v1beta1

type InstanceActiveDirectoryConfig struct {
	/* Domain name of the Active Directory for SQL Server (e.g., mydomain.com). */
	Domain string `json:"domain"`
}

type InstanceAuthorizedNetworks struct {
	// +optional
	ExpirationTime *string `json:"expirationTime,omitempty"`

	// +optional
	Name *string `json:"name,omitempty"`

	Value string `json:"value"`
}

type InstanceBackupConfiguration struct {
	// +optional
	BackupRetentionSettings *InstanceBackupRetentionSettings `json:"backupRetentionSettings,omitempty"`

	/* True if binary logging is enabled. If settings.backup_configuration.enabled is false, this must be as well. Can only be used with MySQL. */
	// +optional
	BinaryLogEnabled *bool `json:"binaryLogEnabled,omitempty"`

	/* True if backup configuration is enabled. */
	// +optional
	Enabled *bool `json:"enabled,omitempty"`

	/* Location of the backup configuration. */
	// +optional
	Location *string `json:"location,omitempty"`

	/* True if Point-in-time recovery is enabled. */
	// +optional
	PointInTimeRecoveryEnabled *bool `json:"pointInTimeRecoveryEnabled,omitempty"`

	/* HH:MM format time indicating when backup configuration starts. */
	// +optional
	StartTime *string `json:"startTime,omitempty"`

	/* The number of days of transaction logs we retain for point in time restore, from 1-7. */
	// +optional
	TransactionLogRetentionDays *int `json:"transactionLogRetentionDays,omitempty"`
}

type InstanceBackupRetentionSettings struct {
	/* Number of backups to retain. */
	RetainedBackups int `json:"retainedBackups"`

	/* The unit that 'retainedBackups' represents. Defaults to COUNT. */
	// +optional
	RetentionUnit *string `json:"retentionUnit,omitempty"`
}

type InstanceDatabaseFlags struct {
	/* Name of the flag. */
	Name string `json:"name"`

	/* Value of the flag. */
	Value string `json:"value"`
}

type InstanceDenyMaintenancePeriod struct {
	/* End date before which maintenance will not take place. The date is in format yyyy-mm-dd i.e., 2020-11-01, or mm-dd, i.e., 11-01. */
	EndDate string `json:"endDate"`

	/* Start date after which maintenance will not take place. The date is in format yyyy-mm-dd i.e., 2020-11-01, or mm-dd, i.e., 11-01. */
	StartDate string `json:"startDate"`

	/* Time in UTC when the "deny maintenance period" starts on start_date and ends on end_date. The time is in format: HH:mm:SS, i.e., 00:00:00. */
	Time string `json:"time"`
}

type InstanceInsightsConfig struct {
	/* True if Query Insights feature is enabled. */
	// +optional
	QueryInsightsEnabled *bool `json:"queryInsightsEnabled,omitempty"`

	/* Number of query execution plans captured by Insights per minute for all queries combined. Between 0 and 20. Default to 5. */
	// +optional
	QueryPlansPerMinute *int `json:"queryPlansPerMinute,omitempty"`

	/* Maximum query length stored in bytes. Between 256 and 4500. Default to 1024. */
	// +optional
	QueryStringLength *int `json:"queryStringLength,omitempty"`

	/* True if Query Insights will record application tags from query when enabled. */
	// +optional
	RecordApplicationTags *bool `json:"recordApplicationTags,omitempty"`

	/* True if Query Insights will record client address when enabled. */
	// +optional
	RecordClientAddress *bool `json:"recordClientAddress,omitempty"`
}

type InstanceIpAddressStatus struct {
	// +optional
	IpAddress *string `json:"ipAddress,omitempty"`

	// +optional
	TimeToRetire *string `json:"timeToRetire,omitempty"`

	// +optional
	Type *string `json:"type,omitempty"`
}

type InstanceIpConfiguration struct {
	/* The name of the allocated ip range for the private ip CloudSQL instance. For example: "google-managed-services-default". If set, the instance ip will be created in the allocated range. The range name must comply with RFC 1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])?. */
	// +optional
	AllocatedIpRange *string `json:"allocatedIpRange,omitempty"`

	// +optional
	AuthorizedNetworks []InstanceAuthorizedNetworks `json:"authorizedNetworks,omitempty"`

	/* Whether Google Cloud services such as BigQuery are allowed to access data in this Cloud SQL instance over a private IP connection. SQLSERVER database type is not supported. */
	// +optional
	EnablePrivatePathForGoogleCloudServices *bool `json:"enablePrivatePathForGoogleCloudServices,omitempty"`

	/* Whether this Cloud SQL instance should be assigned a public IPV4 address. At least ipv4_enabled must be enabled or a private_network must be configured. */
	// +optional
	Ipv4Enabled *bool `json:"ipv4Enabled,omitempty"`

	// +optional
	PrivateNetworkRef *v1alpha1.ResourceRef `json:"privateNetworkRef,omitempty"`

	// +optional
	RequireSsl *bool `json:"requireSsl,omitempty"`
}

type InstanceLocationPreference struct {
	/* A Google App Engine application whose zone to remain in. Must be in the same region as this instance. */
	// +optional
	FollowGaeApplication *string `json:"followGaeApplication,omitempty"`

	/* The preferred Compute Engine zone for the secondary/failover. */
	// +optional
	SecondaryZone *string `json:"secondaryZone,omitempty"`

	/* The preferred compute engine zone. */
	// +optional
	Zone *string `json:"zone,omitempty"`
}

type InstanceMaintenanceWindow struct {
	/* Day of week (1-7), starting on Monday. */
	// +optional
	Day *int `json:"day,omitempty"`

	/* Hour of day (0-23), ignored if day not set. */
	// +optional
	Hour *int `json:"hour,omitempty"`

	/* Receive updates earlier (canary) or later (stable). */
	// +optional
	UpdateTrack *string `json:"updateTrack,omitempty"`
}

type InstancePassword struct {
	/* Value of the field. Cannot be used if 'valueFrom' is specified. */
	// +optional
	Value *string `json:"value,omitempty"`

	/* Source for the field's value. Cannot be used if 'value' is specified. */
	// +optional
	ValueFrom *InstanceValueFrom `json:"valueFrom,omitempty"`
}

type InstancePasswordValidationPolicy struct {
	/* Password complexity. */
	// +optional
	Complexity *string `json:"complexity,omitempty"`

	/* Disallow username as a part of the password. */
	// +optional
	DisallowUsernameSubstring *bool `json:"disallowUsernameSubstring,omitempty"`

	/* Whether the password policy is enabled or not. */
	EnablePasswordPolicy bool `json:"enablePasswordPolicy"`

	/* Minimum number of characters allowed. */
	// +optional
	MinLength *int `json:"minLength,omitempty"`

	/* Minimum interval after which the password can be changed. This flag is only supported for PostgresSQL. */
	// +optional
	PasswordChangeInterval *string `json:"passwordChangeInterval,omitempty"`

	/* Number of previous passwords that cannot be reused. */
	// +optional
	ReuseInterval *int `json:"reuseInterval,omitempty"`
}

type InstanceReplicaConfiguration struct {
	/* Immutable. PEM representation of the trusted CA's x509 certificate. */
	// +optional
	CaCertificate *string `json:"caCertificate,omitempty"`

	/* Immutable. PEM representation of the replica's x509 certificate. */
	// +optional
	ClientCertificate *string `json:"clientCertificate,omitempty"`

	/* Immutable. PEM representation of the replica's private key. The corresponding public key in encoded in the client_certificate. */
	// +optional
	ClientKey *string `json:"clientKey,omitempty"`

	/* Immutable. The number of seconds between connect retries. MySQL's default is 60 seconds. */
	// +optional
	ConnectRetryInterval *int `json:"connectRetryInterval,omitempty"`

	/* Immutable. Path to a SQL file in Google Cloud Storage from which replica instances are created. Format is gs://bucket/filename. */
	// +optional
	DumpFilePath *string `json:"dumpFilePath,omitempty"`

	/* Immutable. Specifies if the replica is the failover target. If the field is set to true the replica will be designated as a failover replica. If the master instance fails, the replica instance will be promoted as the new master instance. */
	// +optional
	FailoverTarget *bool `json:"failoverTarget,omitempty"`

	/* Immutable. Time in ms between replication heartbeats. */
	// +optional
	MasterHeartbeatPeriod *int `json:"masterHeartbeatPeriod,omitempty"`

	/* Immutable. Password for the replication connection. */
	// +optional
	Password *InstancePassword `json:"password,omitempty"`

	/* Immutable. Permissible ciphers for use in SSL encryption. */
	// +optional
	SslCipher *string `json:"sslCipher,omitempty"`

	/* Immutable. Username for replication connection. */
	// +optional
	Username *string `json:"username,omitempty"`

	/* Immutable. True if the master's common name value is checked during the SSL handshake. */
	// +optional
	VerifyServerCertificate *bool `json:"verifyServerCertificate,omitempty"`
}

type InstanceRootPassword struct {
	/* Value of the field. Cannot be used if 'valueFrom' is specified. */
	// +optional
	Value *string `json:"value,omitempty"`

	/* Source for the field's value. Cannot be used if 'value' is specified. */
	// +optional
	ValueFrom *InstanceValueFrom `json:"valueFrom,omitempty"`
}

type InstanceServerCaCertStatus struct {
	/* The CA Certificate used to connect to the SQL Instance via SSL. */
	// +optional
	Cert *string `json:"cert,omitempty"`

	/* The CN valid for the CA Cert. */
	// +optional
	CommonName *string `json:"commonName,omitempty"`

	/* Creation time of the CA Cert. */
	// +optional
	CreateTime *string `json:"createTime,omitempty"`

	/* Expiration time of the CA Cert. */
	// +optional
	ExpirationTime *string `json:"expirationTime,omitempty"`

	/* SHA Fingerprint of the CA Cert. */
	// +optional
	Sha1Fingerprint *string `json:"sha1Fingerprint,omitempty"`
}

type InstanceSettings struct {
	/* This specifies when the instance should be active. Can be either ALWAYS, NEVER or ON_DEMAND. */
	// +optional
	ActivationPolicy *string `json:"activationPolicy,omitempty"`

	// +optional
	ActiveDirectoryConfig *InstanceActiveDirectoryConfig `json:"activeDirectoryConfig,omitempty"`

	/* DEPRECATED. This property is only applicable to First Generation instances, and First Generation instances are now deprecated. see https://cloud.google.com/sql/docs/mysql/deprecation-notice for information on how to upgrade to Second Generation instances.
	Specifying this field has no-ops; it's recommended to remove this field from your configuration. */
	// +optional
	AuthorizedGaeApplications []string `json:"authorizedGaeApplications,omitempty"`

	/* The availability type of the Cloud SQL instance, high availability
	(REGIONAL) or single zone (ZONAL). For all instances, ensure that
	settings.backup_configuration.enabled is set to true.
	For MySQL instances, ensure that settings.backup_configuration.binary_log_enabled is set to true.
	For Postgres instances, ensure that settings.backup_configuration.point_in_time_recovery_enabled
	is set to true. Defaults to ZONAL. */
	// +optional
	AvailabilityType *string `json:"availabilityType,omitempty"`

	// +optional
	BackupConfiguration *InstanceBackupConfiguration `json:"backupConfiguration,omitempty"`

	/* Immutable. The name of server instance collation. */
	// +optional
	Collation *string `json:"collation,omitempty"`

	/* Specifies if connections must use Cloud SQL connectors. */
	// +optional
	ConnectorEnforcement *string `json:"connectorEnforcement,omitempty"`

	/* DEPRECATED. This property is only applicable to First Generation instances, and First Generation instances are now deprecated. see https://cloud.google.com/sql/docs/mysql/deprecation-notice for information on how to upgrade to Second Generation instances.
	Specifying this field has no-ops; it's recommended to remove this field from your configuration. */
	// +optional
	CrashSafeReplication *bool `json:"crashSafeReplication,omitempty"`

	// +optional
	DatabaseFlags []InstanceDatabaseFlags `json:"databaseFlags,omitempty"`

	/* Configuration to protect against accidental instance deletion. */
	// +optional
	DeletionProtectionEnabled *bool `json:"deletionProtectionEnabled,omitempty"`

	// +optional
	DenyMaintenancePeriod *InstanceDenyMaintenancePeriod `json:"denyMaintenancePeriod,omitempty"`

	/* Enables auto-resizing of the storage size. Defaults to true. */
	// +optional
	DiskAutoresize *bool `json:"diskAutoresize,omitempty"`

	/* The maximum size, in GB, to which storage capacity can be automatically increased. The default value is 0, which specifies that there is no limit. */
	// +optional
	DiskAutoresizeLimit *int `json:"diskAutoresizeLimit,omitempty"`

	/* The size of data disk, in GB. Size of a running instance cannot be reduced but can be increased. The minimum value is 10GB. */
	// +optional
	DiskSize *int `json:"diskSize,omitempty"`

	/* Immutable. The type of data disk: PD_SSD or PD_HDD. Defaults to PD_SSD. */
	// +optional
	DiskType *string `json:"diskType,omitempty"`

	/* Configuration of Query Insights. */
	// +optional
	InsightsConfig *InstanceInsightsConfig `json:"insightsConfig,omitempty"`

	// +optional
	IpConfiguration *InstanceIpConfiguration `json:"ipConfiguration,omitempty"`

	// +optional
	LocationPreference *InstanceLocationPreference `json:"locationPreference,omitempty"`

	/* Declares a one-hour maintenance window when an Instance can automatically restart to apply updates. The maintenance window is specified in UTC time. */
	// +optional
	MaintenanceWindow *InstanceMaintenanceWindow `json:"maintenanceWindow,omitempty"`

	// +optional
	PasswordValidationPolicy *InstancePasswordValidationPolicy `json:"passwordValidationPolicy,omitempty"`

	/* Pricing plan for this instance, can only be PER_USE. */
	// +optional
	PricingPlan *string `json:"pricingPlan,omitempty"`

	/* DEPRECATED. This property is only applicable to First Generation instances, and First Generation instances are now deprecated. see https://cloud.google.com/sql/docs/mysql/deprecation-notice for information on how to upgrade to Second Generation instances.
	Specifying this field has no-ops; it's recommended to remove this field from your configuration. */
	// +optional
	ReplicationType *string `json:"replicationType,omitempty"`

	// +optional
	SqlServerAuditConfig *InstanceSqlServerAuditConfig `json:"sqlServerAuditConfig,omitempty"`

	/* The machine type to use. See tiers for more details and supported versions. Postgres supports only shared-core machine types, and custom machine types such as db-custom-2-13312. See the Custom Machine Type Documentation to learn about specifying custom machine types. */
	Tier string `json:"tier"`

	/* Immutable. The time_zone to be used by the database engine (supported only for SQL Server), in SQL Server timezone format. */
	// +optional
	TimeZone *string `json:"timeZone,omitempty"`
}

type InstanceSqlServerAuditConfig struct {
	/* The name of the destination bucket (e.g., gs://mybucket). */
	// +optional
	BucketRef *v1alpha1.ResourceRef `json:"bucketRef,omitempty"`

	/* How long to keep generated audit files. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".. */
	// +optional
	RetentionInterval *string `json:"retentionInterval,omitempty"`

	/* How often to upload generated audit files. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s". */
	// +optional
	UploadInterval *string `json:"uploadInterval,omitempty"`
}

type InstanceValueFrom struct {
	/* Reference to a value with the given key in the given Secret in the resource's namespace. */
	// +optional
	SecretKeyRef *v1alpha1.ResourceRef `json:"secretKeyRef,omitempty"`
}

type SQLDatabase struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SQLDatabaseSpec   `json:"spec,omitempty"`
	Status SQLDatabaseStatus `json:"status,omitempty"`
}

type SQLDatabaseList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SQLDatabase `json:"items"`
}

type SQLDatabaseSpec struct {
	/* The charset value. See MySQL's
	[Supported Character Sets and Collations](https://dev.mysql.com/doc/refman/5.7/en/charset-charsets.html)
	and Postgres' [Character Set Support](https://www.postgresql.org/docs/9.6/static/multibyte.html)
	for more details and supported values. Postgres databases only support
	a value of 'UTF8' at creation time. */
	// +optional
	Charset *string `json:"charset,omitempty"`

	/* The collation value. See MySQL's
	[Supported Character Sets and Collations](https://dev.mysql.com/doc/refman/5.7/en/charset-charsets.html)
	and Postgres' [Collation Support](https://www.postgresql.org/docs/9.6/static/collation.html)
	for more details and supported values. Postgres databases only support
	a value of 'en_US.UTF8' at creation time. */
	// +optional
	Collation *string `json:"collation,omitempty"`

	/* The deletion policy for the database. Setting ABANDON allows the resource
	to be abandoned rather than deleted. This is useful for Postgres, where databases cannot be
	deleted from the API if there are users other than cloudsqlsuperuser with access. Possible
	values are: "ABANDON", "DELETE". Defaults to "DELETE". */
	// +optional
	DeletionPolicy *string `json:"deletionPolicy,omitempty"`

	/* The Cloud SQL instance. */
	InstanceRef v1alpha1.ResourceRef `json:"instanceRef"`

	/* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`
}

type SQLDatabaseStatus struct {
	/* Conditions represent the latest available observations of the
	   SQLDatabase's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	// +optional
	SelfLink *string `json:"selfLink,omitempty"`
}

type SQLInstance struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SQLInstanceSpec   `json:"spec,omitempty"`
	Status SQLInstanceStatus `json:"status,omitempty"`
}

type SQLInstanceList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SQLInstance `json:"items"`
}

type SQLInstanceSpec struct {
	/* The MySQL, PostgreSQL or SQL Server (beta) version to use. Supported values include MYSQL_5_6, MYSQL_5_7, MYSQL_8_0, POSTGRES_9_6, POSTGRES_10, POSTGRES_11, POSTGRES_12, POSTGRES_13, POSTGRES_14, SQLSERVER_2017_STANDARD, SQLSERVER_2017_ENTERPRISE, SQLSERVER_2017_EXPRESS, SQLSERVER_2017_WEB. Database Version Policies includes an up-to-date reference of supported versions. */
	// +optional
	DatabaseVersion *string `json:"databaseVersion,omitempty"`

	// +optional
	EncryptionKMSCryptoKeyRef *v1alpha1.ResourceRef `json:"encryptionKMSCryptoKeyRef,omitempty"`

	/* The type of the instance. The valid values are:- 'SQL_INSTANCE_TYPE_UNSPECIFIED', 'CLOUD_SQL_INSTANCE', 'ON_PREMISES_INSTANCE' and 'READ_REPLICA_INSTANCE'. */
	// +optional
	InstanceType *string `json:"instanceType,omitempty"`

	/* Maintenance version. */
	// +optional
	MaintenanceVersion *string `json:"maintenanceVersion,omitempty"`

	// +optional
	MasterInstanceRef *v1alpha1.ResourceRef `json:"masterInstanceRef,omitempty"`

	/* Immutable. The region the instance will sit in. Note, Cloud SQL is not available in all regions. A valid region must be provided to use this resource. If a region is not provided in the resource definition, the provider region will be used instead, but this will be an apply-time error for instances if the provider region is not supported with Cloud SQL. If you choose not to provide the region argument for this resource, make sure you understand this. */
	// +optional
	Region *string `json:"region,omitempty"`

	/* The configuration for replication. */
	// +optional
	ReplicaConfiguration *InstanceReplicaConfiguration `json:"replicaConfiguration,omitempty"`

	/* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`

	/* Initial root password. Required for MS SQL Server. */
	// +optional
	RootPassword *InstanceRootPassword `json:"rootPassword,omitempty"`

	/* The settings to use for the database. The configuration is detailed below. */
	Settings InstanceSettings `json:"settings"`
}

type SQLInstanceStatus struct {
	/* Conditions represent the latest available observations of the
	   SQLInstance's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* Available Maintenance versions. */
	// +optional
	AvailableMaintenanceVersions []string `json:"availableMaintenanceVersions,omitempty"`

	/* The connection name of the instance to be used in connection strings. For example, when connecting with Cloud SQL Proxy. */
	// +optional
	ConnectionName *string `json:"connectionName,omitempty"`

	// +optional
	FirstIpAddress *string `json:"firstIpAddress,omitempty"`

	/* The type of the instance. The valid values are:- 'SQL_INSTANCE_TYPE_UNSPECIFIED', 'CLOUD_SQL_INSTANCE', 'ON_PREMISES_INSTANCE' and 'READ_REPLICA_INSTANCE'. */
	// +optional
	InstanceType *string `json:"instanceType,omitempty"`

	// +optional
	IpAddress []InstanceIpAddressStatus `json:"ipAddress,omitempty"`

	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	// +optional
	PrivateIpAddress *string `json:"privateIpAddress,omitempty"`

	// +optional
	PublicIpAddress *string `json:"publicIpAddress,omitempty"`

	/* The URI of the created resource. */
	// +optional
	SelfLink *string `json:"selfLink,omitempty"`

	// +optional
	ServerCaCert *InstanceServerCaCertStatus `json:"serverCaCert,omitempty"`

	/* The service account email address assigned to the instance. */
	// +optional
	ServiceAccountEmailAddress *string `json:"serviceAccountEmailAddress,omitempty"`
}

type SQLSSLCert struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SQLSSLCertSpec   `json:"spec,omitempty"`
	Status SQLSSLCertStatus `json:"status,omitempty"`
}

type SQLSSLCertList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SQLSSLCert `json:"items"`
}

type SQLSSLCertSpec struct {
	/* Immutable. The common name to be used in the certificate to identify the client. Constrained to [a-zA-Z.-_ ]+. Changing this forces a new resource to be created. */
	CommonName string `json:"commonName"`

	/* The Cloud SQL instance. */
	InstanceRef v1alpha1.ResourceRef `json:"instanceRef"`

	/* Immutable. Optional. The service-generated sha1Fingerprint of the resource. Used for acquisition only. Leave unset to create a new resource. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`
}

type SQLSSLCertStatus struct {
	/* Conditions represent the latest available observations of the
	   SQLSSLCert's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* The actual certificate data for this client certificate. */
	// +optional
	Cert *string `json:"cert,omitempty"`

	/* The serial number extracted from the certificate data. */
	// +optional
	CertSerialNumber *string `json:"certSerialNumber,omitempty"`

	/* The time when the certificate was created in RFC 3339 format, for example 2012-11-15T16:19:00.094Z. */
	// +optional
	CreateTime *string `json:"createTime,omitempty"`

	/* The time when the certificate expires in RFC 3339 format, for example 2012-11-15T16:19:00.094Z. */
	// +optional
	ExpirationTime *string `json:"expirationTime,omitempty"`

	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	/* The private key associated with the client certificate. */
	// +optional
	PrivateKey *string `json:"privateKey,omitempty"`

	/* The CA cert of the server this client cert was generated from. */
	// +optional
	ServerCaCert *string `json:"serverCaCert,omitempty"`

	/* The SHA1 Fingerprint of the certificate. */
	// +optional
	Sha1Fingerprint *string `json:"sha1Fingerprint,omitempty"`
}

type SQLUser struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SQLUserSpec   `json:"spec,omitempty"`
	Status SQLUserStatus `json:"status,omitempty"`
}

type SQLUserList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SQLUser `json:"items"`
}

type SQLUserSpec struct {
	/* Immutable. The host the user can connect from. This is only supported for MySQL instances. Don't set this field for PostgreSQL instances. Can be an IP address. Changing this forces a new resource to be created. */
	// +optional
	Host *string `json:"host,omitempty"`

	InstanceRef v1alpha1.ResourceRef `json:"instanceRef"`

	/* The password for the user. Can be updated. For Postgres instances this is a Required field, unless type is set to
	either CLOUD_IAM_USER or CLOUD_IAM_SERVICE_ACCOUNT. */
	// +optional
	Password *UserPassword `json:"password,omitempty"`

	// +optional
	PasswordPolicy *UserPasswordPolicy `json:"passwordPolicy,omitempty"`

	/* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`

	/* Immutable. The user type. It determines the method to authenticate the user during login.
	The default is the database's built-in user type. Flags include "BUILT_IN", "CLOUD_IAM_USER", or "CLOUD_IAM_SERVICE_ACCOUNT". */
	// +optional
	Type *string `json:"type,omitempty"`
}

type SQLUserStatus struct {
	/* Conditions represent the latest available observations of the
	   SQLUser's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	// +optional
	SqlServerUserDetails []UserSqlServerUserDetailsStatus `json:"sqlServerUserDetails,omitempty"`
}

type UserPassword struct {
	/* Value of the field. Cannot be used if 'valueFrom' is specified. */
	// +optional
	Value *string `json:"value,omitempty"`

	/* Source for the field's value. Cannot be used if 'value' is specified. */
	// +optional
	ValueFrom *UserValueFrom `json:"valueFrom,omitempty"`
}

type UserPasswordPolicy struct {
	/* Number of failed attempts allowed before the user get locked. */
	// +optional
	AllowedFailedAttempts *int `json:"allowedFailedAttempts,omitempty"`

	/* If true, the check that will lock user after too many failed login attempts will be enabled. */
	// +optional
	EnableFailedAttemptsCheck *bool `json:"enableFailedAttemptsCheck,omitempty"`

	/* If true, the user must specify the current password before changing the password. This flag is supported only for MySQL. */
	// +optional
	EnablePasswordVerification *bool `json:"enablePasswordVerification,omitempty"`

	/* Password expiration duration with one week grace period. */
	// +optional
	PasswordExpirationDuration *string `json:"passwordExpirationDuration,omitempty"`

	// +optional
	Status []UserStatus `json:"status,omitempty"`
}

type UserSqlServerUserDetailsStatus struct {
	/* If the user has been disabled. */
	// +optional
	Disabled *bool `json:"disabled,omitempty"`

	/* The server roles for this user in the database. */
	// +optional
	ServerRoles []string `json:"serverRoles,omitempty"`
}

type UserStatus struct {
	/* If true, user does not have login privileges. */
	// +optional
	Locked *bool `json:"locked,omitempty"`

	/* Password expiration duration with one week grace period. */
	// +optional
	PasswordExpirationTime *string `json:"passwordExpirationTime,omitempty"`
}

type UserValueFrom struct {
	/* Reference to a value with the given key in the given Secret in the resource's namespace. */
	// +optional
	SecretKeyRef *v1alpha1.ResourceRef `json:"secretKeyRef,omitempty"`
}