apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.17.1
  name: managedsubscriptions.hub.traefik.io
spec:
  group: hub.traefik.io
  names:
    kind: ManagedSubscription
    listKind: ManagedSubscriptionList
    plural: managedsubscriptions
    singular: managedsubscription
  scope: Namespaced
  versions:
    - name: v1alpha1
      schema:
        openAPIV3Schema:
          description: |-
            ManagedSubscription defines a Subscription managed by the API manager as the result of a pre-negotiation with its
            API consumers. This subscription grant consuming access to a set of APIs to a set of Applications.
          properties:
            apiVersion:
              description: |-
                APIVersion defines the versioned schema of this representation of an object.
                Servers should convert recognized schemas to the latest internal value, and
                may reject unrecognized values.
                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
              type: string
            kind:
              description: |-
                Kind is a string value representing the REST resource this object represents.
                Servers may infer this from the endpoint the client submits requests to.
                Cannot be updated.
                In CamelCase.
                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
              type: string
            metadata:
              type: object
            spec:
              description: The desired behavior of this ManagedSubscription.
              properties:
                apiBundles:
                  description: |-
                    APIBundles defines a set of APIBundle that will be accessible.
                    Multiple ManagedSubscriptions can select the same APIBundles.
                  items:
                    description: APIBundleReference references an APIBundle.
                    properties:
                      name:
                        description: Name of the APIBundle.
                        maxLength: 253
                        type: string
                    required:
                      - name
                    type: object
                  maxItems: 100
                  type: array
                  x-kubernetes-validations:
                    - message: duplicated apiBundles
                      rule: self.all(x, self.exists_one(y, x.name == y.name))
                apiPlan:
                  description: APIPlan defines which APIPlan will be used.
                  properties:
                    name:
                      description: Name of the APIPlan.
                      maxLength: 253
                      type: string
                  required:
                    - name
                  type: object
                apiSelector:
                  description: |-
                    APISelector selects the APIs that will be accessible.
                    Multiple ManagedSubscriptions can select the same set of APIs.
                    This field is optional and follows standard label selector semantics.
                    An empty APISelector matches any API.
                  properties:
                    matchExpressions:
                      description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                      items:
                        description: |-
                          A label selector requirement is a selector that contains values, a key, and an operator that
                          relates the key and values.
                        properties:
                          key:
                            description: key is the label key that the selector applies to.
                            type: string
                          operator:
                            description: |-
                              operator represents a key's relationship to a set of values.
                              Valid operators are In, NotIn, Exists and DoesNotExist.
                            type: string
                          values:
                            description: |-
                              values is an array of string values. If the operator is In or NotIn,
                              the values array must be non-empty. If the operator is Exists or DoesNotExist,
                              the values array must be empty. This array is replaced during a strategic
                              merge patch.
                            items:
                              type: string
                            type: array
                            x-kubernetes-list-type: atomic
                        required:
                          - key
                          - operator
                        type: object
                      type: array
                      x-kubernetes-list-type: atomic
                    matchLabels:
                      additionalProperties:
                        type: string
                      description: |-
                        matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                        map is equivalent to an element of matchExpressions, whose key field is "key", the
                        operator is "In", and the values array contains only "value". The requirements are ANDed.
                      type: object
                  type: object
                  x-kubernetes-map-type: atomic
                apis:
                  description: |-
                    APIs defines a set of APIs that will be accessible.
                    Multiple ManagedSubscriptions can select the same APIs.
                    When combined with APISelector, this set of APIs is appended to the matching APIs.
                  items:
                    description: APIReference references an API.
                    properties:
                      name:
                        description: Name of the API.
                        maxLength: 253
                        type: string
                    required:
                      - name
                    type: object
                  maxItems: 100
                  type: array
                  x-kubernetes-validations:
                    - message: duplicated apis
                      rule: self.all(x, self.exists_one(y, x.name == y.name))
                applications:
                  description: |-
                    Applications references the Applications that will gain access to the specified APIs.
                    Multiple ManagedSubscriptions can select the same AppID.

                    Deprecated: Use ManagedApplications instead.
                  items:
                    description: ApplicationReference references an Application.
                    properties:
                      appId:
                        description: |-
                          AppID is the public identifier of the application.
                          In the case of OIDC, it corresponds to the clientId.
                        maxLength: 253
                        type: string
                    required:
                      - appId
                    type: object
                  maxItems: 100
                  type: array
                claims:
                  description: Claims specifies an expression that validate claims in order to authorize the request.
                  type: string
                managedApplications:
                  description: |-
                    ManagedApplications references the ManagedApplications that will gain access to the specified APIs.
                    Multiple ManagedSubscriptions can select the same ManagedApplication.
                  items:
                    description: ManagedApplicationReference references a ManagedApplication.
                    properties:
                      name:
                        description: Name is the name of the ManagedApplication.
                        maxLength: 253
                        type: string
                    required:
                      - name
                    type: object
                  maxItems: 100
                  type: array
                  x-kubernetes-validations:
                    - message: duplicated managed applications
                      rule: self.all(x, self.exists_one(y, x.name == y.name))
                operationFilter:
                  description: |-
                    OperationFilter specifies the allowed operations on APIs and APIVersions.
                    If not set, all operations are available.
                    An empty OperationFilter prohibits all operations.
                  properties:
                    include:
                      description: Include defines the names of OperationSets that will be accessible.
                      items:
                        type: string
                      maxItems: 100
                      type: array
                  type: object
                weight:
                  description: |-
                    Weight specifies the evaluation order of the APIPlan.
                    When multiple ManagedSubscriptions targets the same API and Application with different APIPlan,
                    the APIPlan with the highest weight will be enforced. If weights are equal, alphabetical order is used.
                  type: integer
                  x-kubernetes-validations:
                    - message: must be a positive number
                      rule: self >= 0
              required:
                - apiPlan
              type: object
            status:
              description: The current status of this ManagedSubscription.
              properties:
                conditions:
                  description: Conditions is the list of status conditions.
                  items:
                    description: Condition contains details for one aspect of the current state of this API Resource.
                    properties:
                      lastTransitionTime:
                        description: |-
                          lastTransitionTime is the last time the condition transitioned from one status to another.
                          This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
                        format: date-time
                        type: string
                      message:
                        description: |-
                          message is a human readable message indicating details about the transition.
                          This may be an empty string.
                        maxLength: 32768
                        type: string
                      observedGeneration:
                        description: |-
                          observedGeneration represents the .metadata.generation that the condition was set based upon.
                          For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
                          with respect to the current state of the instance.
                        format: int64
                        minimum: 0
                        type: integer
                      reason:
                        description: |-
                          reason contains a programmatic identifier indicating the reason for the condition's last transition.
                          Producers of specific condition types may define expected values and meanings for this field,
                          and whether the values are considered a guaranteed API.
                          The value should be a CamelCase string.
                          This field may not be empty.
                        maxLength: 1024
                        minLength: 1
                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
                        type: string
                      status:
                        description: status of the condition, one of True, False, Unknown.
                        enum:
                          - "True"
                          - "False"
                          - Unknown
                        type: string
                      type:
                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
                        maxLength: 316
                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                        type: string
                    required:
                      - lastTransitionTime
                      - message
                      - reason
                      - status
                      - type
                    type: object
                  type: array
                hash:
                  description: Hash is a hash representing the ManagedSubscription.
                  type: string
                resolvedApis:
                  description: ResolvedAPIs is the list of APIs that were successfully resolved.
                  items:
                    description: ResolvedAPIReference references a resolved API.
                    properties:
                      name:
                        description: Name of the API.
                        type: string
                    required:
                      - name
                    type: object
                  type: array
                syncedAt:
                  format: date-time
                  type: string
                unresolvedApis:
                  description: UnresolvedAPIs is the list of APIs that could not be resolved.
                  items:
                    description: ResolvedAPIReference references a resolved API.
                    properties:
                      name:
                        description: Name of the API.
                        type: string
                    required:
                      - name
                    type: object
                  type: array
                version:
                  type: string
              type: object
          type: object
      served: true
      storage: true
      subresources:
        status: {}
