{
  "description": "SealedSecret is the K8s representation of a \"sealed Secret\" - a\nregular k8s Secret that has been sealed (encrypted) using the\ncontroller's key.",
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": "string"
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": "string"
    },
    "metadata": {
      "type": "object"
    },
    "spec": {
      "description": "SealedSecretSpec is the specification of a SealedSecret.",
      "properties": {
        "data": {
          "description": "Data is deprecated and will be removed eventually. Use per-value EncryptedData instead.",
          "format": "byte",
          "type": "string"
        },
        "encryptedData": {
          "additionalProperties": {
            "type": "string"
          },
          "type": "object",
          "x-kubernetes-preserve-unknown-fields": true
        },
        "template": {
          "description": "Template defines the structure of the Secret that will be\ncreated from this sealed secret.",
          "properties": {
            "data": {
              "additionalProperties": {
                "type": "string"
              },
              "description": "Keys that should be templated using decrypted data.",
              "nullable": true,
              "type": "object"
            },
            "immutable": {
              "description": "Immutable, if set to true, ensures that data stored in the Secret cannot\nbe updated (only object metadata can be modified).\nIf not set to true, the field can be modified at any time.\nDefaulted to nil.",
              "type": "boolean"
            },
            "metadata": {
              "description": "Standard object's metadata.\nMore info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata",
              "nullable": true,
              "properties": {
                "annotations": {
                  "additionalProperties": {
                    "type": "string"
                  },
                  "type": "object"
                },
                "finalizers": {
                  "items": {
                    "type": "string"
                  },
                  "type": "array"
                },
                "labels": {
                  "additionalProperties": {
                    "type": "string"
                  },
                  "type": "object"
                },
                "name": {
                  "type": "string"
                },
                "namespace": {
                  "type": "string"
                }
              },
              "type": "object",
              "x-kubernetes-preserve-unknown-fields": true,
              "additionalProperties": false
            },
            "type": {
              "description": "Used to facilitate programmatic handling of secret data.",
              "type": "string"
            }
          },
          "type": "object",
          "additionalProperties": false
        }
      },
      "required": [
        "encryptedData"
      ],
      "type": "object",
      "additionalProperties": false
    },
    "status": {
      "description": "SealedSecretStatus is the most recently observed status of the SealedSecret.",
      "properties": {
        "conditions": {
          "description": "Represents the latest available observations of a sealed secret's current state.",
          "items": {
            "description": "SealedSecretCondition describes the state of a sealed secret at a certain point.",
            "properties": {
              "lastTransitionTime": {
                "description": "Last time the condition transitioned from one status to another.",
                "format": "date-time",
                "type": "string"
              },
              "lastUpdateTime": {
                "description": "The last time this condition was updated.",
                "format": "date-time",
                "type": "string"
              },
              "message": {
                "description": "A human readable message indicating details about the transition.",
                "type": "string"
              },
              "reason": {
                "description": "The reason for the condition's last transition.",
                "type": "string"
              },
              "status": {
                "description": "Status of the condition for a sealed secret.\nValid values for \"Synced\": \"True\", \"False\", or \"Unknown\".",
                "type": "string"
              },
              "type": {
                "description": "Type of condition for a sealed secret.\nValid value: \"Synced\"",
                "type": "string"
              }
            },
            "required": [
              "status",
              "type"
            ],
            "type": "object",
            "additionalProperties": false
          },
          "type": "array"
        },
        "observedGeneration": {
          "description": "ObservedGeneration reflects the generation most recently observed by the sealed-secrets controller.",
          "format": "int64",
          "type": "integer"
        }
      },
      "type": "object",
      "additionalProperties": false
    }
  },
  "required": [
    "spec"
  ],
  "type": "object"
}