updates

crdSchemas/master-standalone/clusterkeycloakrealm-stable-v1beta1.json

@@ -30,7 +30,7 @@
           "additionalProperties": false
         },
         "definition": {
-          "description": "Definition contains the Keycloak RealmRepresentation",
+          "description": "Definition contains the Keycloak RealmRepresentation. Set the realm name\nvia spec.realmName.",
           "type": "object",
           "x-kubernetes-preserve-unknown-fields": true
         },
@@ -54,7 +54,8 @@
           "additionalProperties": false
         },
         "realmName": {
-          "description": "RealmName is the name of the realm in Keycloak (defaults to metadata.name)",
+          "description": "RealmName is the name of the realm in Keycloak. It is immutable once set:\nrenaming a realm in Keycloak is destructive and would orphan it.",
+          "minLength": 1,
           "type": "string"
         },
         "smtpSecretRef": {
@@ -88,9 +89,20 @@
         }
       },
       "required": [
-        "definition"
+        "definition",
+        "realmName"
       ],
       "type": "object",
+      "x-kubernetes-validations": [
+        {
+          "message": "exactly one of instanceRef or clusterInstanceRef must be set",
+          "rule": "has(self.instanceRef) != has(self.clusterInstanceRef)"
+        },
+        {
+          "message": "spec.realmName is immutable once set",
+          "rule": "!has(oldSelf.realmName) || self.realmName == oldSelf.realmName"
+        }
+      ],
       "additionalProperties": false
     },
     "status": {
@@ -167,6 +179,10 @@
           "type": "object",
           "additionalProperties": false
         },
+        "lastAppliedDefinitionHash": {
+          "description": "LastAppliedDefinitionHash is a hash of the last successfully applied\ndefinition (after SMTP credential merging). Keycloak masks\nsmtpServer.password on read, so this is the only way to detect that\nthe desired password changed and must be pushed.",
+          "type": "string"
+        },
         "message": {
           "description": "Message contains additional information",
           "type": "string"