kind: CustomResourceDefinition
spec:
  group: secrets.stackable.tech
  names:
    kind: TrustStore
    plural: truststores
    singular: truststore
    categories: []
    shortNames: []
  scope: Namespaced
  versions:
    - name: v1alpha1
      schema:
        openAPIV3Schema:
          type: object
          title: TrustStore
          required:
            - spec
          properties:
            spec:
              type: object
              required:
                - secretClassName
              properties:
                format:
                  enum:
                    - tls-pem
                    - tls-pkcs12
                    - kerberos
                    - null
                  type: string
                  nullable: true
                  description: The
                    [format](https://docs.stackable.tech/home/26.7/secret-operator/secretclass#format)
                    that the data should be converted into.
                targetKind:
                  enum:
                    - Secret
                    - ConfigMap
                  type: string
                  default: ConfigMap
                  description: >-
                    Which Kubernetes kind should be used to output the requested
                    information to.


                    The trust information (such as a `ca.crt`) can be considered
                    public information, so we put

                    it in a `ConfigMap` by default. However, some tools might
                    require it to be placed in a

                    `Secret`, so we also support that.


                    Can be either `ConfigMap` or `Secret`, defaults to
                    `ConfigMap`.
                tlsPemCaName:
                  type: string
                  default: ca.crt
                  description: >-
                    The name of the key in the ConfigMap/Secret, in which the
                    PEM encoded CA certificate should be placed.


                    Only takes effect in case the `format` is `tls-pem`.

                    Defaults to `ca.crt`.
                secretClassName:
                  type: string
                  description: The name of the SecretClass that the request concerns.
              description: |-
                A [TrustStore](https://docs.stackable.tech/home/26.7/secret-operator/truststore) requests information about how to
                validate secrets issued by a [SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass).

                The requested information is written to a ConfigMap with the same name as the TrustStore.
          description: A TrustStore requests information about how to validate secrets
            issued by a SecretClass.
      served: true
      storage: true
      subresources: {}
      additionalPrinterColumns: []
metadata:
  name: truststores.secrets.stackable.tech
apiVersion: apiextensions.k8s.io/v1
