---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    operatorframework.io/installed-alongside-ea6b3d74f5d6fd0c: keycloak-system/keycloak-operator.v26.7.0
  creationTimestamp: "2026-07-12T19:30:30Z"
  generation: 1
  labels:
    olm.managed: "true"
    operators.coreos.com/keycloak-operator.keycloak-system: ""
  managedFields:
  - apiVersion: apiextensions.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:operatorframework.io/installed-alongside-ea6b3d74f5d6fd0c: {}
        f:labels:
          .: {}
          f:olm.managed: {}
      f:spec:
        f:conversion:
          .: {}
          f:strategy: {}
        f:group: {}
        f:names:
          f:kind: {}
          f:listKind: {}
          f:plural: {}
          f:singular: {}
        f:scope: {}
        f:versions: {}
    manager: catalog
    operation: Update
    time: "2026-07-12T19:30:30Z"
  - apiVersion: apiextensions.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:acceptedNames:
          f:kind: {}
          f:listKind: {}
          f:plural: {}
          f:singular: {}
        f:conditions:
          k:{"type":"Established"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"NamesAccepted"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver
    operation: Update
    subresource: status
    time: "2026-07-12T19:30:30Z"
  - apiVersion: apiextensions.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:labels:
          f:operators.coreos.com/keycloak-operator.keycloak-system: {}
    manager: olm
    operation: Update
    time: "2026-07-12T19:30:35Z"
  name: keycloakoidcclients.k8s.keycloak.org
  resourceVersion: "21305"
  uid: 137aefec-6b7b-4e3d-baa9-998836edf964
spec:
  conversion:
    strategy: None
  group: k8s.keycloak.org
  names:
    kind: KeycloakOIDCClient
    listKind: KeycloakOIDCClientList
    plural: keycloakoidcclients
    singular: keycloakoidcclient
  scope: Namespaced
  versions:
  - name: v2alpha1
    schema:
      openAPIV3Schema:
        properties:
          spec:
            properties:
              client:
                properties:
                  appUrl:
                    description: URL to the application's homepage that is represented
                      by this client
                    type: string
                  auth:
                    description: Authentication configuration for this client
                    properties:
                      certificate:
                        description: Public key used to authenticate this client with
                          Signed JWT authentication
                        type: string
                      method:
                        description: Client authentication method (e.g. `client-secret`,
                          `client-secret-jwt`)
                        type: string
                      secretRef:
                        description: Secret containing the client secret
                        properties:
                          key:
                            type: string
                          name:
                            type: string
                          optional:
                            type: boolean
                        type: object
                    type: object
                  createdTimestamp:
                    description: Timestamp when the client was created
                    type: integer
                  description:
                    description: Human readable description of the client
                    type: string
                  displayName:
                    description: Human readable name of the client
                    type: string
                  enabled:
                    description: Whether this client is enabled
                    type: boolean
                  loginFlows:
                    description: Login flows that are enabled for this client
                    items:
                      enum:
                      - CIBA
                      - DEVICE
                      - DIRECT_GRANT
                      - IMPLICIT
                      - SERVICE_ACCOUNT
                      - STANDARD
                      - TOKEN_EXCHANGE
                      type: string
                    type: array
                  redirectUris:
                    description: URIs that the browser can redirect to after login
                    items:
                      type: string
                    type: array
                  roles:
                    description: Roles associated with this client
                    items:
                      type: string
                    type: array
                  serviceAccountRoles:
                    description: Roles assigned to the service account
                    items:
                      type: string
                    type: array
                  updatedTimestamp:
                    description: Timestamp when the client was last updated
                    type: integer
                  webOrigins:
                    description: Web origins that are allowed to make requests to
                      this client
                    items:
                      type: string
                    type: array
                type: object
              keycloakCRName:
                description: The name of the Keycloak CR to reference, in the same
                  namespace.
                type: string
                x-kubernetes-validations:
                - message: keycloakCrName is immutable
                  rule: self == oldSelf
              realm:
                description: The realm of the Client
                type: string
                x-kubernetes-validations:
                - message: realm is immutable
                  rule: self == oldSelf
            required:
            - client
            - keycloakCRName
            - realm
            type: object
          status:
            properties:
              conditions:
                items:
                  properties:
                    lastTransitionTime:
                      type: string
                    message:
                      type: string
                    observedGeneration:
                      type: integer
                    status:
                      type: string
                    type:
                      type: string
                  type: object
                type: array
              hash:
                type: string
              observedGeneration:
                type: integer
              uuid:
                type: string
            type: object
        required:
        - spec
        type: object
    served: true
    storage: true
    subresources:
      status: {}
status:
  acceptedNames:
    kind: KeycloakOIDCClient
    listKind: KeycloakOIDCClientList
    plural: keycloakoidcclients
    singular: keycloakoidcclient
  conditions:
  - lastTransitionTime: "2026-07-12T19:30:30Z"
    message: no conflicts found
    reason: NoConflicts
    status: "True"
    type: NamesAccepted
  - lastTransitionTime: "2026-07-12T19:30:30Z"
    message: the initial names have been accepted
    reason: InitialNamesAccepted
    status: "True"
    type: Established
  storedVersions:
  - v2alpha1