{
  "multiuser_mode": {
    "authentication": {
      "auth_type": "token",
      "ssh_key_storage": "local",
      "token_config": {
        "expiry_seconds": 86400,
        "refresh_enabled": true,
        "token_format": "jwt",
        "token_path": "~/.provisioning/tokens/auth"
      }
    },
    "description": "Team collaboration with shared services",
    "extensions": {
      "oci_registry": {
        "auth_token_path": "~/.provisioning/tokens/oci",
        "cache_dir": "~/.provisioning/oci-cache",
        "enabled": true,
        "endpoint": "harbor.company.local",
        "namespace": "provisioning-extensions",
        "tls_enabled": true,
        "verify_ssl": true
      },
      "source": "oci"
    },
    "mode_name": "multi_user",
    "resource_limits": {
      "max_cpu_cores_per_user": 32,
      "max_memory_gb_per_user": 128,
      "max_servers_per_user": 10,
      "max_storage_gb_per_user": 500,
      "max_total_cpu_cores": 320,
      "max_total_memory_gb": 1024,
      "max_total_servers": 100
    },
    "security": {
      "audit_log_path": "/var/log/provisioning/audit.log",
      "audit_logging": true,
      "dns_modification": "coredns",
      "encryption_at_rest": false,
      "encryption_in_transit": true,
      "network_isolation": false,
      "secret_provider": {
        "provider": "sops"
      }
    },
    "services": {
      "control_center": {
        "deployment": "remote",
        "remote_config": {
          "endpoint": "control.company.local",
          "port": 8081,
          "tls_enabled": true
        }
      },
      "coredns": {
        "deployment": "remote",
        "remote_config": {
          "endpoint": "dns.company.local",
          "port": 53,
          "tls_enabled": false
        }
      },
      "gitea": {
        "deployment": "remote",
        "remote_config": {
          "endpoint": "git.company.local",
          "port": 443,
          "tls_enabled": true
        }
      },
      "oci_registry": {
        "auth_required": true,
        "deployment": "remote",
        "endpoint": "harbor.company.local",
        "namespaces": {
          "extensions": "provisioning-extensions",
          "kcl_packages": "provisioning-kcl",
          "platform_images": "provisioning-platform",
          "test_images": "provisioning-test"
        },
        "remote": {
          "retries": 3,
          "timeout": 30,
          "verify_ssl": true
        },
        "tls_enabled": true,
        "type": "harbor"
      },
      "orchestrator": {
        "deployment": "remote",
        "remote_config": {
          "endpoint": "orchestrator.company.local",
          "port": 8080,
          "retries": 3,
          "timeout": 30,
          "tls_enabled": true,
          "verify_ssl": true
        }
      }
    },
    "workspaces": {
      "git_integration": "required",
      "isolation": "user",
      "lock_provider": "gitea",
      "locking": "enabled",
      "max_workspaces_per_user": 5
    }
  }
}