# Generated by Fabric8 CRDGenerator, manual edits might get overwritten!
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
name: keycloakrealmimports.k8s.keycloak.org
spec:
group: k8s.keycloak.org
names:
kind: KeycloakRealmImport
plural: keycloakrealmimports
singular: keycloakrealmimport
scope: Namespaced
versions:
- name: v2alpha1
schema:
openAPIV3Schema:
properties:
spec:
properties:
keycloakCRName:
description: "The name of the Keycloak CR to reference, in the same\
\ namespace."
type: string
realm:
description: The RealmRepresentation to import into Keycloak.
properties:
webAuthnPolicyAvoidSameAuthenticatorRegister:
type: boolean
federatedUsers:
items:
properties:
id:
type: string
clientConsents:
items:
properties:
grantedClientScopes:
items:
type: string
type: array
grantedRealmRoles:
items:
type: string
type: array
lastUpdatedDate:
type: integer
createdDate:
type: integer
clientId:
type: string
type: object
type: array
clientRoles:
additionalProperties:
items:
type: string
type: array
type: object
requiredActions:
items:
type: string
type: array
enabled:
type: boolean
realmRoles:
items:
type: string
type: array
createdTimestamp:
type: integer
emailVerified:
type: boolean
disableableCredentialTypes:
items:
type: string
type: array
socialLinks:
items:
properties:
socialUserId:
type: string
socialProvider:
type: string
socialUsername:
type: string
type: object
type: array
username:
type: string
federationLink:
type: string
access:
additionalProperties:
type: boolean
type: object
totp:
type: boolean
serviceAccountClientId:
type: string
attributes:
additionalProperties:
items:
type: string
type: array
type: object
federatedIdentities:
items:
properties:
userId:
type: string
identityProvider:
type: string
userName:
type: string
type: object
type: array
firstName:
type: string
self:
type: string
notBefore:
type: integer
groups:
items:
type: string
type: array
credentials:
items:
properties:
id:
type: string
period:
type: integer
counter:
type: integer
value:
type: string
hashIterations:
type: integer
algorithm:
type: string
hashedSaltedValue:
type: string
type:
type: string
priority:
type: integer
device:
type: string
temporary:
type: boolean
userLabel:
type: string
createdDate:
type: integer
secretData:
type: string
config:
additionalProperties:
items:
type: string
type: array
type: object
credentialData:
type: string
salt:
type: string
digits:
type: integer
type: object
type: array
applicationRoles:
additionalProperties:
items:
type: string
type: array
type: object
lastName:
type: string
email:
type: string
origin:
type: string
type: object
type: array
adminEventsEnabled:
type: boolean
registrationEmailAsUsername:
type: boolean
keycloakVersion:
type: string
oauth2DeviceCodeLifespan:
type: integer
sslRequired:
type: string
realm:
type: string
defaultGroups:
items:
type: string
type: array
enabled:
type: boolean
webAuthnPolicySignatureAlgorithms:
items:
type: string
type: array
ssoSessionMaxLifespanRememberMe:
type: integer
webAuthnPolicyRpId:
type: string
webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister:
type: boolean
users:
items:
properties:
id:
type: string
clientConsents:
items:
properties:
grantedClientScopes:
items:
type: string
type: array
grantedRealmRoles:
items:
type: string
type: array
lastUpdatedDate:
type: integer
createdDate:
type: integer
clientId:
type: string
type: object
type: array
clientRoles:
additionalProperties:
items:
type: string
type: array
type: object
requiredActions:
items:
type: string
type: array
enabled:
type: boolean
realmRoles:
items:
type: string
type: array
createdTimestamp:
type: integer
emailVerified:
type: boolean
disableableCredentialTypes:
items:
type: string
type: array
socialLinks:
items:
properties:
socialUserId:
type: string
socialProvider:
type: string
socialUsername:
type: string
type: object
type: array
username:
type: string
federationLink:
type: string
access:
additionalProperties:
type: boolean
type: object
totp:
type: boolean
serviceAccountClientId:
type: string
attributes:
additionalProperties:
items:
type: string
type: array
type: object
federatedIdentities:
items:
properties:
userId:
type: string
identityProvider:
type: string
userName:
type: string
type: object
type: array
firstName:
type: string
self:
type: string
notBefore:
type: integer
groups:
items:
type: string
type: array
credentials:
items:
properties:
id:
type: string
period:
type: integer
counter:
type: integer
value:
type: string
hashIterations:
type: integer
algorithm:
type: string
hashedSaltedValue:
type: string
type:
type: string
priority:
type: integer
device:
type: string
temporary:
type: boolean
userLabel:
type: string
createdDate:
type: integer
secretData:
type: string
config:
additionalProperties:
items:
type: string
type: array
type: object
credentialData:
type: string
salt:
type: string
digits:
type: integer
type: object
type: array
applicationRoles:
additionalProperties:
items:
type: string
type: array
type: object
lastName:
type: string
email:
type: string
origin:
type: string
type: object
type: array
clientTemplates:
items:
properties:
protocol:
type: string
id:
type: string
fullScopeAllowed:
type: boolean
frontchannelLogout:
type: boolean
serviceAccountsEnabled:
type: boolean
standardFlowEnabled:
type: boolean
description:
type: string
publicClient:
type: boolean
consentRequired:
type: boolean
bearerOnly:
type: boolean
protocolMappers:
items:
properties:
protocol:
type: string
id:
type: string
name:
type: string
protocolMapper:
type: string
consentText:
type: string
consentRequired:
type: boolean
config:
additionalProperties:
type: string
type: object
type: object
type: array
name:
type: string
directAccessGrantsEnabled:
type: boolean
implicitFlowEnabled:
type: boolean
attributes:
additionalProperties:
type: string
type: object
type: object
type: array
webAuthnPolicyPasswordlessUserVerificationRequirement:
type: string
registrationFlow:
type: string
publicKey:
type: string
webAuthnPolicyPasswordlessCreateTimeout:
type: integer
authenticationFlows:
items:
properties:
id:
type: string
providerId:
type: string
authenticationExecutions:
items:
properties:
userSetupAllowed:
type: boolean
flowAlias:
type: string
autheticatorFlow:
type: boolean
authenticatorConfig:
type: string
authenticator:
type: string
priority:
type: integer
requirement:
type: string
authenticatorFlow:
type: boolean
type: object
type: array
topLevel:
type: boolean
alias:
type: string
builtIn:
type: boolean
description:
type: string
type: object
type: array
applicationScopeMappings:
additionalProperties:
items:
properties:
clientTemplate:
type: string
self:
type: string
clientScope:
type: string
client:
type: string
roles:
items:
type: string
type: array
type: object
type: array
type: object
offlineSessionMaxLifespan:
type: integer
codeSecret:
type: string
offlineSessionIdleTimeout:
type: integer
quickLoginCheckMilliSeconds:
type: integer
privateKey:
type: string
webAuthnPolicyRpEntityName:
type: string
emailTheme:
type: string
accessCodeLifespanLogin:
type: integer
passwordPolicy:
type: string
ssoSessionIdleTimeoutRememberMe:
type: integer
resetPasswordAllowed:
type: boolean
failureFactor:
type: integer
otpPolicyAlgorithm:
type: string
requiredActions:
items:
properties:
providerId:
type: string
alias:
type: string
defaultAction:
type: boolean
priority:
type: integer
name:
type: string
enabled:
type: boolean
config:
additionalProperties:
type: string
type: object
type: object
type: array
actionTokenGeneratedByUserLifespan:
type: integer
clientAuthenticationFlow:
type: string
webAuthnPolicyAuthenticatorAttachment:
type: string
actionTokenGeneratedByAdminLifespan:
type: integer
id:
type: string
clientPolicies:
type: object
x-kubernetes-preserve-unknown-fields: true
webAuthnPolicyUserVerificationRequirement:
type: string
loginTheme:
type: string
requiredCredentials:
items:
type: string
type: array
webAuthnPolicyPasswordlessAttestationConveyancePreference:
type: string
directGrantFlow:
type: string
identityProviderMappers:
items:
properties:
id:
type: string
name:
type: string
identityProviderMapper:
type: string
identityProviderAlias:
type: string
config:
additionalProperties:
type: string
type: object
type: object
type: array
dockerAuthenticationFlow:
type: string
browserFlow:
type: string
bruteForceProtected:
type: boolean
displayNameHtml:
type: string
ssoSessionIdleTimeout:
type: integer
browserSecurityHeaders:
additionalProperties:
type: string
type: object
eventsListeners:
items:
type: string
type: array
accessTokenLifespan:
type: integer
applications:
items:
properties:
name:
type: string
claims:
properties:
picture:
type: boolean
gender:
type: boolean
phone:
type: boolean
website:
type: boolean
email:
type: boolean
profile:
type: boolean
address:
type: boolean
name:
type: boolean
username:
type: boolean
locale:
type: boolean
type: object
id:
type: string
frontchannelLogout:
type: boolean
useTemplateConfig:
type: boolean
registrationAccessToken:
type: string
baseUrl:
type: string
serviceAccountsEnabled:
type: boolean
registeredNodes:
additionalProperties:
type: integer
type: object
useTemplateMappers:
type: boolean
description:
type: string
publicClient:
type: boolean
useTemplateScope:
type: boolean
authorizationSettings:
properties:
id:
type: string
resources:
items:
properties:
_id:
type: string
uris:
items:
type: string
type: array
attributes:
additionalProperties:
items:
type: string
type: array
type: object
displayName:
type: string
scopes:
items:
properties:
id:
type: string
displayName:
type: string
name:
type: string
iconUri:
type: string
type: object
type: array
owner:
properties:
id:
type: string
name:
type: string
type: object
name:
type: string
type:
type: string
icon_uri:
type: string
ownerManagedAccess:
type: boolean
type: object
type: array
decisionStrategy:
enum:
- AFFIRMATIVE
- stableIndex
- CONSENSUS
- UNANIMOUS
type: string
name:
type: string
policyEnforcementMode:
enum:
- stableIndex
- PERMISSIVE
- ENFORCING
- DISABLED
type: string
scopes:
items:
properties:
id:
type: string
displayName:
type: string
name:
type: string
iconUri:
type: string
type: object
type: array
policies:
items:
properties:
config:
additionalProperties:
type: string
type: object
id:
type: string
owner:
type: string
resources:
items:
type: string
type: array
policies:
items:
type: string
type: array
decisionStrategy:
enum:
- AFFIRMATIVE
- stableIndex
- CONSENSUS
- UNANIMOUS
type: string
logic:
enum:
- stableIndex
- POSITIVE
- NEGATIVE
type: string
resourcesData:
items:
properties:
_id:
type: string
uris:
items:
type: string
type: array
attributes:
additionalProperties:
items:
type: string
type: array
type: object
displayName:
type: string
scopes:
items:
properties:
id:
type: string
displayName:
type: string
name:
type: string
iconUri:
type: string
type: object
type: array
owner:
properties:
id:
type: string
name:
type: string
type: object
name:
type: string
type:
type: string
icon_uri:
type: string
ownerManagedAccess:
type: boolean
type: object
type: array
name:
type: string
type:
type: string
scopesData:
items:
properties:
id:
type: string
displayName:
type: string
name:
type: string
iconUri:
type: string
type: object
type: array
description:
type: string
scopes:
items:
type: string
type: array
type: object
type: array
clientId:
type: string
allowRemoteResourceManagement:
type: boolean
type: object
clientId:
type: string
enabled:
type: boolean
clientAuthenticatorType:
type: string
surrogateAuthRequired:
type: boolean
webOrigins:
items:
type: string
type: array
authorizationServicesEnabled:
type: boolean
secret:
type: string
protocol:
type: string
fullScopeAllowed:
type: boolean
nodeReRegistrationTimeout:
type: integer
clientTemplate:
type: string
access:
additionalProperties:
type: boolean
type: object
alwaysDisplayInConsole:
type: boolean
rootUrl:
type: string
oauth2DeviceAuthorizationGrantEnabled:
type: boolean
standardFlowEnabled:
type: boolean
optionalClientScopes:
items:
type: string
type: array
consentRequired:
type: boolean
authenticationFlowBindingOverrides:
additionalProperties:
type: string
type: object
bearerOnly:
type: boolean
defaultClientScopes:
items:
type: string
type: array
adminUrl:
type: string
protocolMappers:
items:
properties:
protocol:
type: string
id:
type: string
name:
type: string
protocolMapper:
type: string
consentText:
type: string
consentRequired:
type: boolean
config:
additionalProperties:
type: string
type: object
type: object
type: array
notBefore:
type: integer
directGrantsOnly:
type: boolean
defaultRoles:
items:
type: string
type: array
directAccessGrantsEnabled:
type: boolean
implicitFlowEnabled:
type: boolean
origin:
type: string
attributes:
additionalProperties:
type: string
type: object
redirectUris:
items:
type: string
type: array
type: object
type: array
otpPolicyCodeReusable:
type: boolean
clientProfiles:
type: object
x-kubernetes-preserve-unknown-fields: true
userFederationMappers:
items:
properties:
id:
type: string
federationProviderDisplayName:
type: string
federationMapperType:
type: string
name:
type: string
config:
additionalProperties:
type: string
type: object
type: object
type: array
enabledEventTypes:
items:
type: string
type: array
otpPolicyLookAheadWindow:
type: integer
displayName:
type: string
eventsEnabled:
type: boolean
clientSessionMaxLifespan:
type: integer
roles:
properties:
application:
additionalProperties:
items:
properties:
attributes:
additionalProperties:
items:
type: string
type: array
type: object
id:
type: string
clientRole:
type: boolean
name:
type: string
description:
type: string
scopeParamRequired:
type: boolean
composites:
properties:
realm:
items:
type: string
type: array
application:
additionalProperties:
items:
type: string
type: array
type: object
client:
additionalProperties:
items:
type: string
type: array
type: object
type: object
containerId:
type: string
composite:
type: boolean
type: object
type: array
type: object
client:
additionalProperties:
items:
properties:
attributes:
additionalProperties:
items:
type: string
type: array
type: object
id:
type: string
clientRole:
type: boolean
name:
type: string
description:
type: string
scopeParamRequired:
type: boolean
composites:
properties:
realm:
items:
type: string
type: array
application:
additionalProperties:
items:
type: string
type: array
type: object
client:
additionalProperties:
items:
type: string
type: array
type: object
type: object
containerId:
type: string
composite:
type: boolean
type: object
type: array
type: object
realm:
items:
properties:
attributes:
additionalProperties:
items:
type: string
type: array
type: object
id:
type: string
clientRole:
type: boolean
name:
type: string
description:
type: string
scopeParamRequired:
type: boolean
composites:
properties:
realm:
items:
type: string
type: array
application:
additionalProperties:
items:
type: string
type: array
type: object
client:
additionalProperties:
items:
type: string
type: array
type: object
type: object
containerId:
type: string
composite:
type: boolean
type: object
type: array
type: object
groups:
items:
properties:
attributes:
additionalProperties:
items:
type: string
type: array
type: object
id:
type: string
access:
additionalProperties:
type: boolean
type: object
realmRoles:
items:
type: string
type: array
path:
type: string
clientRoles:
additionalProperties:
items:
type: string
type: array
type: object
name:
type: string
subGroups:
items:
properties:
attributes:
additionalProperties:
items:
type: string
type: array
type: object
id:
type: string
access:
additionalProperties:
type: boolean
type: object
realmRoles:
items:
type: string
type: array
path:
type: string
clientRoles:
additionalProperties:
items:
type: string
type: array
type: object
name:
type: string
type: object
type: array
type: object
type: array
webAuthnPolicyCreateTimeout:
type: integer
webAuthnPolicyAttestationConveyancePreference:
type: string
clientOfflineSessionIdleTimeout:
type: integer
notBefore:
type: integer
webAuthnPolicyPasswordlessRpEntityName:
type: string
verifyEmail:
type: boolean
clientScopeMappings:
additionalProperties:
items:
properties:
clientTemplate:
type: string
self:
type: string
clientScope:
type: string
client:
type: string
roles:
items:
type: string
type: array
type: object
type: array
type: object
identityProviders:
items:
properties:
storeToken:
type: boolean
trustEmail:
type: boolean
updateProfileFirstLoginMode:
type: string
authenticateByDefault:
type: boolean
displayName:
type: string
providerId:
type: string
linkOnly:
type: boolean
postBrokerLoginFlowAlias:
type: string
alias:
type: string
enabled:
type: boolean
firstBrokerLoginFlowAlias:
type: string
internalId:
type: string
addReadTokenRoleOnCreate:
type: boolean
config:
additionalProperties:
type: string
type: object
type: object
type: array
resetCredentialsFlow:
type: string
duplicateEmailsAllowed:
type: boolean
maxDeltaTimeSeconds:
type: integer
offlineSessionMaxLifespanEnabled:
type: boolean
realmCacheEnabled:
type: boolean
attributes:
additionalProperties:
type: string
type: object
adminTheme:
type: string
loginWithEmailAllowed:
type: boolean
otpSupportedApplications:
items:
type: string
type: array
clientOfflineSessionMaxLifespan:
type: integer
userFederationProviders:
items:
properties:
id:
type: string
providerName:
type: string
displayName:
type: string
priority:
type: integer
fullSyncPeriod:
type: integer
lastSync:
type: integer
changedSyncPeriod:
type: integer
config:
additionalProperties:
type: string
type: object
type: object
type: array
internationalizationEnabled:
type: boolean
permanentLockout:
type: boolean
userManagedAccessAllowed:
type: boolean
smtpServer:
additionalProperties:
type: string
type: object
otpPolicyDigits:
type: integer
webAuthnPolicyPasswordlessSignatureAlgorithms:
items:
type: string
type: array
socialProviders:
additionalProperties:
type: string
type: object
otpPolicyInitialCounter:
type: integer
defaultSignatureAlgorithm:
type: string
refreshTokenMaxReuse:
type: integer
revokeRefreshToken:
type: boolean
accountTheme:
type: string
webAuthnPolicyPasswordlessAcceptableAaguids:
items:
type: string
type: array
webAuthnPolicyPasswordlessAuthenticatorAttachment:
type: string
supportedLocales:
items:
type: string
type: array
defaultDefaultClientScopes:
items:
type: string
type: array
authenticatorConfig:
items:
properties:
id:
type: string
alias:
type: string
config:
additionalProperties:
type: string
type: object
type: object
type: array
webAuthnPolicyPasswordlessRpId:
type: string
scopeMappings:
items:
properties:
clientTemplate:
type: string
self:
type: string
clientScope:
type: string
client:
type: string
roles:
items:
type: string
type: array
type: object
type: array
clientScopes:
items:
properties:
protocol:
type: string
id:
type: string
protocolMappers:
items:
properties:
protocol:
type: string
id:
type: string
name:
type: string
protocolMapper:
type: string
consentText:
type: string
consentRequired:
type: boolean
config:
additionalProperties:
type: string
type: object
type: object
type: array
name:
type: string
description:
type: string
attributes:
additionalProperties:
type: string
type: object
type: object
type: array
oauth2DevicePollingInterval:
type: integer
eventsExpiration:
type: integer
certificate:
type: string
defaultRole:
properties:
attributes:
additionalProperties:
items:
type: string
type: array
type: object
id:
type: string
clientRole:
type: boolean
name:
type: string
description:
type: string
scopeParamRequired:
type: boolean
composites:
properties:
realm:
items:
type: string
type: array
application:
additionalProperties:
items:
type: string
type: array
type: object
client:
additionalProperties:
items:
type: string
type: array
type: object
type: object
containerId:
type: string
composite:
type: boolean
type: object
defaultOptionalClientScopes:
items:
type: string
type: array
editUsernameAllowed:
type: boolean
defaultLocale:
type: string
webAuthnPolicyRequireResidentKey:
type: string
oauthClients:
items:
properties:
name:
type: string
claims:
properties:
picture:
type: boolean
gender:
type: boolean
phone:
type: boolean
website:
type: boolean
email:
type: boolean
profile:
type: boolean
address:
type: boolean
name:
type: boolean
username:
type: boolean
locale:
type: boolean
type: object
id:
type: string
frontchannelLogout:
type: boolean
useTemplateConfig:
type: boolean
registrationAccessToken:
type: string
baseUrl:
type: string
serviceAccountsEnabled:
type: boolean
registeredNodes:
additionalProperties:
type: integer
type: object
useTemplateMappers:
type: boolean
description:
type: string
publicClient:
type: boolean
useTemplateScope:
type: boolean
authorizationSettings:
properties:
id:
type: string
resources:
items:
properties:
_id:
type: string
uris:
items:
type: string
type: array
attributes:
additionalProperties:
items:
type: string
type: array
type: object
displayName:
type: string
scopes:
items:
properties:
id:
type: string
displayName:
type: string
name:
type: string
iconUri:
type: string
type: object
type: array
owner:
properties:
id:
type: string
name:
type: string
type: object
name:
type: string
type:
type: string
icon_uri:
type: string
ownerManagedAccess:
type: boolean
type: object
type: array
decisionStrategy:
enum:
- AFFIRMATIVE
- stableIndex
- CONSENSUS
- UNANIMOUS
type: string
name:
type: string
policyEnforcementMode:
enum:
- stableIndex
- PERMISSIVE
- ENFORCING
- DISABLED
type: string
scopes:
items:
properties:
id:
type: string
displayName:
type: string
name:
type: string
iconUri:
type: string
type: object
type: array
policies:
items:
properties:
config:
additionalProperties:
type: string
type: object
id:
type: string
owner:
type: string
resources:
items:
type: string
type: array
policies:
items:
type: string
type: array
decisionStrategy:
enum:
- AFFIRMATIVE
- stableIndex
- CONSENSUS
- UNANIMOUS
type: string
logic:
enum:
- stableIndex
- POSITIVE
- NEGATIVE
type: string
resourcesData:
items:
properties:
_id:
type: string
uris:
items:
type: string
type: array
attributes:
additionalProperties:
items:
type: string
type: array
type: object
displayName:
type: string
scopes:
items:
properties:
id:
type: string
displayName:
type: string
name:
type: string
iconUri:
type: string
type: object
type: array
owner:
properties:
id:
type: string
name:
type: string
type: object
name:
type: string
type:
type: string
icon_uri:
type: string
ownerManagedAccess:
type: boolean
type: object
type: array
name:
type: string
type:
type: string
scopesData:
items:
properties:
id:
type: string
displayName:
type: string
name:
type: string
iconUri:
type: string
type: object
type: array
description:
type: string
scopes:
items:
type: string
type: array
type: object
type: array
clientId:
type: string
allowRemoteResourceManagement:
type: boolean
type: object
clientId:
type: string
enabled:
type: boolean
clientAuthenticatorType:
type: string
surrogateAuthRequired:
type: boolean
webOrigins:
items:
type: string
type: array
authorizationServicesEnabled:
type: boolean
secret:
type: string
protocol:
type: string
fullScopeAllowed:
type: boolean
nodeReRegistrationTimeout:
type: integer
clientTemplate:
type: string
access:
additionalProperties:
type: boolean
type: object
alwaysDisplayInConsole:
type: boolean
rootUrl:
type: string
oauth2DeviceAuthorizationGrantEnabled:
type: boolean
standardFlowEnabled:
type: boolean
optionalClientScopes:
items:
type: string
type: array
consentRequired:
type: boolean
authenticationFlowBindingOverrides:
additionalProperties:
type: string
type: object
bearerOnly:
type: boolean
defaultClientScopes:
items:
type: string
type: array
adminUrl:
type: string
protocolMappers:
items:
properties:
protocol:
type: string
id:
type: string
name:
type: string
protocolMapper:
type: string
consentText:
type: string
consentRequired:
type: boolean
config:
additionalProperties:
type: string
type: object
type: object
type: array
notBefore:
type: integer
directGrantsOnly:
type: boolean
defaultRoles:
items:
type: string
type: array
directAccessGrantsEnabled:
type: boolean
implicitFlowEnabled:
type: boolean
origin:
type: string
attributes:
additionalProperties:
type: string
type: object
redirectUris:
items:
type: string
type: array
type: object
type: array
adminEventsDetailsEnabled:
type: boolean
ssoSessionMaxLifespan:
type: integer
accessCodeLifespanUserAction:
type: integer
registrationAllowed:
type: boolean
social:
type: boolean
accessTokenLifespanForImplicitFlow:
type: integer
rememberMe:
type: boolean
maxFailureWaitSeconds:
type: integer
defaultRoles:
items:
type: string
type: array
otpPolicyType:
type: string
otpPolicyPeriod:
type: integer
accessCodeLifespan:
type: integer
minimumQuickLoginWaitSeconds:
type: integer
webAuthnPolicyAcceptableAaguids:
items:
type: string
type: array
updateProfileOnInitialSocialLogin:
type: boolean
clientSessionIdleTimeout:
type: integer
webAuthnPolicyPasswordlessRequireResidentKey:
type: string
waitIncrementSeconds:
type: integer
protocolMappers:
items:
properties:
protocol:
type: string
id:
type: string
name:
type: string
protocolMapper:
type: string
consentText:
type: string
consentRequired:
type: boolean
config:
additionalProperties:
type: string
type: object
type: object
type: array
clients:
items:
properties:
id:
type: string
frontchannelLogout:
type: boolean
useTemplateConfig:
type: boolean
registrationAccessToken:
type: string
baseUrl:
type: string
serviceAccountsEnabled:
type: boolean
registeredNodes:
additionalProperties:
type: integer
type: object
useTemplateMappers:
type: boolean
description:
type: string
publicClient:
type: boolean
useTemplateScope:
type: boolean
authorizationSettings:
properties:
id:
type: string
resources:
items:
properties:
_id:
type: string
uris:
items:
type: string
type: array
attributes:
additionalProperties:
items:
type: string
type: array
type: object
displayName:
type: string
scopes:
items:
properties:
id:
type: string
displayName:
type: string
name:
type: string
iconUri:
type: string
type: object
type: array
owner:
properties:
id:
type: string
name:
type: string
type: object
name:
type: string
type:
type: string
icon_uri:
type: string
ownerManagedAccess:
type: boolean
type: object
type: array
decisionStrategy:
enum:
- AFFIRMATIVE
- stableIndex
- CONSENSUS
- UNANIMOUS
type: string
name:
type: string
policyEnforcementMode:
enum:
- stableIndex
- PERMISSIVE
- ENFORCING
- DISABLED
type: string
scopes:
items:
properties:
id:
type: string
displayName:
type: string
name:
type: string
iconUri:
type: string
type: object
type: array
policies:
items:
properties:
config:
additionalProperties:
type: string
type: object
id:
type: string
owner:
type: string
resources:
items:
type: string
type: array
policies:
items:
type: string
type: array
decisionStrategy:
enum:
- AFFIRMATIVE
- stableIndex
- CONSENSUS
- UNANIMOUS
type: string
logic:
enum:
- stableIndex
- POSITIVE
- NEGATIVE
type: string
resourcesData:
items:
properties:
_id:
type: string
uris:
items:
type: string
type: array
attributes:
additionalProperties:
items:
type: string
type: array
type: object
displayName:
type: string
scopes:
items:
properties:
id:
type: string
displayName:
type: string
name:
type: string
iconUri:
type: string
type: object
type: array
owner:
properties:
id:
type: string
name:
type: string
type: object
name:
type: string
type:
type: string
icon_uri:
type: string
ownerManagedAccess:
type: boolean
type: object
type: array
name:
type: string
type:
type: string
scopesData:
items:
properties:
id:
type: string
displayName:
type: string
name:
type: string
iconUri:
type: string
type: object
type: array
description:
type: string
scopes:
items:
type: string
type: array
type: object
type: array
clientId:
type: string
allowRemoteResourceManagement:
type: boolean
type: object
clientId:
type: string
enabled:
type: boolean
clientAuthenticatorType:
type: string
name:
type: string
surrogateAuthRequired:
type: boolean
webOrigins:
items:
type: string
type: array
authorizationServicesEnabled:
type: boolean
secret:
type: string
protocol:
type: string
fullScopeAllowed:
type: boolean
nodeReRegistrationTimeout:
type: integer
clientTemplate:
type: string
access:
additionalProperties:
type: boolean
type: object
alwaysDisplayInConsole:
type: boolean
rootUrl:
type: string
oauth2DeviceAuthorizationGrantEnabled:
type: boolean
standardFlowEnabled:
type: boolean
optionalClientScopes:
items:
type: string
type: array
consentRequired:
type: boolean
authenticationFlowBindingOverrides:
additionalProperties:
type: string
type: object
bearerOnly:
type: boolean
defaultClientScopes:
items:
type: string
type: array
adminUrl:
type: string
protocolMappers:
items:
properties:
protocol:
type: string
id:
type: string
name:
type: string
protocolMapper:
type: string
consentText:
type: string
consentRequired:
type: boolean
config:
additionalProperties:
type: string
type: object
type: object
type: array
notBefore:
type: integer
directGrantsOnly:
type: boolean
defaultRoles:
items:
type: string
type: array
directAccessGrantsEnabled:
type: boolean
implicitFlowEnabled:
type: boolean
origin:
type: string
attributes:
additionalProperties:
type: string
type: object
redirectUris:
items:
type: string
type: array
type: object
type: array
components:
additionalProperties:
items:
properties:
id:
type: string
providerId:
type: string
subType:
type: string
subComponents:
additionalProperties:
items:
properties:
id:
type: string
providerId:
type: string
subType:
type: string
name:
type: string
config:
additionalProperties:
items:
type: string
type: array
type: object
type: object
type: array
type: object
name:
type: string
config:
additionalProperties:
items:
type: string
type: array
type: object
type: object
type: array
type: object
passwordCredentialGrantAllowed:
type: boolean
userCacheEnabled:
type: boolean
type: object
required:
- keycloakCRName
- realm
type: object
status:
properties:
conditions:
items:
properties:
status:
type: boolean
type:
type: string
message:
type: string
type: object
type: array
type: object
type: object
served: true
storage: true
subresources:
status: {}