apiVersion: org.fabrique.social.gouv.fr/v1alpha1
kind: RoleBinding
metadata:
  name: my-rolebinding
# RoleBindingSpec defines the desired state of RoleBinding.
# For Atlas users, only the "parameters" field is relevant.
spec:
  parameters:
    # Roles to give on the organization.
    organizationRoles:
      - name: string
    # A reference to an existing users.
    # Users can be referenced either by email, resource name, or matching labels.
    # email and resource name select only one user, while the matching labels can return
    # multiple users.
    #
    # The email, name and matchLabels are mutually exclusive, only one of them should be set.
    userRef:
      # The email of the referenced user.
      email: string
      # A labels selector. All users matching the given labels will be returned.
      matchLabels: {}
      # The metadata.name of the referenced User resource.
      name: string
    # Roles to give on Workspaces belonging to the Organization.
    workspaceRoles:
      - name: string
        # A reference to one or multiple Workspaces.
        # All Workspaces must belong to the Organization.
        workspaceRef:
          # Labels to filter the Workspaces.
          # All Workspaces that belong to the Organization
          # and match the labels will be returned.
          matchLabels: {}
          # Name of the referenced Workspace.
          name: string