v1

type AerospikeAccessControlSpec struct {
	// +optional
	AdminPolicy *AerospikeClientAdminPolicy `json:"adminPolicy,omitempty"`

	// Roles is the set of roles to allow on the Aerospike cluster.
	// +patchMergeKey=name
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=name
	// +optional
	Roles []AerospikeRoleSpec `json:"roles,omitempty" patchStrategy:"merge" patchMergeKey:"name"`

	// Users is the set of users to allow on the Aerospike cluster.
	// +patchMergeKey=name
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=name
	Users []AerospikeUserSpec `json:"users" patchStrategy:"merge" patchMergeKey:"name"`
}

type AerospikeCertPathInOperatorSource struct {
	// +optional
	CaCertsPath string `json:"caCertsPath,omitempty"`

	// +optional
	ClientCertPath string `json:"clientCertPath,omitempty"`

	// +optional
	ClientKeyPath string `json:"clientKeyPath,omitempty"`
}

type AerospikeClientAdminPolicy struct {
	// Timeout for admin client policy in milliseconds.
	Timeout int `json:"timeout"`
}

type AerospikeCluster struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   AerospikeClusterSpec   `json:"spec,omitempty"`
	Status AerospikeClusterStatus `json:"status,omitempty"`
}

type AerospikeClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AerospikeCluster `json:"items"`
}

type AerospikeClusterPhase string

type AerospikeClusterSpec struct {

	// Aerospike cluster size
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Cluster Size"
	Size int32 `json:"size"`

	// Aerospike server image
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Server Image"
	Image string `json:"image"`

	// MaxUnavailable is the percentage/number of pods that can be allowed to go down or unavailable before application
	// disruption. This value is used to create PodDisruptionBudget. Defaults to 1.
	// Refer Aerospike documentation for more details.
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Max Unavailable"
	// +optional
	MaxUnavailable *intstr.IntOrString `json:"maxUnavailable,omitempty"`

	// Disable the PodDisruptionBudget creation for the Aerospike cluster.
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Disable PodDisruptionBudget"
	// +optional
	DisablePDB *bool `json:"disablePDB,omitempty"`

	// Storage specify persistent storage to use for the Aerospike pods
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Storage"
	// +optional
	Storage AerospikeStorageSpec `json:"storage,omitempty"`

	// Has the Aerospike roles and users definitions. Required if aerospike cluster security is enabled.
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Access Control"
	// +optional
	AerospikeAccessControl *AerospikeAccessControlSpec `json:"aerospikeAccessControl,omitempty"`

	// Sets config in aerospike.conf file. Other configs are taken as default
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Aerospike Server Configuration"
	// +kubebuilder:pruning:PreserveUnknownFields
	AerospikeConfig *AerospikeConfigSpec `json:"aerospikeConfig"`

	// EnableDynamicConfigUpdate enables dynamic config update flow of the operator.
	// If enabled, operator will try to update the Aerospike config dynamically.
	// In case of inconsistent state during dynamic config update, operator falls back to rolling restart.
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Enable Dynamic Config Update"
	// +optional
	EnableDynamicConfigUpdate *bool `json:"enableDynamicConfigUpdate,omitempty"`

	// ValidationPolicy controls validation of the Aerospike cluster resource.
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Validation Policy"
	// +optional
	ValidationPolicy *ValidationPolicySpec `json:"validationPolicy,omitempty"`

	// RackConfig Configures the operator to deploy rack aware Aerospike cluster.
	// Pods will be deployed in given racks based on given configuration
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Rack Config"
	// +optional
	RackConfig RackConfig `json:"rackConfig,omitempty"`

	// AerospikeNetworkPolicy specifies how clients and tools access the Aerospike cluster.
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Aerospike Network Policy"
	// +optional
	AerospikeNetworkPolicy AerospikeNetworkPolicy `json:"aerospikeNetworkPolicy,omitempty"`

	// Certificates to connect to Aerospike.
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Operator Client Cert"
	// +optional
	OperatorClientCertSpec *AerospikeOperatorClientCertSpec `json:"operatorClientCert,omitempty"`

	// Specify additional configuration for the Aerospike pods
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Pod Configuration"
	// +optional
	PodSpec AerospikePodSpec `json:"podSpec,omitempty"`

	// SeedsFinderServices creates additional Kubernetes service that allow
	// clients to discover Aerospike cluster nodes.
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Seeds Finder Services"
	// +optional
	SeedsFinderServices SeedsFinderServices `json:"seedsFinderServices,omitempty"`

	// HeadlessService defines additional configuration parameters for the headless service created to discover
	// Aerospike Cluster nodes
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Headless Service"
	// +optional
	HeadlessService ServiceSpec `json:"headlessService,omitempty"`

	// PodService defines additional configuration parameters for the pod service created to expose the
	// Aerospike Cluster nodes outside the Kubernetes cluster. This service is created only created when
	// `multiPodPerHost` is set to `true` and `aerospikeNetworkPolicy` has one of the network types:
	// 'hostInternal', 'hostExternal', 'configuredIP'
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Pod Service"
	// +optional
	PodService ServiceSpec `json:"podService,omitempty"`

	// RosterNodeBlockList is a list of blocked nodeIDs from roster in a strong-consistency setup
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Roster Node BlockList"
	// +optional
	RosterNodeBlockList []string `json:"rosterNodeBlockList,omitempty"`

	// K8sNodeBlockList is a list of Kubernetes nodes which are not used for Aerospike pods. Pods are not scheduled on
	// these nodes. Pods are migrated from these nodes if already present. This is useful for the maintenance of
	// Kubernetes nodes.
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Kubernetes Node BlockList"
	// +kubebuilder:validation:MinItems:=1
	// +optional
	K8sNodeBlockList []string `json:"k8sNodeBlockList,omitempty"`

	// Paused flag is used to pause the reconciliation for the AerospikeCluster.
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Pause Reconcile"
	// +optional
	Paused *bool `json:"paused,omitempty"`

	// Operations is a list of on-demand operations to be performed on the Aerospike cluster.
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Operations"
	// +kubebuilder:validation:MaxItems:=1
	// +optional
	Operations []OperationSpec `json:"operations,omitempty"`
}

type AerospikeClusterStatus struct {
	// INSERT ADDITIONAL STATUS FIELD - define observed state of cluster
	// Add custom validation
	// using kubebuilder tags: https://book-v1.book.kubebuilder.io/beyond_basics/generating_crd.html
	// +nullable
	// The current state of Aerospike cluster.
	AerospikeClusterStatusSpec `json:",inline"`

	// Pods has Aerospike specific status of the pods.
	// This is map instead of the conventional map as list convention to allow each pod to patch update its own
	// status. The map key is the name of the pod.
	// +patchStrategy=strategic
	// +optional
	Pods map[string]AerospikePodStatus `json:"pods" patchStrategy:"strategic"`

	// Phase denotes the current phase of Aerospike cluster operation.
	// +optional
	Phase AerospikeClusterPhase `json:"phase,omitempty"`

	// Selector specifies the label selector for the Aerospike pods.
	// +optional
	Selector string `json:"selector,omitempty"`
}

type AerospikeClusterStatusSpec struct {
	// Aerospike cluster size
	// +optional
	Size int32 `json:"size,omitempty"`

	// Aerospike server image
	// +optional
	Image string `json:"image,omitempty"`

	// MaxUnavailable is the percentage/number of pods that can be allowed to go down or unavailable before application
	// disruption. This value is used to create PodDisruptionBudget. Defaults to 1.
	// +optional
	MaxUnavailable *intstr.IntOrString `json:"maxUnavailable,omitempty"`

	// Disable the PodDisruptionBudget creation for the Aerospike cluster.
	// +optional
	DisablePDB *bool `json:"disablePDB,omitempty"`

	// If set true then multiple pods can be created per Kubernetes Node.
	// This will create a NodePort service for each Pod.
	// NodePort, as the name implies, opens a specific port on all the Kubernetes Nodes ,
	// and any traffic that is sent to this port is forwarded to the service.
	// Here service picks a random port in range (30000-32767), so these port should be open.
	//
	// If set false then only single pod can be created per Kubernetes Node.
	// This will create Pods using hostPort setting.
	// The container port will be exposed to the external network at <hostIP>:<hostPort>,
	// where the hostIP is the IP address of the Kubernetes Node where the container is running and
	// the hostPort is the port requested by the user.
	// Deprecated: MultiPodPerHost is now part of podSpec
	// +optional
	MultiPodPerHost *bool `json:"multiPodPerHost,omitempty"`

	// Storage specify persistent storage to use for the Aerospike pods.
	// +optional
	Storage AerospikeStorageSpec `json:"storage,omitempty"`

	// AerospikeAccessControl has the Aerospike roles and users definitions.
	// Required if aerospike cluster security is enabled.
	// +optional
	AerospikeAccessControl *AerospikeAccessControlSpec `json:"aerospikeAccessControl,omitempty"`

	// AerospikeConfig sets config in aerospike.conf file. Other configs are taken as default
	// +kubebuilder:pruning:PreserveUnknownFields
	// +nullable
	// +optional
	AerospikeConfig *AerospikeConfigSpec `json:"aerospikeConfig,omitempty"`

	// EnableDynamicConfigUpdate enables dynamic config update flow of the operator.
	// If enabled, operator will try to update the Aerospike config dynamically.
	// In case of inconsistent state during dynamic config update, operator falls back to rolling restart.
	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Enable Dynamic Config Update"
	// +optional
	EnableDynamicConfigUpdate *bool `json:"enableDynamicConfigUpdate,omitempty"`

	// IsReadinessProbeEnabled tells whether the readiness probe is present in all pods or not.
	// Moreover, PodDisruptionBudget should be created for the Aerospike cluster only when this field is enabled.
	// +optional
	IsReadinessProbeEnabled bool `json:"isReadinessProbeEnabled"`

	// Define resources requests and limits for Aerospike Server Container.
	// Please contact aerospike for proper sizing exercise
	// Only Memory and Cpu resources can be given
	// Deprecated: Resources field is now part of containerSpec
	// +optional
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`

	// ValidationPolicy controls validation of the Aerospike cluster resource.
	// +optional
	ValidationPolicy *ValidationPolicySpec `json:"validationPolicy,omitempty"`

	// RackConfig Configures the operator to deploy rack aware Aerospike cluster.
	// Pods will be deployed in given racks based on given configuration
	// +nullable
	// +optional
	RackConfig RackConfig `json:"rackConfig,omitempty"`

	// AerospikeNetworkPolicy specifies how clients and tools access the Aerospike cluster.
	// +optional
	AerospikeNetworkPolicy AerospikeNetworkPolicy `json:"aerospikeNetworkPolicy,omitempty"`

	// Certificates to connect to Aerospike. If omitted then certs are taken from the secret 'aerospike-secret'.
	// +optional
	OperatorClientCertSpec *AerospikeOperatorClientCertSpec `json:"operatorClientCertSpec,omitempty"`

	// Additional configuration for create Aerospike pods.
	// +optional
	PodSpec AerospikePodSpec `json:"podSpec,omitempty"`

	// SeedsFinderServices describes services which are used for seeding Aerospike nodes.
	// +optional
	SeedsFinderServices SeedsFinderServices `json:"seedsFinderServices,omitempty"`

	// HeadlessService defines additional configuration parameters for the headless service created to discover
	// Aerospike Cluster nodes
	// +optional
	HeadlessService ServiceSpec `json:"headlessService,omitempty"`

	// PodService defines additional configuration parameters for the pod service created to expose the
	// Aerospike Cluster nodes outside the Kubernetes cluster. This service is created only created when
	// `multiPodPerHost` is set to `true` and `aerospikeNetworkPolicy` has one of the network types:
	// 'hostInternal', 'hostExternal', 'configuredIP'
	// +optional
	PodService ServiceSpec `json:"podService,omitempty"`

	// RosterNodeBlockList is a list of blocked nodeIDs from roster in a strong-consistency setup
	// +optional
	RosterNodeBlockList []string `json:"rosterNodeBlockList,omitempty"`

	// K8sNodeBlockList is a list of Kubernetes nodes which are not used for Aerospike pods.
	// +optional
	K8sNodeBlockList []string `json:"k8sNodeBlockList,omitempty"`

	// Operations is a list of on-demand operation to be performed on the Aerospike cluster.
	// +optional
	Operations []OperationSpec `json:"operations,omitempty"`
}

type AerospikeConfigSpec struct {
	Value map[string]interface{} `json:"-"`
}

type AerospikeContainerSpec struct {
	// SecurityContext that will be added to aerospike-server container created by operator.
	// +optional
	SecurityContext *corev1.SecurityContext `json:"securityContext,omitempty"`

	// Define resources requests and limits for Aerospike Server Container.
	// Please contact aerospike for proper sizing exercise
	// Only Memory and Cpu resources can be given
	// Resources.Limits should be more than Resources.Requests.
	// +optional
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
}

type AerospikeInitContainerSpec struct {
	// ImageRegistry is the name of image registry for aerospike-init container image
	// ImageRegistry, e.g. docker.io, redhat.access.com
	// +optional
	ImageRegistry string `json:"imageRegistry,omitempty"`

	// ImageRegistryNamespace is the name of namespace in registry for aerospike-init container image
	// +optional
	ImageRegistryNamespace *string `json:"imageRegistryNamespace,omitempty"`

	// ImageNameAndTag is the name:tag of aerospike-init container image
	// +optional
	ImageNameAndTag string `json:"imageNameAndTag,omitempty"`

	// SecurityContext that will be added to aerospike-init container created by operator.
	// +optional
	SecurityContext *corev1.SecurityContext `json:"securityContext,omitempty"`

	// Define resources requests and limits for Aerospike init Container.
	// Only Memory and Cpu resources can be given
	// Resources.Limits should be more than Resources.Requests.
	// +optional
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
}

type AerospikeInstanceSummary struct {
	// ClusterName is the name of the Aerospike cluster this pod belongs to.
	ClusterName string `json:"clusterName"`

	// NodeID is the unique Aerospike ID for this pod.
	NodeID string `json:"nodeID"`

	// RackID of rack to which this node belongs
	// +optional
	RackID int `json:"rackID,omitempty"`

	// TLSName is the TLS name of this pod in the Aerospike cluster.
	// +optional
	TLSName string `json:"tlsName,omitempty"`

	// AccessEndpoints are the access endpoints for this pod.
	// +optional
	AccessEndpoints []string `json:"accessEndpoints,omitempty"`

	// AlternateAccessEndpoints are the alternate access endpoints for this pod.
	// +optional
	AlternateAccessEndpoints []string `json:"alternateAccessEndpoints,omitempty"`

	// TLSAccessEndpoints are the TLS access endpoints for this pod.
	// +optional
	TLSAccessEndpoints []string `json:"tlsAccessEndpoints,omitempty"`

	// TLSAlternateAccessEndpoints are the alternate TLS access endpoints for this pod.
	// +optional
	TLSAlternateAccessEndpoints []string `json:"tlsAlternateAccessEndpoints,omitempty"`
}

type AerospikeNetworkPolicy struct {
	// AccessType is the type of network address to use for Aerospike access address.
	// Defaults to hostInternal.
	// +kubebuilder:validation:Enum=pod;hostInternal;hostExternal;configuredIP;customInterface
	// +optional
	AccessType AerospikeNetworkType `json:"access,omitempty"`

	// CustomAccessNetworkNames is the list of the pod's network interfaces used for Aerospike access address.
	// Each element in the list is specified with a namespace and the name of a NetworkAttachmentDefinition,
	// separated by a forward slash (/).
	// These elements must be defined in the pod annotation k8s.v1.cni.cncf.io/networks in order to assign
	// network interfaces to the pod.
	// Required with 'customInterface' access type.
	// +kubebuilder:validation:MinItems:=1
	// +optional
	CustomAccessNetworkNames []string `json:"customAccessNetworkNames,omitempty"`

	// AlternateAccessType is the type of network address to use for Aerospike alternate access address.
	// Defaults to hostExternal.
	// +kubebuilder:validation:Enum=pod;hostInternal;hostExternal;configuredIP;customInterface
	// +optional
	AlternateAccessType AerospikeNetworkType `json:"alternateAccess,omitempty"`

	// CustomAlternateAccessNetworkNames is the list of the pod's network interfaces used for Aerospike
	// alternate access address.
	// Each element in the list is specified with a namespace and the name of a NetworkAttachmentDefinition,
	// separated by a forward slash (/).
	// These elements must be defined in the pod annotation k8s.v1.cni.cncf.io/networks in order to assign
	// network interfaces to the pod.
	// Required with 'customInterface' alternateAccess type
	// +kubebuilder:validation:MinItems:=1
	// +optional
	CustomAlternateAccessNetworkNames []string `json:"customAlternateAccessNetworkNames,omitempty"`

	// TLSAccessType is the type of network address to use for Aerospike TLS access address.
	// Defaults to hostInternal.
	// +kubebuilder:validation:Enum=pod;hostInternal;hostExternal;configuredIP;customInterface
	// +optional
	TLSAccessType AerospikeNetworkType `json:"tlsAccess,omitempty"`

	// CustomTLSAccessNetworkNames is the list of the pod's network interfaces used for Aerospike TLS access address.
	// Each element in the list is specified with a namespace and the name of a NetworkAttachmentDefinition,
	// separated by a forward slash (/).
	// These elements must be defined in the pod annotation k8s.v1.cni.cncf.io/networks in order to assign
	// network interfaces to the pod.
	// Required with 'customInterface' tlsAccess type
	// +kubebuilder:validation:MinItems:=1
	// +optional
	CustomTLSAccessNetworkNames []string `json:"customTLSAccessNetworkNames,omitempty"`

	// TLSAlternateAccessType is the type of network address to use for Aerospike TLS alternate access address.
	// Defaults to hostExternal.
	// +kubebuilder:validation:Enum=pod;hostInternal;hostExternal;configuredIP;customInterface
	// +optional
	TLSAlternateAccessType AerospikeNetworkType `json:"tlsAlternateAccess,omitempty"`

	// CustomTLSAlternateAccessNetworkNames is the list of the pod's network interfaces used for Aerospike TLS
	// alternate access address.
	// Each element in the list is specified with a namespace and the name of a NetworkAttachmentDefinition,
	// separated by a forward slash (/).
	// These elements must be defined in the pod annotation k8s.v1.cni.cncf.io/networks in order to assign
	// network interfaces to the pod.
	// Required with 'customInterface' tlsAlternateAccess type
	// +kubebuilder:validation:MinItems:=1
	// +optional
	CustomTLSAlternateAccessNetworkNames []string `json:"customTLSAlternateAccessNetworkNames,omitempty"`

	// FabricType is the type of network address to use for Aerospike fabric address.
	// Defaults is empty meaning all interfaces 'any'.
	// +kubebuilder:validation:Enum:=customInterface
	// +optional
	FabricType AerospikeNetworkType `json:"fabric,omitempty"`

	// CustomFabricNetworkNames is the list of the pod's network interfaces used for Aerospike fabric address.
	// Each element in the list is specified with a namespace and the name of a NetworkAttachmentDefinition,
	// separated by a forward slash (/).
	// These elements must be defined in the pod annotation k8s.v1.cni.cncf.io/networks in order to assign
	// network interfaces to the pod.
	// Required with 'customInterface' fabric type
	// +kubebuilder:validation:MinItems:=1
	// +optional
	CustomFabricNetworkNames []string `json:"customFabricNetworkNames,omitempty"`

	// TLSFabricType is the type of network address to use for Aerospike TLS fabric address.
	// Defaults is empty meaning all interfaces 'any'.
	// +kubebuilder:validation:Enum:=customInterface
	// +optional
	TLSFabricType AerospikeNetworkType `json:"tlsFabric,omitempty"`

	// CustomTLSFabricNetworkNames is the list of the pod's network interfaces used for Aerospike TLS fabric address.
	// Each element in the list is specified with a namespace and the name of a NetworkAttachmentDefinition,
	// separated by a forward slash (/).
	// These elements must be defined in the pod annotation k8s.v1.cni.cncf.io/networks in order to assign network
	// interfaces to the pod.
	// Required with 'customInterface' tlsFabric type
	// +kubebuilder:validation:MinItems:=1
	// +optional
	CustomTLSFabricNetworkNames []string `json:"customTLSFabricNetworkNames,omitempty"`
}

type AerospikeNetworkType string

type AerospikeObjectMeta struct {
	// Key - Value pair that may be set by external tools to store and retrieve arbitrary metadata
	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`

	// Key - Value pairs that can be used to organize and categorize scope and select objects
	// +optional
	Labels map[string]string `json:"labels,omitempty"`
}

type AerospikeOperatorCertSource struct {
	// +optional
	SecretCertSource *AerospikeSecretCertSource `json:"secretCertSource,omitempty"`

	// +optional
	CertPathInOperator *AerospikeCertPathInOperatorSource `json:"certPathInOperator,omitempty"`
}

type AerospikeOperatorClientCertSpec struct {
	// If specified, this name will be added to tls-authenticate-client list by the operator
	// +optional
	TLSClientName string `json:"tlsClientName,omitempty"`

	AerospikeOperatorCertSource `json:",inline"`
}

type AerospikePersistentVolumePolicySpec struct {

	// InitMethod determines how volumes attached to Aerospike server pods are initialized when the pods come up the
	// first time. Defaults to "none".
	// +optional
	InputInitMethod *AerospikeVolumeMethod `json:"initMethod,omitempty"`

	// WipeMethod determines how volumes attached to Aerospike server pods are wiped for dealing with storage format
	// changes.
	// +optional
	InputWipeMethod *AerospikeVolumeMethod `json:"wipeMethod,omitempty"`

	// CascadeDelete determines if the persistent volumes are deleted after the pod this volume binds to is
	// terminated and removed from the cluster.
	// +optional
	InputCascadeDelete *bool `json:"cascadeDelete,omitempty"`

	// Effective/operative value to use as the volume init method after applying defaults.
	// +optional
	InitMethod AerospikeVolumeMethod `json:"effectiveInitMethod,omitempty"`

	// Effective/operative value to use as the volume wipe method after applying defaults.
	// +optional
	WipeMethod AerospikeVolumeMethod `json:"effectiveWipeMethod,omitempty"`

	// Effective/operative value to use for cascade delete after applying defaults.
	// +optional
	CascadeDelete bool `json:"effectiveCascadeDelete,omitempty"`
}

type AerospikePodSpec struct {
	// AerospikeContainerSpec configures the aerospike-server container
	// created by the operator.
	// +optional
	AerospikeContainerSpec AerospikeContainerSpec `json:"aerospikeContainer,omitempty"`

	// AerospikeInitContainerSpec configures the aerospike-init container
	// created by the operator.
	// +optional
	AerospikeInitContainerSpec *AerospikeInitContainerSpec `json:"aerospikeInitContainer,omitempty"`

	// MetaData to add to the pod.
	// +optional
	AerospikeObjectMeta AerospikeObjectMeta `json:"metadata,omitempty"`

	// Sidecars to add to the pod.
	// +optional
	Sidecars []corev1.Container `json:"sidecars,omitempty"`

	// InitContainers to add to the pods.
	// +optional
	InitContainers []corev1.Container `json:"initContainers,omitempty"`

	// SchedulingPolicy  controls pods placement on Kubernetes nodes.
	SchedulingPolicy `json:",inline"`

	// If set true then multiple pods can be created per Kubernetes Node.
	// This will create a NodePort service for each Pod if aerospikeNetworkPolicy defined
	// has one of the network types: 'hostInternal', 'hostExternal', 'configuredIP'
	// NodePort, as the name implies, opens a specific port on all the Kubernetes Nodes ,
	// and any traffic that is sent to this port is forwarded to the service.
	// Here service picks a random port in range (30000-32767), so these port should be open.
	//
	// If set false then only single pod can be created per Kubernetes Node.
	// This will create Pods using hostPort setting.
	// The container port will be exposed to the external network at <hostIP>:<hostPort>,
	// where the hostIP is the IP address of the Kubernetes Node where the container is running and
	// the hostPort is the port requested by the user.
	// +optional
	MultiPodPerHost *bool `json:"multiPodPerHost,omitempty"`

	// HostNetwork enables host networking for the pod.
	// To enable hostNetwork multiPodPerHost must be false.
	// +optional
	HostNetwork bool `json:"hostNetwork,omitempty"`

	// DnsPolicy same as https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy.
	// If hostNetwork is true and policy is not specified, it defaults to ClusterFirstWithHostNet
	// +optional
	InputDNSPolicy *corev1.DNSPolicy `json:"dnsPolicy,omitempty"`

	// Effective value of the DNSPolicy
	// +optional
	DNSPolicy corev1.DNSPolicy `json:"effectiveDNSPolicy,omitempty"`

	// DNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.
	// This is required field when dnsPolicy is set to `None`
	// +optional
	DNSConfig *corev1.PodDNSConfig `json:"dnsConfig,omitempty"`

	// SecurityContext holds pod-level security attributes and common container settings.
	// Optional: Defaults to empty.  See type description for default values of each field.
	// +optional
	SecurityContext *corev1.PodSecurityContext `json:"securityContext,omitempty"`

	// ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of
	// the images used by this PodSpec.
	// More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
	// +optional
	ImagePullSecrets []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`
}

type AerospikePodStatus struct {
	// Image is the Aerospike image this pod is running.
	Image string `json:"image"`

	// InitImage is the Aerospike init image this pod's init container is running.
	// +optional
	InitImage string `json:"initImage,omitempty"`

	// PodIP in the K8s network.
	PodIP string `json:"podIP"`

	// HostInternalIP of the K8s host this pod is scheduled on.
	// +optional
	HostInternalIP string `json:"hostInternalIP,omitempty"`

	// HostExternalIP of the K8s host this pod is scheduled on.
	// +optional
	HostExternalIP string `json:"hostExternalIP,omitempty"`

	// PodPort is the port K8s internal Aerospike clients can connect to.
	PodPort int `json:"podPort"`

	// ServicePort is the port Aerospike clients outside K8s can connect to.
	// +optional
	ServicePort int32 `json:"servicePort,omitempty"`

	// Aerospike server instance summary for this pod.
	// +optional
	Aerospike AerospikeInstanceSummary `json:"aerospike,omitempty"`

	// InitializedVolumes is the list of volume names that have already been
	// initialized.
	// +optional
	InitializedVolumes []string `json:"initializedVolumes,omitempty"`

	// DirtyVolumes is the list of volume names that are removed
	// from aerospike namespaces and will be cleaned during init
	// if they are reused in any namespace.
	// +optional
	DirtyVolumes []string `json:"dirtyVolumes,omitempty"`

	// AerospikeConfigHash is ripemd160 hash of aerospikeConfig used by this pod
	AerospikeConfigHash string `json:"aerospikeConfigHash"`

	// NetworkPolicyHash is ripemd160 hash of NetworkPolicy used by this pod
	NetworkPolicyHash string `json:"networkPolicyHash"`

	// PodSpecHash is ripemd160 hash of PodSpec used by this pod
	PodSpecHash string `json:"podSpecHash"`

	// DynamicConfigUpdateStatus is the status of dynamic config update operation.
	// Empty "" status means successful update.
	// +optional
	DynamicConfigUpdateStatus DynamicConfigUpdateStatus `json:"dynamicConfigUpdateStatus,omitempty"`
}

type AerospikeRoleSpec struct {
	// Name of this role.
	Name string `json:"name"`

	// Privileges granted to this role.
	// +listType=set
	Privileges []string `json:"privileges"`

	// Whitelist of host address allowed for this role.
	// +listType=set
	// +optional
	Whitelist []string `json:"whitelist,omitempty"`

	// ReadQuota specifies permitted rate of read records for current role (the value is in RPS)
	// +optional
	ReadQuota uint32 `json:"readQuota,omitempty"`

	// WriteQuota specifies permitted rate of write records for current role (the value is in RPS)
	// +optional
	WriteQuota uint32 `json:"writeQuota,omitempty"`
}

type AerospikeSecretCertSource struct {
	// +optional
	CaCertsSource *CaCertsSource `json:"caCertsSource,omitempty"`

	SecretName string `json:"secretName"`

	// +optional
	SecretNamespace string `json:"secretNamespace,omitempty"`

	// +optional
	CaCertsFilename string `json:"caCertsFilename,omitempty"`

	// +optional
	ClientCertFilename string `json:"clientCertFilename,omitempty"`

	// +optional
	ClientKeyFilename string `json:"clientKeyFilename,omitempty"`
}

type AerospikeServerVolumeAttachment struct {
	// Path to attach the volume on the Aerospike server container.
	Path string `json:"path"`

	// AttachmentOptions that control how the volume is attached.
	AttachmentOptions `json:",inline"`
}

type AerospikeStorageSpec struct {
	// FileSystemVolumePolicy contains default policies for filesystem volumes.
	// +optional
	FileSystemVolumePolicy AerospikePersistentVolumePolicySpec `json:"filesystemVolumePolicy,omitempty"`

	// BlockVolumePolicy contains default policies for block volumes.
	// +optional
	BlockVolumePolicy AerospikePersistentVolumePolicySpec `json:"blockVolumePolicy,omitempty"`

	// CleanupThreads contains the maximum number of cleanup threads(dd or blkdiscard) per init container.
	// +optional
	CleanupThreads int `json:"cleanupThreads,omitempty"`

	// LocalStorageClasses contains a list of storage classes which provisions local volumes.
	// +optional
	LocalStorageClasses []string `json:"localStorageClasses,omitempty"`

	// DeleteLocalStorageOnRestart enables the deletion of local storage PVCs when a pod is restarted or rescheduled
	// by AKO. It only considers local storage classes given in the localStorageClasses field.
	// +optional
	DeleteLocalStorageOnRestart *bool `json:"deleteLocalStorageOnRestart,omitempty"`

	// Volumes list to attach to created pods.
	// +patchMergeKey=name
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=name
	// +optional
	Volumes []VolumeSpec `json:"volumes,omitempty" patchStrategy:"merge" patchMergeKey:"name"`
}

type AerospikeUserSpec struct {
	// Name is the user's username.
	Name string `json:"name"`

	// SecretName has secret info created by user. User needs to create this secret from password literal.
	// eg: kubectl create secret generic dev-db-secret --from-literal=password='password'
	SecretName string `json:"secretName"`

	// Roles is the list of roles granted to the user.
	// +listType=set
	Roles []string `json:"roles"`
}

type AerospikeVolumeMethod string

type AttachmentOptions struct {
	// +optional
	MountOptions `json:"mountOptions,omitempty"`
}

type CaCertsSource struct {
	SecretName string `json:"secretName"`

	// +optional
	SecretNamespace string `json:"secretNamespace,omitempty"`
}

type DynamicConfigUpdateStatus string

type LoadBalancerSpec struct {
	// +kubebuilder:validation:Enum=Local;Cluster
	// +optional
	ExternalTrafficPolicy corev1.ServiceExternalTrafficPolicyType `json:"externalTrafficPolicy,omitempty"`

	// +patchStrategy=merge
	// +optional
	Annotations map[string]string `json:"annotations,omitempty" patchStrategy:"merge"`

	// The name of the port exposed on load balancer service.
	// +optional
	PortName string `json:"portName,omitempty"`

	// Port Exposed port on load balancer. If not specified TargetPort is used.
	// +kubebuilder:validation:Minimum=1024
	// +kubebuilder:validation:Maximum=65535
	// +optional
	Port int32 `json:"port,omitempty"`

	// TargetPort Target port. If not specified the tls-port of network.service stanza is used from Aerospike config.
	// If there is no tls port configured then regular port from network.service is used.
	// +kubebuilder:validation:Minimum=1024
	// +kubebuilder:validation:Maximum=65535
	// +optional
	TargetPort int32 `json:"targetPort,omitempty"`

	// +optional
	LoadBalancerSourceRanges []string `json:"loadBalancerSourceRanges,omitempty" patchStrategy:"merge"`
}

type MountOptions struct {
	// Mounted read-only if true, read-write otherwise (false or unspecified).
	// Defaults to false.
	// +optional
	ReadOnly bool `json:"readOnly,omitempty"`

	// Path within the volume from which the container's volume should be mounted.
	// Defaults to "" (volume's root).
	// +optional
	SubPath string `json:"subPath,omitempty"`

	// mountPropagation determines how mounts are propagated from the host
	// to container and the other way around.
	// When not set, MountPropagationNone is used.
	// This field is beta in 1.10.
	// +optional
	MountPropagation *corev1.MountPropagationMode `json:"mountPropagation,omitempty"`

	// Expanded path within the volume from which the container's volume should be mounted.
	// Behaves similarly to SubPath but environment variable references $(
	// VAR_NAME) are expanded using the container's environment.
	// Defaults to "" (volume's root).
	// SubPathExpr and SubPath are mutually exclusive.
	// +optional
	SubPathExpr string `json:"subPathExpr,omitempty"`
}

type OperationKind string

type OperationSpec struct {
	// Kind is the type of operation to be performed on the Aerospike cluster.
	// +kubebuilder:validation:Enum=WarmRestart;PodRestart
	Kind OperationKind `json:"kind"`

	// ID is the unique identifier for the operation. It is used by the operator to track the operation.
	// +kubebuilder:validation:MaxLength=20
	// +kubebuilder:validation:MinLength=1
	ID string `json:"id"`

	// PodList is the list of pods on which the operation is to be performed.
	// +optional
	PodList []string `json:"podList,omitempty"`
}

type PersistentVolumeSpec struct {
	AerospikeObjectMeta `json:"metadata,omitempty"`

	// StorageClass should be pre-created by user.
	StorageClass string `json:"storageClass"`

	// VolumeMode specifies if the volume is block/raw or a filesystem.
	VolumeMode corev1.PersistentVolumeMode `json:"volumeMode"`

	// Size of volume.
	Size resource.Quantity `json:"size"`

	// AccessModes contains the desired access modes the volume should have.
	// More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes/#access-modes
	// +optional
	AccessModes []corev1.PersistentVolumeAccessMode `json:"accessModes,omitempty" protobuf:"bytes,1,rep,name=accessModes,casttype=PersistentVolumeAccessMode"` //nolint:lll // for readability

	// A label query over volumes to consider for binding.
	// +optional
	Selector *metav1.LabelSelector `json:"selector,omitempty"`
}

type PrivilegeScope int

type Rack struct {
	// Identifier for the rack
	ID int `json:"id"`

	// Zone name for setting rack affinity. Rack pods will be deployed to given Zone
	// +optional
	Zone string `json:"zone,omitempty"`

	// Region name for setting rack affinity. Rack pods will be deployed to given Region
	// +optional
	Region string `json:"region,omitempty"`

	// RackLabel for setting rack affinity.
	// Rack pods will be deployed in k8s nodes having rackLabel {aerospike.com/rack-label: <rack-label>}
	// +optional
	RackLabel string `json:"rackLabel,omitempty"`

	// K8s Node name for setting rack affinity. Rack pods will be deployed in given k8s Node
	// +optional
	NodeName string `json:"nodeName,omitempty"`

	// AerospikeConfig overrides the common AerospikeConfig for this Rack. This is merged with global Aerospike config.
	// +kubebuilder:pruning:PreserveUnknownFields
	// +optional
	InputAerospikeConfig *AerospikeConfigSpec `json:"aerospikeConfig,omitempty"`

	// Effective/operative Aerospike config. The resultant is a merge of rack Aerospike config and the global
	// Aerospike config
	// +kubebuilder:pruning:PreserveUnknownFields
	// +optional
	AerospikeConfig AerospikeConfigSpec `json:"effectiveAerospikeConfig,omitempty"`

	// Storage specify persistent storage to use for the pods in this rack. This value overwrites the global storage config
	// +optional
	InputStorage *AerospikeStorageSpec `json:"storage,omitempty"`

	// Effective/operative storage. The resultant is user input if specified else global storage
	// +optional
	Storage AerospikeStorageSpec `json:"effectiveStorage,omitempty"`

	// PodSpec to use for the pods in this rack. This value overwrites the global storage config
	// +optional
	InputPodSpec *RackPodSpec `json:"podSpec,omitempty"`

	// Effective/operative PodSpec. The resultant is user input if specified else global PodSpec
	// +optional
	PodSpec RackPodSpec `json:"effectivePodSpec,omitempty"`
}

type RackConfig struct {
	// List of Aerospike namespaces for which rack feature will be enabled
	// +optional
	Namespaces []string `json:"namespaces,omitempty"`

	// Racks is the list of all racks
	// +nullable
	// +optional
	Racks []Rack `json:"racks,omitempty"`

	// RollingUpdateBatchSize is the percentage/number of rack pods that can be restarted simultaneously
	// +optional
	RollingUpdateBatchSize *intstr.IntOrString `json:"rollingUpdateBatchSize,omitempty"`

	// ScaleDownBatchSize is the percentage/number of rack pods that can be scaled down simultaneously
	// +optional
	ScaleDownBatchSize *intstr.IntOrString `json:"scaleDownBatchSize,omitempty"`

	// MaxIgnorablePods is the maximum number/percentage of pending/failed pods in a rack that are ignored while
	// assessing cluster stability. Pods identified using this value are not considered part of the cluster.
	// Additionally, in SC mode clusters, these pods are removed from the roster.
	// This is particularly useful when some pods are stuck in pending/failed state due to any scheduling issues and
	// cannot be fixed by simply updating the CR.
	// It enables the operator to perform specific operations on the cluster, like changing Aerospike configurations,
	// without being hindered by these problematic pods.
	// Remember to set MaxIgnorablePods back to 0 once the required operation is done.
	// This makes sure that later on, all pods are properly counted when evaluating the cluster stability.
	// +optional
	MaxIgnorablePods *intstr.IntOrString `json:"maxIgnorablePods,omitempty"`
}

type RackPodSpec struct {
	// SchedulingPolicy overrides for this rack.
	SchedulingPolicy `json:",inline"`
}

type SchedulingPolicy struct {
	// Affinity rules for pod placement.
	// +optional
	Affinity *corev1.Affinity `json:"affinity,omitempty"`

	// Tolerations for this pod.
	// +optional
	Tolerations []corev1.Toleration `json:"tolerations,omitempty"`

	// NodeSelector constraints for this pod.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`
}

type SeedsFinderServices struct {
	// LoadBalancer created to discover Aerospike Cluster nodes from outside of
	// Kubernetes cluster.
	// +optional
	LoadBalancer *LoadBalancerSpec `json:"loadBalancer,omitempty"`
}

type ServiceSpec struct {
	// +patchStrategy=merge
	// +optional
	Metadata AerospikeObjectMeta `json:"metadata,omitempty"`
}

type ValidationPolicySpec struct {
	// skipWorkDirValidate validates that Aerospike work directory is mounted on a persistent file storage.
	// Defaults to false.
	SkipWorkDirValidate bool `json:"skipWorkDirValidate"`

	// ValidateXdrDigestLogFile validates that xdr digest log file is mounted on a persistent file storage.
	// Defaults to false.
	SkipXdrDlogFileValidate bool `json:"skipXdrDlogFileValidate"`
}

type VolumeAttachment struct {
	// ContainerName is the name of the container to attach this volume to.
	ContainerName string `json:"containerName"`

	// Path to attach the volume on the container.
	Path string `json:"path"`

	// AttachmentOptions that control how the volume is attached.
	AttachmentOptions `json:",inline"`
}

type VolumeSource struct {
	// EmptyDir represents a temporary directory that shares a pod's lifetime.
	// More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
	// +optional
	EmptyDir *corev1.EmptyDirVolumeSource `json:"emptyDir,omitempty" protobuf:"bytes,2,opt,name=emptyDir"`

	// +optional
	Secret *corev1.SecretVolumeSource `json:"secret,omitempty" protobuf:"bytes,6,opt,name=secret"`

	// ConfigMap represents a configMap that should populate this volume
	// +optional
	ConfigMap *corev1.ConfigMapVolumeSource `json:"configMap,omitempty" protobuf:"bytes,19,opt,name=configMap"`

	// +optional
	PersistentVolume *PersistentVolumeSpec `json:"persistentVolume,omitempty"`
}

type VolumeSpec struct {
	// TODO: should this be inside source.PV or other type of source will also need this
	// Contains policies for this volume.
	AerospikePersistentVolumePolicySpec `json:",inline"`

	// Name for this volume, Name or path should be given.
	Name string `json:"name"`

	// Source of this volume.
	// +optional
	Source VolumeSource `json:"source,omitempty"`

	// Aerospike attachment of this volume on Aerospike server container.
	// +optional
	Aerospike *AerospikeServerVolumeAttachment `json:"aerospike,omitempty"`

	// Sidecars are side containers where this volume will be mounted
	// +optional
	Sidecars []VolumeAttachment `json:"sidecars,omitempty"`

	// InitContainers are additional init containers where this volume will be mounted
	// +optional
	InitContainers []VolumeAttachment `json:"initContainers,omitempty"`
}