{
  "description": "APIRateLimit defines how group of consumers are rate limited on a set of APIs.",
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": [
        "string",
        "null"
      ]
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": [
        "string",
        "null"
      ]
    },
    "metadata": {
      "type": [
        "object",
        "null"
      ]
    },
    "spec": {
      "additionalProperties": false,
      "description": "The desired behavior of this APIRateLimit.",
      "properties": {
        "apiSelector": {
          "additionalProperties": false,
          "description": "APISelector selects the APIs that will be rate limited.\nMultiple APIRateLimits can select the same set of APIs.\nThis field is optional and follows standard label selector semantics.\nAn empty APISelector matches any API.",
          "properties": {
            "matchExpressions": {
              "description": "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
              "items": {
                "additionalProperties": false,
                "description": "A label selector requirement is a selector that contains values, a key, and an operator that\nrelates the key and values.",
                "properties": {
                  "key": {
                    "description": "key is the label key that the selector applies to.",
                    "type": "string"
                  },
                  "operator": {
                    "description": "operator represents a key's relationship to a set of values.\nValid operators are In, NotIn, Exists and DoesNotExist.",
                    "type": "string"
                  },
                  "values": {
                    "description": "values is an array of string values. If the operator is In or NotIn,\nthe values array must be non-empty. If the operator is Exists or DoesNotExist,\nthe values array must be empty. This array is replaced during a strategic\nmerge patch.",
                    "items": {
                      "type": "string"
                    },
                    "type": [
                      "array",
                      "null"
                    ],
                    "x-kubernetes-list-type": "atomic"
                  }
                },
                "required": [
                  "key",
                  "operator"
                ],
                "type": "object"
              },
              "type": [
                "array",
                "null"
              ],
              "x-kubernetes-list-type": "atomic"
            },
            "matchLabels": {
              "additionalProperties": {
                "type": "string"
              },
              "description": "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels\nmap is equivalent to an element of matchExpressions, whose key field is \"key\", the\noperator is \"In\", and the values array contains only \"value\". The requirements are ANDed.",
              "type": [
                "object",
                "null"
              ]
            }
          },
          "type": [
            "object",
            "null"
          ],
          "x-kubernetes-map-type": "atomic"
        },
        "apis": {
          "description": "APIs defines a set of APIs that will be rate limited.\nMultiple APIRateLimits can select the same APIs.\nWhen combined with APISelector, this set of APIs is appended to the matching APIs.",
          "items": {
            "additionalProperties": false,
            "description": "APIReference references an API.",
            "properties": {
              "name": {
                "description": "Name of the API.",
                "maxLength": 253,
                "type": "string"
              }
            },
            "required": [
              "name"
            ],
            "type": "object"
          },
          "maxItems": 100,
          "type": [
            "array",
            "null"
          ],
          "x-kubernetes-validations": [
            {
              "message": "duplicated apis",
              "rule": "self.all(x, self.exists_one(y, x.name == y.name))"
            }
          ]
        },
        "everyone": {
          "description": "Everyone indicates that all users will, by default, be rate limited with this configuration.\nIf an APIRateLimit explicitly target a group, the default rate limit will be ignored.",
          "type": [
            "boolean",
            "null"
          ]
        },
        "groups": {
          "description": "Groups are the consumer groups that will be rate limited.\nMultiple APIRateLimits can target the same set of consumer groups, the most restrictive one applies.\nWhen a consumer belongs to multiple groups, the least restrictive APIRateLimit applies.",
          "items": {
            "type": "string"
          },
          "type": [
            "array",
            "null"
          ]
        },
        "limit": {
          "description": "Limit is the maximum number of token in the bucket.",
          "type": "integer",
          "x-kubernetes-validations": [
            {
              "message": "must be a positive number",
              "rule": "self \u003e= 0"
            }
          ]
        },
        "period": {
          "description": "Period is the unit of time for the Limit.",
          "format": "duration",
          "type": [
            "string",
            "null"
          ],
          "x-kubernetes-validations": [
            {
              "message": "must be between 1s and 1h",
              "rule": "self \u003e= duration('1s') \u0026\u0026 self \u003c= duration('1h')"
            }
          ]
        },
        "strategy": {
          "description": "Strategy defines how the bucket state will be synchronized between the different Traefik Hub instances.\nIt can be, either \"local\" or \"distributed\".",
          "enum": [
            "local",
            "distributed"
          ],
          "type": [
            "string",
            "null"
          ]
        }
      },
      "required": [
        "limit"
      ],
      "type": [
        "object",
        "null"
      ],
      "x-kubernetes-validations": [
        {
          "message": "groups and everyone are mutually exclusive",
          "rule": "(has(self.everyone) \u0026\u0026 has(self.groups)) ? !(self.everyone \u0026\u0026 self.groups.size() \u003e 0) : true"
        }
      ]
    },
    "status": {
      "additionalProperties": false,
      "description": "The current status of this APIRateLimit.",
      "properties": {
        "hash": {
          "description": "Hash is a hash representing the APIRateLimit.",
          "type": [
            "string",
            "null"
          ]
        },
        "syncedAt": {
          "format": "date-time",
          "type": [
            "string",
            "null"
          ]
        },
        "version": {
          "type": [
            "string",
            "null"
          ]
        }
      },
      "type": [
        "object",
        "null"
      ]
    }
  },
  "type": "object"
}