{
  "description": "QuayAccessToken generates Quay oauth token for pulling/pushing images",
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": "string"
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": "string"
    },
    "metadata": {
      "type": "object"
    },
    "spec": {
      "description": "QuayAccessTokenSpec defines the desired state to generate a Quay access token.",
      "properties": {
        "robotAccount": {
          "description": "Name of the robot account you are federating with",
          "type": "string"
        },
        "serviceAccountRef": {
          "description": "Name of the service account you are federating with",
          "properties": {
            "audiences": {
              "description": "Audience specifies the `aud` claim for the service account token\nIf the service account uses a well-known annotation for e.g. IRSA or GCP Workload Identity\nthen this audiences will be appended to the list",
              "items": {
                "type": "string"
              },
              "type": "array"
            },
            "name": {
              "description": "The name of the ServiceAccount resource being referred to.",
              "maxLength": 253,
              "minLength": 1,
              "pattern": "^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$",
              "type": "string"
            },
            "namespace": {
              "description": "Namespace of the resource being referred to.\nIgnored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.",
              "maxLength": 63,
              "minLength": 1,
              "pattern": "^[a-z0-9]([-a-z0-9]*[a-z0-9])?$",
              "type": "string"
            }
          },
          "required": [
            "name"
          ],
          "type": "object",
          "additionalProperties": false
        },
        "url": {
          "description": "URL configures the Quay instance URL. Defaults to quay.io.",
          "type": "string"
        }
      },
      "required": [
        "robotAccount",
        "serviceAccountRef"
      ],
      "type": "object",
      "additionalProperties": false
    }
  },
  "type": "object"
}