unleash_nais_io_v1

type ApiToken struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ApiTokenSpec   `json:"spec,omitempty"`
	Status ApiTokenStatus `json:"status,omitempty"`
}

type ApiTokenList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ApiToken `json:"items"`
}

type ApiTokenSpec struct {
	// UnleashInstance is the Unleash instance this token is for.
	// +kubebuilder:validation:Required
	UnleashInstance ApiTokenUnleashInstance `json:"unleashInstance"`

	// SecretName is the name of the secret where the token will be stored.
	// +kubebuilder:validation:Required
	SecretName string `json:"secretName"`

	// Type is the type of token to create. Valid values are "CLIENT" and "FRONTEND".
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:Enum=CLIENT;FRONTEND
	// +kubebuilder:default="CLIENT"
	Type string `json:"type,omitempty"`

	// Environment is the environment to create the token for.
	// +kubebuilder:validation:Optional
	// +kubebuilder:default="development"
	Environment string `json:"environment,omitempty"`

	// Projects is the list of projects to create the token for.
	// +kubebuilder:validation:Optional
	// +kubebuilder:default={"default"}
	Projects []string `json:"projects,omitempty"`
}

type ApiTokenStatus struct {
	// Represents the observations of a ApiToken's current state.
	// Unleash.status.conditions.type are: "Created", and "Failed"
	// Unleash.status.conditions.status are one of True, False, Unknown.
	// Unleash.status.conditions.reason the value should be a CamelCase string and producers of specific
	// condition types may define expected values and meanings for this field, and whether the values
	// are considered a guaranteed API.
	// Unleash.status.conditions.Message is a human readable message indicating details about the transition.
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// Created is true when the Unleash API token has been created successfully
	// in the Unleash instance.
	// This is used for kubectl printing purposes. Rather than relying on this
	// value, check the conditions instead.
	// +kubebuilder:default=false
	Created bool `json:"created,omitempty"`

	// Failed is true when the Unleash API token reconcile has failed
	// This is used for kubectl printing purposes. Rather than relying on this
	// value, check the conditions instead.
	// +kubebuilder:default=false
	Failed bool `json:"failed,omitempty"`
}

type ApiTokenUnleashInstance struct {
	// ApiVersion is the API version of the Unleash instance.
	// +kubebuilder:validation:Required
	// +kubebuilder:default=unleash.nais.io/v1
	ApiVersion string `json:"apiVersion"`

	// Kind is the API kind of the Unleash instance.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:Enum=Unleash;RemoteUnleash
	Kind string `json:"kind"`

	// Name is the name of the Unleash instance.
	// +kubebuilder:validation:Required
	Name string `json:"name"`
}

type RemoteUnleash struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   RemoteUnleashSpec   `json:"spec,omitempty"`
	Status RemoteUnleashStatus `json:"status,omitempty"`
}

type RemoteUnleashList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []RemoteUnleash `json:"items"`
}

type RemoteUnleashSecret struct {
	// Name is the name of the secret containing the Unleash instance's API token.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:Pattern=`^unleasherator-.+$`
	Name string `json:"name"`

	// TokenKey is the key of the secret containing the Unleash instance's API token.
	// +kubebuilder:validation:Optional
	// +kubebuilder:default=token
	Key string `json:"key,omitempty"`

	// Namespace is the namespace of the secret containing the Unleash instance's API token.
	// +kubebuilder:validation:Optional
	Namespace string `json:"namespace,omitempty"`
}

type RemoteUnleashServer struct {
	// URL is the URL of the Unleash instance.
	// The URL must be a valid URL, and must start with either http:// or https://.
	// The URL must be to the root of the Unleash instance, and must not contain any path.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:Pattern=`^https?://`
	URL string `json:"url"`
}

type RemoteUnleashSpec struct {
	// Server is the Unleash instance this token is for.
	// +kubebuilder:validation:Required
	Server RemoteUnleashServer `json:"unleashInstance"`

	// Secret is the secret containing the Unleash instance's API token.
	// +kubebuilder:validation:Required
	AdminSecret RemoteUnleashSecret `json:"adminSecret"`
}

type RemoteUnleashStatus struct {
	// Represents the observations of a RemoteUnleash's current state.
	// RemoteUnleash.status.conditions.type are: "Reconciled", "Connected", and "Degraded"
	// RemoteUnleash.status.conditions.status are one of True, False, Unknown.
	// RemoteUnleash.status.conditions.reason the value should be a CamelCase string and producers of specific
	// condition types may define expected values and meanings for this field, and whether the values
	// are considered a guaranteed API.
	// RemoteUnleash.status.conditions.Message is a human readable message indicating details about the transition.
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// Reconciled is true when the Unleash resources hav been reconciled
	// successfully.
	// This is used for kubectl printing purposes. Rather than relying on this
	// value, check the conditions instead.
	// +kubebuilder:default=false
	Reconciled bool `json:"reconciled,omitempty"`

	// Connected is true when the Unleash resource has been connected to the Unleash server
	// This is used for kubectl printing purposes. Rather than relying on this
	// value, check the conditions instead.
	// +kubebuilder:default=false
	Connected bool `json:"connected,omitempty"`

	// Version is the reported version of the Unleash server
	// +kubebuilder:default="unknown"
	Version string `json:"version,omitempty"`
}

type Unleash struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   UnleashSpec   `json:"spec,omitempty"`
	Status UnleashStatus `json:"status,omitempty"`
}

type UnleashDatabaseConfig struct {
	// SecretName is the name of the secret containing the database credentials
	SecretName string `json:"secretName,omitempty"`

	// SecretURLKey is the key in the secret containing the database URL
	SecretURLKey string `json:"secretURLKey,omitempty"`

	// SecretUserKey is the key in the secret containing the database user
	SecretUserKey string `json:"secretUserKey,omitempty"`

	// SecretPassKey is the key in the secret containing the database password
	SecretPassKey string `json:"secretPassKey,omitempty"`

	// SecretPortKey is the key in the secret containing the database port
	SecretPortKey string `json:"secretPortKey,omitempty"`

	// SecretHostKey is the key in the secret containing the database host
	SecretHostKey string `json:"secretHostKey,omitempty"`

	// SecretDatabaseNameKey is the key in the secret containing the database name
	SecretDatabaseNameKey string `json:"secretDatabaseNameKey,omitempty"`

	// SecretSSLKey is the key in the secret containing the database SSL configuration
	SecretSSLKey string `json:"secretSSLKey,omitempty"`

	// URL defines the database URL
	URL string `json:"url,omitempty"`

	// DatabaseName defines the name of the database to be used
	DatabaseName string `json:"databaseName,omitempty"`

	// Host defines the host of the database to be used
	Host string `json:"host,omitempty"`

	// Port defines the port of the database to be used
	Port string `json:"port,omitempty"`

	// Username defines the username of the database to be used
	User string `json:"user,omitempty"`

	// SSL defines if the database connection should use SSL
	SSL string `json:"ssl,omitempty"`
}

type UnleashFederationConfig struct {
	// Enable enables Unleash federation
	// +kubebuilder:default=false
	Enabled bool `json:"enabled,omitempty"`

	// Clusters are the clusters to federate to
	// +kubebuilder:validation:Optional
	Clusters []string `json:"clusters,omitempty"`

	// Namespaces are the namespaces to federate to
	// +kubebuilder:validation:Optional
	Namespaces []string `json:"namespaces,omitempty"`

	// SecretNonce is the shared secret used for federation
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:Pattern=`^[a-z0-9]+$`
	SecretNonce string `json:"secretNonce,omitempty"`
}

type UnleashIngressConfig struct {
	// Enable enables the ingress
	// +kubebuilder:default=false
	Enabled bool `json:"enabled,omitempty"`

	// Host is the hostname to use for the ingress
	// +kubebuilder:validation:Optional
	Host string `json:"host,omitempty"`

	// Path is the path to use for the ingress
	// +kubebuilder:validation:Optional
	// +kubebuilder:default="/"
	Path string `json:"path,omitempty"`

	// TLS is the TLS configuration to use for the ingress
	// +kubebuilder:validation:Optional
	TLS *UnleashIngressTLSConfig `json:"tls,omitempty"`

	// Annotations is a map of annotations to add to the ingress
	// +kubebuilder:validation:Optional
	Annotations map[string]string `json:"annotations,omitempty"`

	// Class is the ingress class to use for the ingress
	// +kubebuilder:validation:Optional
	Class string `json:"class,omitempty"`
}

type UnleashIngressTLSConfig struct {
	// SecretName is the name of the secret containing the TLS certificate
	// +kubebuilder:validation:Required
	SecretName string `json:"secretName,omitempty"`

	// SecretCertKey is the key in the secret containing the TLS certificate
	// +kubebuilder:validation:Required
	SecretCertKey string `json:"secretCertKey,omitempty"`

	// SecretKeyKey is the key in the secret containing the TLS key
	// +kubebuilder:validation:Required
	SecretKeyKey string `json:"secretKeyKey,omitempty"`
}

type UnleashList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Unleash `json:"items"`
}

type UnleashNetworkPolicyConfig struct {
	// Enable enables the network policy
	// +kubebuilder:default=true
	Enabled bool `json:"enabled,omitempty"`

	// AllowDNS enables DNS traffic
	// +kubebuilder:default=true
	AllowDNS bool `json:"allowDNS,omitempty"`

	// AllowAllFromCluster enables all ingress traffic from the same cluster
	// +kubebuilder:default=false
	AllowAllFromCluster bool `json:"allowAll,omitempty"`

	// AllowAllFromSameNamespace enables all ingress traffic from the same namespace
	// +kubebuilder:default=false
	AllowAllFromSameNamespace bool `json:"allowAllSameNamespace,omitempty"`

	// AllowAllFromNamespaces is a list of namespaces to allow ingress traffic from
	// +kubebuilder:validation:Optional
	AllowAllFromNamespaces []string `json:"allowFromNamespaces,omitempty"`

	// ExtraIngressRules is a list of extra ingress rules to add to the network policy
	// +kubebuilder:validation:Optional
	ExtraIngressRules []networkingv1.NetworkPolicyIngressRule `json:"extraIngressRules,omitempty"`

	// ExtraEgressRules is a list of extra egress rules to add to the network policy
	// +kubebuilder:validation:Optional
	ExtraEgressRules []networkingv1.NetworkPolicyEgressRule `json:"extraEgressRules,omitempty"`
}

type UnleashPrometheusConfig struct {
	// Enable enables the prometheus metrics endpoint
	// +kubebuilder:default=true
	Enabled bool `json:"enabled,omitempty"`
}

type UnleashSpec struct {
	// Size is the size of the Unleash deployment.
	// +kubebuilder:default=1
	Size int32 `json:"size,omitempty"`

	// CustomImage points to a custom image, which overrides all other version settings.
	// Use at your own risk.
	// +kubebuilder:validation:Optional
	CustomImage string `json:"customImage,omitempty"`

	// Prometheus defines the Prometheus metrics collection configuration.
	// +kubebuilder:validation:Optional
	Prometheus UnleashPrometheusConfig `json:"prometheus,omitempty"`

	// Database is the database configuration.
	// +kubebuilder:validation:Required
	Database UnleashDatabaseConfig `json:"database,omitempty"`

	// WebIngress defines the ingress configuration for the web interface.
	// +kubebuilder:validation:Optional
	WebIngress UnleashIngressConfig `json:"webIngress,omitempty"`

	// ApiIngress defines the ingress for the endpoints of Unleash.
	// +kubebuilder:validation:Optional
	ApiIngress UnleashIngressConfig `json:"apiIngress,omitempty"`

	// NetworkPolicy defines the network policy configuration.
	// +kubebuilder:validation:Optional
	NetworkPolicy UnleashNetworkPolicyConfig `json:"networkPolicy,omitempty"`

	// ExtraEnvVars is a list of extra environment variables to add to the deployment.
	// +kubebuilder:validation:Optional
	ExtraEnvVars []corev1.EnvVar `json:"extraEnvVars,omitempty"`

	// ExtraVolumes is a list of extra volume mounts to add to the deployment.
	// +kubebuilder:validation:Optional
	ExtraVolumes []corev1.Volume `json:"extraVolumes,omitempty"`

	// ExtraVolumeMounts is a list of extra volume mounts to add to the deployment.
	// +kubebuilder:validation:Optional
	ExtraVolumeMounts []corev1.VolumeMount `json:"extraVolumeMounts,omitempty"`

	// ExtraContainers is a list of extra containers to add to the deployment.
	// +kubebuilder:validation:Optional
	ExtraContainers []corev1.Container `json:"extraContainers,omitempty"`

	// ExistingServiceAccountName is the name of an already existing Kubernetes service account.
	// +kubebuilder:validation:Optional
	ExistingServiceAccountName string `json:"existingServiceAccountName,omitempty"`

	// Resources are the resource requests and limits for the Unleash deployment.
	// +kubebuilder:validation:Optional
	// +kubebuilder:default:={requests: {cpu: "300m", memory: "256Mi"}, limits: { memory: "512Mi"}}
	Resources corev1.ResourceRequirements `json:"resources,omitempty"`

	// Federation is the configuration for Unleash federation.
	// +kubebuilder:validation:Optional
	Federation UnleashFederationConfig `json:"federation,omitempty"`

	// PodAnnotations are additional annotations to add to the Unleash pods.
	// +kubebuilder:validation:Optional
	PodAnnotations map[string]string `json:"podAnnotations,omitempty"`

	// PodLabels are additional labels to add to the Unleash pods.
	// +kubebuilder:validation:Optional
	PodLabels map[string]string `json:"podLabels,omitempty"`
}

type UnleashStatus struct {
	// Represents the observations of a Unleash's current state.
	// Unleash.status.conditions.type are: "Reconciled", "Connected", and "Degraded"
	// Unleash.status.conditions.status are one of True, False, Unknown.
	// Unleash.status.conditions.reason the value should be a CamelCase string and producers of specific
	// condition types may define expected values and meanings for this field, and whether the values
	// are considered a guaranteed API.
	// Unleash.status.conditions.Message is a human readable message indicating details about the transition.
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// Reconciled is true when the Unleash resources hav been reconciled
	// successfully.
	// This is used for kubectl printing purposes. Rather than relying on this
	// value, check the conditions instead.
	// +kubebuilder:default=false
	Reconciled bool `json:"reconciled,omitempty"`

	// Connected is true when the Unleash resource has been connected to the Unleash server
	// This is used for kubectl printing purposes. Rather than relying on this
	// value, check the conditions instead.
	// +kubebuilder:default=false
	Connected bool `json:"connected,omitempty"`

	// Version is the reported version of the Unleash server
	// +kubebuilder:default="unknown"
	Version string `json:"version,omitempty"`
}