feat: Add support for list of attributes with the same key

Signed-off-by: Douglass Kirkley <doug.kirkley@gmail.com>

Author: dougkirkley

api/common/attributes.go

@@ -0,0 +1,62 @@
+package common
+
+import (
+	"encoding/json"
+	"fmt"
+)
+
+// UserAttributes is a map of user attributes. It supports both string and []string values for attributes.
+// +kubebuilder:validation:Type=object
+type UserAttributes map[string][]string
+
+// UnmarshalJSON implements json.Unmarshaler.
+func (a *UserAttributes) UnmarshalJSON(data []byte) error {
+	var raw map[string]interface{}
+	if err := json.Unmarshal(data, &raw); err != nil {
+		return err
+	}
+
+	if *a == nil {
+		*a = make(UserAttributes)
+	}
+
+	result := *a
+
+	for k, v := range raw {
+		switch value := v.(type) {
+		case string:
+			result[k] = []string{value}
+		case []interface{}:
+			var strSlice []string
+
+			for _, item := range value {
+				if str, ok := item.(string); ok {
+					strSlice = append(strSlice, str)
+				} else {
+					return fmt.Errorf("attribute '%s' contains a non-string value in the list", k)
+				}
+			}
+
+			result[k] = strSlice
+		default:
+			return fmt.Errorf("unsupported type for attribute '%s': %T", k, v)
+		}
+	}
+
+	return nil
+}
+
+// MarshalJSON implements json.Marshaler.
+func (a UserAttributes) MarshalJSON() ([]byte, error) {
+	result := make(map[string]interface{})
+
+	for k, v := range a {
+		if len(v) == 1 {
+			result[k] = v[0]
+		} else {
+			result[k] = v
+		}
+	}
+
+	return json.Marshal(result)
+}

api/common/zz_generated.deepcopy.go

@@ -209,7 +209,7 @@ type ServiceAccount struct {
 	// Attributes is a map of service account attributes.
 	// +nullable
 	// +optional
-	Attributes map[string]string `json:"attributes,omitempty"`
+	Attributes common.UserAttributes `json:"attributes,omitempty"`
 
 	// Groups is a list of groups assigned to service account
 	// +nullable

api/v1/keycloakclient_types.go

@@ -58,7 +58,7 @@ type KeycloakRealmUserSpec struct {
 	// Attributes is a map of user attributes.
 	// +nullable
 	// +optional
-	Attributes map[string]string `json:"attributes,omitempty"`
+	Attributes common.UserAttributes `json:"attributes,omitempty"`
 
 	// ReconciliationStrategy is a strategy for reconciliation. Possible values: full, create-only.
 	// Default value: full. If set to create-only, user will be created only if it does not exist. If user exists, it will not be updated.

api/v1/keycloakrealmuser_types.go

@@ -587,8 +587,6 @@ spec:
                 nullable: true
                 properties:
                   attributes:
-                    additionalProperties:
-                      type: string
                     description: Attributes is a map of service account attributes.
                     nullable: true
                     type: object

api/v1/zz_generated.deepcopy.go

@@ -45,8 +45,6 @@ spec:
             description: KeycloakRealmUserSpec defines the desired state of KeycloakRealmUser.
             properties:
               attributes:
-                additionalProperties:
-                  type: string
                 description: Attributes is a map of user attributes.
                 nullable: true
                 type: object

config/crd/bases/v1.edp.epam.com_keycloakclients.yaml

@@ -587,8 +587,6 @@ spec:
                 nullable: true
                 properties:
                   attributes:
-                    additionalProperties:
-                      type: string
                     description: Attributes is a map of service account attributes.
                     nullable: true
                     type: object

config/crd/bases/v1.edp.epam.com_keycloakrealmusers.yaml

@@ -45,8 +45,6 @@ spec:
             description: KeycloakRealmUserSpec defines the desired state of KeycloakRealmUser.
             properties:
               attributes:
-                additionalProperties:
-                  type: string
                 description: Attributes is a map of user attributes.
                 nullable: true
                 type: object

deploy-templates/crds/v1.edp.epam.com_keycloakclients.yaml

@@ -3342,7 +3342,7 @@ ServiceAccount is a service account configuration.
     </thead>
     <tbody><tr>
         <td><b>attributes</b></td>
-        <td>map[string]string</td>
+        <td>object</td>
         <td>
           Attributes is a map of service account attributes.<br/>
         </td>
@@ -6367,7 +6367,7 @@ KeycloakRealmUserSpec defines the desired state of KeycloakRealmUser.
         <td>true</td>
       </tr><tr>
         <td><b>attributes</b></td>
-        <td>map[string]string</td>
+        <td>object</td>
         <td>
           Attributes is a map of user attributes.<br/>
         </td>