{
  "description": "AWSIamConfig is the Schema for the awsiamconfigs API.",
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": "string"
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": "string"
    },
    "metadata": {
      "type": "object"
    },
    "spec": {
      "description": "AWSIamConfigSpec defines the desired state of AWSIamConfig.",
      "properties": {
        "awsRegion": {
          "description": "AWSRegion defines a region in an AWS partition",
          "type": "string"
        },
        "backendMode": {
          "description": "BackendMode defines multiple backends for aws-iam-authenticator server The server searches for mappings in order",
          "items": {
            "type": "string"
          },
          "type": "array"
        },
        "mapRoles": {
          "items": {
            "description": "MapRoles defines IAM role to a username and set of groups mapping using EKSConfigMap BackendMode.",
            "properties": {
              "groups": {
                "items": {
                  "type": "string"
                },
                "type": "array"
              },
              "roleARN": {
                "type": "string"
              },
              "username": {
                "type": "string"
              }
            },
            "required": [
              "roleARN",
              "username"
            ],
            "type": "object",
            "additionalProperties": false
          },
          "type": "array"
        },
        "mapUsers": {
          "items": {
            "description": "MapUsers defines IAM role to a username and set of groups mapping using EKSConfigMap BackendMode.",
            "properties": {
              "groups": {
                "items": {
                  "type": "string"
                },
                "type": "array"
              },
              "userARN": {
                "type": "string"
              },
              "username": {
                "type": "string"
              }
            },
            "required": [
              "userARN",
              "username"
            ],
            "type": "object",
            "additionalProperties": false
          },
          "type": "array"
        },
        "partition": {
          "default": "aws",
          "description": "Partition defines the AWS partition on which the IAM roles exist",
          "type": "string"
        }
      },
      "required": [
        "awsRegion",
        "backendMode"
      ],
      "type": "object",
      "additionalProperties": false
    },
    "status": {
      "description": "AWSIamConfigStatus defines the observed state of AWSIamConfig.",
      "type": "object"
    }
  },
  "type": "object"
}