{{- if .Values.installCRDs }}
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: infisicalstaticsecrets.secrets.infisical.com
  annotations:
    controller-gen.kubebuilder.io/version: v0.18.0
  labels:
  {{- include "secrets-operator.labels" . | nindent 4 }}
spec:
  group: secrets.infisical.com
  names:
    kind: InfisicalStaticSecret
    listKind: InfisicalStaticSecretList
    plural: infisicalstaticsecrets
    singular: infisicalstaticsecret
  scope: Namespaced
  versions:
  - additionalPrinterColumns:
    - jsonPath: .metadata.creationTimestamp
      name: Age
      type: date
    - jsonPath: .status.conditions[?(@.type=="secrets.infisical.com/LastReconcileAuthMethod")].message
      name: Auth Method
      type: string
    - jsonPath: .status.conditions[?(@.type=="secrets.infisical.com/LastReconcileStatus")].status
      name: Synced
      type: string
    - jsonPath: .status.conditions[?(@.type=="secrets.infisical.com/LastReconcileAffectedDeployments")].message
      name: Affected Deployments
      type: string
    name: v1beta1
    schema:
      openAPIV3Schema:
        description: InfisicalStaticSecret is the Schema for the InfisicalStaticSecret
          API.
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          spec:
            properties:
              infisicalAuthRef:
                properties:
                  name:
                    type: string
                  namespace:
                    type: string
                required:
                - name
                - namespace
                type: object
              sources:
                items:
                  properties:
                    environmentSlug:
                      type: string
                    projectId:
                      type: string
                    projectSlug:
                      type: string
                    recursive:
                      type: boolean
                    secretPath:
                      type: string
                    tagSlugs:
                      items:
                        type: string
                      type: array
                  required:
                  - environmentSlug
                  - secretPath
                  type: object
                type: array
              syncOptions:
                properties:
                  instantUpdates:
                    type: boolean
                  refreshInterval:
                    type: string
                required:
                - refreshInterval
                type: object
              targets:
                items:
                  properties:
                    creationPolicy:
                      enum:
                      - Owner
                      - Orphan
                      type: string
                    kind:
                      enum:
                      - Secret
                      - ConfigMap
                      type: string
                    metadata:
                      properties:
                        annotations:
                          additionalProperties:
                            type: string
                          type: object
                        labels:
                          additionalProperties:
                            type: string
                          type: object
                      required:
                      - annotations
                      - labels
                      type: object
                    name:
                      type: string
                    namespace:
                      type: string
                    secretType:
                      type: string
                    template:
                      properties:
                        data:
                          description: |-
                            Data defines the templated output. It accepts either a map of per-key
                            Go templates (each entry becomes one key in the resulting Secret /
                            ConfigMap) or a single Go template string whose rendered output is
                            YAML-decoded into a map of key/value pairs.
                          x-kubernetes-preserve-unknown-fields: true
                        engineVersion:
                          enum:
                          - v1
                          type: string
                      required:
                      - data
                      - engineVersion
                      type: object
                  required:
                  - creationPolicy
                  - kind
                  - name
                  - namespace
                  type: object
                type: array
            required:
            - infisicalAuthRef
            - sources
            - syncOptions
            - targets
            type: object
          status:
            description: InfisicalStaticSecretStatus defines the observed state of InfisicalAuth
            properties:
              conditions:
                items:
                  description: Condition contains details for one aspect of the current
                    state of this API Resource.
                  properties:
                    lastTransitionTime:
                      description: |-
                        lastTransitionTime is the last time the condition transitioned from one status to another.
                        This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
                      format: date-time
                      type: string
                    message:
                      description: |-
                        message is a human readable message indicating details about the transition.
                        This may be an empty string.
                      maxLength: 32768
                      type: string
                    observedGeneration:
                      description: |-
                        observedGeneration represents the .metadata.generation that the condition was set based upon.
                        For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
                        with respect to the current state of the instance.
                      format: int64
                      minimum: 0
                      type: integer
                    reason:
                      description: |-
                        reason contains a programmatic identifier indicating the reason for the condition's last transition.
                        Producers of specific condition types may define expected values and meanings for this field,
                        and whether the values are considered a guaranteed API.
                        The value should be a CamelCase string.
                        This field may not be empty.
                      maxLength: 1024
                      minLength: 1
                      pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
                      type: string
                    status:
                      description: status of the condition, one of True, False, Unknown.
                      enum:
                      - "True"
                      - "False"
                      - Unknown
                      type: string
                    type:
                      description: type of condition in CamelCase or in foo.example.com/CamelCase.
                      maxLength: 316
                      pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                      type: string
                  required:
                  - lastTransitionTime
                  - message
                  - reason
                  - status
                  - type
                  type: object
                type: array
            required:
            - conditions
            type: object
        type: object
    served: true
    storage: true
    subresources:
      status: {}
status:
  acceptedNames:
    kind: ""
    plural: ""
  conditions: []
  storedVersions: []
{{- end }}