iam.openfaas.com_policies.yaml

apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.11.4
  name: policies.iam.openfaas.com
spec:
  group: iam.openfaas.com
  names:
    kind: Policy
    listKind: PolicyList
    plural: policies
    singular: policy
  scope: Namespaced
  versions:
    - additionalPrinterColumns:
        - jsonPath: .spec.statement
          name: Statement
          type: string
      name: v1
      schema:
        openAPIV3Schema:
          description: Policy is used to define a policy for a function
          type: object
          required:
            - spec
          properties:
            apiVersion:
              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
              type: string
            kind:
              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
              type: string
            metadata:
              type: object
            spec:
              type: object
              required:
                - statement
              properties:
                statement:
                  type: array
                  items:
                    type: object
                    required:
                      - action
                      - effect
                      - resource
                      - sid
                    properties:
                      action:
                        description: Action is a set of actions that the policy applies to i.e. Function:Read
                        type: array
                        items:
                          type: string
                      condition:
                        description: 'Condition is a set of conditions that the policy applies to { "StringLike": { "jwt:https://my-identity-provider.com#sub-id": [ "1234567890", "0987654321" ], } }'
                        type: object
                        additionalProperties:
                          type: object
                          additionalProperties:
                            type: array
                            items:
                              type: string
                      effect:
                        description: Effect is the effect of the policy - only Allow is supported
                        type: string
                      resource:
                        description: Resource is a set of resources that the policy applies to - only namespaces are supported at present
                        type: array
                        items:
                          type: string
                      sid:
                        description: SID is the unique identifier for the policy
                        type: string
      served: true
      storage: true
      subresources: {}