apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: kafkausers.kafka.strimzi.io
  labels:
    app: strimzi
spec:
  group: kafka.strimzi.io
  names:
    kind: KafkaUser
    listKind: KafkaUserList
    singular: kafkauser
    plural: kafkausers
    shortNames:
      - ku
    categories:
      - strimzi
  scope: Namespaced
  versions:
    - name: v1beta2
      served: true
      storage: true
      subresources:
        status: {}
      schema:
        openAPIV3Schema:
          type: object
          properties:
            spec:
              type: object
              description: The specification of the KafkaUser
              properties:
                authentication:
                  type: object
                  description: Authentication configuration for the user
                  properties:
                    type:
                      type: string
                      enum: [tls, tls-external, scram-sha-512]
                      description: The authentication mechanism
                authorization:
                  type: object
                  description: Authorization rules for the user
                  properties:
                    type:
                      type: string
                      enum: [simple]
                    acls:
                      type: array
                      description: Access Control List rules
                      items:
                        type: object
                        properties:
                          resource:
                            type: object
                            properties:
                              type:
                                type: string
                                enum: [topic, group, cluster, transactionalId]
                              name:
                                type: string
                              patternType:
                                type: string
                                enum: [literal, prefix]
                          operations:
                            type: array
                            items:
                              type: string
                              enum: [Read, Write, Create, Delete, Alter, Describe, ClusterAction, AlterConfigs, DescribeConfigs, IdempotentWrite, All]
                          host:
                            type: string
            status:
              type: object
              properties:
                conditions:
                  type: array
                  items:
                    type: object
                    properties:
                      type:
                        type: string
                      status:
                        type: string
                      message:
                        type: string
                observedGeneration:
                  type: integer
                username:
                  type: string
                  description: The actual Kafka username
                secret:
                  type: string
                  description: The Kubernetes Secret containing the user credentials