$schema: "http://json-schema.org/draft-06/schema#"

title: compute alpha Jwt export schema
description: A gcloud export/import command YAML validation schema.
type: object
additionalProperties: false
properties:
  COMMENT:
    type: object
    description: User specified info ignored by gcloud import.
    additionalProperties: false
    properties:
      template-id:
        type: string
      region:
        type: string
      description:
        type: string
      date:
        type: string
      version:
        type: string
  UNKNOWN:
    type: array
    description: Unknown API fields that cannot be imported.
    items:
      type: string
  audiences:
    description: |-
      A JWT containing any of these audiences will be accepted. The service name
      will be accepted if audiences is empty. Examples:
      bookstore_android.apps.googleusercontent.com,
      bookstore_web.apps.googleusercontent.com
    type: array
    items:
      type: string
  issuer:
    description: |-
      Identifies the issuer that issued the JWT, which is usually a URL or
      an email address. Examples: https://securetoken.google.com,
      1234567-compute@developer.gserviceaccount.com
    type: string
  jwksPublicKeys:
    description: |-
      The provider's public key set to validate the signature of the JWT.
    type: string
  jwtHeaders:
    description: |-
      jwt_headers and jwt_params define where to extract the JWT from an
      HTTP request. If no explicit location is specified, the following
      default locations are tried in order: 1. The Authorization header
      using the Bearer schema. See `here `_. Example: Authorization: Bearer
      . 2. `access_token` query parameter. See `this `_ Multiple JWTs can be
      verified for a request. Each JWT has to be extracted from the
      locations its issuer specified or from the default locations. This
      field is set if JWT is sent in a request header. This field specifies
      the header name. For example, if `header=x-goog-iap-jwt-assertion`,
      the header format will be x-goog-iap-jwt-assertion: .
    type: array
    items:
      $ref: JwtHeader.yaml
  jwtParams:
    description: |-
      This field is set if JWT is sent in a query parameter. This field
      specifies the query parameter name. For example, if jwt_params[0]
      is jwt_token, the JWT format in the query parameter is
      /path?jwt_token=.
    type: array
    items:
      type: string