---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.14.0
  name: irsasetups.irsa.kkb0318.github.io
spec:
  group: irsa.kkb0318.github.io
  names:
    kind: IRSASetup
    listKind: IRSASetupList
    plural: irsasetups
    singular: irsasetup
  scope: Namespaced
  versions:
  - name: v1alpha1
    schema:
      openAPIV3Schema:
        description: IRSASetup represents a configuration for setting up IAM Roles
          for Service Accounts (IRSA) in a Kubernetes cluster.
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          spec:
            description: IRSASetupSpec defines the desired state of IRSASetup
            properties:
              auth:
                description: Auth contains authentication configuration details.
                properties:
                  secretRef:
                    description: SecretRef specifies the reference to the Kubernetes
                      secret containing authentication details.
                    properties:
                      name:
                        description: Name specifies the name of the secret.
                        type: string
                      namespace:
                        description: Namespace specifies the namespace of the secret.
                        type: string
                    required:
                    - name
                    type: object
                required:
                - secretRef
                type: object
              discovery:
                description: |-
                  Discovery configures the IdP Discovery process, essential for setting up IRSA by locating
                  the OIDC provider information.
                properties:
                  s3:
                    description: S3 specifies the AWS S3 bucket details where the
                      OIDC provider's discovery information is hosted.
                    properties:
                      bucketName:
                        description: BucketName is the name of the S3 bucket that
                          hosts the OIDC discovery information.
                        type: string
                      region:
                        description: Region denotes the AWS region where the S3 bucket
                          is located.
                        type: string
                    required:
                    - bucketName
                    - region
                    type: object
                type: object
              mode:
                description: Mode specifies the mode of operation. Can be either "selfhosted"
                  or "eks".
                type: string
            required:
            - discovery
            - mode
            type: object
          status:
            description: IRSASetupStatus defines the observed state of IRSASetup
            type: object
        type: object
    served: true
    storage: true
    subresources:
      status: {}