v1alpha1

type DirectoryBackup struct {
	Enabled bool   `json:"enabled,required"`
	Path    string `json:"path,required"`
	Cron    string `json:"cron,required"`
	// +kubebuilder:default:=cloud-storage-credentials
	SecretName string `json:"secretName,omitempty"`
	//  +kubebuilder:default:=2400
	PurgeHours int32 `json:"purgeHours,omitempty"`
	// +kubebuilder:default:="40 0 * * *"
	PurgeCron string `json:"purgeCron,omitempty"`
}

type DirectoryBackupStatus struct {
	// note DS returns these as string values. For status is ok
	StartTime string `json:"startTime"`
	EndTime   string `json:"endTime"`
	Status    string `json:"status"`
}

type DirectoryKeystores struct {
	// The name of a secret containing the keystore
	// +kubebuilder:default:=ds
	SecretName string `json:"secretName,required"`
}

type DirectoryPasswords struct {
	// The name of a secret
	SecretName string `json:"secretName"`
	// The key within the secret
	Key string `json:"key"`
	// Create a random secret if true. Otherwise assumes the secret already exists
	Create bool `json:"create,omitempty"`
}

type DirectoryProxy struct {
	Enabled bool `json:"enabled,required"`
	// Docker Image for the directory server.
	Image string `json:"image,required"`
	// Replicas is the number of directory server proxy instances to create
	// +kubebuilder:validation:Maximum:=8
	// +kubebuilder:validation:Minimum:=0
	Replicas int32 `json:"replicas,required"`
	// PrimaryGroupID specifies the group of servers the ds proxy should recognize as primary
	// If no value is provided, all available directory servers will be considered to be primary
	PrimaryGroupID string                      `json:"primaryGroupId,omitempty"`
	Resources      corev1.ResourceRequirements `json:"resources,omitempty"`
}

type DirectoryProxyStatus struct {
	Replicas      int32  `json:"replicas,omitempty"`
	ReadyReplicas int32  `json:"readyReplicas,omitempty"`
	ServerMessage string `json:"serverMessage,omitempty"`
}

type DirectoryRestore struct {
	Enabled bool `json:"enabled,required"`
	// Path to the backup location (could be a gcp or s3 bucket)
	Path string `json:"path,required"`
	// +kubebuilder:default:=cloud-storage-credentials
	SecretName string `json:"secretName,omitempty"`
}

type DirectoryService struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DirectoryServiceSpec   `json:"spec,omitempty"`
	Status DirectoryServiceStatus `json:"status,omitempty"`
}

type DirectoryServiceList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DirectoryService `json:"items"`
}

type DirectoryServiceSpec struct {

	// Docker Image for the directory server.
	Image string `json:"image,required"`
	// Replicas is the number of directory server instances to create
	// +kubebuilder:validation:Maximum:=8
	// +kubebuilder:default:=1
	Replicas *int32 `json:"replicas,required"`

	// GroupID is the value used to identify this group of directory servers (default: "default")
	// This field can be set to $(POD_NAME) to allocate each ds server to its own group.
	GroupID string `json:"groupID,omitempty"`

	Resources corev1.ResourceRequirements `json:"resources,omitempty"`
	// The account secrets. The key is the DN of the secret (example, uid=admin)
	Passwords map[string]DirectoryPasswords `json:"passwords"`
	// Keystore references
	Keystore DirectoryKeystores `json:"keystore,omitempty"`

	// Truststore - for mTLS connections
	TrustStore TrustStore `json:"truststore,omitempty"`

	// +kubebuilder:default:="100Gi"
	Storage string `json:"storage"`

	// If specified, create the PVC from the volume snapshot specified in the name.
	// If the name "latest" is used - attempt to calculate the latest snapshot the operator took.
	// +kubebuilder:validation:Optional
	InitializeFromSnapshotName string `json:"initializeFromSnapshotName"`

	// +kubebuilder:validation:Optional
	StorageClassName string `json:"storageClassName,omitempty"`

	// Snapshots
	Snapshots DirectorySnapshotSpec `json:"snapshots,omitempty"`
	// Backup
	Backup DirectoryBackup `json:"backup,omitempty"`
	// Restore
	Restore DirectoryRestore `json:"restore,omitempty"`
	// Proxy configurations
	Proxy DirectoryProxy `json:"proxy,omitempty"`

	// Multi-cluster
	// +kubebuilder:validation:Optional
	MultiCluster MultiCluster `json:"multiCluster,omitempty"`
}

type DirectoryServiceStatus struct {
	// +optional
	Active                             []corev1.ObjectReference `json:"active,omitempty"`
	CurrentReplicas                    *int32                   `json:"currentReplicas,omitempty"`
	ServiceAccountPasswordsUpdatedTime int64                    `json:"serviceAccountPasswordsUpdatedTime,omitempty"`
	BackupStatus                       []DirectoryBackupStatus  `json:"backupStatus,omitempty"`
	ServerMessage                      string                   `json:"serverMessage,omitempty"`
	ProxyStatus                        DirectoryProxyStatus     `json:"proxyStatus,omitempty"`
	SnapshotStatus                     SnapshotStatus           `json:"snapshotStatus,omitempty"`
}

type DirectorySnapshotSpec struct {
	// +kubebuilder:default:=false
	Enabled bool `json:"enabled,required"`
	// +kubebuilder:default:=30
	PeriodMinutes int32 `json:"periodMinutes,required"`
	// +kubebuilder:default:=10
	SnapshotsRetained int32 `json:"snapshotsRetained,required"`
	// +kubebuilder:default:=ds-snapshot-class
	VolumeSnapshotClassName string `json:"volumeSnapshotClassName,required"`
}

type MultiCluster struct {
	// +kubebuilder:default:=false
	McsEnabled bool `json:"mcsEnabled,omitempty"`
	// ClusterTopology is a comma separate string of identifiers for each cluster e.g. "europe,us"
	// +kubebuilder:validation:required
	ClusterTopology string `json:"clusterTopology"`
	// +kubebuilder:validation:required
	ClusterIdentifier string `json:"clusterIdentifier"`
}

type SnapshotStatus struct {
	LastSnapshotTimeStamp int64 `json:"lastSnapshotTimeStamp"`
}

type TrustStore struct {
	// The name of a secret
	SecretName string `json:"secretName,required"`
	KeyName    string `json:"keyName,omitempty"`
	// Create a random secret if true. Otherwise assumes the secret already exists
	// Not currently supported
	Create bool `json:"create,omitempty"`
}