One-of constraints for fields of AuthConfig v1beta2

Kuadrant · Aug 30, 2023 · aca78c6 · aca78c6
1 parent 86455df
commit aca78c6
Show file tree

Hide file tree

Showing 2 changed files with 350 additions and 1 deletion.
diff --git a/install/crd/patches/oneof_in_authconfigs.yaml b/install/crd/patches/oneof_in_authconfigs.yaml
@@ -1,5 +1,6 @@
-# Enables oneOf validation for the identity/metadata/authorization modes
+# Enables oneOf validation for the identity/authentication, metadata, authorization, and response fields.
 
+# v1beta1
 - op: add
   path: /spec/versions/0/schema/openAPIV3Schema/properties/spec/properties/identity/items/oneOf
   value:
@@ -162,3 +163,175 @@
         selector: {}
         value: {}
       required: [operator, selector]
+
+# v1beta2
+- op: add
+  path: /spec/versions/1/schema/openAPIV3Schema/properties/spec/properties/authentication/additionalProperties/oneOf
+  value:
+    - properties:
+        credentials: {}
+        oauth2Introspection: {}
+      required: [oauth2Introspection]
+    - properties:
+        credentials: {}
+        jwt: {}
+      required: [jwt]
+    - properties:
+        credentials: {}
+        apiKey: {}
+      required: [apiKey]
+    - properties:
+        credentials: {}
+        x509: {}
+      required: [x509]
+    - properties:
+        credentials: {}
+        kubernetesTokenReview: {}
+      required: [kubernetesTokenReview]
+    - properties:
+        credentials: {}
+        anonymous: {}
+      required: [anonymous]
+    - properties:
+        credentials: {}
+        plain: {}
+      required: [plain]
+
+- op: add
+  path: /spec/versions/1/schema/openAPIV3Schema/properties/spec/properties/metadata/additionalProperties/oneOf
+  value:
+    - properties:
+        userInfo: {}
+      required: [userInfo]
+    - properties:
+        uma: {}
+      required: [uma]
+    - properties:
+        http: {}
+      required: [http]
+
+- op: add
+  path: /spec/versions/1/schema/openAPIV3Schema/properties/spec/properties/authorization/additionalProperties/oneOf
+  value:
+    - properties:
+        opa: {}
+      required: [opa]
+    - properties:
+        patternMatching: {}
+      required: [patternMatching]
+    - properties:
+        kubernetesSubjectAccessReview: {}
+      required: [kubernetesSubjectAccessReview]
+    - properties:
+        spicedb: {}
+      required: [spicedb]
+
+- op: add
+  path: /spec/versions/1/schema/openAPIV3Schema/properties/spec/properties/response/properties/success/properties/headers/additionalProperties/oneOf
+  value:
+    - properties:
+        wristband: {}
+      required: [wristband]
+    - properties:
+        json: {}
+      required: [json]
+    - properties:
+        plain: {}
+      required: [plain]
+
+- op: add
+  path: /spec/versions/1/schema/openAPIV3Schema/properties/spec/properties/response/properties/success/properties/dynamicMetadata/additionalProperties/oneOf
+  value:
+    - properties:
+        wristband: {}
+      required: [wristband]
+    - properties:
+        json: {}
+      required: [json]
+    - properties:
+        plain: {}
+      required: [plain]
+
+- op: add
+  path: /spec/versions/1/schema/openAPIV3Schema/properties/spec/properties/authorization/additionalProperties/properties/patternMatching/properties/patterns/items/oneOf
+  value:
+    - properties:
+        patternRef: {}
+      required: [patternRef]
+    - properties:
+        operator: {}
+        selector: {}
+        value: {}
+      required: [operator, selector]
+
+- op: add
+  path: /spec/versions/1/schema/openAPIV3Schema/properties/spec/properties/when/items/oneOf
+  value:
+    - properties:
+        patternRef: {}
+      required: [patternRef]
+    - properties:
+        operator: {}
+        selector: {}
+        value: {}
+      required: [operator, selector]
+
+- op: add
+  path: /spec/versions/1/schema/openAPIV3Schema/properties/spec/properties/authentication/additionalProperties/properties/when/items/oneOf
+  value:
+    - properties:
+        patternRef: {}
+      required: [patternRef]
+    - properties:
+        operator: {}
+        selector: {}
+        value: {}
+      required: [operator, selector]
+
+- op: add
+  path: /spec/versions/1/schema/openAPIV3Schema/properties/spec/properties/metadata/additionalProperties/properties/when/items/oneOf
+  value:
+    - properties:
+        patternRef: {}
+      required: [patternRef]
+    - properties:
+        operator: {}
+        selector: {}
+        value: {}
+      required: [operator, selector]
+
+- op: add
+  path: /spec/versions/1/schema/openAPIV3Schema/properties/spec/properties/authorization/additionalProperties/properties/when/items/oneOf
+  value:
+    - properties:
+        patternRef: {}
+      required: [patternRef]
+    - properties:
+        operator: {}
+        selector: {}
+        value: {}
+      required: [operator, selector]
+
+- op: add
+  path: /spec/versions/1/schema/openAPIV3Schema/properties/spec/properties/response/properties/success/properties/headers/additionalProperties/properties/when/items/oneOf
+  value:
+    - properties:
+        patternRef: {}
+      required: [patternRef]
+    - properties:
+        operator: {}
+        selector: {}
+        value: {}
+      required: [operator, selector]
+
+- op: add
+  path: /spec/versions/1/schema/openAPIV3Schema/properties/spec/properties/response/properties/success/properties/dynamicMetadata/additionalProperties/properties/when/items/oneOf
+  value:
+    - properties:
+        patternRef: {}
+      required: [patternRef]
+    - properties:
+        operator: {}
+        selector: {}
+        value: {}
+      required: [operator, selector]