address review comments

Author: JoaoBraveCoding

operator/api/loki/v1/lokistack_types.go

@@ -1303,11 +1303,11 @@ type TLSSpec struct {
 	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Certificate"
 	Certificate *ValueReference `json:"certificate,omitempty"`
 
-	// Key points to the private key of the server certificate.
+	// PrivateKey points to the private key of the server certificate.
 	//
 	// +kubebuilder:validation:Optional
-	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Certificate Key"
-	Key *SecretReference `json:"key,omitempty"`
+	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Private Key"
+	PrivateKey *SecretReference `json:"privateKey,omitempty"`
 }
 
 // LokiStackConditionType deifnes the type of condition types of a Loki deployment.

operator/api/loki/v1/zz_generated.deepcopy.go

@@ -152,7 +152,7 @@ metadata:
     categories: OpenShift Optional, Logging & Tracing
     certified: "false"
     containerImage: docker.io/grafana/loki-operator:0.9.0
-    createdAt: "2026-01-08T09:59:48Z"
+    createdAt: "2026-01-20T13:22:57Z"
     description: The Community Loki Operator provides Kubernetes native deployment
       and management of Loki and related logging components.
     features.operators.openshift.io/disconnected: "true"
@@ -1064,18 +1064,18 @@ spec:
         path: tenants.gateway.tls.certificate.secretName
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
-      - description: Key points to the private key of the server certificate.
-        displayName: Certificate Key
-        path: tenants.gateway.tls.key
+      - description: PrivateKey points to the private key of the server certificate.
+        displayName: Private Key
+        path: tenants.gateway.tls.privateKey
       - description: Key contains the name of the key inside the referenced Secret.
         displayName: Key Name
-        path: tenants.gateway.tls.key.key
+        path: tenants.gateway.tls.privateKey.key
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
       - description: SecretName contains the name of the Secret containing the referenced
           value.
         displayName: Secret Name
-        path: tenants.gateway.tls.key.secretName
+        path: tenants.gateway.tls.privateKey.secretName
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
       - description: Mode defines the mode in which lokistack-gateway component will

operator/bundle/community-openshift/manifests/loki-operator.clusterserviceversion.yaml

@@ -3928,9 +3928,9 @@ spec:
                             - message: Only one of configMapName and secretName can
                                 be set
                               rule: '!(has(self.configMapName) && has(self.secretName))'
-                          key:
-                            description: Key points to the private key of the server
-                              certificate.
+                          privateKey:
+                            description: PrivateKey points to the private key of the
+                              server certificate.
                             properties:
                               key:
                                 description: Key contains the name of the key inside

operator/bundle/community-openshift/manifests/loki.grafana.com_lokistacks.yaml

@@ -152,7 +152,7 @@ metadata:
     categories: OpenShift Optional, Logging & Tracing
     certified: "false"
     containerImage: docker.io/grafana/loki-operator:0.9.0
-    createdAt: "2026-01-08T09:59:46Z"
+    createdAt: "2026-01-20T13:22:56Z"
     description: The Community Loki Operator provides Kubernetes native deployment
       and management of Loki and related logging components.
     operators.operatorframework.io/builder: operator-sdk-unknown
@@ -1057,18 +1057,18 @@ spec:
         path: tenants.gateway.tls.certificate.secretName
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
-      - description: Key points to the private key of the server certificate.
-        displayName: Certificate Key
-        path: tenants.gateway.tls.key
+      - description: PrivateKey points to the private key of the server certificate.
+        displayName: Private Key
+        path: tenants.gateway.tls.privateKey
       - description: Key contains the name of the key inside the referenced Secret.
         displayName: Key Name
-        path: tenants.gateway.tls.key.key
+        path: tenants.gateway.tls.privateKey.key
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
       - description: SecretName contains the name of the Secret containing the referenced
           value.
         displayName: Secret Name
-        path: tenants.gateway.tls.key.secretName
+        path: tenants.gateway.tls.privateKey.secretName
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
       - description: Mode defines the mode in which lokistack-gateway component will

operator/bundle/community/manifests/loki-operator.clusterserviceversion.yaml

@@ -3929,9 +3929,9 @@ spec:
                             - message: Only one of configMapName and secretName can
                                 be set
                               rule: '!(has(self.configMapName) && has(self.secretName))'
-                          key:
-                            description: Key points to the private key of the server
-                              certificate.
+                          privateKey:
+                            description: PrivateKey points to the private key of the
+                              server certificate.
                             properties:
                               key:
                                 description: Key contains the name of the key inside

operator/bundle/community/manifests/loki.grafana.com_lokistacks.yaml

@@ -152,7 +152,7 @@ metadata:
     categories: OpenShift Optional, Logging & Tracing
     certified: "false"
     containerImage: quay.io/openshift-logging/loki-operator:0.1.0
-    createdAt: "2026-01-08T09:59:49Z"
+    createdAt: "2026-01-20T13:22:58Z"
     description: |
       The Loki Operator for OCP provides a means for configuring and managing a Loki stack for cluster logging.
       ## Prerequisites and Requirements
@@ -1077,18 +1077,18 @@ spec:
         path: tenants.gateway.tls.certificate.secretName
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
-      - description: Key points to the private key of the server certificate.
-        displayName: Certificate Key
-        path: tenants.gateway.tls.key
+      - description: PrivateKey points to the private key of the server certificate.
+        displayName: Private Key
+        path: tenants.gateway.tls.privateKey
       - description: Key contains the name of the key inside the referenced Secret.
         displayName: Key Name
-        path: tenants.gateway.tls.key.key
+        path: tenants.gateway.tls.privateKey.key
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
       - description: SecretName contains the name of the Secret containing the referenced
           value.
         displayName: Secret Name
-        path: tenants.gateway.tls.key.secretName
+        path: tenants.gateway.tls.privateKey.secretName
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
       - description: Mode defines the mode in which lokistack-gateway component will

operator/bundle/openshift/manifests/loki-operator.clusterserviceversion.yaml

@@ -3928,9 +3928,9 @@ spec:
                             - message: Only one of configMapName and secretName can
                                 be set
                               rule: '!(has(self.configMapName) && has(self.secretName))'
-                          key:
-                            description: Key points to the private key of the server
-                              certificate.
+                          privateKey:
+                            description: PrivateKey points to the private key of the
+                              server certificate.
                             properties:
                               key:
                                 description: Key contains the name of the key inside

operator/bundle/openshift/manifests/loki.grafana.com_lokistacks.yaml

@@ -3910,9 +3910,9 @@ spec:
                             - message: Only one of configMapName and secretName can
                                 be set
                               rule: '!(has(self.configMapName) && has(self.secretName))'
-                          key:
-                            description: Key points to the private key of the server
-                              certificate.
+                          privateKey:
+                            description: PrivateKey points to the private key of the
+                              server certificate.
                             properties:
                               key:
                                 description: Key contains the name of the key inside

operator/config/crd/bases/loki.grafana.com_lokistacks.yaml

@@ -977,18 +977,18 @@ spec:
         path: tenants.gateway.tls.certificate.secretName
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
-      - description: Key points to the private key of the server certificate.
-        displayName: Certificate Key
-        path: tenants.gateway.tls.key
+      - description: PrivateKey points to the private key of the server certificate.
+        displayName: Private Key
+        path: tenants.gateway.tls.privateKey
       - description: Key contains the name of the key inside the referenced Secret.
         displayName: Key Name
-        path: tenants.gateway.tls.key.key
+        path: tenants.gateway.tls.privateKey.key
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
       - description: SecretName contains the name of the Secret containing the referenced
           value.
         displayName: Secret Name
-        path: tenants.gateway.tls.key.secretName
+        path: tenants.gateway.tls.privateKey.secretName
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
       - description: Mode defines the mode in which lokistack-gateway component will