{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "title": "KubernetesServiceAccountResponse",
  "required": [
    "subject",
    "description",
    "scopes"
  ],
  "properties": {
    "subject": {
      "description": "Full Kubernetes service account subject \u2014 `system:serviceaccount:<namespace>:<name>`.",
      "type": "string",
      "example": "system:serviceaccount:keboola-internal:workspaces-sandboxes-service"
    },
    "description": {
      "description": "Operator-facing description of what the service account is used for.",
      "type": "string",
      "example": "Workspace provisioning service"
    },
    "scopes": {
      "description": "Manage-token scopes granted to JWTs issued for this service account.",
      "type": "array",
      "items": {
        "type": "string"
      },
      "example": [
        "projects:read",
        "organizations:read"
      ]
    }
  },
  "type": "object"
}