{
  "description": "StepIssuer is the Schema for the stepissuers API",
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": "string"
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": "string"
    },
    "metadata": {
      "type": "object"
    },
    "spec": {
      "description": "StepIssuerSpec defines the desired state of StepIssuer",
      "properties": {
        "caBundle": {
          "description": "CABundle is a base64 encoded TLS certificate used to verify connections to the step certificates server. If not set the system root certificates are used to validate the TLS connection.",
          "format": "byte",
          "type": "string"
        },
        "provisioner": {
          "description": "Provisioner contains the step certificates provisioner configuration.",
          "properties": {
            "kid": {
              "description": "KeyID is the kid property of the JWK provisioner.",
              "type": "string"
            },
            "name": {
              "description": "Names is the name of the JWK provisioner.",
              "type": "string"
            },
            "passwordRef": {
              "description": "PasswordRef is a reference to a Secret containing the provisioner password used to decrypt the provisioner private key.",
              "properties": {
                "key": {
                  "description": "The key of the secret to select from. Must be a valid secret key.",
                  "type": "string"
                },
                "name": {
                  "description": "The name of the secret in the pod's namespace to select from.",
                  "type": "string"
                }
              },
              "required": [
                "name"
              ],
              "type": "object",
              "additionalProperties": false
            }
          },
          "required": [
            "kid",
            "name",
            "passwordRef"
          ],
          "type": "object",
          "additionalProperties": false
        },
        "url": {
          "description": "URL is the base URL for the step certificates instance.",
          "type": "string"
        }
      },
      "required": [
        "caBundle",
        "provisioner",
        "url"
      ],
      "type": "object",
      "additionalProperties": false
    },
    "status": {
      "description": "StepIssuerStatus defines the observed state of StepIssuer",
      "properties": {
        "conditions": {
          "items": {
            "description": "StepIssuerCondition contains condition information for the step issuer.",
            "properties": {
              "lastTransitionTime": {
                "description": "LastTransitionTime is the timestamp corresponding to the last status change of this condition.",
                "format": "date-time",
                "type": "string"
              },
              "message": {
                "description": "Message is a human readable description of the details of the last transition, complementing reason.",
                "type": "string"
              },
              "reason": {
                "description": "Reason is a brief machine readable explanation for the condition's last transition.",
                "type": "string"
              },
              "status": {
                "allOf": [
                  {
                    "enum": [
                      "True",
                      "False",
                      "Unknown"
                    ]
                  },
                  {
                    "enum": [
                      "True",
                      "False",
                      "Unknown"
                    ]
                  }
                ],
                "description": "Status of the condition, one of ('True', 'False', 'Unknown').",
                "type": "string"
              },
              "type": {
                "description": "Type of the condition, currently ('Ready').",
                "enum": [
                  "Ready"
                ],
                "type": "string"
              }
            },
            "required": [
              "status",
              "type"
            ],
            "type": "object",
            "additionalProperties": false
          },
          "type": "array"
        }
      },
      "type": "object",
      "additionalProperties": false
    }
  },
  "type": "object"
}