{
  "description": "RemoteMCPServer is the Schema for the RemoteMCPServers API.",
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": [
        "string",
        "null"
      ]
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": [
        "string",
        "null"
      ]
    },
    "metadata": {
      "type": [
        "object",
        "null"
      ]
    },
    "spec": {
      "additionalProperties": false,
      "description": "RemoteMCPServerSpec defines the desired state of RemoteMCPServer.",
      "properties": {
        "allowedNamespaces": {
          "additionalProperties": false,
          "description": "AllowedNamespaces defines which namespaces are allowed to reference this RemoteMCPServer.\nThis follows the Gateway API pattern for cross-namespace route attachments.\nIf not specified, only Agents in the same namespace can reference this RemoteMCPServer.\nSee: https://gateway-api.sigs.k8s.io/guides/multiple-ns/#cross-namespace-route-attachment\n\nA cross-namespace-permitting value (from: All or from: Selector) is\nmutually exclusive with spec.tls.caCertSecretRef (enforced by a spec-level\nXValidation rule): a pinned CA Secret is mounted onto the consuming agent's\npod by bare name and Kubernetes resolves it in the agent's namespace, not\nthis RemoteMCPServer's, so a CA-pinning RemoteMCPServer cannot be referenced\ncross-namespace. from: Same (the default) is always allowed.",
          "properties": {
            "from": {
              "default": "Same",
              "description": "From indicates where references to this resource can originate.\nPossible values are:\n* All: References from all namespaces are allowed.\n* Same: Only references from the same namespace are allowed (default).\n* Selector: References from namespaces matching the selector are allowed.",
              "enum": [
                "All",
                "Same",
                "Selector"
              ],
              "type": [
                "string",
                "null"
              ]
            },
            "selector": {
              "additionalProperties": false,
              "description": "Selector is a label selector for namespaces that are allowed to reference this resource.\nOnly used when From is set to \"Selector\".",
              "properties": {
                "matchExpressions": {
                  "description": "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
                  "items": {
                    "additionalProperties": false,
                    "description": "A label selector requirement is a selector that contains values, a key, and an operator that\nrelates the key and values.",
                    "properties": {
                      "key": {
                        "description": "key is the label key that the selector applies to.",
                        "type": "string"
                      },
                      "operator": {
                        "description": "operator represents a key's relationship to a set of values.\nValid operators are In, NotIn, Exists and DoesNotExist.",
                        "type": "string"
                      },
                      "values": {
                        "description": "values is an array of string values. If the operator is In or NotIn,\nthe values array must be non-empty. If the operator is Exists or DoesNotExist,\nthe values array must be empty. This array is replaced during a strategic\nmerge patch.",
                        "items": {
                          "type": "string"
                        },
                        "type": [
                          "array",
                          "null"
                        ],
                        "x-kubernetes-list-type": "atomic"
                      }
                    },
                    "required": [
                      "key",
                      "operator"
                    ],
                    "type": "object"
                  },
                  "type": [
                    "array",
                    "null"
                  ],
                  "x-kubernetes-list-type": "atomic"
                },
                "matchLabels": {
                  "additionalProperties": {
                    "type": "string"
                  },
                  "description": "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels\nmap is equivalent to an element of matchExpressions, whose key field is \"key\", the\noperator is \"In\", and the values array contains only \"value\". The requirements are ANDed.",
                  "type": [
                    "object",
                    "null"
                  ]
                }
              },
              "type": [
                "object",
                "null"
              ],
              "x-kubernetes-map-type": "atomic"
            }
          },
          "type": [
            "object",
            "null"
          ],
          "x-kubernetes-validations": [
            {
              "message": "selector must be specified when from is Selector",
              "rule": "!(self.from == 'Selector' \u0026\u0026 !has(self.selector))"
            }
          ]
        },
        "description": {
          "type": "string"
        },
        "headersFrom": {
          "items": {
            "additionalProperties": false,
            "description": "ValueRef represents a configuration value",
            "properties": {
              "name": {
                "type": "string"
              },
              "value": {
                "type": [
                  "string",
                  "null"
                ]
              },
              "valueFrom": {
                "additionalProperties": false,
                "description": "ValueSource defines a source for configuration values from a Secret or ConfigMap",
                "properties": {
                  "key": {
                    "description": "The key of the ConfigMap or Secret.",
                    "maxLength": 253,
                    "type": "string"
                  },
                  "name": {
                    "description": "The name of the ConfigMap or Secret.",
                    "maxLength": 253,
                    "type": "string"
                  },
                  "type": {
                    "enum": [
                      "ConfigMap",
                      "Secret"
                    ],
                    "type": "string"
                  }
                },
                "required": [
                  "key",
                  "name",
                  "type"
                ],
                "type": [
                  "object",
                  "null"
                ]
              }
            },
            "required": [
              "name"
            ],
            "type": "object",
            "x-kubernetes-validations": [
              {
                "message": "Exactly one of value or valueFrom must be specified",
                "rule": "(has(self.value) \u0026\u0026 !has(self.valueFrom)) || (!has(self.value) \u0026\u0026 has(self.valueFrom))"
              }
            ]
          },
          "type": [
            "array",
            "null"
          ]
        },
        "protocol": {
          "default": "STREAMABLE_HTTP",
          "enum": [
            "SSE",
            "STREAMABLE_HTTP"
          ],
          "type": [
            "string",
            "null"
          ]
        },
        "sseReadTimeout": {
          "type": [
            "string",
            "null"
          ]
        },
        "terminateOnClose": {
          "default": true,
          "type": [
            "boolean",
            "null"
          ]
        },
        "timeout": {
          "default": "30s",
          "type": [
            "string",
            "null"
          ]
        },
        "tls": {
          "additionalProperties": false,
          "description": "TLS configuration for the upstream MCP server connection.\nUse this for HTTPS upstreams that present a certificate the agent's\nsystem trust store does not include (corporate CA, self-signed cert\non a test fixture, internal MCP gateway). Reuses the same TLSConfig\ntype as ModelConfig.spec.tls — disableVerify turns off certificate\nvalidation entirely, caCertSecretRef + caCertSecretKey point at a\nPEM bundle Secret in the same namespace, and disableSystemCAs\ntrusts only the named bundle.\n\nNote one asymmetry with ModelConfig: a spec-level XValidation rule\non RemoteMCPServer rejects spec.tls when spec.url has the http://\nscheme (a TLS opinion contradicts a plaintext URL). ModelConfig has\nno equivalent rule, so a TLS block can sit alongside any baseUrl.",
          "properties": {
            "caCertSecretKey": {
              "description": "CACertSecretKey is the key within the Secret that contains the\nCA certificate data (PEM-encoded). Required when CACertSecretRef\nis set — admission rejects ref-without-key regardless of\nDisableVerify (see the TLSConfig-level XValidation rules).",
              "type": [
                "string",
                "null"
              ]
            },
            "caCertSecretRef": {
              "description": "CACertSecretRef is a reference to a Kubernetes Secret containing\nCA certificate(s) in PEM format. The Secret must be in the same\nnamespace as the resource referencing it (ModelConfig,\nRemoteMCPServer, or any future consumer of TLSConfig).\nWhen set, the certificate will be used to verify the upstream's\nSSL certificate.",
              "type": [
                "string",
                "null"
              ]
            },
            "disableSystemCAs": {
              "default": false,
              "description": "DisableSystemCAs disables the use of system CA certificates.\nWhen false (default), system CA certificates are used for verification (safe behavior).\nWhen true, only the custom CA from CACertSecretRef is trusted.\nThis allows strict security policies where only corporate CAs should be trusted.",
              "type": [
                "boolean",
                "null"
              ]
            },
            "disableVerify": {
              "default": false,
              "description": "DisableVerify disables SSL certificate verification entirely.\nWhen false (default), SSL certificates are verified.\nWhen true, SSL certificate verification is disabled.\nWARNING: This should ONLY be used in development/testing environments.\nProduction deployments MUST use proper certificates.",
              "type": [
                "boolean",
                "null"
              ]
            }
          },
          "type": [
            "object",
            "null"
          ],
          "x-kubernetes-validations": [
            {
              "message": "caCertSecretKey requires caCertSecretRef",
              "rule": "!(has(self.caCertSecretKey) \u0026\u0026 size(self.caCertSecretKey) \u003e 0 \u0026\u0026 (!has(self.caCertSecretRef) || size(self.caCertSecretRef) == 0))"
            },
            {
              "message": "caCertSecretRef requires caCertSecretKey",
              "rule": "!(has(self.caCertSecretRef) \u0026\u0026 size(self.caCertSecretRef) \u003e 0 \u0026\u0026 (!has(self.caCertSecretKey) || size(self.caCertSecretKey) == 0))"
            },
            {
              "message": "disableSystemCAs requires caCertSecretRef or disableVerify (trust-nothing config rejects every upstream)",
              "rule": "!(has(self.disableSystemCAs) \u0026\u0026 self.disableSystemCAs \u0026\u0026 (!has(self.disableVerify) || !self.disableVerify) \u0026\u0026 (!has(self.caCertSecretRef) || size(self.caCertSecretRef) == 0))"
            }
          ]
        },
        "url": {
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "description",
        "url"
      ],
      "type": [
        "object",
        "null"
      ],
      "x-kubernetes-validations": [
        {
          "message": "spec.tls must be unset when spec.url has http:// scheme: a TLS opinion contradicts a plaintext URL. Either drop spec.tls, or use https:// / a scheme-less URL.",
          "rule": "!self.url.startsWith('http://') || !has(self.tls)"
        },
        {
          "message": "spec.allowedNamespaces must not permit cross-namespace access (from: All or from: Selector) when spec.tls.caCertSecretRef is set: a pinned CA Secret is mounted onto the consuming agent's pod and Kubernetes resolves it in the agent's namespace, not this RemoteMCPServer's. Use from: Same (the default), or remove the CA Secret reference.",
          "rule": "!(has(self.allowedNamespaces) \u0026\u0026 has(self.allowedNamespaces.from) \u0026\u0026 (self.allowedNamespaces.from == 'All' || self.allowedNamespaces.from == 'Selector') \u0026\u0026 has(self.tls) \u0026\u0026 has(self.tls.caCertSecretRef) \u0026\u0026 size(self.tls.caCertSecretRef) \u003e 0)"
        }
      ]
    },
    "status": {
      "additionalProperties": false,
      "description": "RemoteMCPServerStatus defines the observed state of RemoteMCPServer.",
      "properties": {
        "conditions": {
          "items": {
            "additionalProperties": false,
            "description": "Condition contains details for one aspect of the current state of this API Resource.",
            "properties": {
              "lastTransitionTime": {
                "description": "lastTransitionTime is the last time the condition transitioned from one status to another.\nThis should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.",
                "format": "date-time",
                "type": "string"
              },
              "message": {
                "description": "message is a human readable message indicating details about the transition.\nThis may be an empty string.",
                "maxLength": 32768,
                "type": "string"
              },
              "observedGeneration": {
                "description": "observedGeneration represents the .metadata.generation that the condition was set based upon.\nFor instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date\nwith respect to the current state of the instance.",
                "format": "int64",
                "minimum": 0,
                "type": [
                  "integer",
                  "null"
                ]
              },
              "reason": {
                "description": "reason contains a programmatic identifier indicating the reason for the condition's last transition.\nProducers of specific condition types may define expected values and meanings for this field,\nand whether the values are considered a guaranteed API.\nThe value should be a CamelCase string.\nThis field may not be empty.",
                "maxLength": 1024,
                "minLength": 1,
                "pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
                "type": "string"
              },
              "status": {
                "description": "status of the condition, one of True, False, Unknown.",
                "enum": [
                  "True",
                  "False",
                  "Unknown"
                ],
                "type": "string"
              },
              "type": {
                "description": "type of condition in CamelCase or in foo.example.com/CamelCase.",
                "maxLength": 316,
                "pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$",
                "type": "string"
              }
            },
            "required": [
              "lastTransitionTime",
              "message",
              "reason",
              "status",
              "type"
            ],
            "type": "object"
          },
          "type": [
            "array",
            "null"
          ]
        },
        "discoveredTools": {
          "items": {
            "additionalProperties": false,
            "properties": {
              "description": {
                "type": "string"
              },
              "name": {
                "type": "string"
              }
            },
            "required": [
              "description",
              "name"
            ],
            "type": "object"
          },
          "type": [
            "array",
            "null"
          ]
        },
        "observedGeneration": {
          "description": "INSERT ADDITIONAL STATUS FIELD - define observed state of cluster\nImportant: Run \"make\" to regenerate code after modifying this file",
          "format": "int64",
          "type": [
            "integer",
            "null"
          ]
        },
        "secretHash": {
          "description": "SecretHash stores a hash of the TLS Secret referenced by spec.tls so\nagents that consume this RemoteMCPServer can detect cert rotation and\nroll on the next reconcile. Empty when spec.tls.caCertSecretRef is unset.",
          "type": [
            "string",
            "null"
          ]
        }
      },
      "type": [
        "object",
        "null"
      ]
    }
  },
  "type": "object"
}