{
  "description": "GitRepoRestriction is a resource that can optionally be used to restrict\nthe options of GitRepos in the same namespace.",
  "properties": {
    "allowedClientSecretNames": {
      "description": "AllowedClientSecretNames is a list of client secret names that GitRepos are allowed to use.",
      "items": {
        "type": "string"
      },
      "nullable": true,
      "type": "array"
    },
    "allowedRepoPatterns": {
      "description": "AllowedRepoPatterns is a list of regex patterns that restrict the\nvalid values of the Repo field of a GitRepo.",
      "items": {
        "type": "string"
      },
      "nullable": true,
      "type": "array"
    },
    "allowedServiceAccounts": {
      "description": "AllowedServiceAccounts is a list of service accounts that GitRepos are allowed to use.",
      "items": {
        "type": "string"
      },
      "nullable": true,
      "type": "array"
    },
    "allowedTargetNamespaces": {
      "description": "AllowedTargetNamespaces restricts TargetNamespace to the given\nnamespaces. If AllowedTargetNamespaces is set, TargetNamespace must\nbe set.",
      "items": {
        "type": "string"
      },
      "nullable": true,
      "type": "array"
    },
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": "string"
    },
    "defaultClientSecretName": {
      "description": "DefaultClientSecretName overrides the GitRepo's default client secret.",
      "nullable": true,
      "type": "string"
    },
    "defaultServiceAccount": {
      "description": "DefaultServiceAccount overrides the GitRepo's default service account.",
      "nullable": true,
      "type": "string"
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": "string"
    },
    "metadata": {
      "type": "object"
    }
  },
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "title": "GitRepoRestriction v1alpha1"
}