{
  "spec": {
    "desired": {
      "ociRef": "oci://harbor.blog-harbor.svc.cluster.local/fulfillment/shipments@sha256:1f729335ce618fe83366cb5133cf35209da7adaa05e6d13071a0a5122e044ff2",
      "registryAuthFrom": {
        "name": "harbor-operator",
        "mode": "Environment",
        "usernameKey": "username",
        "passwordKey": "password",
        "registryKey": "registry"
      },
      "transport": {
        "plainHTTP": false,
        "caFrom": {
          "name": "harbor-ca",
          "key": "ca.crt"
        }
      }
    }
  }
}