{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/harness/main/json-schema/harness-v1-argo-project-list-schema.json",
  "title": "v1ArgoProjectList",
  "x-generated": "2026-10-04",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/harness-argoprojects-api-openapi.yml#/components/schemas/v1ArgoProjectList",
  "type": "object",
  "properties": {
    "content": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/v1ArgoProject"
      }
    },
    "totalPages": {
      "type": "integer",
      "format": "int32"
    },
    "totalItems": {
      "type": "integer",
      "format": "int32"
    },
    "pageItemCount": {
      "type": "integer",
      "format": "int32"
    },
    "pageSize": {
      "type": "integer",
      "format": "int32"
    },
    "pageIndex": {
      "type": "integer",
      "format": "int32"
    },
    "empty": {
      "type": "boolean"
    }
  },
  "$defs": {
    "appprojectsAppProject": {
      "type": "object",
      "properties": {
        "metadata": {
          "$ref": "#/$defs/v1ObjectMeta"
        },
        "spec": {
          "$ref": "#/$defs/appprojectsAppProjectSpec"
        },
        "status": {
          "$ref": "#/$defs/appprojectsAppProjectStatus"
        }
      },
      "title": "AppProject provides a logical grouping of applications, providing controls for:\n* where the apps may deploy to (cluster whitelist)\n* what may be deployed (repository whitelist, resource whitelist/blacklist)\n* who can access these applications (roles, OIDC group claims bindings)\n* and what they can do (RBAC policies)\n* automation access to these roles (JWT tokens)\n+genclient\n+genclient:noStatus\n+k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object\n+kubebuilder:resource:path=appprojects,shortName=appproj;appprojs"
    },
    "appprojectsAppProjectSpec": {
      "type": "object",
      "properties": {
        "sourceRepos": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "title": "SourceRepos contains list of repository URLs which can be used for deployment"
        },
        "destinations": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/appprojectsApplicationDestination"
          },
          "title": "Destinations contains list of destinations available for deployment"
        },
        "description": {
          "type": "string",
          "title": "Description contains optional project description"
        },
        "roles": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/appprojectsProjectRole"
          },
          "title": "Roles are user defined RBAC roles associated with this project"
        },
        "clusterResourceWhitelist": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/appprojectsClusterResourceRestrictionItem"
          },
          "title": "ClusterResourceWhitelist contains list of whitelisted cluster level resources"
        },
        "namespaceResourceBlacklist": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/v1GroupKind"
          },
          "title": "NamespaceResourceBlacklist contains list of blacklisted namespace level resources"
        },
        "orphanedResources": {
          "$ref": "#/$defs/appprojectsOrphanedResourcesMonitorSettings"
        },
        "syncWindows": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/appprojectsSyncWindow"
          },
          "title": "SyncWindows controls when syncs can be run for apps in this project"
        },
        "namespaceResourceWhitelist": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/v1GroupKind"
          },
          "title": "NamespaceResourceWhitelist contains list of whitelisted namespace level resources"
        },
        "signatureKeys": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/appprojectsSignatureKey"
          },
          "title": "SignatureKeys contains a list of PGP key IDs that commits in Git must be signed with in order to be allowed for sync"
        },
        "clusterResourceBlacklist": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/appprojectsClusterResourceRestrictionItem"
          },
          "title": "ClusterResourceBlacklist contains list of blacklisted cluster level resources"
        },
        "sourceNamespaces": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "title": "SourceNamespaces defines the namespaces application resources are allowed to be created in"
        },
        "permitOnlyProjectScopedClusters": {
          "type": "boolean",
          "title": "PermitOnlyProjectScopedClusters determines whether destinations can only reference clusters which are project-scoped"
        },
        "destinationServiceAccounts": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/appprojectsApplicationDestinationServiceAccount"
          },
          "description": "DestinationServiceAccounts holds information about the service accounts to be impersonated for the application sync operation for each destination."
        }
      },
      "title": "AppProjectSpec is the specification of an AppProject"
    },
    "appprojectsAppProjectStatus": {
      "type": "object",
      "properties": {
        "jwtTokensByRole": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/$defs/appprojectsJWTTokens"
          },
          "title": "JWTTokensByRole contains a list of JWT tokens issued for a given role"
        }
      },
      "title": "AppProjectStatus contains status information for AppProject CRs"
    },
    "appprojectsApplicationDestination": {
      "type": "object",
      "properties": {
        "server": {
          "type": "string",
          "title": "Server specifies the URL of the target cluster and must be set to the Kubernetes control plane API"
        },
        "namespace": {
          "type": "string",
          "title": "Namespace specifies the target namespace for the application's resources.\nThe namespace will only be set for namespace-scoped resources that have not set a value for .metadata.namespace"
        },
        "name": {
          "type": "string",
          "title": "Name is an alternate way of specifying the target cluster by its symbolic name"
        }
      },
      "title": "ApplicationDestination holds information about the application's destination"
    },
    "appprojectsApplicationDestinationServiceAccount": {
      "type": "object",
      "properties": {
        "server": {
          "type": "string",
          "description": "Server specifies the URL of the target cluster's Kubernetes control plane API."
        },
        "namespace": {
          "type": "string",
          "description": "Namespace specifies the target namespace for the application's resources."
        },
        "defaultServiceAccount": {
          "type": "string",
          "title": "DefaultServiceAccount to be used for impersonation during the sync operation"
        }
      },
      "description": "ApplicationDestinationServiceAccount holds information about the service account to be impersonated for the application sync operation."
    },
    "appprojectsClusterResourceRestrictionItem": {
      "type": "object",
      "properties": {
        "group": {
          "type": "string"
        },
        "kind": {
          "type": "string"
        },
        "name": {
          "type": "string",
          "description": "Name is the name of the restricted resource. Glob patterns using Go's filepath.Match syntax are supported.\nUnlike the group and kind fields, if no name is specified, all resources of the specified group/kind are matched."
        }
      },
      "title": "ClusterResourceRestrictionItem is a cluster resource that is restricted by the project's whitelist or blacklist"
    },
    "appprojectsJWTToken": {
      "type": "object",
      "properties": {
        "iat": {
          "type": "string",
          "format": "int64"
        },
        "exp": {
          "type": "string",
          "format": "int64"
        },
        "id": {
          "type": "string"
        }
      },
      "title": "JWTToken holds the issuedAt and expiresAt values of a token"
    },
    "appprojectsJWTTokens": {
      "type": "object",
      "properties": {
        "items": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/appprojectsJWTToken"
          }
        }
      },
      "title": "JWTTokens represents a list of JWT tokens"
    },
    "appprojectsOrphanedResourceKey": {
      "type": "object",
      "properties": {
        "group": {
          "type": "string"
        },
        "kind": {
          "type": "string"
        },
        "name": {
          "type": "string"
        }
      },
      "title": "OrphanedResourceKey is a reference to a resource to be ignored from"
    },
    "appprojectsOrphanedResourcesMonitorSettings": {
      "type": "object",
      "properties": {
        "warn": {
          "type": "boolean",
          "title": "Warn indicates if warning condition should be created for apps which have orphaned resources"
        },
        "ignore": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/appprojectsOrphanedResourceKey"
          },
          "title": "Ignore contains a list of resources that are to be excluded from orphaned resources monitoring"
        }
      },
      "title": "OrphanedResourcesMonitorSettings holds settings of orphaned resources monitoring"
    },
    "appprojectsProjectRole": {
      "type": "object",
      "properties": {
        "name": {
          "type": "string",
          "title": "Name is a name for this role"
        },
        "description": {
          "type": "string",
          "title": "Description is a description of the role"
        },
        "policies": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "title": "Policies Stores a list of casbin formatted strings that define access policies for the role in the project"
        },
        "jwtTokens": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/appprojectsJWTToken"
          },
          "title": "JWTTokens are a list of generated JWT tokens bound to this role"
        },
        "groups": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "title": "Groups are a list of OIDC group claims bound to this role"
        }
      },
      "title": "ProjectRole represents a role that has access to a project"
    },
    "appprojectsSignatureKey": {
      "type": "object",
      "properties": {
        "keyID": {
          "type": "string",
          "title": "The ID of the key in hexadecimal notation"
        }
      },
      "title": "SignatureKey is the specification of a key required to verify commit signatures with"
    },
    "appprojectsSyncWindow": {
      "type": "object",
      "properties": {
        "kind": {
          "type": "string",
          "title": "Kind defines if the window allows or blocks syncs"
        },
        "schedule": {
          "type": "string",
          "title": "Schedule is the time the window will begin, specified in cron format"
        },
        "duration": {
          "type": "string",
          "title": "Duration is the amount of time the sync window will be open"
        },
        "applications": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "title": "Applications contains a list of applications that the window will apply to"
        },
        "namespaces": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "title": "Namespaces contains a list of namespaces that the window will apply to"
        },
        "clusters": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "title": "Clusters contains a list of clusters that the window will apply to"
        },
        "manualSync": {
          "type": "boolean",
          "title": "ManualSync enables manual syncs when they would otherwise be blocked"
        },
        "timeZone": {
          "type": "string",
          "title": "TimeZone of the sync that will be applied to the schedule"
        },
        "project": {
          "type": "string",
          "title": "Project this sync window belongs to\nthis will be deprecated in future"
        }
      },
      "title": "SyncWindow contains the kind, time, duration and attributes that are used to assign the syncWindows to apps"
    },
    "v1ArgoProject": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string"
        },
        "accountIdentifier": {
          "type": "string",
          "description": "Account Identifier for the ArgoProject."
        },
        "projectIdentifier": {
          "type": "string",
          "description": "Project Identifier for the ArgoProject. (Depends on mapping)"
        },
        "orgIdentifier": {
          "type": "string",
          "description": "Organization Identifier for the ArgoProject. (Depends on mapping)"
        },
        "name": {
          "type": "string"
        },
        "createdAt": {
          "type": "string",
          "format": "date-time"
        },
        "lastModifiedAt": {
          "type": "string",
          "format": "date-time"
        },
        "agentIdentifier": {
          "type": "string",
          "description": "Agent identifier for ArgoProject. This will be prefixed with scope."
        },
        "appProject": {
          "$ref": "#/$defs/appprojectsAppProject"
        }
      },
      "description": "AppProject resource with harness metadata and additional fields."
    },
    "v1FieldsV1": {
      "type": "object",
      "properties": {
        "Raw": {
          "type": "string",
          "format": "byte",
          "description": "Raw is the underlying serialization of this object."
        }
      },
      "description": "FieldsV1 stores a set of fields in a data structure like a Trie, in JSON format.\n\nEach key is either a '.' representing the field itself, and will always map to an empty set,\nor a string representing a sub-field or item. The string will follow one of these four formats:\n'f:<name>', where <name> is the name of a field in a struct, or key in a map\n'v:<value>', where <value> is the exact json formatted value of a list item\n'i:<index>', where <index> is position of a item in a list\n'k:<keys>', where <keys> is a map of  a list item's key fields to their unique values\nIf a key maps to an empty Fields value, the field that key represents is part of the set.\n\nThe exact format is defined in sigs.k8s.io/structured-merge-diff\n+protobuf.options.(gogoproto.goproto_stringer)=false"
    },
    "v1GroupKind": {
      "type": "object",
      "properties": {
        "group": {
          "type": "string"
        },
        "kind": {
          "type": "string"
        }
      },
      "description": "+protobuf.options.(gogoproto.goproto_stringer)=false",
      "title": "GroupKind specifies a Group and a Kind, but does not force a version.  This is useful for identifying\nconcepts during lookup stages without having partially valid types"
    },
    "v1ManagedFieldsEntry": {
      "type": "object",
      "properties": {
        "manager": {
          "type": "string",
          "description": "Manager is an identifier of the workflow managing these fields."
        },
        "operation": {
          "type": "string",
          "description": "Operation is the type of operation which lead to this ManagedFieldsEntry being created.\nThe only valid values for this field are 'Apply' and 'Update'."
        },
        "apiVersion": {
          "type": "string",
          "description": "APIVersion defines the version of this resource that this field set\napplies to. The format is \"group/version\" just like the top-level\nAPIVersion field. It is necessary to track the version of a field\nset because it cannot be automatically converted."
        },
        "time": {
          "$ref": "#/$defs/v1Time"
        },
        "fieldsType": {
          "type": "string",
          "title": "FieldsType is the discriminator for the different fields format and version.\nThere is currently only one possible value: \"FieldsV1\""
        },
        "fieldsV1": {
          "$ref": "#/$defs/v1FieldsV1"
        },
        "subresource": {
          "type": "string",
          "description": "Subresource is the name of the subresource used to update that object, or\nempty string if the object was updated through the main resource. The\nvalue of this field is used to distinguish between managers, even if they\nshare the same name. For example, a status update will be distinct from a\nregular update using the same manager name.\nNote that the APIVersion field is not related to the Subresource field and\nit always corresponds to the version of the main resource."
        }
      },
      "description": "ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of the resource\nthat the fieldset applies to."
    },
    "v1ObjectMeta": {
      "type": "object",
      "properties": {
        "name": {
          "type": "string",
          "title": "Name must be unique within a namespace. Is required when creating resources, although\nsome resources may allow a client to request the generation of an appropriate name\nautomatically. Name is primarily intended for creation idempotence and configuration\ndefinition.\nCannot be updated.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names\n+optional"
        },
        "generateName": {
          "type": "string",
          "description": "GenerateName is an optional prefix, used by the server, to generate a unique\nname ONLY IF the Name field has not been provided.\nIf this field is used, the name returned to the client will be different\nthan the name passed. This value will also be combined with a unique suffix.\nThe provided value has the same validation rules as the Name field,\nand may be truncated by the length of the suffix required to make the value\nunique on the server.\n\nIf this field is specified and the generated name exists, the server will return a 409.\n\nApplied only if Name is not specified.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency\n+optional"
        },
        "namespace": {
          "type": "string",
          "description": "Namespace defines the space within which each name must be unique. An empty namespace is\nequivalent to the \"default\" namespace, but \"default\" is the canonical representation.\nNot all objects are required to be scoped to a namespace - the value of this field for\nthose objects will be empty.\n\nMust be a DNS_LABEL.\nCannot be updated.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces\n+optional"
        },
        "selfLink": {
          "type": "string",
          "title": "Deprecated: selfLink is a legacy read-only field that is no longer populated by the system.\n+optional"
        },
        "uid": {
          "type": "string",
          "description": "UID is the unique in time and space value for this object. It is typically generated by\nthe server on successful creation of a resource and is not allowed to change on PUT\noperations.\n\nPopulated by the system.\nRead-only.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids\n+optional"
        },
        "resourceVersion": {
          "type": "string",
          "description": "An opaque value that represents the internal version of this object that can\nbe used by clients to determine when objects have changed. May be used for optimistic\nconcurrency, change detection, and the watch operation on a resource or set of resources.\nClients must treat these values as opaque and passed unmodified back to the server.\nThey may only be valid for a particular resource or set of resources.\n\nPopulated by the system.\nRead-only.\nValue must be treated as opaque by clients and .\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency\n+optional"
        },
        "generation": {
          "type": "string",
          "format": "int64",
          "title": "A sequence number representing a specific generation of the desired state.\nPopulated by the system. Read-only.\n+optional"
        },
        "creationTimestamp": {
          "$ref": "#/$defs/v1Time"
        },
        "deletionTimestamp": {
          "$ref": "#/$defs/v1Time"
        },
        "deletionGracePeriodSeconds": {
          "type": "string",
          "format": "int64",
          "title": "Number of seconds allowed for this object to gracefully terminate before\nit will be removed from the system. Only set when deletionTimestamp is also set.\nMay only be shortened.\nRead-only.\n+optional"
        },
        "labels": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          },
          "title": "Map of string keys and values that can be used to organize and categorize\n(scope and select) objects. May match selectors of replication controllers\nand services.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels\n+optional"
        },
        "annotations": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          },
          "title": "Annotations is an unstructured key value map stored with a resource that may be\nset by external tools to store and retrieve arbitrary metadata. They are not\nqueryable and should be preserved when modifying objects.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations\n+optional"
        },
        "ownerReferences": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/v1OwnerReference"
          },
          "title": "List of objects depended by this object. If ALL objects in the list have\nbeen deleted, this object will be garbage collected. If this object is managed by a controller,\nthen an entry in this list will point to this controller, with the controller field set to true.\nThere cannot be more than one managing controller.\n+optional\n+patchMergeKey=uid\n+patchStrategy=merge\n+listType=map\n+listMapKey=uid"
        },
        "finalizers": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "title": "Must be empty before the object is deleted from the registry. Each entry\nis an identifier for the responsible component that will remove the entry\nfrom the list. If the deletionTimestamp of the object is non-nil, entries\nin this list can only be removed.\nFinalizers may be processed and removed in any order.  Order is NOT enforced\nbecause it introduces significant risk of stuck finalizers.\nfinalizers is a shared field, any actor with permission can reorder it.\nIf the finalizer list is processed in order, then this can lead to a situation\nin which the component responsible for the first finalizer in the list is\nwaiting for a signal (field value, external system, or other) produced by a\ncomponent responsible for a finalizer later in the list, resulting in a deadlock.\nWithout enforced ordering finalizers are free to order amongst themselves and\nare not vulnerable to ordering changes in the list.\n+optional\n+patchStrategy=merge\n+listType=set"
        },
        "managedFields": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/v1ManagedFieldsEntry"
          },
          "description": "ManagedFields maps workflow-id and version to the set of fields\nthat are managed by that workflow. This is mostly for internal\nhousekeeping, and users typically shouldn't need to set or\nunderstand this field. A workflow can be the user's name, a\ncontroller's name, or the name of a specific apply path like\n\"ci-cd\". The set of fields is always in the version that the\nworkflow used when modifying the object.\n\n+optional\n+listType=atomic"
        }
      },
      "description": "ObjectMeta is metadata that all persisted resources must have, which includes all objects\nusers must create."
    },
    "v1OwnerReference": {
      "type": "object",
      "properties": {
        "apiVersion": {
          "type": "string",
          "description": "API version of the referent."
        },
        "kind": {
          "type": "string",
          "title": "Kind of the referent.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
        },
        "name": {
          "type": "string",
          "title": "Name of the referent.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names"
        },
        "uid": {
          "type": "string",
          "title": "UID of the referent.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids"
        },
        "controller": {
          "type": "boolean",
          "title": "If true, this reference points to the managing controller.\n+optional"
        },
        "blockOwnerDeletion": {
          "type": "boolean",
          "title": "If true, AND if the owner has the \"foregroundDeletion\" finalizer, then\nthe owner cannot be deleted from the key-value store until this\nreference is removed.\nSee https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion\nfor how the garbage collector interacts with this field and enforces the foreground deletion.\nDefaults to false.\nTo set this field, a user needs \"delete\" permission of the owner,\notherwise 422 (Unprocessable Entity) will be returned.\n+optional"
        }
      },
      "title": "OwnerReference contains enough information to let you identify an owning\nobject. An owning object must be in the same namespace as the dependent, or\nbe cluster-scoped, so there is no namespace field.\n+structType=atomic"
    },
    "v1Time": {
      "type": "object",
      "properties": {
        "seconds": {
          "type": "string",
          "format": "int64",
          "description": "Represents seconds of UTC time since Unix epoch\n1970-01-01T00:00:00Z. Must be from 0001-01-01T00:00:00Z to\n9999-12-31T23:59:59Z inclusive."
        },
        "nanos": {
          "type": "integer",
          "format": "int32",
          "description": "Non-negative fractions of a second at nanosecond resolution. Negative\nsecond values with fractions must still have non-negative nanos values\nthat count forward in time. Must be from 0 to 999,999,999\ninclusive. This field may be limited in precision depending on context."
        }
      },
      "description": "Time is a wrapper around time.Time which supports correct\nmarshaling to YAML and JSON.  Wrappers are provided for many\nof the factory methods that the time package offers.\n\n+protobuf.options.marshal=false\n+protobuf.as=Timestamp\n+protobuf.options.(gogoproto.goproto_stringer)=false"
    }
  }
}