updates

crdSchemas/keycloak.hostzero.com/keycloakprotocolmapper_v1beta1.json

@@ -21,10 +21,6 @@
             "name": {
               "description": "Name of the resource",
               "type": "string"
-            },
-            "namespace": {
-              "description": "Namespace of the resource (optional, defaults to the same namespace)",
-              "type": "string"
             }
           },
           "required": [
@@ -39,9 +35,19 @@
             "name": {
               "description": "Name of the resource",
               "type": "string"
-            },
-            "namespace": {
-              "description": "Namespace of the resource (optional, defaults to the same namespace)",
+            }
+          },
+          "required": [
+            "name"
+          ],
+          "type": "object",
+          "additionalProperties": false
+        },
+        "configSecretRef": {
+          "description": "ConfigSecretRef is a reference to a Kubernetes Secret whose data entries\nare merged into definition.config before syncing to Keycloak. Secret\nvalues take precedence over values specified inline in definition.config.",
+          "properties": {
+            "name": {
+              "description": "Name of the Kubernetes Secret in the same namespace as the CR",
               "type": "string"
             }
           },
@@ -52,15 +58,31 @@
           "additionalProperties": false
         },
         "definition": {
-          "description": "Definition contains the Keycloak ProtocolMapperRepresentation",
+          "description": "Definition contains the Keycloak ProtocolMapperRepresentation. Set the\nmapper name via spec.name.",
           "type": "object",
           "x-kubernetes-preserve-unknown-fields": true
+        },
+        "name": {
+          "description": "Name is the protocol mapper name in Keycloak. Immutable once set.",
+          "minLength": 1,
+          "type": "string"
         }
       },
       "required": [
-        "definition"
+        "definition",
+        "name"
       ],
       "type": "object",
+      "x-kubernetes-validations": [
+        {
+          "message": "exactly one of clientRef or clientScopeRef must be set",
+          "rule": "has(self.clientRef) != has(self.clientScopeRef)"
+        },
+        {
+          "message": "spec.name is immutable once set",
+          "rule": "!has(oldSelf.name) || self.name == oldSelf.name"
+        }
+      ],
       "additionalProperties": false
     },
     "status": {