{
  "description": "Config is the Schema for the configs API.",
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": "string"
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": "string"
    },
    "metadata": {
      "type": "object"
    },
    "spec": {
      "description": "ConfigSpec defines the desired state of Config.",
      "properties": {
        "match": {
          "description": "Configuration for namespace exclusion",
          "items": {
            "properties": {
              "excludedNamespaces": {
                "items": {
                  "description": "A string that supports globbing at its front and end. Ex: \"kube-*\" will match \"kube-system\" or\n\"kube-public\", \"*-system\" will match \"kube-system\" or \"gatekeeper-system\", \"*system*\" will\nmatch \"system-kube\" or \"kube-system\".  The asterisk is required for wildcard matching.",
                  "pattern": "^\\*?[-:a-z0-9]*\\*?$",
                  "type": "string"
                },
                "type": "array"
              },
              "processes": {
                "items": {
                  "type": "string"
                },
                "type": "array"
              }
            },
            "type": "object",
            "additionalProperties": false
          },
          "type": "array"
        },
        "readiness": {
          "description": "Configuration for readiness tracker",
          "properties": {
            "statsEnabled": {
              "type": "boolean"
            }
          },
          "type": "object",
          "additionalProperties": false
        },
        "sync": {
          "description": "Configuration for syncing k8s objects",
          "properties": {
            "syncOnly": {
              "description": "If non-empty, only entries on this list will be replicated into OPA",
              "items": {
                "properties": {
                  "group": {
                    "type": "string"
                  },
                  "kind": {
                    "type": "string"
                  },
                  "version": {
                    "type": "string"
                  }
                },
                "type": "object",
                "additionalProperties": false
              },
              "type": "array"
            }
          },
          "type": "object",
          "additionalProperties": false
        },
        "validation": {
          "description": "Configuration for validation",
          "properties": {
            "traces": {
              "description": "List of requests to trace. Both \"user\" and \"kinds\" must be specified",
              "items": {
                "properties": {
                  "dump": {
                    "description": "Also dump the state of OPA with the trace. Set to `All` to dump everything.",
                    "type": "string"
                  },
                  "kind": {
                    "description": "Only trace requests of the following GroupVersionKind",
                    "properties": {
                      "group": {
                        "type": "string"
                      },
                      "kind": {
                        "type": "string"
                      },
                      "version": {
                        "type": "string"
                      }
                    },
                    "type": "object",
                    "additionalProperties": false
                  },
                  "user": {
                    "description": "Only trace requests from the specified user",
                    "type": "string"
                  }
                },
                "type": "object",
                "additionalProperties": false
              },
              "type": "array"
            }
          },
          "type": "object",
          "additionalProperties": false
        }
      },
      "type": "object",
      "additionalProperties": false
    },
    "status": {
      "description": "ConfigStatus defines the observed state of Config.",
      "type": "object"
    }
  },
  "type": "object"
}