updates

crdSchemas/keycloak.hostzero.com/keycloakcomponent_v1beta1.json

@@ -29,21 +29,36 @@
           "type": "object",
           "additionalProperties": false
         },
+        "configSecretRef": {
+          "description": "ConfigSecretRef is a reference to a Kubernetes Secret whose data entries\nare merged into definition.config before syncing to Keycloak. Each secret\nvalue is wrapped as a single-element list to match ComponentRepresentation\nconfig (map[string][]string). Secret values take precedence over values\nspecified inline in definition.config.",
+          "properties": {
+            "name": {
+              "description": "Name of the Kubernetes Secret in the same namespace as the CR",
+              "type": "string"
+            }
+          },
+          "required": [
+            "name"
+          ],
+          "type": "object",
+          "additionalProperties": false
+        },
         "definition": {
-          "description": "Definition contains the Keycloak ComponentRepresentation",
+          "description": "Definition contains the Keycloak ComponentRepresentation. Set the component\nname via spec.name.",
           "type": "object",
           "x-kubernetes-preserve-unknown-fields": true
         },
+        "name": {
+          "description": "Name is the component name in Keycloak. Immutable once set. The\nproviderType is set in spec.definition.",
+          "minLength": 1,
+          "type": "string"
+        },
         "realmRef": {
           "description": "RealmRef is a reference to a KeycloakRealm\nOne of realmRef or clusterRealmRef must be specified",
           "properties": {
             "name": {
               "description": "Name of the resource",
               "type": "string"
-            },
-            "namespace": {
-              "description": "Namespace of the resource (optional, defaults to the same namespace)",
-              "type": "string"
             }
           },
           "required": [
@@ -54,9 +69,20 @@
         }
       },
       "required": [
-        "definition"
+        "definition",
+        "name"
       ],
       "type": "object",
+      "x-kubernetes-validations": [
+        {
+          "message": "exactly one of realmRef or clusterRealmRef must be set",
+          "rule": "has(self.realmRef) != has(self.clusterRealmRef)"
+        },
+        {
+          "message": "spec.name is immutable once set",
+          "rule": "!has(oldSelf.name) || self.name == oldSelf.name"
+        }
+      ],
       "additionalProperties": false
     },
     "status": {
@@ -141,6 +167,10 @@
           "type": "object",
           "additionalProperties": false
         },
+        "lastAppliedDefinitionHash": {
+          "description": "LastAppliedDefinitionHash is a hash of the last successfully applied\ndefinition (after secret merging). Keycloak masks secret config values\non read, so this is the only way to detect that the desired secret\nchanged and must be pushed.",
+          "type": "string"
+        },
         "message": {
           "description": "Message contains additional information",
           "type": "string"