v1alpha2

type GarbageCollection struct {
	// +kubebuilder:validation:Optional
	Cron string `json:"cron,omitempty"`

	// +optional
	DeleteUntagged bool `json:"deleteUntagged,omitempty"`

	// +kubebuilder:validation:Optional
	ScheduleType ScheduleType `json:"scheduleType,omitempty"`
}

type Instance struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              InstanceSpec `json:"spec,omitempty"`

	Status InstanceStatus `json:"status,omitempty"`
}

type InstanceChartRepository struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   InstanceChartRepositorySpec   `json:"spec,omitempty"`
	Status InstanceChartRepositoryStatus `json:"status,omitempty"`
}

type InstanceChartRepositoryList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []InstanceChartRepository `json:"items"`
}

type InstanceChartRepositorySpec struct {
	// The URL of the chart repository to use
	URL string `json:"url"`

	// +kubebuilder:validation:Optional
	Name string `json:"name,omitempty"`

	// +kubebuilder:validation:Optional
	SecretRef *corev1.LocalObjectReference `json:"secretRef,omitempty"`
}

type InstanceChartRepositoryStatus struct {
	State RepoState `json:"state"`
}

type InstanceHelmChartSecretValues struct {
	SecretRef *corev1.LocalObjectReference `json:"secretRef"`
	Key       string                       `json:"key"`
}

type InstanceHelmChartSpec struct {
	helmclient.ChartSpec `json:",inline"`

	// set additional chart values from secret
	// +kubebuilder:validation:Optional
	SecretValues *InstanceHelmChartSecretValues `json:"secretValues,omitempty"`
}

type InstanceList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Instance `json:"items"`
}

type InstanceSpec struct {
	Name string `json:"name"`
	// can't use the resulting string-type so this is a simple string and will be casted to an OperatorType in the resolver:
	// error: Hit an unsupported type invalid type for invalid type
	Type string `json:"type"`

	InstanceURL string `json:"instanceURL"`

	HelmChart *InstanceHelmChartSpec `json:"helmChart"`

	// +kubebuilder:validation:Optional
	GarbageCollection *GarbageCollection `json:"garbageCollection,omitempty"`
}

type InstanceStatus struct {
	Phase InstanceStatusPhase `json:"phase"`

	// +optional
	SpecHash string `json:"specHash"`
}

type InstanceStatusPhase struct {
	Name InstanceStatusPhaseName `json:"name"`

	Message string `json:"message"`

	// Time of last observed transition into this state.
	// +kubebuilder:validation:Optional
	LastTransition *metav1.Time `json:"lastTransition,omitempty"`
}

type InstanceStatusPhaseName string

type MemberRequest struct {
	Role MemberRole                  `json:"role"`
	User corev1.LocalObjectReference `json:"user"` // reference to an User object
}

type MemberRole string

type MemberRoleID int64

type Project struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ProjectSpec   `json:"spec,omitempty"`
	Status ProjectStatus `json:"status,omitempty"`
}

type ProjectList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Project `json:"items"`
}

type ProjectMetadata struct {
	// Whether content trust is enabled or not
	// If it is, users can not pull unsigned images from this project
	// +kubebuilder:validation:Optional
	EnableContentTrust bool `json:"enableContentTrust,omitempty"`
	// Whether to scan images automatically when pushing or not
	// +kubebuilder:validation:Optional
	AutoScan bool `json:"autoScan,omitempty"`
	// Whether this project reuses the system level CVE allowlist as the allowlist of its own.
	// The valid values are "true", "false".
	// If set to "true", the actual allowlist associated with this project, if any, will be ignored.
	// +kubebuilder:validation:Optional
	ReuseSysCVEAllowlist bool `json:"reuseSysCVEAllowlist,omitempty"`
	// Whether to prevent the vulnerable images from running or not.
	// +kubebuilder:validation:Optional
	PreventVul bool `json:"preventVul,omitempty"`
	// Public status of the Project
	// +kubebuilder:validation:Required
	Public bool `json:"public"`
	// If a vulnerability's severity is higher than the severity defined here,
	// images can't be pulled. Valid values are "none", "low", "medium", "high", "critical".
	// +kubebuilder:validation:Optional
	Severity *string `json:"severity,omitempty"`
}

type ProjectSpec struct {
	Name string `json:"name"`

	// ParentInstance is a LocalObjectReference to the
	// name of the harbor instance the project is created for
	ParentInstance corev1.LocalObjectReference `json:"parentInstance"`

	// +kubebuilder:validation:Optional
	StorageLimit int `json:"storageLimit"`

	// ProxyCache defines an optional reference to a registry resource.
	// The project will be created as a "Proxy Cache" project, if specified.
	// +kubebuilder:validation:Optional
	ProxyCache *ProxyCacheSettings `json:"proxyCache,omitempty"`

	// +kubebuilder:validation:Optional
	Metadata ProjectMetadata `json:"metadata,omitempty"`

	// Ref to the name of a 'User' resource
	// +kubebuilder:validation:Optional
	MemberRequests []MemberRequest `json:"memberRequests,omitempty"`
}

type ProjectStatus struct {
	Phase   ProjectStatusPhaseName `json:"phase"`
	Message string                 `json:"message"`
	// Time of last observed transition into this state
	// +kubebuilder:validation:Optional
	LastTransition *metav1.Time `json:"lastTransition,omitempty"`

	// The project ID is written back from the held project ID.
	ID int32 `json:"id,omitempty"`
	// Members is the list of existing project member users as LocalObjectReference
	Members []corev1.LocalObjectReference `json:"members,omitempty"`
}

type ProjectStatusPhaseName string

type ProxyCacheSettings struct {
	Registry *corev1.LocalObjectReference `json:"registry,omitempty"`
}

type Registry struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec RegistrySpec `json:"spec,omitempty"`

	Status RegistryStatus `json:"status,omitempty"`
}

type RegistryCredential struct {
	// Secret reference to the credentials
	SecretRef corev1.LocalObjectReference `json:"secretRef"`

	// Key for the "AccessKey" field of the secret referenced in SecretRef
	SecretKeyAccessKey string `json:"secretKeyAccessKey"`

	// Key for the "AccessSecret" field of the secret referenced in SecretRef
	SecretKeyAccessSecret string `json:"secretKeyAccessSecret"`

	// Credential type, such as 'basic', 'oauth'.
	Type string `json:"type"`
}

type RegistryList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Registry `json:"items"`
}

type RegistrySpec struct {
	Name string `json:"name"`

	// +kubebuilder:validation:Optional
	Description string `json:"description,omitempty"`

	Type RegistryType `json:"type"`

	// Target URL of the registry
	URL string `json:"url"`

	// +kubebuilder:validation:Optional
	Credential *RegistryCredential `json:"credential,omitempty"`

	// Whether the TLS certificate will be verified when Harbor tries to access the registry or not
	// +kubebuilder:validation:Optional
	Insecure bool `json:"insecure,omitempty"`

	// ParentInstance is a LocalObjectReference to the
	// name of the harbor instance the registry is created for
	ParentInstance corev1.LocalObjectReference `json:"parentInstance"`
}

type RegistryStatus struct {
	Phase   RegistryStatusPhaseName `json:"phase"`
	Message string                  `json:"message"`

	// Time of last observed transition into this state
	// +kubebuilder:validation:Optional
	LastTransition *metav1.Time `json:"lastTransition,omitempty"`

	// The registry ID is written back from the held registry ID.
	ID int64 `json:"id,omitempty"`
}

type RegistryStatusPhaseName string

type RegistryType string

type Replication struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec ReplicationSpec `json:"spec,omitempty"`

	Status ReplicationStatus `json:"status,omitempty"`
}

type ReplicationFilter struct {
	// The replication policy filter type.
	// +kubebuilder:validation:Optional
	Type string `json:"type,omitempty"`

	// The value of replication policy filter.
	// +kubebuilder:validation:Optional
	Value string `json:"value,omitempty"`
}

type ReplicationList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Replication `json:"items"`
}

type ReplicationSpec struct {
	// Whether to override the resources on the destination registry or not
	Override bool `json:"override"`

	// Whether the policy is enabled or not
	// +kubebuilder:validation:Optional
	Enabled bool `json:"enabled,omitempty"`
	// +kubebuilder:validation:Optional
	TriggerAfterCreation bool `json:"triggerAfterCreation,omitempty"`
	// Whether to replicate the deletion operation
	// +kubebuilder:validation:Optional
	ReplicateDeletion bool `json:"replicateDeletion,omitempty"`

	// The name of the replication
	Name string `json:"name"`

	// +kubebuilder:validation:Optional
	Description string `json:"description,omitempty"`

	// +kubebuilder:validation:Optional
	Creator string `json:"creator,omitempty"`

	// The destination namespace
	// If left empty, the resource will be but in the same namespace as the source
	// +kubebuilder:validation:Optional
	DestNamespace string `json:"destNamespace,omitempty"`

	// Source Registry
	// Reference to a registry cr
	// +kubebuilder:validation:Optional
	SrcRegistry *corev1.LocalObjectReference `json:"srcRegistry,omitempty"`

	// Destination Registry
	// Reference to a registry cr
	// +kubebuilder:validation:Optional
	DestRegistry *corev1.LocalObjectReference `json:"destRegistry,omitempty"`

	// The replication policy trigger type
	// +kubebuilder:validation:Optional
	Trigger *ReplicationTrigger `json:"trigger,omitempty"`

	// The replication policy filter array
	// +kubebuilder:validation:Optional
	Filters []ReplicationFilter `json:"filters,omitempty"`

	// ParentInstance is a LocalObjectReference to the
	// name of the harbor instance the replication policy gets created for
	ParentInstance corev1.LocalObjectReference `json:"parentInstance"`
}

type ReplicationStatus struct {
	Phase   ReplicationStatusPhaseName `json:"phase"`
	Message string                     `json:"message"`

	// The replication ID is written back from the held replication ID.
	ID int64 `json:"id,omitempty"`
	// The respective source and destination registries
	Source      string `json:"source,omitempty"`
	Destination string `json:"destination,omitempty"`
}

type ReplicationStatusPhaseName string

type ReplicationTrigger struct {
	// +kubebuilder:validation:Optional
	Type string `json:"type,omitempty"`

	// +kubebuilder:validation:Optional
	Settings *TriggerSettings `json:"triggerSettings,omitempty"`
}

type RepoState string

type ScheduleType string

type TriggerSettings struct {
	Cron string `json:"cron"`
}

type User struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   UserSpec   `json:"spec,omitempty"`
	Status UserStatus `json:"status,omitempty"`
}

type UserList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []User `json:"items"`
}

type UserSpec struct {
	// +kubebuilder:validation:Optional
	SysAdmin *bool `json:"sysAdmin,omitempty"`
	// The effective length of the generated user password
	// +kubebuilder:validation:Minimum=8
	// +kubebuilder:validation:Maximum=128
	// +kubebuilder:validation:Optional
	PasswordStrength int32 `json:"passwordStrength"`
	// ParentInstance is a LocalObjectReference to the
	// name of the harbor instance the user is created for
	ParentInstance corev1.LocalObjectReference `json:"parentInstance"`
	Name           string                      `json:"name"`
	RealName       string                      `json:"realname"`
	Email          string                      `json:"email"`
	UserSecretRef  corev1.LocalObjectReference `json:"userSecretRef"`
	// +kubebuilder:validation:Optional
	Comments string `json:"comments,omitempty"`
}

type UserStatus struct {
	Phase UserStatusPhaseName `json:"phase"`
	// +optional
	Message string `json:"message"`
	// +optional
	PasswordHash string `json:"passwordHash"`

	// Time of last observed transition into this state
	// +kubebuilder:validation:Optional
	LastTransition *metav1.Time `json:"lastTransition,omitempty"`
}

type UserStatusPhaseName string