apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  creationTimestamp: null
  name: teleportaccesslists.resources.teleport.dev
spec:
  group: resources.teleport.dev
  names:
    kind: TeleportAccessList
    listKind: TeleportAccessListList
    plural: teleportaccesslists
    shortNames:
    - accesslist
    - accesslists
    singular: teleportaccesslist
  scope: Namespaced
  versions:
  - name: v1
    schema:
      openAPIV3Schema:
        description: AccessList is the Schema for the accesslists API
        properties:
          apiVersion:
            description: 'APIVersion defines the versioned schema of this representation
              of an object. Servers should convert recognized schemas to the latest
              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
            type: string
          kind:
            description: 'Kind is a string value representing the REST resource this
              object represents. Servers may infer this from the endpoint the client
              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
            type: string
          metadata:
            type: object
          spec:
            description: AccessList resource definition v1 from Teleport
            properties:
              audit:
                description: audit describes the frequency that this access list must
                  be audited.
                nullable: true
                properties:
                  next_audit_date:
                    description: next_audit_date is when the next audit date should
                      be done by.
                    format: date-time
                    type: string
                  notifications:
                    description: notifications is the configuration for notifying
                      users.
                    nullable: true
                    properties:
                      start:
                        description: start specifies when to start notifying users
                          that the next audit date is coming up.
                        format: duration
                        type: string
                    type: object
                  recurrence:
                    description: recurrence is the recurrence definition
                    nullable: true
                    properties:
                      day_of_month:
                        description: day_of_month is the day of month that reviews
                          will be scheduled on.
                        x-kubernetes-int-or-string: true
                      frequency:
                        description: frequency is the frequency of reviews.
                        x-kubernetes-int-or-string: true
                    type: object
                type: object
              description:
                description: description is an optional plaintext description of the
                  access list.
                type: string
              grants:
                description: grants describes the access granted by membership to
                  this access list.
                nullable: true
                properties:
                  roles:
                    description: roles are the roles that are granted to users who
                      are members of the access list.
                    items:
                      type: string
                    nullable: true
                    type: array
                  traits:
                    additionalProperties:
                      items:
                        type: string
                      type: array
                    description: traits are the traits that are granted to users who
                      are members of the access list.
                    type: object
                type: object
              membership:
                description: 'membership defines how list membership is applied. There
                  are two possible values: `explicit` (default): To be considered
                  ag member of the access list, a user must both meet the `membership_requires`
                  conditions AND be explicitly added to the list. `implicit`: Any
                  user meeting the `membership_requires` conditions will automatically
                  be cosidered a member of this list.'
                type: string
              membership_requires:
                description: membership_requires describes the requirements for a
                  user to be a member of the access list. For a membership to an access
                  list to be effective, the user must meet the requirements of Membership_requires
                  and must be in the members list.
                nullable: true
                properties:
                  roles:
                    description: roles are the user roles that must be present for
                      the user to obtain access.
                    items:
                      type: string
                    nullable: true
                    type: array
                  traits:
                    additionalProperties:
                      items:
                        type: string
                      type: array
                    description: traits are the traits that must be present for the
                      user to obtain access.
                    type: object
                type: object
              owner_grants:
                description: owner_grants describes the access granted by owners to
                  this access list.
                nullable: true
                properties:
                  roles:
                    description: roles are the roles that are granted to users who
                      are members of the access list.
                    items:
                      type: string
                    nullable: true
                    type: array
                  traits:
                    additionalProperties:
                      items:
                        type: string
                      type: array
                    description: traits are the traits that are granted to users who
                      are members of the access list.
                    type: object
                type: object
              owners:
                description: owners is a list of owners of the access list.
                items:
                  properties:
                    description:
                      description: description is the plaintext description of the
                        owner and why they are an owner.
                      type: string
                    ineligible_status:
                      description: ineligible_status describes if this owner is eligible
                        or not and if not, describes how they're lacking eligibility.
                      x-kubernetes-int-or-string: true
                    name:
                      description: name is the username of the owner.
                      type: string
                  type: object
                nullable: true
                type: array
              ownership:
                description: 'ownership defines how list ownership of this list is
                  determined. There are two possible values: `explicit` (default):
                  To be considered an owner of the access list, a user must both meet
                  the `ownership_requires` conditions AND be explicitly added to the
                  list. `implicit`: Any user meeting the `ownership_requires` conditions
                  will automatically be considered an owner of this list.'
                type: string
              ownership_requires:
                description: ownership_requires describes the requirements for a user
                  to be an owner of the access list. For ownership of an access list
                  to be effective, the user must meet the requirements of ownership_requires
                  and must be in the owners list.
                nullable: true
                properties:
                  roles:
                    description: roles are the user roles that must be present for
                      the user to obtain access.
                    items:
                      type: string
                    nullable: true
                    type: array
                  traits:
                    additionalProperties:
                      items:
                        type: string
                      type: array
                    description: traits are the traits that must be present for the
                      user to obtain access.
                    type: object
                type: object
              title:
                description: title is a plaintext short description of the access
                  list.
                type: string
            type: object
          status:
            description: Status defines the observed state of the Teleport resource
            properties:
              conditions:
                description: Conditions represent the latest available observations
                  of an object's state
                items:
                  description: "Condition contains details for one aspect of the current
                    state of this API Resource.\n---\nThis struct is intended for
                    direct use as an array at the field path .status.conditions.  For
                    example,\n\n\n\ttype FooStatus struct{\n\t    // Represents the
                    observations of a foo's current state.\n\t    // Known .status.conditions.type
                    are: \"Available\", \"Progressing\", and \"Degraded\"\n\t    //
                    +patchMergeKey=type\n\t    // +patchStrategy=merge\n\t    // +listType=map\n\t
                    \   // +listMapKey=type\n\t    Conditions []metav1.Condition `json:\"conditions,omitempty\"
                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t
                    \   // other fields\n\t}"
                  properties:
                    lastTransitionTime:
                      description: |-
                        lastTransitionTime is the last time the condition transitioned from one status to another.
                        This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
                      format: date-time
                      type: string
                    message:
                      description: |-
                        message is a human readable message indicating details about the transition.
                        This may be an empty string.
                      maxLength: 32768
                      type: string
                    observedGeneration:
                      description: |-
                        observedGeneration represents the .metadata.generation that the condition was set based upon.
                        For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
                        with respect to the current state of the instance.
                      format: int64
                      minimum: 0
                      type: integer
                    reason:
                      description: |-
                        reason contains a programmatic identifier indicating the reason for the condition's last transition.
                        Producers of specific condition types may define expected values and meanings for this field,
                        and whether the values are considered a guaranteed API.
                        The value should be a CamelCase string.
                        This field may not be empty.
                      maxLength: 1024
                      minLength: 1
                      pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
                      type: string
                    status:
                      description: status of the condition, one of True, False, Unknown.
                      enum:
                      - "True"
                      - "False"
                      - Unknown
                      type: string
                    type:
                      description: |-
                        type of condition in CamelCase or in foo.example.com/CamelCase.
                        ---
                        Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be
                        useful (see .node.status.conditions), the ability to deconflict is important.
                        The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
                      maxLength: 316
                      pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                      type: string
                  required:
                  - lastTransitionTime
                  - message
                  - reason
                  - status
                  - type
                  type: object
                type: array
              teleportResourceID:
                format: int64
                type: integer
            type: object
        type: object
    served: true
    storage: true
    subresources:
      status: {}
status:
  acceptedNames:
    kind: ""
    plural: ""
  conditions: null
  storedVersions: null
