shared

type AdditionalClaims struct {
}

type CryptoSignature struct {
	Excluded   any `json:"excluded,omitempty"`
	Signatures any `json:"signatures,omitempty"`
}

type Discovery struct {
}

type Extra struct {
}

type GitV1GitRepoConfig struct {
	// Commit SHA. Only one of reference or commit can be set at any time
	Commit string `json:"commit"`
	// Credentials are looked under the key <name>/<creds>
	Credentials string `json:"credentials"`
	// Path to limit the import to
	Path string `json:"path"`
	// Remote reference. Only one of reference or commit can be set at any time
	Reference      string               `json:"reference"`
	SSHCredentials *GitV1SSHCredentials `json:"ssh_credentials,omitempty"`
	// Repository URL
	URL string `json:"url"`
}

type GitV1SSHCredentials struct {
	// Passphrase is looked under the key passphrase/<pass>
	Passphrase string `json:"passphrase"`
	// PrivateKey is looked under the key private-key/<key>
	PrivateKey string `json:"private_key"`
}

type GitV1SourceControlConfig struct {
	Origin GitV1GitRepoConfig `json:"origin"`
}

type KeysConfig struct {
	Algorithm  string `json:"algorithm"`
	Key        string `json:"key"`
	PrivateKey string `json:"private_key"`
	Scope      string `json:"scope"`
}

type LibrariesV1CreateLibraryRequest struct {
	Description   string                          `json:"description"`
	ReadOnly      bool                            `json:"read_only"`
	SourceControl *LibrariesV1SourceControlConfig `json:"source_control,omitempty"`
}

type LibrariesV1LibraryEntityExpanded struct {
	Datasources   []SystemsV1DatasourceConfig     `json:"datasources"`
	Description   string                          `json:"description"`
	ID            string                          `json:"id"`
	Metadata      *MetaV2ObjectMeta               `json:"metadata,omitempty"`
	Policies      []SystemsV1PolicyConfig         `json:"policies"`
	ReadOnly      bool                            `json:"read_only"`
	SourceControl *LibrariesV1SourceControlConfig `json:"source_control,omitempty"`
	UsedBy        []LibrariesV1SystemUsingLibrary `json:"used_by,omitempty"`
}

type LibrariesV1LibraryResponse struct {
	Result LibrariesV1LibraryEntityExpanded `json:"result"`
}

type LibrariesV1SourceControlConfig struct {
	LibraryOrigin        *GitV1GitRepoConfig `json:"library_origin,omitempty"`
	Origin               *GitV1GitRepoConfig `json:"origin,omitempty"`
	UseWorkspaceSettings bool                `json:"use_workspace_settings"`
}

type LibrariesV1SystemBundle struct {
	BundleID string `json:"bundle_id"`
	Version  int64  `json:"version"`
}

type LibrariesV1SystemUsingLibrary struct {
	Bundles  []LibrariesV1SystemBundle `json:"bundles,omitempty"`
	SystemID string                    `json:"system_id"`
}

type MetaV1ErrorResponse struct {
	Code      string   `json:"code"`
	Errors    []string `json:"errors,omitempty"`
	Message   string   `json:"message"`
	RequestID *string  `json:"request_id,omitempty"`
}

type MetaV1ObjectMeta struct {
	CreatedAt           *time.Time `json:"created_at,omitempty"`
	CreatedBy           *string    `json:"created_by,omitempty"`
	CreatedThrough      *string    `json:"created_through,omitempty"`
	LastModifiedAt      *time.Time `json:"last_modified_at,omitempty"`
	LastModifiedBy      *string    `json:"last_modified_by,omitempty"`
	LastModifiedThrough *string    `json:"last_modified_through,omitempty"`
}

type MetaV1Status struct {
	Code      string    `json:"code"`
	Message   string    `json:"message"`
	Timestamp time.Time `json:"timestamp"`
}

type MetaV2ObjectMeta struct {
	CreatedAt           *time.Time `json:"created_at,omitempty"`
	CreatedBy           *string    `json:"created_by,omitempty"`
	CreatedThrough      *string    `json:"created_through,omitempty"`
	LastModifiedAt      *time.Time `json:"last_modified_at,omitempty"`
	LastModifiedBy      *string    `json:"last_modified_by,omitempty"`
	LastModifiedThrough *string    `json:"last_modified_through,omitempty"`
}

type PoliciesV1PoliciesPutRequest struct {
	// module file name to rego (and also data.json/data.yaml if enabled for the tenant) contents dictionary
	Modules   map[string]string `json:"modules"`
	Signature *CryptoSignature  `json:"signature,omitempty"`
}

type PoliciesV1PolicyDeleteResponse struct {
	RequestID *string `json:"request_id,omitempty"`
}

type PoliciesV1PolicyGetResponse struct {
	RequestID *string `json:"request_id,omitempty"`
	Result    any     `json:"result"`
}

type PoliciesV1PolicyPutResponse struct {
	RequestID *string `json:"request_id,omitempty"`
}

type PoliciesV1RuleCounts struct {
	// number of allow rules
	Allow int `json:"allow"`
	// number of deny rules
	Deny int `json:"deny"`
	// number of enforce rules
	Enforce int `json:"enforce"`
	// number of ignore rules
	Ignore int `json:"ignore"`
	// number of monitor rules
	Monitor int `json:"monitor"`
	// number of notify rules
	Notify int `json:"notify"`
	// number of unclassified rules
	Other int `json:"other"`
	// number of test rules
	Test int `json:"test"`
	// total number of rules
	Total int `json:"total"`
}

type SecretsV1Secret struct {
	Description string           `json:"description"`
	ID          string           `json:"id"`
	Metadata    MetaV1ObjectMeta `json:"metadata"`
	Name        string           `json:"name"`
}

type SecretsV1SecretsDeleteResponse struct {
	RequestID *string `json:"request_id,omitempty"`
}

type SecretsV1SecretsGetResponse struct {
	RequestID *string          `json:"request_id,omitempty"`
	Result    *SecretsV1Secret `json:"result,omitempty"`
}

type SecretsV1SecretsPutRequest struct {
	Description string `json:"description"`
	Name        string `json:"name"`
	Secret      string `json:"secret"`
}

type SecretsV1SecretsPutResponse struct {
	RequestID *string `json:"request_id,omitempty"`
}

type Security struct {
	Bearer string `security:"scheme,type=http,subtype=bearer,name=Authorization"`
}

type StacksV1SourceControlConfig struct {
	Origin               *GitV1GitRepoConfig `json:"origin,omitempty"`
	StackOrigin          *GitV1GitRepoConfig `json:"stack_origin,omitempty"`
	UseWorkspaceSettings bool                `json:"use_workspace_settings"`
}

type StacksV1StackConfig struct {
	Authz *SystemsV1AuthzConfig `json:"authz,omitempty"`
	// datasources created for the stack
	Datasources []SystemsV1DatasourceConfig `json:"datasources,omitempty"`
	Description string                      `json:"description"`
	// current stack deployment errors
	Errors map[string]SystemsV1AgentErrors `json:"errors,omitempty"`
	ID     string                          `json:"id"`
	// IDs of systems matching the stack
	MatchingSystems []string         `json:"matching_systems,omitempty"`
	Metadata        MetaV1ObjectMeta `json:"metadata"`
	// A history of any migrations performed on this stack
	MigrationHistory []SystemsV1MigrationRecord `json:"migration_history,omitempty"`
	// minimum running OPA version for any of the matching systems
	MinimumOpaVersion *string                      `json:"minimum_opa_version,omitempty"`
	Name              string                       `json:"name"`
	Policies          []SystemsV1PolicyConfig      `json:"policies"`
	ReadOnly          bool                         `json:"read_only"`
	SourceControl     *StacksV1SourceControlConfig `json:"source_control,omitempty"`
	Status            string                       `json:"status"`
	Type              string                       `json:"type"`
	// stack type parameter values (for template.* types)
	TypeParameters *StacksV1StackConfigTypeParameters `json:"type_parameters,omitempty"`
}

type StacksV1StackConfigTypeParameters struct {
}

type StacksV1StacksDeleteResponse struct {
	RequestID *string `json:"request_id,omitempty"`
}

type StacksV1StacksGetResponse struct {
	Result StacksV1StackConfig `json:"result"`
}

type StacksV1StacksPostRequest struct {
	Description   string                       `json:"description"`
	Name          string                       `json:"name"`
	ReadOnly      bool                         `json:"read_only"`
	SourceControl *StacksV1SourceControlConfig `json:"source_control,omitempty"`
	Type          string                       `json:"type"`
	// stack type parameter values (for template.* types)
	TypeParameters *TypeParameters `json:"type_parameters,omitempty"`
}

type StacksV1StacksPostResponse struct {
	Result StacksV1StackConfig `json:"result"`
}

type StacksV1StacksPutRequest struct {
	Description   string                       `json:"description"`
	Name          string                       `json:"name"`
	ReadOnly      bool                         `json:"read_only"`
	SourceControl *StacksV1SourceControlConfig `json:"source_control,omitempty"`
	Type          string                       `json:"type"`
	// stack type parameter values (for template.* types)
	TypeParameters *StacksV1StacksPutRequestTypeParameters `json:"type_parameters,omitempty"`
}

type StacksV1StacksPutRequestTypeParameters struct {
}

type StacksV1StacksPutResponse struct {
}

type SystemsV1AgentErrors struct {
	// list of system errors
	Errors []MetaV1Status `json:"errors"`
	// true if the the system is waiting for error to be resolved
	Waiting bool `json:"waiting"`
}

type SystemsV1AllowedMapping struct {
	Expected any `json:"expected,omitempty"`
	// when set to true, decision is Allowed when the mapped property IS NOT equal to the expected value
	Negated *bool `default:"false" json:"negated"`
	// dot-separated decision property path
	Path string `json:"path"`
}

type SystemsV1AuthzConfig struct {
	// a list of role binding configs
	RoleBindings []SystemsV1V1RoleBindingConfig `json:"role_bindings,omitempty"`
}

type SystemsV1AwsMetadataCredentialService struct {
	// the AWS region to use for the AWS signing service credential method
	AwsRegion string `json:"aws_region"`
	// the IAM role to use for the AWS signing service credential method
	IamRole *string `json:"iam_role,omitempty"`
}

type SystemsV1AwsProfileCredentialService struct {
	// the AWS region to use for the AWS signing service credential method
	AwsRegion string `json:"aws_region"`
	// the path to the shared credentials file
	Path *string `json:"path,omitempty"`
	// AWS Profile to extract credentials from the credentials file
	Profile *string `json:"profile,omitempty"`
}

type SystemsV1AwsSigningAuthPlugin struct {
	EnvironmentCredentials any                                    `json:"environment_credentials,omitempty"`
	MetadataCredentials    *SystemsV1AwsMetadataCredentialService `json:"metadata_credentials,omitempty"`
	ProfileCredentials     *SystemsV1AwsProfileCredentialService  `json:"profile_credentials,omitempty"`
	// the AWS service to sign requests with, eg execute-api or s3 (default: s3)
	Service                *string                                   `json:"service,omitempty"`
	WebIdentityCredentials *SystemsV1AwsWebIdentityCredentialService `json:"web_identity_credentials,omitempty"`
}

type SystemsV1AwsWebIdentityCredentialService struct {
	// the AWS region to use for the sts regional endpoint (default: global)
	AwsRegion string `json:"aws_region"`
	// the session name used to identify the assumed role session (default: open-policy-agent)
	SessionName string `json:"session_name"`
}

type SystemsV1AzureManagedIdentitiesAuthPlugin struct {
	// API version to use
	APIVersion string `json:"api_version"`
	// optional client ID of the managed identity you would like the token for, required if your VM has multiple user-assigned managed identities
	ClientID string `json:"client_id"`
	// request endpoint
	Endpoint string `json:"endpoint"`
	// optional Azure Resource ID of the managed identity you would like the token for, required, if your VM has multiple user-assigned managed identities
	MiResID string `json:"mi_res_id"`
	// optional object ID of the managed identity you would like the token for, required if your VM has multiple user-assigned managed identities
	ObjectID string `json:"object_id"`
	// app ID URI of the target resource
	Resource string `json:"resource"`
}

type SystemsV1BearerAuthPlugin struct {
	// bearer token scheme to specify
	Scheme *string `json:"scheme,omitempty"`
	// enables token-based authentication and supplies the bearer token to authenticate with
	Token string `json:"token"`
	// enables token-based authentication and supplies the path to the bearer token to authenticate with
	TokenPath string `json:"token_path"`
}

type SystemsV1BundleDistributionS3Config struct {
	// access key id and secret access key are looked under the key <name>/<access_keys>
	AccessKeys *string `json:"access_keys,omitempty"`
	// bucket name
	Bucket string `json:"bucket"`
	// context bundle path. The name must not use template variables
	ContextPath *string `default:"context-{policy_path}" json:"context_path"`
	// discovery bundle path. Template variables can be used in the name
	DiscoveryPath *string `default:"discovery.tgz" json:"discovery_path"`
	// AWS endpoint
	Endpoint       *string                                            `json:"endpoint,omitempty"`
	OpaCredentials *SystemsV1BundleDistributionS3ConfigOpaCredentials `json:"opa_credentials,omitempty"`
	// policy bundle path. Template variables can be used in the name
	PolicyPath *string `default:"bundle.tgz" json:"policy_path"`
	// AWS region
	Region string `json:"region"`
	// AWS role
	RoleArn *string `json:"role_arn,omitempty"`
}

type SystemsV1BundleDistributionS3ConfigOpaCredentials struct {
	EnvironmentCredentials *SystemsV1BundleDistributionS3ConfigOpaCredentialsEnvironmentCredentials `json:"environment_credentials,omitempty"`
	MetadataCredentials    *SystemsV1BundleDistributionS3ConfigOpaCredentialsMetadataCredentials    `json:"metadata_credentials,omitempty"`
	WebIdentityCredentials *SystemsV1BundleDistributionS3ConfigOpaCredentialsWebIdentityCredentials `json:"web_identity_credentials,omitempty"`
}

type SystemsV1BundleDistributionS3ConfigOpaCredentialsEnvironmentCredentials struct {
}

type SystemsV1BundleDistributionS3ConfigOpaCredentialsMetadataCredentials struct {
	AwsRegion string  `json:"aws_region"`
	IamRole   *string `json:"iam_role,omitempty"`
}

type SystemsV1BundleDistributionS3ConfigOpaCredentialsWebIdentityCredentials struct {
	AwsRegion   string `json:"aws_region"`
	SessionName string `json:"session_name"`
}

type SystemsV1BundleDownloadConfig struct {
	// enabled delta bundles on bundle download
	DeltaBundles *bool `default:"false" json:"delta_bundles"`
}

type SystemsV1BundleRegistryConfig struct {
	// when checked, bundles will be activated regardless of their compatibility with currently running agents
	DisableBundleCompatibilityCheck *bool                                `json:"disable_bundle_compatibility_check,omitempty"`
	DistributionS3                  *SystemsV1BundleDistributionS3Config `json:"distribution_s3,omitempty"`
	// extra bundle entry points to use when compiling bundles
	Entrypoints []string `json:"entrypoints,omitempty"`
	// manual deployment mode to prevent automatic deployment of new bundles
	ManualDeployment *bool `json:"manual_deployment,omitempty"`
	// Override of manual deployment mode flag per bundle type
	ManualDeploymentOverrides map[string]bool `json:"manual_deployment_overrides,omitempty"`
	// maximum number of all bundles to store
	MaxBundles *int64 `json:"max_bundles,omitempty"`
	// maximum number of previously deployed bundles to store
	MaxDeployedBundles *int64 `json:"max_deployed_bundles,omitempty"`
	// OPA optimization level to use when building bundles
	OptimizationLevel *int `json:"optimization_level,omitempty"`
}

type SystemsV1ClientTLSAuthPlugin struct {
	// the path to the client certificate to authenticate with
	Cert string `json:"cert"`
	// the path to the private key of the client certificate
	PrivateKey string `json:"private_key"`
	// the passphrase to use for the private key
	PrivateKeyPassphrase *string `json:"private_key_passphrase,omitempty"`
}

type SystemsV1ColumnMapping struct {
	// column key (also the search key)
	Key string `json:"key"`
	// dot-separated decision property path
	Path string `json:"path"`
	// column type: one of "string", "boolean", "date", "integer", "float"
	Type *string `default:"string" json:"type"`
}

type SystemsV1DatasourceConfig struct {
	// datasource category
	Category string `json:"category"`
	// datasource ID
	ID string `json:"id"`
	// optional datasources can be deleted without being recreated automatically
	Optional *bool         `json:"optional,omitempty"`
	Status   *MetaV1Status `json:"status,omitempty"`
}

type SystemsV1EnforcementConfig struct {
	// true if the policy is enforced
	Enforced bool `json:"enforced"`
	// enforcement type e.g. opa, test, mask
	Type string `json:"type"`
}

type SystemsV1ExternalBundleConfig struct {
	// externally configured bundles, use name of bundle as key
	Bundles map[string]SystemsV1OpaConfigBundleDeclaration `json:"bundles,omitempty"`
	// externally configured services
	Services []SystemsV1OpaConfigServiceDeclaration `json:"services"`
}

type SystemsV1GcpMetadataAuthPlugin struct {
	// the access token metadata path to use
	AccessTokenPath string `json:"access_token_path"`
	// the audience to use when fetching identity tokens
	Audience string `json:"audience"`
	// the metadata endpoint to use
	Endpoint string `json:"endpoint"`
	// the identity token metadata path to use
	IDTokenPath string `json:"id_token_path"`
	// the set of scopes to use when fetching access token
	Scopes []string `json:"scopes"`
}

type SystemsV1KeyConfig struct {
	// name of the signing algorithm
	Algorithm *string `json:"algorithm,omitempty"`
	// PEM encoded public key to use for signature verification
	Key *string `json:"key,omitempty"`
	// PEM encoded private key to use for signing
	PrivateKey *string `json:"private_key,omitempty"`
	// scope to use for bundle signature verification
	Scope *string `json:"scope,omitempty"`
}

type SystemsV1MigrationRecord struct {
	From           string    `json:"from"`
	InitiatedBy    string    `json:"initiated_by"`
	InitiatingUser string    `json:"initiating_user"`
	MigratedAt     time.Time `json:"migrated_at"`
	Recovered      *bool     `json:"recovered,omitempty"`
	To             string    `json:"to"`
}

type SystemsV1Module struct {
	// module name
	Name string `json:"name"`
	// module is a placeholder
	Placeholder *bool `default:"false" json:"placeholder"`
	// true if module is read-only
	ReadOnly bool                  `json:"read_only"`
	Rules    *PoliciesV1RuleCounts `json:"rules,omitempty"`
}

type SystemsV1Oauth2ClientCredentialsAuthPlugin struct {
	// map of claims to include in the JWT
	AdditionalClaims AdditionalClaims `json:"additional_claims"`
	// map of additional headers to send to token endpoint at the OAuth2 authorization server
	AdditionalHeaders map[string]string `json:"additional_headers,omitempty"`
	// map of additional body parameters to send token endpoint at the OAuth2 authorization server
	AdditionalParameters map[string]string `json:"additional_parameters,omitempty"`
	// the client ID to use for authentication
	ClientID string `json:"client_id"`
	// the client secret to use for authentication
	ClientSecret string `json:"client_secret"`
	// defaults to client_credentials
	GrantType string `json:"grant_type"`
	// include a uniquely generated jti claim in any issued JWT
	IncludeJtiClaim bool `json:"include_jti_claim"`
	// optional list of scopes to request for the token
	Scopes []string `json:"scopes,omitempty"`
	// reference to private key used for signing the JWT
	SigningKey string `json:"signing_key"`
	// certificate thumbprint to use for x5t header generation
	Thumbprint string `json:"thumbprint"`
	// URL pointing to the token endpoint at the OAuth2 authorization server
	TokenURL string `json:"token_url"`
}

type SystemsV1OpaConfigBundleDeclaration struct {
	// persist activated bundles to disk
	Persist *bool                   `json:"persist,omitempty"`
	Polling *SystemsV1PollingConfig `json:"polling,omitempty"`
	// resource path to use to download bundle from configured service
	Resource *string `json:"resource,omitempty"`
	// name of service to use to contact remote server
	Service string                       `json:"service"`
	Signing *SystemsV1VerificationConfig `json:"signing,omitempty"`
	// size limit for individual files contained in the bundle
	SizeLimitBytes *int64 `json:"size_limit_bytes,omitempty"`
}

type SystemsV1OpaConfigServiceDeclaration struct {
	// allow insecure TLS
	AllowInsecureTLS *bool                                            `json:"allow_insecure_tls,omitempty"`
	Credentials      *SystemsV1OpaConfigServiceDeclarationCredentials `json:"credentials,omitempty"`
	// HTTP headers to include in the requests to the service
	Headers map[string]string `json:"headers,omitempty"`
	// keys is a dictionary mapping the key name to the actual key and optionally the algorithm and scope.
	Keys map[string]KeysConfig `json:"keys,omitempty"`
	// unique name for each service, referred to by plugins
	Name string `json:"name"`
	// amount of time to wait for a server's response headers after fully writing the request
	ResponseHeaderTimeoutSeconds *int64                    `json:"response_header_timeout_seconds,omitempty"`
	TLS                          *SystemsV1ServerTLSConfig `json:"tls,omitempty"`
	// optional parameter that allows to use an “OCI” service type
	Type *string `json:"type,omitempty"`
	// base URL to contact the service with
	URL string `json:"url"`
}

type SystemsV1OpaConfigServiceDeclarationCredentials struct {
	AzureManagedIdentity *SystemsV1AzureManagedIdentitiesAuthPlugin  `json:"azure_managed_identity,omitempty"`
	Bearer               *SystemsV1BearerAuthPlugin                  `json:"bearer,omitempty"`
	ClientTLS            *SystemsV1ClientTLSAuthPlugin               `json:"client_tls,omitempty"`
	GcpMetadata          *SystemsV1GcpMetadataAuthPlugin             `json:"gcp_metadata,omitempty"`
	Oauth2               *SystemsV1Oauth2ClientCredentialsAuthPlugin `json:"oauth2,omitempty"`
	// authenticate using a custom plugin
	Plugin    *string                        `json:"plugin,omitempty"`
	S3Signing *SystemsV1AwsSigningAuthPlugin `json:"s3_signing,omitempty"`
}

type SystemsV1PolicyConfig struct {
	// policy on when to (re)generate the policy
	Created     *string                    `json:"created,omitempty"`
	Enforcement SystemsV1EnforcementConfig `json:"enforcement"`
	// policy ID (path)
	ID string `json:"id"`
	// rego modules policy consists of
	Modules []SystemsV1Module     `json:"modules,omitempty"`
	Rules   *PoliciesV1RuleCounts `json:"rules,omitempty"`
	// policy type e.g. validating/rules
	Type string `json:"type"`
}

type SystemsV1PollingConfig struct {
	// maximum amount of time the server should wait before issuing a timeout if there’s no update available
	LongPollingTimeoutSeconds *int64 `json:"long_polling_timeout_seconds,omitempty"`
	// maximum amount of time to wait between bundle downloads
	MaxDelaySeconds *int64 `json:"max_delay_seconds,omitempty"`
	// minimum amount of time to wait between bundle downloads
	MinDelaySeconds *int64 `json:"min_delay_seconds,omitempty"`
}

type SystemsV1ReasonMapping struct {
	// dot-separated decision property path
	Path string `json:"path"`
}

type SystemsV1RuleDecisionMappings struct {
	Allowed *SystemsV1AllowedMapping `json:"allowed,omitempty"`
	// decision mappings for additional columns
	Columns []SystemsV1ColumnMapping `json:"columns,omitempty"`
	Reason  *SystemsV1ReasonMapping  `json:"reason,omitempty"`
}

type SystemsV1ServerTLSConfig struct {
	// the path to the root CA certificate. If not provided, this defaults to TLS using the host’s root CA set
	CaCert *string `json:"ca_cert,omitempty"`
	// require system certificate appended with root CA certificate
	SystemCaRequired *bool `json:"system_ca_required,omitempty"`
}

type SystemsV1SystemConfig struct {
	Authz          SystemsV1AuthzConfig           `json:"authz"`
	BundleDownload *SystemsV1BundleDownloadConfig `json:"bundle_download,omitempty"`
	BundleRegistry *SystemsV1BundleRegistryConfig `json:"bundle_registry,omitempty"`
	// only put data in the context bundle
	ContextBundleDataOnly *bool `json:"context_bundle_data_only,omitempty"`
	// list of path prefixes for policies/datasources that go into the second (context) bundle
	ContextBundleRoots []string `json:"context_bundle_roots,omitempty"`
	// datasources created for the system
	Datasources []SystemsV1DatasourceConfig `json:"datasources,omitempty"`
	// location of key attributes and additional columns in the decisions grouped by policy entry point path
	DecisionMappings     map[string]SystemsV1RuleDecisionMappings `json:"decision_mappings,omitempty"`
	DeploymentParameters *SystemsV1SystemDeploymentParameters     `json:"deployment_parameters,omitempty"`
	// description for the system
	Description *string `json:"description,omitempty"`
	// error/warning configuration: one of "all", "errors", "none"
	ErrorSetting *string `json:"error_setting,omitempty"`
	// current deployment errors
	Errors          map[string]SystemsV1AgentErrors `json:"errors,omitempty"`
	ExternalBundles *SystemsV1ExternalBundleConfig  `json:"external_bundles,omitempty"`
	// optional parameter to map Styra DAS system ID to external IDs used by a customer. (mapping can be retrieved with TranslateExternalIds operation)
	ExternalID *string `json:"external_id,omitempty"`
	// when set, stacks that are not linked to this system will be filtered out of its bundles
	FilterStacks *bool `json:"filter_stacks,omitempty"`
	// system ID
	ID string `json:"id"`
	// optional parameter to specify the Kafka topic where the decision logs for this system should be published (ignored if Kafka is not configured for the workspace for decision export)
	KafkaTopic *string `json:"kafka_topic,omitempty"`
	// IDs of stacks matching the system
	MatchingStacks []string         `json:"matching_stacks,omitempty"`
	Metadata       MetaV1ObjectMeta `json:"metadata"`
	// A history of any migrations performed on this system
	MigrationHistory []SystemsV1MigrationRecord `json:"migration_history,omitempty"`
	// minimum running OPA version for the systems
	MinimumOpaVersion *string `json:"minimum_opa_version,omitempty"`
	// enable mock OPAs for this system
	MockOpaEnabled *bool `json:"mock_opa_enabled,omitempty"`
	// system name
	Name string `json:"name"`
	// policies created for the system
	Policies []SystemsV1PolicyConfig `json:"policies"`
	// prevents users from modifying policies using Styra UIs
	ReadOnly      *bool                     `default:"false" json:"read_only"`
	SourceControl *GitV1SourceControlConfig `json:"source_control,omitempty"`
	// system status
	Status string `json:"status"`
	// tokens created for the system
	Tokens []TokensV1Token `json:"tokens,omitempty"`
	// system type e.g. kubernetes
	Type string `json:"type"`
	// system type parameter values (for template.* types)
	TypeParameters *SystemsV1SystemConfigTypeParameters `json:"type_parameters,omitempty"`
	// uninstallation instructions by installation method (deprecated)
	Uninstall map[string]string `json:"uninstall,omitempty"`
}

type SystemsV1SystemConfigTypeParameters struct {
}

type SystemsV1SystemDeploymentParameters struct {
	// true to fail close
	DenyOnOpaFail *bool `default:"false" json:"deny_on_opa_fail"`
	// discovery config settings for OPAs linked to the system. (in case of conflict with system-type defined setting, this value takes precedence)
	Discovery *Discovery `json:"discovery,omitempty"`
	// extra deployment settings
	Extra *Extra `json:"extra,omitempty"`
	// HTTP proxy URL
	HTTPProxy *string `json:"http_proxy,omitempty"`
	// HTTPS proxy URL
	HTTPSProxy *string `json:"https_proxy,omitempty"`
	// minimum Kubernetes version expected (where applicable)
	KubernetesVersion *string `json:"kubernetes_version,omitempty"`
	// Custom name for mutating webhook (useful for changing webhook order of execution)
	MutatingWebhookName *string `json:"mutating_webhook_name,omitempty"`
	// Kubernetes namespace the system is deployed to
	Namespace *string `json:"namespace,omitempty"`
	// URLs that should be excluded from proxying
	NoProxy *string `json:"no_proxy,omitempty"`
	// Kubernetes webhook timeout (where applicable)
	TimeoutSeconds *int `json:"timeout_seconds,omitempty"`
	// trusted CA certificates
	TrustedCaCerts []string `json:"trusted_ca_certs,omitempty"`
	// trusted container registry
	TrustedContainerRegistry *string `json:"trusted_container_registry,omitempty"`
}

type SystemsV1SystemsDeleteResponse struct {
	RequestID *string `json:"request_id,omitempty"`
}

type SystemsV1SystemsGetResponse struct {
	RequestID *string               `json:"request_id,omitempty"`
	Result    SystemsV1SystemConfig `json:"result"`
}

type SystemsV1SystemsPostRequest struct {
	BundleDownload *SystemsV1BundleDownloadConfig `json:"bundle_download,omitempty"`
	BundleRegistry *SystemsV1BundleRegistryConfig `json:"bundle_registry,omitempty"`
	// only put data in the context bundle
	ContextBundleDataOnly *bool `json:"context_bundle_data_only,omitempty"`
	// list of path prefixes for policies/datasources that go into the second (context) bundle
	ContextBundleRoots []string `json:"context_bundle_roots,omitempty"`
	// location of key attributes and additional columns in the decisions grouped by policy entry point path
	DecisionMappings     map[string]SystemsV1RuleDecisionMappings `json:"decision_mappings,omitempty"`
	DeploymentParameters *SystemsV1SystemDeploymentParameters     `json:"deployment_parameters,omitempty"`
	// description for the system
	Description *string `json:"description,omitempty"`
	// error/warning configuration: one of "all", "errors", "none"
	ErrorSetting    *string                        `json:"error_setting,omitempty"`
	ExternalBundles *SystemsV1ExternalBundleConfig `json:"external_bundles,omitempty"`
	// optional parameter to map Styra DAS system ID to external IDs used by a customer. (mapping can be retrieved with TranslateExternalIds operation)
	ExternalID *string `json:"external_id,omitempty"`
	// when set, stacks that are not linked to this system will be filtered out of its bundles
	FilterStacks *bool `json:"filter_stacks,omitempty"`
	// optional parameter to specify the Kafka topic where the decision logs for this system should be published (ignored if Kafka is not configured for the workspace for decision export)
	KafkaTopic *string `json:"kafka_topic,omitempty"`
	// enable mock OPAs for this system
	MockOpaEnabled *bool `json:"mock_opa_enabled,omitempty"`
	// system name
	Name string `json:"name"`
	// prevents users from modifying policies using Styra UIs
	ReadOnly      *bool                     `default:"false" json:"read_only"`
	SourceControl *GitV1SourceControlConfig `json:"source_control,omitempty"`
	// system type e.g. kubernetes
	Type string `json:"type"`
	// system type parameter values (for template.* types)
	TypeParameters *SystemsV1SystemsPostRequestTypeParameters `json:"type_parameters,omitempty"`
}

type SystemsV1SystemsPostRequestTypeParameters struct {
}

type SystemsV1SystemsPostResponse struct {
	RequestID *string               `json:"request_id,omitempty"`
	Result    SystemsV1SystemConfig `json:"result"`
}

type SystemsV1SystemsPutRequest struct {
	BundleDownload *SystemsV1BundleDownloadConfig `json:"bundle_download,omitempty"`
	BundleRegistry *SystemsV1BundleRegistryConfig `json:"bundle_registry,omitempty"`
	// only put data in the context bundle
	ContextBundleDataOnly *bool `json:"context_bundle_data_only,omitempty"`
	// list of path prefixes for policies/datasources that go into the second (context) bundle
	ContextBundleRoots []string `json:"context_bundle_roots,omitempty"`
	// location of key attributes and additional columns in the decisions grouped by policy entry point path
	DecisionMappings     map[string]SystemsV1RuleDecisionMappings `json:"decision_mappings,omitempty"`
	DeploymentParameters *SystemsV1SystemDeploymentParameters     `json:"deployment_parameters,omitempty"`
	// description for the system
	Description *string `json:"description,omitempty"`
	// error/warning configuration: one of "all", "errors", "none"
	ErrorSetting    *string                        `json:"error_setting,omitempty"`
	ExternalBundles *SystemsV1ExternalBundleConfig `json:"external_bundles,omitempty"`
	// optional parameter to map Styra DAS system ID to external IDs used by a customer. (mapping can be retrieved with TranslateExternalIds operation)
	ExternalID *string `json:"external_id,omitempty"`
	// when set, stacks that are not linked to this system will be filtered out of its bundles
	FilterStacks *bool `json:"filter_stacks,omitempty"`
	// optional parameter to specify the Kafka topic where the decision logs for this system should be published (ignored if Kafka is not configured for the workspace for decision export)
	KafkaTopic *string `json:"kafka_topic,omitempty"`
	// enable mock OPAs for this system
	MockOpaEnabled *bool `json:"mock_opa_enabled,omitempty"`
	// system name
	Name string `json:"name"`
	// prevents users from modifying policies using Styra UIs
	ReadOnly      *bool                     `default:"false" json:"read_only"`
	SourceControl *GitV1SourceControlConfig `json:"source_control,omitempty"`
	// system type e.g. kubernetes
	Type string `json:"type"`
	// system type parameter values (for template.* types)
	TypeParameters *SystemsV1SystemsPutRequestTypeParameters `json:"type_parameters,omitempty"`
}

type SystemsV1SystemsPutRequestTypeParameters struct {
}

type SystemsV1SystemsPutResponse struct {
	RequestID *string               `json:"request_id,omitempty"`
	Result    SystemsV1SystemConfig `json:"result"`
}

type SystemsV1V1RoleBindingConfig struct {
	// role binding ID
	ID string `json:"id"`
	// role name
	RoleName string `json:"role_name"`
}

type SystemsV1VerificationConfig struct {
	// files in the bundle to exclude during verification
	ExcludeFiles []string `json:"exclude_files,omitempty"`
	// name of the key to use for bundle signature verification
	Keyid *string `json:"keyid,omitempty"`
	// information about necessary public signing keys
	PublicKeys map[string]SystemsV1KeyConfig `json:"public_keys,omitempty"`
	// scope to use for bundle signature verification
	Scope *string `json:"scope,omitempty"`
}

type TokensV1Token struct {
	AllowPathPatterns []string         `json:"allow_path_patterns"`
	Description       string           `json:"description"`
	Expires           *time.Time       `json:"expires,omitempty"`
	ID                string           `json:"id"`
	Metadata          MetaV1ObjectMeta `json:"metadata"`
	Token             *string          `json:"token,omitempty"`
	TTL               string           `json:"ttl"`
	Uses              *int64           `json:"uses,omitempty"`
}

type TypeParameters struct {
}