{
  "description": "ModelConfig is the Schema for the modelconfigs API.",
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": [
        "string",
        "null"
      ]
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": [
        "string",
        "null"
      ]
    },
    "metadata": {
      "type": [
        "object",
        "null"
      ]
    },
    "spec": {
      "additionalProperties": false,
      "description": "ModelConfigSpec defines the desired state of ModelConfig.",
      "properties": {
        "anthropic": {
          "additionalProperties": false,
          "description": "Anthropic-specific configuration",
          "properties": {
            "baseUrl": {
              "description": "Base URL for the Anthropic API (overrides default)",
              "type": [
                "string",
                "null"
              ]
            },
            "maxTokens": {
              "description": "Maximum tokens to generate",
              "type": [
                "integer",
                "null"
              ]
            },
            "temperature": {
              "description": "Temperature for sampling",
              "type": [
                "string",
                "null"
              ]
            },
            "topK": {
              "description": "Top-k sampling parameter",
              "type": [
                "integer",
                "null"
              ]
            },
            "topP": {
              "description": "Top-p sampling parameter",
              "type": [
                "string",
                "null"
              ]
            }
          },
          "type": [
            "object",
            "null"
          ]
        },
        "anthropicVertexAI": {
          "additionalProperties": false,
          "description": "Anthropic-specific configuration",
          "properties": {
            "location": {
              "description": "The project location",
              "type": "string"
            },
            "maxTokens": {
              "description": "Maximum tokens to generate",
              "type": [
                "integer",
                "null"
              ]
            },
            "projectID": {
              "description": "The project ID",
              "type": "string"
            },
            "stopSequences": {
              "description": "Stop sequences",
              "items": {
                "type": "string"
              },
              "type": [
                "array",
                "null"
              ]
            },
            "temperature": {
              "description": "Temperature",
              "type": [
                "string",
                "null"
              ]
            },
            "topK": {
              "description": "Top-k sampling parameter",
              "type": [
                "string",
                "null"
              ]
            },
            "topP": {
              "description": "Top-p sampling parameter",
              "type": [
                "string",
                "null"
              ]
            }
          },
          "required": [
            "location",
            "projectID"
          ],
          "type": [
            "object",
            "null"
          ]
        },
        "apiKeyPassthrough": {
          "description": "APIKeyPassthrough enables forwarding the Bearer token from incoming A2A requests\ndirectly to the LLM provider as the API key. This is useful for organizations\nwith federated identity that want to avoid separate secret management.\nMutually exclusive with apiKeySecret.",
          "type": [
            "boolean",
            "null"
          ]
        },
        "apiKeySecret": {
          "description": "The name of the secret that contains the API key. Must be a reference to the name of a secret in the same namespace as the referencing ModelConfig",
          "type": [
            "string",
            "null"
          ]
        },
        "apiKeySecretKey": {
          "description": "The key in the secret that contains the API key",
          "type": [
            "string",
            "null"
          ]
        },
        "azureOpenAI": {
          "additionalProperties": false,
          "description": "Azure OpenAI-specific configuration",
          "properties": {
            "apiVersion": {
              "description": "API version for the Azure OpenAI API",
              "type": "string"
            },
            "azureAdToken": {
              "description": "Azure AD token for authentication",
              "type": [
                "string",
                "null"
              ]
            },
            "azureDeployment": {
              "description": "Deployment name for the Azure OpenAI API",
              "type": [
                "string",
                "null"
              ]
            },
            "azureEndpoint": {
              "description": "Endpoint for the Azure OpenAI API",
              "type": "string"
            },
            "maxTokens": {
              "description": "Maximum tokens to generate",
              "type": [
                "integer",
                "null"
              ]
            },
            "temperature": {
              "description": "Temperature for sampling",
              "type": [
                "string",
                "null"
              ]
            },
            "topP": {
              "description": "Top-p sampling parameter",
              "type": [
                "string",
                "null"
              ]
            }
          },
          "required": [
            "apiVersion",
            "azureEndpoint"
          ],
          "type": [
            "object",
            "null"
          ]
        },
        "bedrock": {
          "additionalProperties": false,
          "description": "AWS Bedrock-specific configuration",
          "properties": {
            "region": {
              "description": "AWS region where the Bedrock model is available (e.g., us-east-1, us-west-2)",
              "type": "string"
            }
          },
          "required": [
            "region"
          ],
          "type": [
            "object",
            "null"
          ]
        },
        "defaultHeaders": {
          "additionalProperties": {
            "type": "string"
          },
          "type": [
            "object",
            "null"
          ]
        },
        "gemini": {
          "description": "Gemini-specific configuration",
          "type": [
            "object",
            "null"
          ]
        },
        "geminiVertexAI": {
          "additionalProperties": false,
          "description": "Gemini Vertex AI-specific configuration",
          "properties": {
            "candidateCount": {
              "description": "Candidate count",
              "type": [
                "integer",
                "null"
              ]
            },
            "location": {
              "description": "The project location",
              "type": "string"
            },
            "maxOutputTokens": {
              "description": "Maximum output tokens",
              "type": [
                "integer",
                "null"
              ]
            },
            "projectID": {
              "description": "The project ID",
              "type": "string"
            },
            "responseMimeType": {
              "description": "Response mime type",
              "type": [
                "string",
                "null"
              ]
            },
            "stopSequences": {
              "description": "Stop sequences",
              "items": {
                "type": "string"
              },
              "type": [
                "array",
                "null"
              ]
            },
            "temperature": {
              "description": "Temperature",
              "type": [
                "string",
                "null"
              ]
            },
            "topK": {
              "description": "Top-k sampling parameter",
              "type": [
                "string",
                "null"
              ]
            },
            "topP": {
              "description": "Top-p sampling parameter",
              "type": [
                "string",
                "null"
              ]
            }
          },
          "required": [
            "location",
            "projectID"
          ],
          "type": [
            "object",
            "null"
          ]
        },
        "model": {
          "type": "string"
        },
        "ollama": {
          "additionalProperties": false,
          "description": "Ollama-specific configuration",
          "properties": {
            "host": {
              "description": "Host for the Ollama API",
              "type": [
                "string",
                "null"
              ]
            },
            "options": {
              "additionalProperties": {
                "type": "string"
              },
              "description": "Options for the Ollama API",
              "type": [
                "object",
                "null"
              ]
            }
          },
          "type": [
            "object",
            "null"
          ]
        },
        "openAI": {
          "additionalProperties": false,
          "description": "OpenAI-specific configuration",
          "properties": {
            "baseUrl": {
              "description": "Base URL for the OpenAI API (overrides default)",
              "type": [
                "string",
                "null"
              ]
            },
            "frequencyPenalty": {
              "description": "Frequency penalty",
              "type": [
                "string",
                "null"
              ]
            },
            "maxTokens": {
              "description": "Maximum tokens to generate",
              "type": [
                "integer",
                "null"
              ]
            },
            "n": {
              "description": "N value",
              "type": [
                "integer",
                "null"
              ]
            },
            "organization": {
              "description": "Organization ID for the OpenAI API",
              "type": [
                "string",
                "null"
              ]
            },
            "presencePenalty": {
              "description": "Presence penalty",
              "type": [
                "string",
                "null"
              ]
            },
            "reasoningEffort": {
              "description": "Reasoning effort",
              "enum": [
                "minimal",
                "low",
                "medium",
                "high"
              ],
              "type": [
                "string",
                "null"
              ]
            },
            "seed": {
              "description": "Seed value",
              "type": [
                "integer",
                "null"
              ]
            },
            "temperature": {
              "description": "Temperature for sampling",
              "type": [
                "string",
                "null"
              ]
            },
            "timeout": {
              "description": "Timeout",
              "type": [
                "integer",
                "null"
              ]
            },
            "topP": {
              "description": "Top-p sampling parameter",
              "type": [
                "string",
                "null"
              ]
            }
          },
          "type": [
            "object",
            "null"
          ]
        },
        "provider": {
          "default": "OpenAI",
          "description": "The provider of the model",
          "enum": [
            "Anthropic",
            "OpenAI",
            "AzureOpenAI",
            "Ollama",
            "Gemini",
            "GeminiVertexAI",
            "AnthropicVertexAI",
            "Bedrock"
          ],
          "type": "string"
        },
        "tls": {
          "additionalProperties": false,
          "description": "TLS configuration for provider connections.\nEnables agents to connect to internal LiteLLM gateways or other providers\nthat use self-signed certificates or custom certificate authorities.",
          "properties": {
            "caCertSecretKey": {
              "description": "CACertSecretKey is the key within the Secret that contains the CA certificate data.\nThis field follows the same pattern as APIKeySecretKey.\nRequired when CACertSecretRef is set (unless DisableVerify is true).",
              "type": [
                "string",
                "null"
              ]
            },
            "caCertSecretRef": {
              "description": "CACertSecretRef is a reference to a Kubernetes Secret containing\nCA certificate(s) in PEM format. The Secret must be in the same\nnamespace as the ModelConfig.\nWhen set, the certificate will be used to verify the provider's SSL certificate.\nThis field follows the same pattern as APIKeySecret.",
              "type": [
                "string",
                "null"
              ]
            },
            "disableSystemCAs": {
              "default": false,
              "description": "DisableSystemCAs disables the use of system CA certificates.\nWhen false (default), system CA certificates are used for verification (safe behavior).\nWhen true, only the custom CA from CACertSecretRef is trusted.\nThis allows strict security policies where only corporate CAs should be trusted.",
              "type": [
                "boolean",
                "null"
              ]
            },
            "disableVerify": {
              "default": false,
              "description": "DisableVerify disables SSL certificate verification entirely.\nWhen false (default), SSL certificates are verified.\nWhen true, SSL certificate verification is disabled.\nWARNING: This should ONLY be used in development/testing environments.\nProduction deployments MUST use proper certificates.",
              "type": [
                "boolean",
                "null"
              ]
            }
          },
          "type": [
            "object",
            "null"
          ]
        }
      },
      "required": [
        "model",
        "provider"
      ],
      "type": [
        "object",
        "null"
      ],
      "x-kubernetes-validations": [
        {
          "message": "provider.openAI must be nil if the provider is not OpenAI",
          "rule": "!(has(self.openAI) \u0026\u0026 self.provider != 'OpenAI')"
        },
        {
          "message": "provider.anthropic must be nil if the provider is not Anthropic",
          "rule": "!(has(self.anthropic) \u0026\u0026 self.provider != 'Anthropic')"
        },
        {
          "message": "provider.azureOpenAI must be nil if the provider is not AzureOpenAI",
          "rule": "!(has(self.azureOpenAI) \u0026\u0026 self.provider != 'AzureOpenAI')"
        },
        {
          "message": "provider.ollama must be nil if the provider is not Ollama",
          "rule": "!(has(self.ollama) \u0026\u0026 self.provider != 'Ollama')"
        },
        {
          "message": "provider.gemini must be nil if the provider is not Gemini",
          "rule": "!(has(self.gemini) \u0026\u0026 self.provider != 'Gemini')"
        },
        {
          "message": "provider.geminiVertexAI must be nil if the provider is not GeminiVertexAI",
          "rule": "!(has(self.geminiVertexAI) \u0026\u0026 self.provider != 'GeminiVertexAI')"
        },
        {
          "message": "provider.anthropicVertexAI must be nil if the provider is not AnthropicVertexAI",
          "rule": "!(has(self.anthropicVertexAI) \u0026\u0026 self.provider != 'AnthropicVertexAI')"
        },
        {
          "message": "provider.bedrock must be nil if the provider is not Bedrock",
          "rule": "!(has(self.bedrock) \u0026\u0026 self.provider != 'Bedrock')"
        },
        {
          "message": "apiKeySecret must be set if apiKeySecretKey is set",
          "rule": "!(has(self.apiKeySecretKey) \u0026\u0026 !has(self.apiKeySecret))"
        },
        {
          "message": "apiKeySecretKey must be set if apiKeySecret is set (except for Bedrock provider)",
          "rule": "!(has(self.apiKeySecret) \u0026\u0026 !has(self.apiKeySecretKey) \u0026\u0026 self.provider != 'Bedrock')"
        },
        {
          "message": "apiKeyPassthrough and apiKeySecret are mutually exclusive",
          "rule": "!(has(self.apiKeyPassthrough) \u0026\u0026 self.apiKeyPassthrough \u0026\u0026 has(self.apiKeySecret) \u0026\u0026 size(self.apiKeySecret) \u003e 0)"
        },
        {
          "message": "apiKeyPassthrough must be false if provider is Gemini;GeminiVertexAI;AnthropicVertexAI",
          "rule": "!(has(self.apiKeyPassthrough) \u0026\u0026 self.apiKeyPassthrough \u0026\u0026 (self.provider == 'Gemini' || self.provider == 'GeminiVertexAI' || self.provider == 'AnthropicVertexAI'))"
        },
        {
          "message": "caCertSecretKey requires caCertSecretRef",
          "rule": "!(has(self.tls) \u0026\u0026 has(self.tls.caCertSecretKey) \u0026\u0026 size(self.tls.caCertSecretKey) \u003e 0 \u0026\u0026 (!has(self.tls.caCertSecretRef) || size(self.tls.caCertSecretRef) == 0))"
        },
        {
          "message": "caCertSecretKey requires caCertSecretRef (unless disableVerify is true)",
          "rule": "!(has(self.tls) \u0026\u0026 (!has(self.tls.disableVerify) || !self.tls.disableVerify) \u0026\u0026 has(self.tls.caCertSecretKey) \u0026\u0026 size(self.tls.caCertSecretKey) \u003e 0 \u0026\u0026 (!has(self.tls.caCertSecretRef) || size(self.tls.caCertSecretRef) == 0))"
        },
        {
          "message": "caCertSecretRef requires caCertSecretKey (unless disableVerify is true)",
          "rule": "!(has(self.tls) \u0026\u0026 (!has(self.tls.disableVerify) || !self.tls.disableVerify) \u0026\u0026 has(self.tls.caCertSecretRef) \u0026\u0026 size(self.tls.caCertSecretRef) \u003e 0 \u0026\u0026 (!has(self.tls.caCertSecretKey) || size(self.tls.caCertSecretKey) == 0))"
        }
      ]
    },
    "status": {
      "additionalProperties": false,
      "description": "ModelConfigStatus defines the observed state of ModelConfig.",
      "properties": {
        "conditions": {
          "items": {
            "additionalProperties": false,
            "description": "Condition contains details for one aspect of the current state of this API Resource.",
            "properties": {
              "lastTransitionTime": {
                "description": "lastTransitionTime is the last time the condition transitioned from one status to another.\nThis should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.",
                "format": "date-time",
                "type": "string"
              },
              "message": {
                "description": "message is a human readable message indicating details about the transition.\nThis may be an empty string.",
                "maxLength": 32768,
                "type": "string"
              },
              "observedGeneration": {
                "description": "observedGeneration represents the .metadata.generation that the condition was set based upon.\nFor instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date\nwith respect to the current state of the instance.",
                "format": "int64",
                "minimum": 0,
                "type": [
                  "integer",
                  "null"
                ]
              },
              "reason": {
                "description": "reason contains a programmatic identifier indicating the reason for the condition's last transition.\nProducers of specific condition types may define expected values and meanings for this field,\nand whether the values are considered a guaranteed API.\nThe value should be a CamelCase string.\nThis field may not be empty.",
                "maxLength": 1024,
                "minLength": 1,
                "pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
                "type": "string"
              },
              "status": {
                "description": "status of the condition, one of True, False, Unknown.",
                "enum": [
                  "True",
                  "False",
                  "Unknown"
                ],
                "type": "string"
              },
              "type": {
                "description": "type of condition in CamelCase or in foo.example.com/CamelCase.",
                "maxLength": 316,
                "pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
                "type": "string"
              }
            },
            "required": [
              "lastTransitionTime",
              "message",
              "reason",
              "status",
              "type"
            ],
            "type": "object"
          },
          "type": "array"
        },
        "observedGeneration": {
          "format": "int64",
          "type": "integer"
        },
        "secretHash": {
          "description": "The secret hash stores a hash of any secrets required by the model config (i.e. api key, tls cert) to ensure agents referencing this model config detect changes to these secrets and restart if necessary.",
          "type": [
            "string",
            "null"
          ]
        }
      },
      "required": [
        "conditions",
        "observedGeneration"
      ],
      "type": [
        "object",
        "null"
      ]
    }
  },
  "type": "object"
}