Skip to search

AuthentikGoogleWorkspaceProvider

goauthentik.io / v1alpha1

apiVersion: goauthentik.io/v1alpha1 kind: AuthentikGoogleWorkspaceProvider metadata: name: example
View raw schema
apiVersion string
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind string
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata object
spec object
AuthentikGoogleWorkspaceProviderSpec defines the desired state of an Authentik Google Workspace Provider
credentials string
Credentials is the Google service account credentials JSON
defaultGroupEmailDomain string required
DefaultGroupEmailDomain is the default group email domain
minLength: 1
delegatedSubject string
DelegatedSubject is the impersonated user email
dryRun boolean
DryRun prevents the provider from modifying or creating objects remotely
excludeUsersServiceAccount boolean
ExcludeUsersServiceAccount excludes the service account from user sync
filterGroup string
FilterGroup filters the synced groups
groupDeleteAction string
GroupDeleteAction is the action taken when a group is deleted
enum: do_nothing, delete, suspend
name string required
Name is the display name of the provider
minLength: 1
propertyMappings []string
PropertyMappings is a list of property mapping UUIDs to apply
propertyMappingsGroup []string
PropertyMappingsGroup is a list of property mapping UUIDs used for group creation/updating
syncPageSize integer
SyncPageSize controls the number of objects synced in a single task
format: int32
syncPageTimeout string
SyncPageTimeout is the timeout for synchronization of a single page
userDeleteAction string
UserDeleteAction is the action taken when a user is deleted
enum: do_nothing, delete, suspend
status object
AuthentikGoogleWorkspaceProviderStatus defines the observed state of AuthentikGoogleWorkspaceProvider
conditions []object
Conditions represent the latest available observations of the resource's state
lastTransitionTime string required
lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
message string required
message is a human readable message indicating details about the transition. This may be an empty string.
maxLength: 32768
observedGeneration integer
observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
format: int64
minimum: 0
reason string required
reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
minLength: 1
maxLength: 1024
status string required
status of the condition, one of True, False, Unknown.
enum: True, False, Unknown
type string required
type of condition in CamelCase or in foo.example.com/CamelCase.
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
maxLength: 316
observedGeneration integer
ObservedGeneration is the last observed generation of the resource
format: int64
providerId integer
ProviderID is the Authentik internal ID for the Google Workspace provider
format: int32

No matches. Try .spec.credentials for an exact path