{
  "description": "An OriginIssuer represents the Cloudflare Origin CA as an external cert-manager issuer.\nIt is scoped to a single namespace, so it can be used only by resources in the same\nnamespace.",
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": "string"
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": "string"
    },
    "metadata": {
      "type": "object"
    },
    "spec": {
      "description": "Desired state of the OriginIssuer resource",
      "properties": {
        "auth": {
          "description": "Auth configures how to authenticate with the Cloudflare API.",
          "properties": {
            "serviceKeyRef": {
              "description": "ServiceKeyRef authenticates with an API Service Key (the \"Origin CA Key\").",
              "properties": {
                "key": {
                  "description": "Key of the secret to select from. Must be a valid secret key.",
                  "type": "string"
                },
                "name": {
                  "description": "Name of the secret in the issuer's namespace to select. If a cluster-scoped\nissuer, the secret is selected from the \"cluster resource namespace\" configured\non the controller.",
                  "type": "string"
                }
              },
              "required": [
                "key",
                "name"
              ],
              "type": "object",
              "additionalProperties": false
            },
            "tokenRef": {
              "description": "TokenRef authenticates with an API Token.",
              "properties": {
                "key": {
                  "description": "Key of the secret to select from. Must be a valid secret key.",
                  "type": "string"
                },
                "name": {
                  "description": "Name of the secret in the issuer's namespace to select. If a cluster-scoped\nissuer, the secret is selected from the \"cluster resource namespace\" configured\non the controller.",
                  "type": "string"
                }
              },
              "required": [
                "key",
                "name"
              ],
              "type": "object",
              "additionalProperties": false
            }
          },
          "type": "object",
          "additionalProperties": false
        },
        "requestType": {
          "description": "RequestType is the signature algorithm Cloudflare should use to sign the certificate.",
          "enum": [
            "OriginRSA",
            "OriginECC"
          ],
          "type": "string"
        }
      },
      "required": [
        "auth",
        "requestType"
      ],
      "type": "object",
      "additionalProperties": false
    },
    "status": {
      "description": "Status of the OriginIssuer. This is set and managed automatically.",
      "properties": {
        "conditions": {
          "description": "List of status conditions to indicate the status of an OriginIssuer\nKnown condition types are `Ready`.",
          "items": {
            "description": "OriginIssuerCondition contains condition information for the OriginIssuer.",
            "properties": {
              "lastTransitionTime": {
                "description": "LastTransitionTime is the timestamp corresponding to the last status\nchange of this condition.",
                "format": "date-time",
                "type": "string"
              },
              "message": {
                "description": "Message is a human readable description of the details of the last\ntransition1, complementing reason.",
                "type": "string"
              },
              "reason": {
                "description": "Reason is a brief machine readable explanation for the condition's last\ntransition.",
                "type": "string"
              },
              "status": {
                "description": "Status of the condition, one of ('True', 'False', 'Unknown')",
                "enum": [
                  "True",
                  "False",
                  "Unknown"
                ],
                "type": "string"
              },
              "type": {
                "description": "Type of the condition, known values are ('Ready')",
                "enum": [
                  "Ready"
                ],
                "type": "string"
              }
            },
            "required": [
              "status",
              "type"
            ],
            "type": "object",
            "additionalProperties": false
          },
          "type": "array"
        }
      },
      "type": "object",
      "additionalProperties": false
    }
  },
  "type": "object"
}