feat: Add support for list of attributes with the same key

Signed-off-by: Douglass Kirkley <doug.kirkley@gmail.com>

Author: zmotso

api/common/attributes.go

@@ -0,0 +1,48 @@
+package common
+
+import (
+	"encoding/json"
+	"fmt"
+)
+
+// UserAttributes is a map of user attributes. It supports both string and []string values for attributes.
+// +kubebuilder:validation:Schemaless
+// +kubebuilder:pruning:PreserveUnknownFields
+type UserAttributes map[string][]string
+
+// UnmarshalJSON implements json.Unmarshaler.
+func (a *UserAttributes) UnmarshalJSON(data []byte) error {
+	var raw map[string]interface{}
+	if err := json.Unmarshal(data, &raw); err != nil {
+		return err
+	}
+
+	if *a == nil {
+		*a = make(UserAttributes, len(raw))
+	}
+
+	result := *a
+
+	for k, v := range raw {
+		switch value := v.(type) {
+		case string:
+			result[k] = []string{value}
+		case []interface{}:
+			var strSlice []string
+
+			for _, item := range value {
+				if str, ok := item.(string); ok {
+					strSlice = append(strSlice, str)
+				} else {
+					return fmt.Errorf("attribute '%s' contains a non-string value in the list", k)
+				}
+			}
+
+			result[k] = strSlice
+		default:
+			return fmt.Errorf("unsupported type for attribute '%s': %T", k, v)
+		}
+	}
+
+	return nil
+}

api/common/zz_generated.deepcopy.go

@@ -215,7 +215,7 @@ type ServiceAccount struct {
 	// Attributes is a map of service account attributes.
 	// +nullable
 	// +optional
-	Attributes map[string]string `json:"attributes,omitempty"`
+	Attributes common.UserAttributes `json:"attributes,omitempty"`
 
 	// Groups is a list of groups assigned to service account
 	// +nullable

api/v1/keycloakclient_types.go

@@ -58,7 +58,7 @@ type KeycloakRealmUserSpec struct {
 	// Attributes is a map of user attributes.
 	// +nullable
 	// +optional
-	Attributes map[string]string `json:"attributes,omitempty"`
+	Attributes common.UserAttributes `json:"attributes,omitempty"`
 
 	// ReconciliationStrategy is a strategy for reconciliation. Possible values: full, create-only.
 	// Default value: full. If set to create-only, user will be created only if it does not exist. If user exists, it will not be updated.

api/v1/keycloakrealmuser_types.go

@@ -612,10 +612,13 @@ spec:
                 properties:
                   attributes:
                     additionalProperties:
-                      type: string
+                      items:
+                        type: string
+                      type: array
                     description: Attributes is a map of service account attributes.
                     nullable: true
                     type: object
+                    x-kubernetes-preserve-unknown-fields: true
                   clientRoles:
                     description: ClientRoles is a list of client roles assigned to
                       service account.

api/v1/zz_generated.deepcopy.go

@@ -46,10 +46,13 @@ spec:
             properties:
               attributes:
                 additionalProperties:
-                  type: string
+                  items:
+                    type: string
+                  type: array
                 description: Attributes is a map of user attributes.
                 nullable: true
                 type: object
+                x-kubernetes-preserve-unknown-fields: true
               clientRoles:
                 description: ClientRoles is a list of client roles assigned to user.
                 items:

config/crd/bases/v1.edp.epam.com_keycloakclients.yaml

@@ -612,10 +612,13 @@ spec:
                 properties:
                   attributes:
                     additionalProperties:
-                      type: string
+                      items:
+                        type: string
+                      type: array
                     description: Attributes is a map of service account attributes.
                     nullable: true
                     type: object
+                    x-kubernetes-preserve-unknown-fields: true
                   clientRoles:
                     description: ClientRoles is a list of client roles assigned to
                       service account.

config/crd/bases/v1.edp.epam.com_keycloakrealmusers.yaml

@@ -46,10 +46,13 @@ spec:
             properties:
               attributes:
                 additionalProperties:
-                  type: string
+                  items:
+                    type: string
+                  type: array
                 description: Attributes is a map of user attributes.
                 nullable: true
                 type: object
+                x-kubernetes-preserve-unknown-fields: true
               clientRoles:
                 description: ClientRoles is a list of client roles assigned to user.
                 items:

deploy-templates/crds/v1.edp.epam.com_keycloakclients.yaml

@@ -3392,7 +3392,7 @@ ServiceAccount is a service account configuration.
     </thead>
     <tbody><tr>
         <td><b>attributes</b></td>
-        <td>map[string]string</td>
+        <td>map[string][]string</td>
         <td>
           Attributes is a map of service account attributes.<br/>
         </td>
@@ -6417,7 +6417,7 @@ KeycloakRealmUserSpec defines the desired state of KeycloakRealmUser.
         <td>true</td>
       </tr><tr>
         <td><b>attributes</b></td>
-        <td>map[string]string</td>
+        <td>map[string][]string</td>
         <td>
           Attributes is a map of user attributes.<br/>
         </td>