{
  "description": "A ProviderConfig configures a AzAPI provider.",
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": "string"
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": "string"
    },
    "metadata": {
      "type": "object"
    },
    "spec": {
      "description": "A ProviderConfigSpec defines the desired state of a ProviderConfig.",
      "properties": {
        "clientID": {
          "description": "ClientID is the client ID of the Azure AD application to use.\nRequired if Credentials.Source is OIDCTokenFile.",
          "type": "string"
        },
        "credentials": {
          "description": "Credentials required to authenticate to this provider.",
          "properties": {
            "env": {
              "description": "Env is a reference to an environment variable that contains credentials\nthat must be used to connect to the provider.",
              "properties": {
                "name": {
                  "description": "Name is the name of an environment variable.",
                  "type": "string"
                }
              },
              "required": [
                "name"
              ],
              "type": "object",
              "additionalProperties": false
            },
            "fs": {
              "description": "Fs is a reference to a filesystem location that contains credentials that\nmust be used to connect to the provider.",
              "properties": {
                "path": {
                  "description": "Path is a filesystem path.",
                  "type": "string"
                }
              },
              "required": [
                "path"
              ],
              "type": "object",
              "additionalProperties": false
            },
            "secretRef": {
              "description": "A SecretRef is a reference to a secret key that contains the credentials\nthat must be used to connect to the provider.",
              "properties": {
                "key": {
                  "description": "The key to select.",
                  "type": "string"
                },
                "name": {
                  "description": "Name of the secret.",
                  "type": "string"
                },
                "namespace": {
                  "description": "Namespace of the secret.",
                  "type": "string"
                }
              },
              "required": [
                "key",
                "name",
                "namespace"
              ],
              "type": "object",
              "additionalProperties": false
            },
            "source": {
              "description": "Source of the provider credentials.",
              "enum": [
                "None",
                "Secret",
                "InjectedIdentity",
                "Environment",
                "Filesystem",
                "OIDCTokenFile"
              ],
              "type": "string"
            }
          },
          "required": [
            "source"
          ],
          "type": "object",
          "additionalProperties": false
        },
        "environment": {
          "description": "Environment is the Azure Cloud Environment to use. One of \"public\",\n\"usgovernment\", \"china\", \"custom\". Defaults to \"public\".\nNote: \"custom\" additionally requires ARM_ACTIVE_DIRECTORY_AUTHORITY_HOST,\nARM_RESOURCE_MANAGER_ENDPOINT, and ARM_RESOURCE_MANAGER_AUDIENCE\nenvironment variables on the provider deployment, which this API does\nnot expose directly.",
          "type": "string"
        },
        "oidcTokenFilePath": {
          "description": "OidcTokenFilePath is the path to the file containing the OIDC/federated\nidentity token, projected into the pod by the Workload Identity\nmutating webhook. Only used if Credentials.Source is OIDCTokenFile.\nIf unset, the AZURE_FEDERATED_TOKEN_FILE environment variable is used,\nwhich the Azure Workload Identity webhook sets to the path it projected\nthe token to. If that is also unset, it defaults to\n\"/var/run/secrets/azure/tokens/azure-identity-token\".",
          "type": "string"
        },
        "subscriptionID": {
          "description": "SubscriptionID is the Azure subscription ID to use. If unset, and\nCredentials.Source is Secret/Environment/Filesystem, the subscription ID\nfrom the extracted credentials is used instead. Required for\nOIDCTokenFile if the underlying resources need it and no default\nsubscription can be resolved another way.",
          "type": "string"
        },
        "tenantID": {
          "description": "TenantID is the Azure AD tenant ID to use.\nRequired if Credentials.Source is OIDCTokenFile.",
          "type": "string"
        }
      },
      "required": [
        "credentials"
      ],
      "type": "object",
      "additionalProperties": false
    },
    "status": {
      "description": "A ProviderConfigStatus reflects the observed state of a ProviderConfig.",
      "properties": {
        "conditions": {
          "description": "Conditions of the resource.",
          "items": {
            "description": "A Condition that may apply to a resource.",
            "properties": {
              "lastTransitionTime": {
                "description": "LastTransitionTime is the last time this condition transitioned from one\nstatus to another.",
                "format": "date-time",
                "type": "string"
              },
              "message": {
                "description": "A Message containing details about this condition's last transition from\none status to another, if any.",
                "type": "string"
              },
              "observedGeneration": {
                "description": "ObservedGeneration represents the .metadata.generation that the condition was set based upon.\nFor instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date\nwith respect to the current state of the instance.",
                "format": "int64",
                "type": "integer"
              },
              "reason": {
                "description": "A Reason for this condition's last transition from one status to another.",
                "type": "string"
              },
              "status": {
                "description": "Status of this condition; is it currently True, False, or Unknown?",
                "type": "string"
              },
              "type": {
                "description": "Type of this condition. At most one of each condition type may apply to\na resource at any point in time.",
                "type": "string"
              }
            },
            "required": [
              "lastTransitionTime",
              "reason",
              "status",
              "type"
            ],
            "type": "object",
            "additionalProperties": false
          },
          "type": "array",
          "x-kubernetes-list-map-keys": [
            "type"
          ],
          "x-kubernetes-list-type": "map"
        },
        "users": {
          "description": "Users of this provider configuration.",
          "format": "int64",
          "type": "integer"
        }
      },
      "type": "object",
      "additionalProperties": false
    }
  },
  "required": [
    "spec"
  ],
  "type": "object"
}