tunnelconfig

type AccessConfig struct {
	// Required indicates if Access is required.
	Required bool `json:"required,omitempty"`

	// TeamName is the Access team name.
	TeamName string `json:"teamName,omitempty"`

	// AudTag is the Access audience tag.
	AudTag []string `json:"audTag,omitempty"`
}

type CredentialsRef struct {
	// Name is the CloudflareCredentials resource name.
	Name string `json:"name,omitempty"`
}

type IPRule struct {
	// Prefix is the IP prefix (CIDR).
	Prefix string `json:"prefix"`

	// Allow indicates if this prefix is allowed.
	Allow bool `json:"allow"`

	// Ports is the list of ports (optional).
	Ports []int `json:"ports,omitempty"`
}

type IngressRule struct {
	// Hostname is the hostname to match.
	Hostname string `json:"hostname,omitempty"`

	// Path is the path to match (optional).
	Path string `json:"path,omitempty"`

	// Service is the backend service URL.
	Service string `json:"service"`

	// OriginRequest contains rule-specific origin request settings.
	OriginRequest *OriginRequestConfig `json:"originRequest,omitempty"`

	// Priority is the rule priority (lower = higher priority).
	Priority int `json:"priority,omitempty"`
}

type OriginRequestConfig struct {
	// ConnectTimeout is the timeout for connecting to the origin.
	ConnectTimeout string `json:"connectTimeout,omitempty"`

	// TLSTimeout is the timeout for TLS handshake.
	TLSTimeout string `json:"tlsTimeout,omitempty"`

	// TCPKeepAlive is the TCP keep-alive interval.
	TCPKeepAlive string `json:"tcpKeepAlive,omitempty"`

	// NoHappyEyeballs disables Happy Eyeballs.
	NoHappyEyeballs bool `json:"noHappyEyeballs,omitempty"`

	// KeepAliveConnections is the number of keep-alive connections.
	KeepAliveConnections int `json:"keepAliveConnections,omitempty"`

	// KeepAliveTimeout is the keep-alive timeout.
	KeepAliveTimeout string `json:"keepAliveTimeout,omitempty"`

	// HTTPHostHeader overrides the HTTP Host header.
	HTTPHostHeader string `json:"httpHostHeader,omitempty"`

	// OriginServerName is the TLS server name for the origin.
	OriginServerName string `json:"originServerName,omitempty"`

	// NoTLSVerify disables TLS verification.
	NoTLSVerify bool `json:"noTLSVerify,omitempty"`

	// DisableChunkedEncoding disables chunked transfer encoding.
	DisableChunkedEncoding bool `json:"disableChunkedEncoding,omitempty"`

	// BastionMode enables bastion mode.
	BastionMode bool `json:"bastionMode,omitempty"`

	// ProxyAddress is the address of the proxy.
	ProxyAddress string `json:"proxyAddress,omitempty"`

	// ProxyPort is the port of the proxy.
	ProxyPort int `json:"proxyPort,omitempty"`

	// ProxyType is the type of proxy.
	ProxyType string `json:"proxyType,omitempty"`

	// IPRules contains IP access rules.
	IPRules []IPRule `json:"ipRules,omitempty"`

	// HTTP2Origin enables HTTP/2 to the origin.
	HTTP2Origin bool `json:"http2Origin,omitempty"`

	// Access contains Access settings.
	Access *AccessConfig `json:"access,omitempty"`
}

type Reconciler struct {
	client.Client
	Scheme            *runtime.Scheme
	Recorder          record.EventRecorder
	APIFactory        *common.APIClientFactory
	OperatorNamespace string
}

type SourceConfig struct {
	// Kind is the source kind (Tunnel, Ingress, TunnelBinding, etc.).
	Kind string `json:"kind"`

	// Namespace is the source namespace (empty for cluster-scoped).
	Namespace string `json:"namespace,omitempty"`

	// Name is the source name.
	Name string `json:"name"`

	// Generation is the source's generation when this config was captured.
	Generation int64 `json:"generation,omitempty"`

	// Settings contains tunnel-level settings (from Tunnel/ClusterTunnel).
	Settings *TunnelSettings `json:"settings,omitempty"`

	// Rules contains ingress rules (from Ingress/TunnelBinding/HTTPRoute).
	Rules []IngressRule `json:"rules,omitempty"`

	// UpdatedAt is when this source was last updated.
	UpdatedAt *metav1.Time `json:"updatedAt,omitempty"`
}

type TunnelConfig struct {
	// TunnelID is the Cloudflare tunnel ID.
	TunnelID string `json:"tunnelId"`

	// AccountID is the Cloudflare account ID.
	AccountID string `json:"accountId"`

	// TunnelName is the human-readable tunnel name.
	TunnelName string `json:"tunnelName,omitempty"`

	// WARPRouting contains WARP routing settings.
	WARPRouting *WARPRoutingConfig `json:"warpRouting,omitempty"`

	// Sources contains configuration from each source (Tunnel, Ingress, etc.).
	Sources map[string]*SourceConfig `json:"sources"`

	// LastHash is the hash of the last synced configuration.
	LastHash string `json:"lastHash,omitempty"`

	// SyncStatus is the current sync status.
	SyncStatus string `json:"syncStatus,omitempty"`

	// LastSyncTime is the last time the configuration was synced.
	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`

	// CredentialsRef references the credentials to use for this tunnel.
	CredentialsRef *CredentialsRef `json:"credentialsRef,omitempty"`
}

type TunnelSettings struct {
	// WARPRouting indicates if WARP routing should be enabled.
	WARPRouting bool `json:"warpRouting,omitempty"`

	// OriginRequest contains default origin request settings.
	OriginRequest *OriginRequestConfig `json:"originRequest,omitempty"`
}

type WARPRoutingConfig struct {
	// Enabled indicates if WARP routing is enabled.
	Enabled bool `json:"enabled"`
}

type Writer struct {
	// contains filtered or unexported fields
}