{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://paulkov.github.io/dpone/schemas/gitops/catalog-trust-policy.schema.json",
  "title": "dpone GitOps catalog trust policy",
  "type": "object",
  "required": [
    "schema",
    "policy_id",
    "allowed_kinds",
    "allowed_publishers",
    "certificate_identity",
    "certificate_oidc_issuer",
    "trusted_root_sha256",
    "verifier"
  ],
  "additionalProperties": false,
  "properties": {
    "schema": {
      "const": "dpone.catalog-trust-policy.v1"
    },
    "policy_id": {
      "type": "string",
      "minLength": 1
    },
    "allowed_kinds": {
      "type": "array",
      "minItems": 1,
      "uniqueItems": true,
      "items": {
        "enum": [
          "recipe_catalog",
          "connection_registry"
        ]
      }
    },
    "allowed_publishers": {
      "type": "array",
      "minItems": 1,
      "uniqueItems": true,
      "items": {
        "type": "string",
        "minLength": 1
      }
    },
    "allowed_environments": {
      "type": "array",
      "minItems": 1,
      "uniqueItems": true,
      "items": {
        "type": "string",
        "minLength": 1
      }
    },
    "certificate_identity": {
      "type": "string",
      "minLength": 1
    },
    "certificate_oidc_issuer": {
      "type": "string",
      "minLength": 1
    },
    "trusted_root_sha256": {
      "type": "string",
      "pattern": "^sha256:[0-9a-f]{64}$"
    },
    "verifier": {
      "type": "object",
      "required": [
        "minimum_version",
        "maximum_version_exclusive",
        "timeout_seconds"
      ],
      "properties": {
        "minimum_version": {
          "type": "string",
          "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
        },
        "maximum_version_exclusive": {
          "type": "string",
          "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
        },
        "timeout_seconds": {
          "type": "integer",
          "minimum": 1,
          "maximum": 300
        }
      },
      "additionalProperties": false
    }
  }
}