--- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: annotations: controller-gen.kubebuilder.io/version: v0.19.0 operatorframework.io/installed-alongside-a373375628633a56: kuadrant-system/authorino-operator.v1.3.0 creationTimestamp: "2026-03-18T16:54:18Z" generation: 1 labels: olm.managed: "true" operators.coreos.com/authorino-operator.kuadrant-system: "" managedFields: - apiVersion: apiextensions.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:controller-gen.kubebuilder.io/version: {} f:operatorframework.io/installed-alongside-a373375628633a56: {} f:labels: .: {} f:olm.managed: {} f:spec: f:conversion: .: {} f:strategy: {} f:group: {} f:names: f:kind: {} f:listKind: {} f:plural: {} f:singular: {} f:scope: {} f:versions: {} manager: catalog operation: Update time: "2026-03-18T16:54:18Z" - apiVersion: apiextensions.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:acceptedNames: f:kind: {} f:listKind: {} f:plural: {} f:singular: {} f:conditions: k:{"type":"Established"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"NamesAccepted"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: kube-apiserver operation: Update subresource: status time: "2026-03-18T16:54:18Z" - apiVersion: apiextensions.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:operators.coreos.com/authorino-operator.kuadrant-system: {} manager: olm operation: Update time: "2026-03-18T16:54:50Z" name: authorinos.operator.authorino.kuadrant.io resourceVersion: "16573" uid: 2d4f0eba-3065-4c0c-a208-541ad77246ce spec: conversion: strategy: None group: operator.authorino.kuadrant.io names: kind: Authorino listKind: AuthorinoList plural: authorinos singular: authorino scope: Namespaced versions: - name: v1beta1 schema: openAPIV3Schema: description: Authorino is the Schema for the authorinos API properties: apiVersion: description: |- APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources type: string kind: description: |- Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds type: string metadata: type: object spec: description: AuthorinoSpec defines the desired state of Authorino properties: authConfigLabelSelectors: type: string clusterWide: type: boolean evaluatorCacheSize: type: integer healthz: properties: port: description: Port number of the health/readiness probe endpoints. format: int32 type: integer type: object image: type: string imagePullPolicy: description: PullPolicy describes a policy for if/when to pull a container image type: string listener: properties: maxHttpRequestBodySize: description: Maximum payload (request body) size for the auth service (HTTP interface), in bytes. type: integer port: description: |- Port number of the GRPC interface. DEPRECATED: use 'ports.grpc' instead. format: int32 type: integer ports: description: Port numbers of the GRPC and HTTP auth interfaces. properties: grpc: format: int32 type: integer http: format: int32 type: integer type: object timeout: description: Timeout of the auth service (GRPC and HTTP interfaces), in milliseconds. type: integer tls: description: TLS configuration of the auth service (GRPC and HTTP interfaces). properties: certSecretRef: description: |- LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace. properties: name: description: |- Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names type: string type: object x-kubernetes-map-type: atomic enabled: type: boolean type: object required: - tls type: object logLevel: type: string logMode: type: string metrics: properties: deep: type: boolean port: format: int32 type: integer type: object oidcServer: properties: port: format: int32 type: integer tls: properties: certSecretRef: description: |- LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace. properties: name: description: |- Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names type: string type: object x-kubernetes-map-type: atomic enabled: type: boolean type: object required: - tls type: object replicas: format: int32 type: integer secretLabelSelectors: type: string supersedingHostSubsets: type: boolean tracing: properties: endpoint: type: string insecure: type: boolean tags: additionalProperties: type: string type: object required: - endpoint type: object volumes: properties: defaultMode: description: Permissions mode. format: int32 type: integer items: items: properties: configMaps: description: Allow multiple configmaps to mount to the same directory items: type: string type: array items: description: Mount details items: description: Maps a string key to a path within a volume. properties: key: description: key is the key to project. type: string mode: description: |- mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set. format: int32 type: integer path: description: |- path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'. type: string required: - key - path type: object type: array mountPath: description: An absolute path where to mount it type: string name: description: Volume name type: string secrets: description: Secret mount items: type: string type: array required: - mountPath type: object type: array type: object required: - listener - oidcServer type: object status: description: AuthorinoStatus defines the observed state of Authorino properties: conditions: description: |- Conditions is an array of the current Authorino's CR conditions Supported condition types: ConditionReady items: properties: lastTransitionTime: description: Last time the condition transit from one status to another. format: date-time type: string lastUpdatedTime: description: Last time the condition was updated format: date-time type: string message: description: Human readable message indicating details about last transition. type: string reason: description: (brief) reason for the condition's last transition. type: string status: description: Status of the condition, one of True, False, Unknown. type: string type: description: Type of condition type: string required: - status - type type: object type: array x-kubernetes-list-map-keys: - type x-kubernetes-list-type: map type: object type: object served: true storage: true subresources: status: {} status: acceptedNames: kind: Authorino listKind: AuthorinoList plural: authorinos singular: authorino conditions: - lastTransitionTime: "2026-03-18T16:54:18Z" message: no conflicts found reason: NoConflicts status: "True" type: NamesAccepted - lastTransitionTime: "2026-03-18T16:54:18Z" message: the initial names have been accepted reason: InitialNamesAccepted status: "True" type: Established storedVersions: - v1beta1