v1alpha2

type IngressRule struct {
	// The IP protocol name (tcp, udp, icmp) or number (see Protocol Numbers
	// (http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml)).
	IPProtocol string `json:"ipProtocol,omitempty"`
	// The start of port range for the TCP and UDP protocols, or an ICMP code.
	// A value of -1 indicates all ICMP codes.
	FromPort int32 `json:"fromPort,omitempty"`
	// The end of port range for the TCP and UDP protocols, or an ICMP code.
	// A value of -1 indicates all ICMP codes.
	ToPort int32 `json:"toPort,omitempty"`
	// AllowedCIDRBlocks is a list of CIDR blocks allowed to access the referenced infrastructure.
	AllowedCIDRBlocks []string `json:"allowedCIDRs,omitempty"`
}

type SecurityGroup struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SecurityGroupSpec   `json:"spec,omitempty"`
	Status SecurityGroupStatus `json:"status,omitempty"`
}

type SecurityGroupList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SecurityGroup `json:"items"`
}

type SecurityGroupSpec struct {

	// IngressRules is a list of ingress rules to apply to the Crossplane SecurityGroup.
	IngressRules []IngressRule `json:"ingressRules,omitempty"`
	// InfrastructureRef is a reference to a provider-specific resource.
	InfrastructureRef []*corev1.ObjectReference `json:"infrastructureRef,omitempty"`
}

type SecurityGroupStatus struct {
	// Ready denotes that the SecurityGroup resource is created and attached
	// +kubebuilder:default=false
	Ready bool `json:"ready,omitempty"`

	// ErrorMessage indicates that there is a terminal problem reconciling the
	// state, and will be set to a descriptive error message.
	// +optional
	FailureMessage *string `json:"failureMessage,omitempty"`

	// Conditions defines current service state of the SecurityGroup.
	// +optional
	Conditions clusterv1beta1.Conditions `json:"conditions,omitempty"`

	// AppliedInfrastructureRef is the currently applied attachments to machine pools. At
	// the end of the reconciliation this field is updated with the current references
	AppliedInfrastructureRef []*corev1.ObjectReference `json:"infrastructureRef,omitempty"`
}