From 66322057b92a8ff035b23192b037b21e3d0586c8 Mon Sep 17 00:00:00 2001
From: Gabriel Saratura <gabriel.saratura@vshn.net>
Date: Wed, 8 May 2024 13:38:45 +0200
Subject: [PATCH] Bump stardog-userrole-operator

---
 README.md                                     |   2 +-
 appuio/stardog-userrole-operator/Chart.yaml   |   4 +-
 appuio/stardog-userrole-operator/README.md    |   4 +-
 .../crd/databases.yaml                        | 199 ++++++++--------
 .../crd/organizations.yaml                    | 208 +++++++++--------
 .../crd/stardoginstance.yaml                  | 154 +++++++------
 .../crd/stardogrole.yaml                      | 215 +++++++++---------
 .../crd/stardoguser.yaml                      | 159 ++++++-------
 .../test/deployment_test.go                   |   4 +-
 appuio/stardog-userrole-operator/values.yaml  |   2 +-
 10 files changed, 499 insertions(+), 452 deletions(-)

diff --git a/README.md b/README.md
index c7280e0c..da15a117 100644
--- a/README.md
+++ b/README.md
@@ -31,7 +31,7 @@ helm repo add appuio https://charts.appuio.ch
 | [![chart downloads](https://img.shields.io/github/downloads/appuio/charts/signalilo-0.12.1/total)](https://github.com/appuio/charts/releases/tag/signalilo-0.12.1) | [signalilo](appuio/signalilo/README.md) |
 | [![chart downloads](https://img.shields.io/github/downloads/appuio/charts/snappass-1.0.0/total)](https://github.com/appuio/charts/releases/tag/snappass-1.0.0) | [snappass](appuio/snappass/README.md) |
 | [![chart downloads](https://img.shields.io/github/downloads/appuio/charts/stardog-0.25.0/total)](https://github.com/appuio/charts/releases/tag/stardog-0.25.0) | [stardog](appuio/stardog/README.md) |
-| [![chart downloads](https://img.shields.io/github/downloads/appuio/charts/stardog-userrole-operator-0.2.3/total)](https://github.com/appuio/charts/releases/tag/stardog-userrole-operator-0.2.3) | [stardog-userrole-operator](appuio/stardog-userrole-operator/README.md) |
+| [![chart downloads](https://img.shields.io/github/downloads/appuio/charts/stardog-userrole-operator-0.3.0/total)](https://github.com/appuio/charts/releases/tag/stardog-userrole-operator-0.3.0) | [stardog-userrole-operator](appuio/stardog-userrole-operator/README.md) |
 | [![chart downloads](https://img.shields.io/github/downloads/appuio/charts/trifid-2.0.2/total)](https://github.com/appuio/charts/releases/tag/trifid-2.0.2) | [trifid](appuio/trifid/README.md) |
 
 ## Add / Update Charts
diff --git a/appuio/stardog-userrole-operator/Chart.yaml b/appuio/stardog-userrole-operator/Chart.yaml
index b6964995..d949f52d 100644
--- a/appuio/stardog-userrole-operator/Chart.yaml
+++ b/appuio/stardog-userrole-operator/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: stardog-userrole-operator
-version: 0.2.3
-appVersion: 0.2.3
+version: 0.3.0
+appVersion: 0.3.0
 description: Stardog User and Role Operator
 sources:
   - https://github.com/vshn/stardog-userrole-operator
diff --git a/appuio/stardog-userrole-operator/README.md b/appuio/stardog-userrole-operator/README.md
index 435bd188..1a73b845 100644
--- a/appuio/stardog-userrole-operator/README.md
+++ b/appuio/stardog-userrole-operator/README.md
@@ -1,6 +1,6 @@
 # stardog-userrole-operator
 
-![Version: 0.2.3](https://img.shields.io/badge/Version-0.2.3-informational?style=flat-square) ![AppVersion: 0.2.3](https://img.shields.io/badge/AppVersion-0.2.3-informational?style=flat-square)
+![Version: 0.3.0](https://img.shields.io/badge/Version-0.3.0-informational?style=flat-square) ![AppVersion: 0.3.0](https://img.shields.io/badge/AppVersion-0.3.0-informational?style=flat-square)
 
 Stardog User and Role Operator
 
@@ -27,7 +27,7 @@ Edit the README.gotmpl.md template instead.
 | image.pullPolicy | string | `"Always"` |  |
 | image.registry | string | `"ghcr.io"` |  |
 | image.repository | string | `"vshn/stardog-userrole-operator"` |  |
-| image.tag | string | `"v0.2.3"` |  |
+| image.tag | string | `"v0.3.0"` |  |
 | imagePullSecrets | list | `[]` |  |
 | leaderElection.enabled | bool | `false` | Enable leader election for multiple replicas |
 | metrics.proxy.enabled | bool | `false` | Enable metrics via service behind a authenticated proxy |
diff --git a/appuio/stardog-userrole-operator/crd/databases.yaml b/appuio/stardog-userrole-operator/crd/databases.yaml
index 06135f47..60ddb334 100644
--- a/appuio/stardog-userrole-operator/crd/databases.yaml
+++ b/appuio/stardog-userrole-operator/crd/databases.yaml
@@ -3,8 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.9.0
-  creationTimestamp: null
+    controller-gen.kubebuilder.io/version: v0.14.0
   name: databases.stardog.vshn.ch
 spec:
   group: stardog.vshn.ch
@@ -15,95 +14,107 @@ spec:
     singular: database
   scope: Cluster
   versions:
-  - name: v1beta1
-    schema:
-      openAPIV3Schema:
-        description: Database is the Schema for the databases API
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: DatabaseSpec defines the desired state of the Database
-            properties:
-              databaseName:
-                description: DatabaseName the database name that has to be created
-                  in the Stardog server
-                type: string
-              namedGraphPrefix:
-                description: NamedGraphPrefix a prefix for a Stardog Named Graph.
-                type: string
-              options:
-                description: Options is the Stardog configuration options for this
-                  database. Only json input is valid.
-                type: string
-              stardogInstanceRefs:
-                description: StardogInstanceRefs contains the reference to the Stardog
-                  instance the database should exist in
-                items:
-                  description: StardogInstanceRef contains name and namespace for
-                    a stardog instance
-                  properties:
-                    name:
-                      type: string
-                    namespace:
-                      type: string
-                  type: object
-                type: array
-            type: object
-          status:
-            description: DatabaseStatus defines the observed state of the Database
-            properties:
-              conditions:
-                items:
-                  description: StardogCondition describes a status condition of a
-                    StardogRole
-                  properties:
-                    lastTransitionTime:
-                      format: date-time
-                      type: string
-                    message:
-                      type: string
-                    reason:
-                      type: string
-                    status:
-                      type: string
-                    type:
-                      type: string
-                  required:
-                  - status
-                  - type
-                  type: object
-                type: array
-              databaseName:
-                type: string
-              namedGraphPrefix:
-                type: string
-              options:
-                type: string
-              stardogInstanceRef:
-                items:
-                  description: StardogInstanceRef contains name and namespace for
-                    a stardog instance
-                  properties:
-                    name:
-                      type: string
-                    namespace:
-                      type: string
-                  type: object
-                type: array
-            type: object
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
+    - name: v1beta1
+      schema:
+        openAPIV3Schema:
+          description: Database is the Schema for the databases API
+          properties:
+            apiVersion:
+              description: |-
+                APIVersion defines the versioned schema of this representation of an object.
+                Servers should convert recognized schemas to the latest internal value, and
+                may reject unrecognized values.
+                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+              type: string
+            kind:
+              description: |-
+                Kind is a string value representing the REST resource this object represents.
+                Servers may infer this from the endpoint the client submits requests to.
+                Cannot be updated.
+                In CamelCase.
+                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: DatabaseSpec defines the desired state of the Database
+              properties:
+                addUserForNonHiddenGraphs:
+                  description: |-
+                    AddUserForNonHiddenGraphs a dynamically managed user of this db with custom permissions
+                    Mainly used to not have access to hidden graphs
+                  type: string
+                databaseName:
+                  description: DatabaseName the database name that has to be created
+                    in the Stardog server
+                  type: string
+                namedGraphPrefix:
+                  description: NamedGraphPrefix a prefix for a Stardog Named Graph.
+                  type: string
+                options:
+                  description: Options is the Stardog configuration options for this
+                    database. Only json input is valid.
+                  type: string
+                stardogInstanceRefs:
+                  description: StardogInstanceRefs contains the reference to the Stardog
+                    instance the database should exist in
+                  items:
+                    description: StardogInstanceRef contains name and namespace for
+                      a stardog instance
+                    properties:
+                      name:
+                        type: string
+                      namespace:
+                        type: string
+                    type: object
+                  type: array
+              type: object
+            status:
+              description: DatabaseStatus defines the observed state of the Database
+              properties:
+                addUserForNonHiddenGraphs:
+                  type: string
+                conditions:
+                  items:
+                    description: StardogCondition describes a status condition of a
+                      StardogRole
+                    properties:
+                      lastTransitionTime:
+                        format: date-time
+                        type: string
+                      message:
+                        type: string
+                      reason:
+                        type: string
+                      status:
+                        type: string
+                      type:
+                        type: string
+                    required:
+                      - status
+                      - type
+                    type: object
+                  type: array
+                databaseName:
+                  type: string
+                namedGraphPrefix:
+                  type: string
+                options:
+                  type: string
+                stardogInstanceRef:
+                  items:
+                    description: StardogInstanceRef contains name and namespace for
+                      a stardog instance
+                    properties:
+                      name:
+                        type: string
+                      namespace:
+                        type: string
+                    type: object
+                  type: array
+              type: object
+          type: object
+      served: true
+      storage: true
+      subresources:
+        status: {}
diff --git a/appuio/stardog-userrole-operator/crd/organizations.yaml b/appuio/stardog-userrole-operator/crd/organizations.yaml
index 4bca1756..5f77a8d5 100644
--- a/appuio/stardog-userrole-operator/crd/organizations.yaml
+++ b/appuio/stardog-userrole-operator/crd/organizations.yaml
@@ -3,8 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.9.0
-  creationTimestamp: null
+    controller-gen.kubebuilder.io/version: v0.14.0
   name: organizations.stardog.vshn.ch
 spec:
   group: stardog.vshn.ch
@@ -15,92 +14,123 @@ spec:
     singular: organization
   scope: Cluster
   versions:
-  - name: v1beta1
-    schema:
-      openAPIV3Schema:
-        description: Organization is the Schema for the organizations API
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: OrganizationSpec defines the desired state of an Organization
-            properties:
-              databaseRef:
-                description: DatabaseRef is the name of the Database this Organization
-                  is assigned to
-                type: string
-              displayName:
-                description: DisplayName is the long name of an organization
-                type: string
-              name:
-                description: Name is the short name of an organization
-                type: string
-              namedGraphs:
-                description: NamedGraphs are the suffix graph names for this organization.
-                  The prefix can be found in the Database resource. The final graphs
-                  is defined as prefix + "/" + orgName + "/" suffix
-                items:
+    - name: v1beta1
+      schema:
+        openAPIV3Schema:
+          description: Organization is the Schema for the organizations API
+          properties:
+            apiVersion:
+              description: |-
+                APIVersion defines the versioned schema of this representation of an object.
+                Servers should convert recognized schemas to the latest internal value, and
+                may reject unrecognized values.
+                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+              type: string
+            kind:
+              description: |-
+                Kind is a string value representing the REST resource this object represents.
+                Servers may infer this from the endpoint the client submits requests to.
+                Cannot be updated.
+                In CamelCase.
+                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: OrganizationSpec defines the desired state of an Organization
+              properties:
+                databaseRef:
+                  description: DatabaseRef is the name of the Database this Organization
+                    is assigned to
                   type: string
-                type: array
-            type: object
-          status:
-            description: OrganizationStatus defines the observed state of the Organization
-            properties:
-              conditions:
-                items:
-                  description: StardogCondition describes a status condition of a
-                    StardogRole
-                  properties:
-                    lastTransitionTime:
-                      format: date-time
-                      type: string
-                    message:
-                      type: string
-                    reason:
-                      type: string
-                    status:
-                      type: string
-                    type:
-                      type: string
-                  required:
-                  - status
-                  - type
-                  type: object
-                type: array
-              databaseRef:
-                type: string
-              displayName:
-                type: string
-              name:
-                type: string
-              namedGraphs:
-                items:
+                displayName:
+                  description: DisplayName is the long name of an organization
                   type: string
-                type: array
-              stardogInstanceRefs:
-                items:
-                  description: StardogInstanceRef contains name and namespace for
-                    a stardog instance
-                  properties:
-                    name:
-                      type: string
-                    namespace:
-                      type: string
-                  type: object
-                type: array
-            type: object
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
+                name:
+                  description: Name is the short name of an organization
+                  type: string
+                namedGraphs:
+                  description: |-
+                    NamedGraphs are the suffix graph names for this organization. The prefix can be found in the Database resource.
+                    The final graphs is defined as prefix + "/" + orgName + "/" suffix
+                  items:
+                    description: NamedGraph defines the name and if necessary add another
+                      hidden named graph for this named graph
+                    properties:
+                      addHidden:
+                        default: false
+                        description: AddHidden adds another graph with the same name
+                          but with a prefix "<named-graph-name/hidden>"
+                        type: boolean
+                      name:
+                        description: The name of the Named Graph
+                        type: string
+                    required:
+                      - addHidden
+                    type: object
+                  type: array
+              type: object
+            status:
+              description: OrganizationStatus defines the observed state of the Organization
+              properties:
+                conditions:
+                  items:
+                    description: StardogCondition describes a status condition of a
+                      StardogRole
+                    properties:
+                      lastTransitionTime:
+                        format: date-time
+                        type: string
+                      message:
+                        type: string
+                      reason:
+                        type: string
+                      status:
+                        type: string
+                      type:
+                        type: string
+                    required:
+                      - status
+                      - type
+                    type: object
+                  type: array
+                databaseRef:
+                  type: string
+                displayName:
+                  type: string
+                name:
+                  type: string
+                namedGraphs:
+                  items:
+                    description: NamedGraph defines the name and if necessary add another
+                      hidden named graph for this named graph
+                    properties:
+                      addHidden:
+                        default: false
+                        description: AddHidden adds another graph with the same name
+                          but with a prefix "<named-graph-name/hidden>"
+                        type: boolean
+                      name:
+                        description: The name of the Named Graph
+                        type: string
+                    required:
+                      - addHidden
+                    type: object
+                  type: array
+                stardogInstanceRefs:
+                  items:
+                    description: StardogInstanceRef contains name and namespace for
+                      a stardog instance
+                    properties:
+                      name:
+                        type: string
+                      namespace:
+                        type: string
+                    type: object
+                  type: array
+              type: object
+          type: object
+      served: true
+      storage: true
+      subresources:
+        status: {}
diff --git a/appuio/stardog-userrole-operator/crd/stardoginstance.yaml b/appuio/stardog-userrole-operator/crd/stardoginstance.yaml
index 02f87efe..b0d240e7 100644
--- a/appuio/stardog-userrole-operator/crd/stardoginstance.yaml
+++ b/appuio/stardog-userrole-operator/crd/stardoginstance.yaml
@@ -1,9 +1,9 @@
-apiVersion: apiextensions.k8s.io/v1beta1
+---
+apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.3.0
-  creationTimestamp: null
+    controller-gen.kubebuilder.io/version: v0.14.0
   name: stardoginstances.stardog.vshn.ch
 spec:
   group: stardog.vshn.ch
@@ -13,82 +13,86 @@ spec:
     plural: stardoginstances
     singular: stardoginstance
   scope: Namespaced
-  subresources:
-    status: {}
-  validation:
-    openAPIV3Schema:
-      description: StardogInstance contains information about a Stardog server or
-        cluster.
-      properties:
-        apiVersion:
-          description: 'APIVersion defines the versioned schema of this representation
-            of an object. Servers should convert recognized schemas to the latest
-            internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-          type: string
-        kind:
-          description: 'Kind is a string value representing the REST resource this
-            object represents. Servers may infer this from the endpoint the client
-            submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-          type: string
-        metadata:
-          type: object
-        spec:
-          description: StardogInstanceSpec defines the desired state of StardogInstance
+  versions:
+    - name: v1alpha1
+      schema:
+        openAPIV3Schema:
+          description: StardogInstance contains information about a Stardog server or
+            cluster.
           properties:
-            adminCredentials:
-              description: AdminCredentials references the credentials that gives
-                administrative access to the Stardog instance. This is used by the
-                Operator to make changes in the roles, permissions and users.
+            apiVersion:
+              description: |-
+                APIVersion defines the versioned schema of this representation of an object.
+                Servers should convert recognized schemas to the latest internal value, and
+                may reject unrecognized values.
+                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+              type: string
+            kind:
+              description: |-
+                Kind is a string value representing the REST resource this object represents.
+                Servers may infer this from the endpoint the client submits requests to.
+                Cannot be updated.
+                In CamelCase.
+                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: StardogInstanceSpec defines the desired state of StardogInstance
               properties:
-                namespace:
-                  description: Namespace specifies the namespace of the Secret referenced
-                    in SecretRef. Defaults to .metadata.namespace.
-                  type: string
-                secretRef:
-                  description: SecretRef references the v1/Secret name which contains
-                    the "username" and "password" keys.
+                adminCredentials:
+                  description: |-
+                    AdminCredentials references the credentials that gives administrative access to the Stardog instance.
+                    This is used by the Operator to make changes in the roles, permissions and users.
+                  properties:
+                    namespace:
+                      description: |-
+                        Namespace specifies the namespace of the Secret referenced in SecretRef.
+                        Defaults to .metadata.namespace.
+                      type: string
+                    secretRef:
+                      description: SecretRef references the v1/Secret name which contains
+                        the "username" and "password" keys.
+                      type: string
+                  type: object
+                disabled:
+                  description: Disabled whether this instance is disabled or enabled
+                    for operator to recycle resources
+                  type: boolean
+                serverUrl:
+                  description: ServerUrl describes the url of the Stardog Instance
                   type: string
               type: object
-            serverUrl:
-              description: ServerUrl describes the url of the Stardog Instance
-              type: string
-          type: object
-        status:
-          description: StardogInstanceStatus defines the observed state of StardogInstance
-          properties:
-            conditions:
-              description: Conditions contain the states of the StardogInstance. A
-                StardogInstance is considered Ready when the Admin user can make authorized
-                REST API calls.
-              items:
-                description: StardogCondition describes a status condition of a StardogRole
-                properties:
-                  lastTransitionTime:
-                    format: date-time
-                    type: string
-                  message:
-                    type: string
-                  reason:
-                    type: string
-                  status:
-                    type: string
-                  type:
-                    type: string
-                required:
-                  - status
-                  - type
-                type: object
-              type: array
+            status:
+              description: StardogInstanceStatus defines the observed state of StardogInstance
+              properties:
+                conditions:
+                  description: Conditions contain the states of the StardogInstance.
+                    A StardogInstance is considered Ready when the Admin user can make
+                    authorized REST API calls.
+                  items:
+                    description: StardogCondition describes a status condition of a
+                      StardogRole
+                    properties:
+                      lastTransitionTime:
+                        format: date-time
+                        type: string
+                      message:
+                        type: string
+                      reason:
+                        type: string
+                      status:
+                        type: string
+                      type:
+                        type: string
+                    required:
+                      - status
+                      - type
+                    type: object
+                  type: array
+              type: object
           type: object
-      type: object
-  version: v1alpha1
-  versions:
-    - name: v1alpha1
       served: true
       storage: true
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
+      subresources:
+        status: {}
diff --git a/appuio/stardog-userrole-operator/crd/stardogrole.yaml b/appuio/stardog-userrole-operator/crd/stardogrole.yaml
index b00a0aeb..10f39b9c 100644
--- a/appuio/stardog-userrole-operator/crd/stardogrole.yaml
+++ b/appuio/stardog-userrole-operator/crd/stardogrole.yaml
@@ -1,9 +1,9 @@
-apiVersion: apiextensions.k8s.io/v1beta1
+---
+apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.3.0
-  creationTimestamp: null
+    controller-gen.kubebuilder.io/version: v0.14.0
   name: stardogroles.stardog.vshn.ch
 spec:
   group: stardog.vshn.ch
@@ -13,113 +13,114 @@ spec:
     plural: stardogroles
     singular: stardogrole
   scope: Namespaced
-  subresources:
-    status: {}
-  validation:
-    openAPIV3Schema:
-      description: StardogRole is the Schema for the stardogroles API
-      properties:
-        apiVersion:
-          description: 'APIVersion defines the versioned schema of this representation
-            of an object. Servers should convert recognized schemas to the latest
-            internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-          type: string
-        kind:
-          description: 'Kind is a string value representing the REST resource this
-            object represents. Servers may infer this from the endpoint the client
-            submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-          type: string
-        metadata:
-          type: object
-        spec:
-          description: StardogRoleSpec defines the desired state of StardogRole
+  versions:
+    - name: v1alpha1
+      schema:
+        openAPIV3Schema:
+          description: StardogRole is the Schema for the stardogroles API
           properties:
-            permissions:
-              description: Permissions lists the permissions assigned to a role
-              items:
-                description: StardogPermissionSpec defines a Stardog permission assigned
-                  to a Role
-                properties:
-                  action:
-                    description: Action describes the action a specific permission
-                      is assigned to
-                    enum:
-                      - ALL
-                      - CREATE
-                      - DELETE
-                      - READ
-                      - WRITE
-                      - GRANT
-                      - REVOKE
-                      - EXECUTE
-                    type: string
-                  resourceType:
-                    description: ResourceType describes the type of resource a specific
-                      permission is assigned to
-                    enum:
-                      - DB
-                      - USER
-                      - ROLE
-                      - ADMIN
-                      - METADATA
-                      - NAMED-GRAPH
-                      - VIRTUAL-GRAPH
-                      - ICV-CONSTRAINTS
-                      - SENSITIVE-PROPERTIES
-                      - '*'
-                    type: string
-                  resources:
-                    description: Resources is a list of permission objects that get
-                      each targeted by the action and resource type properties
-                    items:
-                      type: string
-                    type: array
-                type: object
-              type: array
-            roleName:
-              description: RoleName describes (overrides) the name of a role that
-                will be maintained in a Stardog instance. Defaults to .metadata.name.
+            apiVersion:
+              description: |-
+                APIVersion defines the versioned schema of this representation of an object.
+                Servers should convert recognized schemas to the latest internal value, and
+                may reject unrecognized values.
+                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
               type: string
-            stardogInstanceRef:
-              description: StardogInstanceRef references the StardogInstance object
-                in which the role is maintained.
+            kind:
+              description: |-
+                Kind is a string value representing the REST resource this object represents.
+                Servers may infer this from the endpoint the client submits requests to.
+                Cannot be updated.
+                In CamelCase.
+                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
               type: string
+            metadata:
+              type: object
+            spec:
+              description: StardogRoleSpec defines the desired state of StardogRole
+              properties:
+                permissions:
+                  description: Permissions lists the permissions assigned to a role
+                  items:
+                    description: StardogPermissionSpec defines a Stardog permission
+                      assigned to a Role
+                    properties:
+                      action:
+                        description: Action describes the action a specific permission
+                          is assigned to
+                        enum:
+                          - ALL
+                          - CREATE
+                          - DELETE
+                          - READ
+                          - WRITE
+                          - GRANT
+                          - REVOKE
+                          - EXECUTE
+                        type: string
+                      resourceType:
+                        description: ResourceType describes the type of resource a specific
+                          permission is assigned to
+                        enum:
+                          - DB
+                          - USER
+                          - ROLE
+                          - ADMIN
+                          - METADATA
+                          - NAMED-GRAPH
+                          - VIRTUAL-GRAPH
+                          - ICV-CONSTRAINTS
+                          - SENSITIVE-PROPERTIES
+                          - '*'
+                        type: string
+                      resources:
+                        description: Resources is a list of permission objects that
+                          get each targeted by the action and resource type properties
+                        items:
+                          type: string
+                        type: array
+                    type: object
+                  type: array
+                roleName:
+                  description: |-
+                    RoleName describes (overrides) the name of a role that will be maintained in a Stardog instance.
+                    Defaults to .metadata.name.
+                  type: string
+                stardogInstanceRef:
+                  description: StardogInstanceRef references the StardogInstance object
+                    in which the role is maintained.
+                  type: string
+              type: object
+            status:
+              description: StardogRoleStatus defines the observed state of StardogRole
+              properties:
+                conditions:
+                  description: |-
+                    Conditions contain the states of the StardogRole. A StardogRole is considered Ready when the role has been
+                    persisted to Stardog DB.
+                  items:
+                    description: StardogCondition describes a status condition of a
+                      StardogRole
+                    properties:
+                      lastTransitionTime:
+                        format: date-time
+                        type: string
+                      message:
+                        type: string
+                      reason:
+                        type: string
+                      status:
+                        type: string
+                      type:
+                        type: string
+                    required:
+                      - status
+                      - type
+                    type: object
+                  type: array
+              type: object
           type: object
-        status:
-          description: StardogRoleStatus defines the observed state of StardogRole
-          properties:
-            conditions:
-              description: Conditions contain the states of the StardogRole. A StardogRole
-                is considered Ready when the role has been persisted to Stardog DB.
-              items:
-                description: StardogCondition describes a status condition of a StardogRole
-                properties:
-                  lastTransitionTime:
-                    format: date-time
-                    type: string
-                  message:
-                    type: string
-                  reason:
-                    type: string
-                  status:
-                    type: string
-                  type:
-                    type: string
-                required:
-                  - status
-                  - type
-                type: object
-              type: array
-          type: object
-      type: object
-  version: v1alpha1
-  versions:
-    - name: v1alpha1
       served: true
       storage: true
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
+      subresources:
+        status: {}
diff --git a/appuio/stardog-userrole-operator/crd/stardoguser.yaml b/appuio/stardog-userrole-operator/crd/stardoguser.yaml
index 78f4cf87..3534ca4e 100644
--- a/appuio/stardog-userrole-operator/crd/stardoguser.yaml
+++ b/appuio/stardog-userrole-operator/crd/stardoguser.yaml
@@ -1,9 +1,9 @@
-apiVersion: apiextensions.k8s.io/v1beta1
+---
+apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.3.0
-  creationTimestamp: null
+    controller-gen.kubebuilder.io/version: v0.14.0
   name: stardogusers.stardog.vshn.ch
 spec:
   group: stardog.vshn.ch
@@ -13,86 +13,87 @@ spec:
     plural: stardogusers
     singular: stardoguser
   scope: Namespaced
-  subresources:
-    status: {}
-  validation:
-    openAPIV3Schema:
-      description: StardogUser is the Schema for the stardogusers API
-      properties:
-        apiVersion:
-          description: 'APIVersion defines the versioned schema of this representation
-            of an object. Servers should convert recognized schemas to the latest
-            internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-          type: string
-        kind:
-          description: 'Kind is a string value representing the REST resource this
-            object represents. Servers may infer this from the endpoint the client
-            submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-          type: string
-        metadata:
-          type: object
-        spec:
-          description: StardogUserSpec defines the desired state of StardogUser
+  versions:
+    - name: v1alpha1
+      schema:
+        openAPIV3Schema:
+          description: StardogUser is the Schema for the stardogusers API
           properties:
-            credentials:
-              description: StardogUserCredentialsSpec describes the credentials of
-                a Stardog user
+            apiVersion:
+              description: |-
+                APIVersion defines the versioned schema of this representation of an object.
+                Servers should convert recognized schemas to the latest internal value, and
+                may reject unrecognized values.
+                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+              type: string
+            kind:
+              description: |-
+                Kind is a string value representing the REST resource this object represents.
+                Servers may infer this from the endpoint the client submits requests to.
+                Cannot be updated.
+                In CamelCase.
+                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: StardogUserSpec defines the desired state of StardogUser
               properties:
-                namespace:
-                  description: Namespace specifies the namespace of the Secret referenced
-                    in SecretRef. Defaults to .metadata.namespace.
-                  type: string
-                secretRef:
-                  description: SecretRef references the v1/Secret name which contains
-                    the "username" and "password" keys.
+                credentials:
+                  description: StardogUserCredentialsSpec describes the credentials
+                    of a Stardog user
+                  properties:
+                    namespace:
+                      description: |-
+                        Namespace specifies the namespace of the Secret referenced in SecretRef.
+                        Defaults to .metadata.namespace.
+                      type: string
+                    secretRef:
+                      description: SecretRef references the v1/Secret name which contains
+                        the "username" and "password" keys.
+                      type: string
+                  type: object
+                roles:
+                  description: Roles describe a list of StardogRoles assigned to a Stardog
+                    user. The names are referring the StardogRole metadata names, not
+                    the role name that is supposed to be in Stardog.
+                  items:
+                    type: string
+                  type: array
+                stardogInstanceRef:
+                  description: StardogInstanceRef references a StardogInstance object.
                   type: string
               type: object
-            roles:
-              description: Roles describe a list of StardogRoles assigned to a Stardog
-                user. The names are referring the StardogRole metadata names, not
-                the role name that is supposed to be in Stardog.
-              items:
-                type: string
-              type: array
-            stardogInstanceRef:
-              description: StardogInstanceRef references a StardogInstance object.
-              type: string
-          type: object
-        status:
-          description: StardogUserStatus defines the observed state of StardogUser
-          properties:
-            conditions:
-              description: Conditions contain the states of the StardogUser. A StardogUser
-                is considered Ready when the user has been persisted to Stardog DB.
-              items:
-                description: StardogCondition describes a status condition of a StardogRole
-                properties:
-                  lastTransitionTime:
-                    format: date-time
-                    type: string
-                  message:
-                    type: string
-                  reason:
-                    type: string
-                  status:
-                    type: string
-                  type:
-                    type: string
-                required:
-                  - status
-                  - type
-                type: object
-              type: array
+            status:
+              description: StardogUserStatus defines the observed state of StardogUser
+              properties:
+                conditions:
+                  description: |-
+                    Conditions contain the states of the StardogUser. A StardogUser is considered Ready when the user has been
+                    persisted to Stardog DB.
+                  items:
+                    description: StardogCondition describes a status condition of a
+                      StardogRole
+                    properties:
+                      lastTransitionTime:
+                        format: date-time
+                        type: string
+                      message:
+                        type: string
+                      reason:
+                        type: string
+                      status:
+                        type: string
+                      type:
+                        type: string
+                    required:
+                      - status
+                      - type
+                    type: object
+                  type: array
+              type: object
           type: object
-      type: object
-  version: v1alpha1
-  versions:
-    - name: v1alpha1
       served: true
       storage: true
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
+      subresources:
+        status: {}
diff --git a/appuio/stardog-userrole-operator/test/deployment_test.go b/appuio/stardog-userrole-operator/test/deployment_test.go
index ef8f5b01..9f5d5c06 100644
--- a/appuio/stardog-userrole-operator/test/deployment_test.go
+++ b/appuio/stardog-userrole-operator/test/deployment_test.go
@@ -74,7 +74,7 @@ func Test_Deployment_ShouldRender_ImagePullSecrets(t *testing.T) {
 }
 
 func Test_Deployment_ShouldRender_CorrectImage(t *testing.T) {
-	expectedImage := "ghcr.io/vshn/stardog-userrole-operator:v0.2.3"
+	expectedImage := "ghcr.io/vshn/stardog-userrole-operator:v0.3.0"
 	options := &helm.Options{}
 
 	got := renderDeployment(t, options, false)
@@ -83,7 +83,7 @@ func Test_Deployment_ShouldRender_CorrectImage(t *testing.T) {
 }
 
 func Test_Deployment_WhenProxyEnabled_ThenEnableRBACContainer(t *testing.T) {
-	expectedBaseImage := "ghcr.io/vshn/stardog-userrole-operator:v0.2.3"
+	expectedBaseImage := "ghcr.io/vshn/stardog-userrole-operator:v0.3.0"
 	expectedProxyImage := "gcr.io/kubebuilder/kube-rbac-proxy:v0.12.0"
 	options := &helm.Options{
 		SetValues: map[string]string{
diff --git a/appuio/stardog-userrole-operator/values.yaml b/appuio/stardog-userrole-operator/values.yaml
index ba84cd6e..4d4c1d8e 100644
--- a/appuio/stardog-userrole-operator/values.yaml
+++ b/appuio/stardog-userrole-operator/values.yaml
@@ -1,7 +1,7 @@
 image:
   registry: ghcr.io
   repository: vshn/stardog-userrole-operator
-  tag: v0.2.3
+  tag: v0.3.0
   pullPolicy: Always
 
 imagePullSecrets: []