{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "description": "CI builds metadata secrets",
  "type": "object",
  "patternProperties": {
    ".*": {
      "type": "object",
      "patternProperties": {
        "^vault$": {
          "type": "object",
          "required": [
            "path",
            "field",
            "engine"
          ],
          "properties": {
            "path": {
              "type": "string"
            },
            "field": {
              "type": "string"
            },
            "engine": {
              "type": "object",
              "required": [
                "name",
                "path"
              ],
              "properties": {
                "path": {
                  "type": "string"
                },
                "name": {
                  "type": "string"
                }
              },
              "additionalProperties": false
            }
          },
          "additionalProperties": false
        },
        "^gcp_secret_manager$": {
          "type": "object",
          "required": [
            "name"
          ],
          "properties": {
            "name": {
              "type": "string"
            },
            "version": {
              "type": [
                "string",
                "null"
              ]
            }
          },
          "additionalProperties": false
        },
        "^azure_key_vault$": {
          "type": "object",
          "required": [
            "name"
          ],
          "properties": {
            "name": {
              "type": "string"
            },
            "version": {
              "type": [
                "string",
                "null"
              ]
            }
          },
          "additionalProperties": false
        },
        "^file$": {
          "type": "boolean"
        },
        "^token$": {
          "type": "string"
        }
      },
      "anyOf": [
        {
          "required": [
            "vault"
          ]
        },
        {
          "required": [
            "gcp_secret_manager"
          ]
        },
        {
          "required": [
            "azure_key_vault"
          ]
        }
      ],
      "additionalProperties": false
    }
  }
}