Add flow bindings to KeycloakRealm resource

keycloak · Nov 7, 2022 · f0b2224 · f0b2224
1 parent a2f8e4e
commit f0b2224
Show file tree

Hide file tree

Showing 2 changed files with 42 additions and 0 deletions.
diff --git a/deploy/crds/legacy.k8s.keycloak.org_keycloakrealms_crd.yaml b/deploy/crds/legacy.k8s.keycloak.org_keycloakrealms_crd.yaml
@@ -175,9 +175,15 @@ spec:
                       - alias
                       type: object
                     type: array
+                  browserFlow:
+                    description: Browser authentication flow
+                    type: string
                   bruteForceProtected:
                     description: Brute Force Detection
                     type: boolean
+                  clientAuthenticationFlow:
+                    description: Client authentication flow
+                    type: string
                   clientScopeMappings:
                     additionalProperties:
                       items:
@@ -886,12 +892,18 @@ spec:
                     required:
                     - name
                     type: object
+                  directGrantFlow:
+                    description: Direct Grant authentication flow
+                    type: string
                   displayName:
                     description: Realm display name.
                     type: string
                   displayNameHtml:
                     description: Realm HTML display name.
                     type: string
+                  dockerAuthenticationFlow:
+                    description: Docker Authentication flow
+                    type: string
                   duplicateEmailsAllowed:
                     description: Duplicate emails
                     type: boolean
@@ -1057,9 +1069,15 @@ spec:
                   registrationEmailAsUsername:
                     description: Email as username
                     type: boolean
+                  registrationFlow:
+                    description: Registration flow
+                    type: string
                   rememberMe:
                     description: Remember me
                     type: boolean
+                  resetCredentialsFlow:
+                    description: Reset Credentials authentication flow
+                    type: string
                   resetPasswordAllowed:
                     description: Forgot password
                     type: boolean

diff --git a/pkg/apis/keycloak/v1alpha1/keycloakrealm_types.go b/pkg/apis/keycloak/v1alpha1/keycloakrealm_types.go
@@ -230,6 +230,30 @@ type KeycloakAPIRealm struct {
 	// OTP Supported Applications
 	// +optional
 	OtpSupportedApplications []string `json:"otpSupportedApplications,omitempty"`
+
+	// Browser authentication flow
+	// +optional
+	BrowserFlow string `json:"browserFlow,omitempty"`
+
+	// Direct Grant authentication flow
+	// +optional
+	DirectGrantFlow string `json:"directGrantFlow,omitempty"`
+
+	// Client authentication flow
+	// +optional
+	ClientAuthenticationFlow string `json:"clientAuthenticationFlow,omitempty"`
+
+	// Reset Credentials authentication flow
+	// +optional
+	ResetCredentialsFlow string `json:"resetCredentialsFlow,omitempty"`
+
+	// Registration flow
+	// +optional
+	RegistrationFlow string `json:"registrationFlow,omitempty"`
+
+	// Docker Authentication flow
+	// +optional
+	DockerAuthenticationFlow string `json:"dockerAuthenticationFlow,omitempty"`
 }
 
 type RoleRepresentationArray []RoleRepresentation