyPolicySpec) DeepCopy added in v0.13.0 

func (in *PrivacyPolicySpec) DeepCopy() *PrivacyPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PrivacyPolicySpec.

func (*PrivacyPolicySpec) DeepCopyInto added in v0.13.0 

func (in *PrivacyPolicySpec) DeepCopyInto(out *PrivacyPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PrivacyPolicyStatus added in v0.13.0 

type PrivacyPolicyStatus struct {
	// OrganizationId is the resolved organization ID.
	OrganizationId string `json:"organizationId,omitempty"`

	// Ready indicates whether the PrivacyPolicy is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

PrivacyPolicyStatus defines the observed state of PrivacyPolicy.

func (*PrivacyPolicyStatus) DeepCopy added in v0.13.0 

func (in *PrivacyPolicyStatus) DeepCopy() *PrivacyPolicyStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PrivacyPolicyStatus.

func (*PrivacyPolicyStatus) DeepCopyInto added in v0.13.0 

func (in *PrivacyPolicyStatus) DeepCopyInto(out *PrivacyPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Project 

type Project struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ProjectSpec   `json:"spec,omitempty"`
	Status ProjectStatus `json:"status,omitempty"`
}

Project is the Schema for the projects API.

func (*Project) DeepCopy 

func (in *Project) DeepCopy() *Project

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Project.

func (*Project) DeepCopyInto 

func (in *Project) DeepCopyInto(out *Project)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Project) DeepCopyObject 

func (in *Project) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*Project) DisplayName 

func (p *Project) DisplayName() string

DisplayName returns the project display name for Zitadel. Falls back to the Kubernetes resource name if spec.name is empty.

type ProjectGrant added in v0.10.0 

type ProjectGrant struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ProjectGrantSpec   `json:"spec,omitempty"`
	Status ProjectGrantStatus `json:"status,omitempty"`
}

ProjectGrant is the Schema for the projectgrants API.

func (*ProjectGrant) DeepCopy added in v0.10.0 

func (in *ProjectGrant) DeepCopy() *ProjectGrant

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectGrant.

func (*ProjectGrant) DeepCopyInto added in v0.10.0 

func (in *ProjectGrant) DeepCopyInto(out *ProjectGrant)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProjectGrant) DeepCopyObject added in v0.10.0 

func (in *ProjectGrant) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ProjectGrantList added in v0.10.0 

type ProjectGrantList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ProjectGrant `json:"items"`
}

ProjectGrantList contains a list of ProjectGrant.

func (*ProjectGrantList) DeepCopy added in v0.10.0 

func (in *ProjectGrantList) DeepCopy() *ProjectGrantList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectGrantList.

func (*ProjectGrantList) DeepCopyInto added in v0.10.0 

func (in *ProjectGrantList) DeepCopyInto(out *ProjectGrantList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProjectGrantList) DeepCopyObject added in v0.10.0 

func (in *ProjectGrantList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ProjectGrantMember added in v0.11.0 

type ProjectGrantMember struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ProjectGrantMemberSpec   `json:"spec,omitempty"`
	Status ProjectGrantMemberStatus `json:"status,omitempty"`
}

ProjectGrantMember is the Schema for the projectgrantmembers API.

func (*ProjectGrantMember) DeepCopy added in v0.11.0 

func (in *ProjectGrantMember) DeepCopy() *ProjectGrantMember

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectGrantMember.

func (*ProjectGrantMember) DeepCopyInto added in v0.11.0 

func (in *ProjectGrantMember) DeepCopyInto(out *ProjectGrantMember)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProjectGrantMember) DeepCopyObject added in v0.11.0 

func (in *ProjectGrantMember) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ProjectGrantMemberList added in v0.11.0 

type ProjectGrantMemberList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ProjectGrantMember `json:"items"`
}

ProjectGrantMemberList contains a list of ProjectGrantMember.

func (*ProjectGrantMemberList) DeepCopy added in v0.11.0 

func (in *ProjectGrantMemberList) DeepCopy() *ProjectGrantMemberList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectGrantMemberList.

func (*ProjectGrantMemberList) DeepCopyInto added in v0.11.0 

func (in *ProjectGrantMemberList) DeepCopyInto(out *ProjectGrantMemberList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProjectGrantMemberList) DeepCopyObject added in v0.11.0 

func (in *ProjectGrantMemberList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ProjectGrantMemberSpec added in v0.11.0 

type ProjectGrantMemberSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// ProjectRef references a Project CR managed by this operator.
	// Mutually exclusive with ProjectId.
	// +optional
	ProjectRef *ResourceRef `json:"projectRef,omitempty"`

	// ProjectId references a pre-existing Zitadel project by raw ID.
	// Mutually exclusive with ProjectRef.
	// +optional
	ProjectId string `json:"projectId,omitempty"`

	// GrantId is the Zitadel project grant ID (from ProjectGrant status).
	GrantId string `json:"grantId"`

	// UserRef references a MachineUser CR managed by this operator.
	// Mutually exclusive with UserId.
	// +optional
	UserRef *ResourceRef `json:"userRef,omitempty"`

	// UserId references a pre-existing Zitadel user by raw ID.
	// Mutually exclusive with UserRef.
	// +optional
	UserId string `json:"userId,omitempty"`

	// Roles is the list of roles to assign to the grant member.
	Roles []string `json:"roles"`
}

ProjectGrantMemberSpec defines the desired state of ProjectGrantMember.

func (*ProjectGrantMemberSpec) DeepCopy added in v0.11.0 

func (in *ProjectGrantMemberSpec) DeepCopy() *ProjectGrantMemberSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectGrantMemberSpec.

func (*ProjectGrantMemberSpec) DeepCopyInto added in v0.11.0 

func (in *ProjectGrantMemberSpec) DeepCopyInto(out *ProjectGrantMemberSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProjectGrantMemberStatus added in v0.11.0 

type ProjectGrantMemberStatus struct {
	// Ready indicates whether the ProjectGrantMember is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ProjectGrantMemberStatus defines the observed state of ProjectGrantMember.

func (*ProjectGrantMemberStatus) DeepCopy added in v0.11.0 

func (in *ProjectGrantMemberStatus) DeepCopy() *ProjectGrantMemberStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectGrantMemberStatus.

func (*ProjectGrantMemberStatus) DeepCopyInto added in v0.11.0 

func (in *ProjectGrantMemberStatus) DeepCopyInto(out *ProjectGrantMemberStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProjectGrantSpec added in v0.10.0 

type ProjectGrantSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// ProjectRef references a Project CR managed by this operator.
	// Mutually exclusive with ProjectId.
	// +optional
	ProjectRef *ResourceRef `json:"projectRef,omitempty"`

	// ProjectId references a pre-existing Zitadel project by raw ID.
	// Mutually exclusive with ProjectRef.
	// +optional
	ProjectId string `json:"projectId,omitempty"`

	// GrantedOrgRef references an Organization CR that receives the grant.
	// Mutually exclusive with GrantedOrgId.
	// +optional
	GrantedOrgRef *ResourceRef `json:"grantedOrgRef,omitempty"`

	// GrantedOrgId is the raw Zitadel org ID that receives the grant.
	// Mutually exclusive with GrantedOrgRef.
	// +optional
	GrantedOrgId string `json:"grantedOrgId,omitempty"`

	// RoleKeys is the list of role keys to grant to the target org.
	RoleKeys []string `json:"roleKeys"`
}

ProjectGrantSpec defines the desired state of ProjectGrant.

func (*ProjectGrantSpec) DeepCopy added in v0.10.0 

func (in *ProjectGrantSpec) DeepCopy() *ProjectGrantSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectGrantSpec.

func (*ProjectGrantSpec) DeepCopyInto added in v0.10.0 

func (in *ProjectGrantSpec) DeepCopyInto(out *ProjectGrantSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProjectGrantStatus added in v0.10.0 

type ProjectGrantStatus struct {
	// GrantId is the Zitadel project grant ID.
	GrantId string `json:"grantId,omitempty"`

	// Ready indicates whether the ProjectGrant is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ProjectGrantStatus defines the observed state of ProjectGrant.

func (*ProjectGrantStatus) DeepCopy added in v0.10.0 

func (in *ProjectGrantStatus) DeepCopy() *ProjectGrantStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectGrantStatus.

func (*ProjectGrantStatus) DeepCopyInto added in v0.10.0 

func (in *ProjectGrantStatus) DeepCopyInto(out *ProjectGrantStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProjectList 

type ProjectList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Project `json:"items"`
}

ProjectList contains a list of Project.

func (*ProjectList) DeepCopy 

func (in *ProjectList) DeepCopy() *ProjectList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectList.

func (*ProjectList) DeepCopyInto 

func (in *ProjectList) DeepCopyInto(out *ProjectList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProjectList) DeepCopyObject 

func (in *ProjectList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ProjectMember added in v0.10.0 

type ProjectMember struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ProjectMemberSpec   `json:"spec,omitempty"`
	Status ProjectMemberStatus `json:"status,omitempty"`
}

ProjectMember is the Schema for the projectmembers API.

func (*ProjectMember) DeepCopy added in v0.10.0 

func (in *ProjectMember) DeepCopy() *ProjectMember

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectMember.

func (*ProjectMember) DeepCopyInto added in v0.10.0 

func (in *ProjectMember) DeepCopyInto(out *ProjectMember)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProjectMember) DeepCopyObject added in v0.10.0 

func (in *ProjectMember) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ProjectMemberList added in v0.10.0 

type ProjectMemberList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ProjectMember `json:"items"`
}

ProjectMemberList contains a list of ProjectMember.

func (*ProjectMemberList) DeepCopy added in v0.10.0 

func (in *ProjectMemberList) DeepCopy() *ProjectMemberList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectMemberList.

func (*ProjectMemberList) DeepCopyInto added in v0.10.0 

func (in *ProjectMemberList) DeepCopyInto(out *ProjectMemberList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProjectMemberList) DeepCopyObject added in v0.10.0 

func (in *ProjectMemberList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ProjectMemberSpec added in v0.10.0 

type ProjectMemberSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// ProjectRef references a Project CR managed by this operator.
	// Mutually exclusive with ProjectId.
	// +optional
	ProjectRef *ResourceRef `json:"projectRef,omitempty"`

	// ProjectId references a pre-existing Zitadel project by raw ID.
	// Mutually exclusive with ProjectRef.
	// +optional
	ProjectId string `json:"projectId,omitempty"`

	// UserRef references a MachineUser CR managed by this operator.
	// Mutually exclusive with UserId.
	// +optional
	UserRef *ResourceRef `json:"userRef,omitempty"`

	// UserId is the Zitadel user ID to add as a project member.
	// Mutually exclusive with UserRef.
	// +optional
	UserId string `json:"userId,omitempty"`

	// Roles is the list of roles to assign (e.g., PROJECT_OWNER, PROJECT_OWNER_VIEWER).
	Roles []string `json:"roles"`
}

ProjectMemberSpec defines the desired state of ProjectMember.

func (*ProjectMemberSpec) DeepCopy added in v0.10.0 

func (in *ProjectMemberSpec) DeepCopy() *ProjectMemberSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectMemberSpec.

func (*ProjectMemberSpec) DeepCopyInto added in v0.10.0 

func (in *ProjectMemberSpec) DeepCopyInto(out *ProjectMemberSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProjectMemberStatus added in v0.10.0 

type ProjectMemberStatus struct {
	// Ready indicates whether the ProjectMember is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ProjectMemberStatus defines the observed state of ProjectMember.

func (*ProjectMemberStatus) DeepCopy added in v0.10.0 

func (in *ProjectMemberStatus) DeepCopy() *ProjectMemberStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectMemberStatus.

func (*ProjectMemberStatus) DeepCopyInto added in v0.10.0 

func (in *ProjectMemberStatus) DeepCopyInto(out *ProjectMemberStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProjectRole added in v0.19.0 

type ProjectRole struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ProjectRoleSpec   `json:"spec,omitempty"`
	Status ProjectRoleStatus `json:"status,omitempty"`
}

ProjectRole is the Schema for the projectroles API.

func (*ProjectRole) DeepCopy added in v0.19.0 

func (in *ProjectRole) DeepCopy() *ProjectRole

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectRole.

func (*ProjectRole) DeepCopyInto added in v0.19.0 

func (in *ProjectRole) DeepCopyInto(out *ProjectRole)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProjectRole) DeepCopyObject added in v0.19.0 

func (in *ProjectRole) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ProjectRole) RoleDisplayName added in v0.19.0 

func (r *ProjectRole) RoleDisplayName() string

RoleDisplayName returns the effective display name. Falls back to the role key if spec.displayName is empty.

func (*ProjectRole) RoleKey added in v0.19.0 

func (r *ProjectRole) RoleKey() string

RoleKey returns the effective role key. Falls back to the Kubernetes resource name if spec.key is empty.

type ProjectRoleList added in v0.19.0 

type ProjectRoleList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ProjectRole `json:"items"`
}

ProjectRoleList contains a list of ProjectRole.

func (*ProjectRoleList) DeepCopy added in v0.19.0 

func (in *ProjectRoleList) DeepCopy() *ProjectRoleList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectRoleList.

func (*ProjectRoleList) DeepCopyInto added in v0.19.0 

func (in *ProjectRoleList) DeepCopyInto(out *ProjectRoleList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProjectRoleList) DeepCopyObject added in v0.19.0 

func (in *ProjectRoleList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ProjectRoleSpec added in v0.19.0 

type ProjectRoleSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// ProjectRef references a Project CR in the same namespace (or another
	// namespace via ref.namespace). The role is created in that project once
	// it reports a projectId in status.
	// Mutually exclusive with ProjectId.
	// +optional
	ProjectRef *ResourceRef `json:"projectRef,omitempty"`

	// ProjectId references a pre-existing Zitadel project by raw ID.
	// Mutually exclusive with ProjectRef.
	// +optional
	ProjectId string `json:"projectId,omitempty"`

	// Key is the role key used in authorization checks and token claims.
	// If empty, the Kubernetes resource name is used. The key cannot be
	// changed in Zitadel; changing it here removes the old role (including
	// its grants) and creates a new one.
	// +optional
	Key string `json:"key,omitempty"`

	// DisplayName is the human-readable name of the role.
	// If empty, the role key is used.
	// +optional
	DisplayName string `json:"displayName,omitempty"`

	// Group optionally groups roles for display purposes (not a collection
	// of users; Zitadel does not evaluate it).
	// +optional
	Group string `json:"group,omitempty"`
}

ProjectRoleSpec defines the desired state of ProjectRole.

func (*ProjectRoleSpec) DeepCopy added in v0.19.0 

func (in *ProjectRoleSpec) DeepCopy() *ProjectRoleSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectRoleSpec.

func (*ProjectRoleSpec) DeepCopyInto added in v0.19.0 

func (in *ProjectRoleSpec) DeepCopyInto(out *ProjectRoleSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProjectRoleStatus added in v0.19.0 

type ProjectRoleStatus struct {
	// ProjectId is the resolved Zitadel project ID the role belongs to.
	ProjectId string `json:"projectId,omitempty"`

	// Key is the role key currently reconciled into the project. Kept so a
	// key change can remove the previously managed role.
	Key string `json:"key,omitempty"`

	// ObservedGeneration is the spec generation last reconciled.
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Ready indicates whether the ProjectRole is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ProjectRoleStatus defines the observed state of ProjectRole.

func (*ProjectRoleStatus) DeepCopy added in v0.19.0 

func (in *ProjectRoleStatus) DeepCopy() *ProjectRoleStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectRoleStatus.

func (*ProjectRoleStatus) DeepCopyInto added in v0.19.0 

func (in *ProjectRoleStatus) DeepCopyInto(out *ProjectRoleStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProjectSpec 

type ProjectSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// Name is the display name of the project in Zitadel.
	// If empty, the Kubernetes resource name is used.
	// +optional
	Name string `json:"name,omitempty"`

	// AssertRolesOnAuth determines whether roles are asserted on authentication.
	// +optional
	AssertRolesOnAuth bool `json:"assertRolesOnAuth,omitempty"`

	// CheckAuthorizationOnAuth enables authorization check on authentication.
	// When true, only users with explicit role assignments can authenticate,
	// and user grants are loaded into the Action context (ctx.v1.user.grants).
	// +optional
	CheckAuthorizationOnAuth bool `json:"checkAuthorizationOnAuth,omitempty"`

	// Roles is the authoritative full set of role keys for this project:
	// missing roles are added and extra roles are removed on every sync.
	// Prefer ProjectRole CRs (v0.19) for incremental, per-role management —
	// do not combine spec.roles with ProjectRole CRs targeting the same
	// project, or the full-set sync will remove the roles they manage.
	// +optional
	Roles []string `json:"roles,omitempty"`
}

ProjectSpec defines the desired state of Project.

func (*ProjectSpec) DeepCopy 

func (in *ProjectSpec) DeepCopy() *ProjectSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectSpec.

func (*ProjectSpec) DeepCopyInto 

func (in *ProjectSpec) DeepCopyInto(out *ProjectSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProjectStatus 

type ProjectStatus struct {
	// ProjectId is the Zitadel project ID.
	ProjectId string `json:"projectId,omitempty"`

	// OrganizationId is the resolved organization ID this project belongs to.
	OrganizationId string `json:"organizationId,omitempty"`

	// ObservedGeneration is the spec generation last reconciled.
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Ready indicates whether the Project is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ProjectStatus defines the observed state of Project.

func (*ProjectStatus) DeepCopy 

func (in *ProjectStatus) DeepCopy() *ProjectStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProjectStatus.

func (*ProjectStatus) DeepCopyInto 

func (in *ProjectStatus) DeepCopyInto(out *ProjectStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ResourceRef 

type ResourceRef struct {
	// Name is the name of the referenced resource.
	Name string `json:"name"`

	// Namespace is the namespace of the referenced resource.
	// If empty, defaults to the same namespace as the referencing resource.
	// +optional
	Namespace string `json:"namespace,omitempty"`
}

ResourceRef references a Kubernetes resource by name and optional namespace. If namespace is omitted, defaults to the same namespace as the referencing resource.

func (*ResourceRef) DeepCopy 

func (in *ResourceRef) DeepCopy() *ResourceRef

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ResourceRef.

func (*ResourceRef) DeepCopyInto 

func (in *ResourceRef) DeepCopyInto(out *ResourceRef)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SAMLApp added in v0.11.0 

type SAMLApp struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SAMLAppSpec   `json:"spec,omitempty"`
	Status SAMLAppStatus `json:"status,omitempty"`
}

SAMLApp is the Schema for the samlapps API.

func (*SAMLApp) DeepCopy added in v0.11.0 

func (in *SAMLApp) DeepCopy() *SAMLApp

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SAMLApp.

func (*SAMLApp) DeepCopyInto added in v0.11.0 

func (in *SAMLApp) DeepCopyInto(out *SAMLApp)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SAMLApp) DeepCopyObject added in v0.11.0 

func (in *SAMLApp) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*SAMLApp) DisplayName added in v0.11.0 

func (a *SAMLApp) DisplayName() string

DisplayName returns the app display name for Zitadel. Falls back to the Kubernetes resource name if spec.name is empty.

type SAMLAppList added in v0.11.0 

type SAMLAppList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SAMLApp `json:"items"`
}

SAMLAppList contains a list of SAMLApp.

func (*SAMLAppList) DeepCopy added in v0.11.0 

func (in *SAMLAppList) DeepCopy() *SAMLAppList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SAMLAppList.

func (*SAMLAppList) DeepCopyInto added in v0.11.0 

func (in *SAMLAppList) DeepCopyInto(out *SAMLAppList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SAMLAppList) DeepCopyObject added in v0.11.0 

func (in *SAMLAppList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type SAMLAppSpec added in v0.11.0 

type SAMLAppSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// ProjectRef references a Project CR managed by this operator.
	// Mutually exclusive with ProjectId.
	// +optional
	ProjectRef *ResourceRef `json:"projectRef,omitempty"`

	// ProjectId references a pre-existing Zitadel project by raw ID.
	// Mutually exclusive with ProjectRef.
	// +optional
	ProjectId string `json:"projectId,omitempty"`

	// Name is the display name of the application in Zitadel.
	// If empty, the Kubernetes resource name is used.
	// +optional
	Name string `json:"name,omitempty"`

	// MetadataXml is the SAML SP metadata XML.
	// Mutually exclusive with MetadataUrl.
	// +optional
	MetadataXml string `json:"metadataXml,omitempty"`

	// MetadataUrl is the URL where the SAML SP metadata can be fetched.
	// Mutually exclusive with MetadataXml.
	// +optional
	MetadataUrl string `json:"metadataUrl,omitempty"`
}

SAMLAppSpec defines the desired state of SAMLApp.

func (*SAMLAppSpec) DeepCopy added in v0.11.0 

func (in *SAMLAppSpec) DeepCopy() *SAMLAppSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SAMLAppSpec.

func (*SAMLAppSpec) DeepCopyInto added in v0.11.0 

func (in *SAMLAppSpec) DeepCopyInto(out *SAMLAppSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SAMLAppStatus added in v0.11.0 

type SAMLAppStatus struct {
	// ApplicationId is the Zitadel application ID.
	ApplicationId string `json:"applicationId,omitempty"`

	// ProjectId is the resolved project ID this app belongs to.
	ProjectId string `json:"projectId,omitempty"`

	// OrganizationId is the resolved organization ID (inherited from project).
	OrganizationId string `json:"organizationId,omitempty"`

	// Ready indicates whether the SAMLApp is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

SAMLAppStatus defines the observed state of SAMLApp.

func (*SAMLAppStatus) DeepCopy added in v0.11.0 

func (in *SAMLAppStatus) DeepCopy() *SAMLAppStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SAMLAppStatus.

func (*SAMLAppStatus) DeepCopyInto added in v0.11.0 

func (in *SAMLAppStatus) DeepCopyInto(out *SAMLAppStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ScopeMap added in v0.18.0 

type ScopeMap struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ScopeMapSpec   `json:"spec,omitempty"`
	Status ScopeMapStatus `json:"status,omitempty"`
}

ScopeMap maps tenant namespaces to Zitadel org/project scopes. Namespaced; only maps in the operator's own namespace are evaluated.

func (*ScopeMap) DeepCopy added in v0.18.0 

func (in *ScopeMap) DeepCopy() *ScopeMap

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ScopeMap.

func (*ScopeMap) DeepCopyInto added in v0.18.0 

func (in *ScopeMap) DeepCopyInto(out *ScopeMap)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ScopeMap) DeepCopyObject added in v0.18.0 

func (in *ScopeMap) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ScopeMapList added in v0.18.0 

type ScopeMapList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScopeMap `json:"items"`
}

ScopeMapList contains a list of ScopeMap.

func (*ScopeMapList) DeepCopy added in v0.18.0 

func (in *ScopeMapList) DeepCopy() *ScopeMapList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ScopeMapList.

func (*ScopeMapList) DeepCopyInto added in v0.18.0 

func (in *ScopeMapList) DeepCopyInto(out *ScopeMapList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ScopeMapList) DeepCopyObject added in v0.18.0 

func (in *ScopeMapList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ScopeMapRule added in v0.18.0 

type ScopeMapRule struct {
	// Name identifies the rule for status reporting and Events.
	Name string `json:"name"`

	// NamespaceSelector selects namespaces by label.
	// Mutually exclusive with Namespaces.
	// +optional
	NamespaceSelector *metav1.LabelSelector `json:"namespaceSelector,omitempty"`

	// Namespaces is a literal list of namespace names.
	// Mutually exclusive with NamespaceSelector.
	// +optional
	Namespaces []string `json:"namespaces,omitempty"`

	// Project is the Zitadel project name this rule scopes to. The project
	// is created on first use when it does not exist. When both Project and
	// ProjectId are empty, the rule grants org-scope.
	// Names are for humans, IDs for machines: when ProjectId is set it is
	// authoritative and Project is informational.
	// +optional
	Project string `json:"project,omitempty"`

	// ProjectId pins the Zitadel project by raw ID (authoritative when set;
	// the project must already exist). May be used with or without a
	// Project name.
	// +optional
	ProjectId string `json:"projectId,omitempty"`
}

ScopeMapRule maps a set of tenant namespaces to a Zitadel scope. Exactly one of NamespaceSelector or Namespaces must be set.

func (*ScopeMapRule) DeepCopy added in v0.18.0 

func (in *ScopeMapRule) DeepCopy() *ScopeMapRule

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ScopeMapRule.

func (*ScopeMapRule) DeepCopyInto added in v0.18.0 

func (in *ScopeMapRule) DeepCopyInto(out *ScopeMapRule)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ScopeMapSpec added in v0.18.0 

type ScopeMapSpec struct {
	// Instance is the operator instance identity this map applies to — the
	// operator config's instanceAlias, defaulting to its domain. Must match
	// the serving operator's identity; otherwise the map is fail-closed with
	// an InstanceMismatch condition.
	Instance string `json:"instance"`

	// Organization is the Zitadel organization name. Required when
	// OrganizationId is empty (the map controller resolves the name to an
	// ID); optional and informational when OrganizationId is set.
	// +optional
	Organization string `json:"organization,omitempty"`

	// OrganizationId pins the Zitadel organization by raw ID.
	// When set, the ID is authoritative; a differing Organization name is
	// reported as drift (OrganizationNameDrift condition + Event, not an
	// error). At least one of Organization / OrganizationId must be set.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// Rules is the ordered rule list. First match top-down wins
	// (evaluated across all maps in the operator namespace).
	// +kubebuilder:validation:MinItems=1
	Rules []ScopeMapRule `json:"rules"`
}

ScopeMapSpec defines the desired state of ScopeMap.

func (*ScopeMapSpec) DeepCopy added in v0.18.0 

func (in *ScopeMapSpec) DeepCopy() *ScopeMapSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ScopeMapSpec.

func (*ScopeMapSpec) DeepCopyInto added in v0.18.0 

func (in *ScopeMapSpec) DeepCopyInto(out *ScopeMapSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ScopeMapStatus added in v0.18.0 

type ScopeMapStatus struct {
	// Ready indicates the map passed validation (instance match, org resolved).
	Ready bool `json:"ready,omitempty"`

	// ResolvedOrganizationId is the org ID resolved from spec
	// (spec.organizationId when set, otherwise looked up by name).
	ResolvedOrganizationId string `json:"resolvedOrganizationId,omitempty"`

	// ObservedGeneration is the last generation reconciled.
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Conditions represent the latest available observations of the map's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ScopeMapStatus defines the observed state of ScopeMap.

func (*ScopeMapStatus) DeepCopy added in v0.18.0 

func (in *ScopeMapStatus) DeepCopy() *ScopeMapStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ScopeMapStatus.

func (*ScopeMapStatus) DeepCopyInto added in v0.18.0 

func (in *ScopeMapStatus) DeepCopyInto(out *ScopeMapStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretKeyRef added in v0.13.0 

type SecretKeyRef struct {
	// Name is the name of the Secret.
	Name string `json:"name"`

	// Key is the key within the Secret's data. Default: "clientSecret"
	// +optional
	Key string `json:"key,omitempty"`
}

SecretKeyRef references a key within a Kubernetes Secret.

func (*SecretKeyRef) DeepCopy added in v0.13.0 

func (in *SecretKeyRef) DeepCopy() *SecretKeyRef

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretKeyRef.

func (*SecretKeyRef) DeepCopyInto added in v0.13.0 

func (in *SecretKeyRef) DeepCopyInto(out *SecretKeyRef)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretKeys 

type SecretKeys struct {
	// ClientId is the key name for the client ID in the generated secret.
	// Default: "client_id"
	// +optional
	ClientId string `json:"clientId,omitempty"`

	// ClientSecret is the key name for the client secret in the generated secret.
	// Default: "client_secret"
	// +optional
	ClientSecret string `json:"clientSecret,omitempty"`
}

SecretKeys customizes the key names used in the generated Kubernetes Secret.

func (*SecretKeys) DeepCopy 

func (in *SecretKeys) DeepCopy() *SecretKeys

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretKeys.

func (*SecretKeys) DeepCopyInto 

func (in *SecretKeys) DeepCopyInto(out *SecretKeys)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretRefSpec 

type SecretRefSpec struct {
	// Name is the name of the Secret.
	Name string `json:"name"`

	// Keys customizes the secret key names for clientId and clientSecret.
	// Defaults: clientId → "client_id", clientSecret → "client_secret"
	// +optional
	Keys *SecretKeys `json:"keys,omitempty"`

	// ExtraData adds static key-value pairs to the generated secret.
	// +optional
	ExtraData map[string]string `json:"extraData,omitempty"`
}

SecretRefSpec references a Kubernetes Secret where credentials will be stored.

func (*SecretRefSpec) DeepCopy 

func (in *SecretRefSpec) DeepCopy() *SecretRefSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretRefSpec.

func (*SecretRefSpec) DeepCopyInto 

func (in *SecretRefSpec) DeepCopyInto(out *SecretRefSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SmsProvider added in v0.13.0 

type SmsProvider struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SmsProviderSpec   `json:"spec,omitempty"`
	Status SmsProviderStatus `json:"status,omitempty"`
}

SmsProvider is the Schema for the smsproviders API. It manages an instance-level SMS provider (Admin API). Discriminated type: twilio or http.

func (*SmsProvider) DeepCopy added in v0.13.0 

func (in *SmsProvider) DeepCopy() *SmsProvider

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SmsProvider.

func (*SmsProvider) DeepCopyInto added in v0.13.0 

func (in *SmsProvider) DeepCopyInto(out *SmsProvider)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SmsProvider) DeepCopyObject added in v0.13.0 

func (in *SmsProvider) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type SmsProviderList added in v0.13.0 

type SmsProviderList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SmsProvider `json:"items"`
}

SmsProviderList contains a list of SmsProvider.

func (*SmsProviderList) DeepCopy added in v0.13.0 

func (in *SmsProviderList) DeepCopy() *SmsProviderList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SmsProviderList.

func (*SmsProviderList) DeepCopyInto added in v0.13.0 

func (in *SmsProviderList) DeepCopyInto(out *SmsProviderList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*SmsProviderList) DeepCopyObject added in v0.13.0 

func (in *SmsProviderList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type SmsProviderSpec added in v0.13.0 

type SmsProviderSpec struct {
	// Twilio configures a Twilio SMS provider.
	// Mutually exclusive with Http.
	// +optional
	Twilio *TwilioSmsProvider `json:"twilio,omitempty"`

	// Http configures an HTTP webhook SMS provider.
	// Mutually exclusive with Twilio.
	// +optional
	Http *HttpSmsProvider `json:"http,omitempty"`
}

SmsProviderSpec defines the desired state of SmsProvider. Discriminated type: exactly one of Twilio or Http must be set.

func (*SmsProviderSpec) DeepCopy added in v0.13.0 

func (in *SmsProviderSpec) DeepCopy() *SmsProviderSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SmsProviderSpec.

func (*SmsProviderSpec) DeepCopyInto added in v0.13.0 

func (in *SmsProviderSpec) DeepCopyInto(out *SmsProviderSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SmsProviderStatus added in v0.13.0 

type SmsProviderStatus struct {
	// ProviderId is the Zitadel SMS provider ID.
	ProviderId string `json:"providerId,omitempty"`

	// Ready indicates whether the SmsProvider is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

SmsProviderStatus defines the observed state of SmsProvider.

func (*SmsProviderStatus) DeepCopy added in v0.13.0 

func (in *SmsProviderStatus) DeepCopy() *SmsProviderStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SmsProviderStatus.

func (*SmsProviderStatus) DeepCopyInto added in v0.13.0 

func (in *SmsProviderStatus) DeepCopyInto(out *SmsProviderStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SmtpEmailProvider added in v0.13.0 

type SmtpEmailProvider struct {
	// Description is a human-readable description for this SMTP provider.
	// +optional
	Description string `json:"description,omitempty"`

	// SenderAddress is the email address used as the sender (From header).
	SenderAddress string `json:"senderAddress"`

	// SenderName is the display name of the sender.
	// +optional
	SenderName string `json:"senderName,omitempty"`

	// ReplyToAddress is the reply-to email address.
	// +optional
	ReplyToAddress string `json:"replyToAddress,omitempty"`

	// Tls enables TLS for the SMTP connection.
	// +optional
	Tls bool `json:"tls,omitempty"`

	// Host is the SMTP server hostname.
	Host string `json:"host"`

	// User is the SMTP authentication username.
	// +optional
	User string `json:"user,omitempty"`

	// PasswordSecretRef references the Secret containing the SMTP password.
	// +optional
	PasswordSecretRef *SecretKeyRef `json:"passwordSecretRef,omitempty"`
}

SmtpEmailProvider defines SMTP configuration for email delivery.

func (*SmtpEmailProvider) DeepCopy added in v0.13.0 

func (in *SmtpEmailProvider) DeepCopy() *SmtpEmailProvider

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SmtpEmailProvider.

func (*SmtpEmailProvider) DeepCopyInto added in v0.13.0 

func (in *SmtpEmailProvider) DeepCopyInto(out *SmtpEmailProvider)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TokenSecretRefSpec added in v0.11.0 

type TokenSecretRefSpec struct {
	// Name is the name of the Secret.
	Name string `json:"name"`

	// Key is the data key within the Secret. Default: "token"
	// +optional
	Key string `json:"key,omitempty"`
}

TokenSecretRefSpec references a Secret where the personal access token will be stored.

func (*TokenSecretRefSpec) DeepCopy added in v0.11.0 

func (in *TokenSecretRefSpec) DeepCopy() *TokenSecretRefSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TokenSecretRefSpec.

func (*TokenSecretRefSpec) DeepCopyInto added in v0.11.0 

func (in *TokenSecretRefSpec) DeepCopyInto(out *TokenSecretRefSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TwilioSmsProvider added in v0.13.0 

type TwilioSmsProvider struct {
	// SID is the Twilio account SID.
	SID string `json:"sid"`

	// TokenSecretRef references the Secret containing the Twilio auth token.
	TokenSecretRef SecretKeyRef `json:"tokenSecretRef"`

	// SenderNumber is the Twilio phone number to send from.
	SenderNumber string `json:"senderNumber"`

	// Description is a human-readable description.
	// +optional
	Description string `json:"description,omitempty"`
}

TwilioSmsProvider defines Twilio SMS configuration.

func (*TwilioSmsProvider) DeepCopy added in v0.13.0 

func (in *TwilioSmsProvider) DeepCopy() *TwilioSmsProvider

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TwilioSmsProvider.

func (*TwilioSmsProvider) DeepCopyInto added in v0.13.0 

func (in *TwilioSmsProvider) DeepCopyInto(out *TwilioSmsProvider)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type UserGrant 

type UserGrant struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   UserGrantSpec   `json:"spec,omitempty"`
	Status UserGrantStatus `json:"status,omitempty"`
}

UserGrant is the Schema for the usergrants API.

func (*UserGrant) DeepCopy 

func (in *UserGrant) DeepCopy() *UserGrant

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UserGrant.

func (*UserGrant) DeepCopyInto 

func (in *UserGrant) DeepCopyInto(out *UserGrant)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*UserGrant) DeepCopyObject 

func (in *UserGrant) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type UserGrantList 

type UserGrantList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []UserGrant `json:"items"`
}

UserGrantList contains a list of UserGrant.

func (*UserGrantList) DeepCopy 

func (in *UserGrantList) DeepCopy() *UserGrantList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UserGrantList.

func (*UserGrantList) DeepCopyInto 

func (in *UserGrantList) DeepCopyInto(out *UserGrantList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*UserGrantList) DeepCopyObject 

func (in *UserGrantList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type UserGrantSpec 

type UserGrantSpec struct {
	// Instance optionally pins this resource to one operator's instance
	// identity — the operator config's instanceAlias, defaulting to its
	// domain (v0.18 dual-serving). When set to another identity, the CR is
	// ignored entirely so the owning operator can manage it. When empty
	// while the namespace is served by two operators, both fail closed with
	// an AmbiguousInstance condition.
	// +optional
	Instance string `json:"instance,omitempty"`

	// OrganizationRef references an Organization CR managed by this operator.
	// Mutually exclusive with OrganizationId.
	// +optional
	OrganizationRef *ResourceRef `json:"organizationRef,omitempty"`

	// OrganizationId references a pre-existing Zitadel organization by raw ID.
	// Mutually exclusive with OrganizationRef.
	// +optional
	OrganizationId string `json:"organizationId,omitempty"`

	// UserID is the Zitadel user ID to grant roles to.
	// +optional
	UserID string `json:"userId,omitempty"`

	// UserRef references a MachineUser CR managed by this operator.
	// Mutually exclusive with UserID.
	// +optional
	UserRef *ResourceRef `json:"userRef,omitempty"`

	// ProjectRef references a Project CR managed by this operator.
	// Mutually exclusive with ProjectId.
	// +optional
	ProjectRef *ResourceRef `json:"projectRef,omitempty"`

	// ProjectId references a pre-existing Zitadel project by raw ID.
	// Mutually exclusive with ProjectRef.
	// +optional
	ProjectId string `json:"projectId,omitempty"`

	// RoleKeys is the list of role keys to grant.
	RoleKeys []string `json:"roleKeys"`
}

UserGrantSpec defines the desired state of UserGrant.

func (*UserGrantSpec) DeepCopy 

func (in *UserGrantSpec) DeepCopy() *UserGrantSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UserGrantSpec.

func (*UserGrantSpec) DeepCopyInto 

func (in *UserGrantSpec) DeepCopyInto(out *UserGrantSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type UserGrantStatus 

type UserGrantStatus struct {
	// GrantId is the Zitadel user grant ID.
	GrantId string `json:"grantId,omitempty"`

	// Ready indicates whether the UserGrant is successfully synced.
	Ready bool `json:"ready,omitempty"`

	// LastSyncTime is the last time the resource was synced with Zitadel.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// Conditions represent the latest available observations of the resource's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

UserGrantStatus defines the observed state of UserGrant.

func (*UserGrantStatus) DeepCopy 

func (in *UserGrantStatus) DeepCopy() *UserGrantStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UserGrantStatus.

func (*UserGrantStatus) DeepCopyInto 

func (in *UserGrantStatus) DeepCopyInto(out *UserGrantStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.