apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: managers.operator.tigera.io
spec:
  group: operator.tigera.io
  names:
    kind: Manager
    listKind: ManagerList
    plural: managers
    singular: manager
  scope: Cluster
  versions:
    - name: v1
      schema:
        openAPIV3Schema:
          description:
            Manager installs the Calico Enterprise manager graphical user
            interface. At most one instance of this resource is supported. It must be
            named "tigera-secure".
          properties:
            apiVersion:
              description:
                "APIVersion defines the versioned schema of this representation
                of an object. Servers should convert recognized schemas to the latest
                internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources"
              type: string
            kind:
              description:
                "Kind is a string value representing the REST resource this
                object represents. Servers may infer this from the endpoint the client
                submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
              type: string
            metadata:
              type: object
            spec:
              description:
                Specification of the desired state for the Calico Enterprise
                manager.
              properties:
                auth:
                  description:
                    Deprecated. Please use the Authentication CR for configuring
                    authentication.
                  properties:
                    authority:
                      description:
                        Authority configures the OAuth2/OIDC authority/issuer
                        when using OAuth2 or OIDC login.
                      type: string
                    clientID:
                      description:
                        ClientId configures the OAuth2/OIDC client ID to
                        use for OAuth2 or OIDC login.
                      type: string
                    type:
                      description:
                        "Type configures the type of authentication used
                        by the manager. Default: Token"
                      enum:
                        - Token
                        - Basic
                        - OIDC
                        - OAuth
                      type: string
                  type: object
              type: object
            status:
              description: Most recently observed state for the Calico Enterprise manager.
              properties:
                auth:
                  description:
                    Deprecated. Please use the Authentication CR for configuring
                    authentication.
                  properties:
                    authority:
                      description:
                        Authority configures the OAuth2/OIDC authority/issuer
                        when using OAuth2 or OIDC login.
                      type: string
                    clientID:
                      description:
                        ClientId configures the OAuth2/OIDC client ID to
                        use for OAuth2 or OIDC login.
                      type: string
                    type:
                      description:
                        "Type configures the type of authentication used
                        by the manager. Default: Token"
                      enum:
                        - Token
                        - Basic
                        - OIDC
                        - OAuth
                      type: string
                  type: object
                state:
                  description: State provides user-readable status.
                  type: string
              type: object
          type: object
      served: true
      storage: true
      subresources:
        status: {}
