models

type AdminLoginResponse struct {

	// id token
	IDToken string `json:"idToken,omitempty"`
}

type AnalysisRunArgument struct {

	// Name is the name of the argument.
	//
	// +kubebuilder:validation:Required
	// Required: true
	Name *string `json:"name"`

	// Value is the value of the argument.
	//
	// +kubebuilder:validation:Required
	// Required: true
	Value *string `json:"value"`
}

type AnalysisRunMetadata struct {

	// Additional annotations to apply to an AnalysisRun.
	Annotations map[string]string `json:"annotations,omitempty"`

	// Additional labels to apply to an AnalysisRun.
	Labels map[string]string `json:"labels,omitempty"`
}

type AnalysisRunReference struct {

	// Name is the name of the AnalysisRun.
	Name string `json:"name,omitempty"`

	// Namespace is the namespace of the AnalysisRun.
	Namespace string `json:"namespace,omitempty"`

	// Phase is the last observed phase of the AnalysisRun referenced by Name.
	Phase string `json:"phase,omitempty"`
}

type AnalysisTemplateReference struct {

	// Kind is the type of the AnalysisTemplate. Can be either AnalysisTemplate or
	// ClusterAnalysisTemplate, default is AnalysisTemplate.
	//
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:Enum=AnalysisTemplate;ClusterAnalysisTemplate
	Kind string `json:"kind,omitempty"`

	// Name is the name of the AnalysisTemplate in the same project/namespace as
	// the Stage.
	//
	// +kubebuilder:validation:Required
	// Required: true
	Name *string `json:"name"`
}

type ApprovedStage struct {

	// ApprovedAt is the time at which the Freight was approved for the Stage.
	ApprovedAt string `json:"approvedAt,omitempty"`
}

type ArgoCDShard struct {

	// namespace
	Namespace string `json:"namespace,omitempty"`

	// url
	URL string `json:"url,omitempty"`
}

type ArtifactReference struct {

	// ArtifactType specifies the type of artifact this is. Often, but not always,
	// it will be the media type (MIME type) of the artifact referenced by this
	// ArtifactReference.
	//
	// +kubebuilder:validation:MinLength=1
	ArtifactType string `json:"artifactType,omitempty"`

	// Metadata is a JSON object containing a mostly opaque collection of artifact
	// attributes. (It must be an object. It may not be a list or a scalar value.)
	// "Mostly" because Kargo may understand how to interpret some documented,
	// well-known, top-level keys. Those aside, this metadata is only understood
	// by a corresponding Subscriber implementation that created it.
	//
	// +optional
	Metadata any `json:"metadata,omitempty"`

	// SubscriptionName is the name of the Subscription that discovered this
	// artifact.
	//
	// +kubebuilder:validation:MinLength=1
	SubscriptionName string `json:"subscriptionName,omitempty"`

	// Version identifies a specific revision of this artifact.
	//
	// +kubebuilder:validation:MinLength=1
	Version string `json:"version,omitempty"`
}

type ArtifactoryWebhookReceiverConfig struct {

	// SecretRef contains a reference to a Secret. For Project-scoped webhook
	// receivers, the referenced Secret must be in the same namespace as the
	// ProjectConfig.
	//
	// For cluster-scoped webhook receivers, the referenced Secret must be in the
	// designated "system resources" namespace.
	//
	// The Secret's data map is expected to contain a `secret-token` key whose
	// value is the shared secret used to authenticate the webhook requests sent
	// by JFrog Artifactory. For more information please refer to the JFrog
	// Artifactory documentation:
	//   https://jfrog.com/help/r/jfrog-platform-administration-documentation/webhooks
	//
	// +kubebuilder:validation:Required
	// Required: true
	SecretRef struct {
		V1LocalObjectReference
	} `json:"secretRef"`

	// VirtualRepoName is the name of an Artifactory virtual repository.
	//
	// When unspecified, the Artifactory webhook receiver depends on the value of
	// the webhook payload's `data.repo_key` field when inferring the URL of the
	// repository from which the webhook originated, which will always be an
	// Artifactory "local repository." In cases where a Warehouse subscribes to
	// such a repository indirectly via a "virtual repository," there will be a
	// discrepancy between the inferred (local) repository URL and the URL
	// actually used by the subscription, which can prevent the receiver from
	// identifying such a Warehouse as one in need of refreshing. When specified,
	// the value of the VirtualRepoName field supersedes the value of the webhook
	// payload's `data.repo_key` field to compensate for that discrepancy.
	//
	// In practice, when using virtual repositories, a separate Artifactory
	// webhook receiver should be configured for each, but one such receiver can
	// handle inbound webhooks from any number of local repositories that are
	// aggregated by that virtual repository. For example, if a virtual repository
	// `proj-virtual` aggregates container images from all of the `proj`
	// Artifactory project's local image repositories, with a single webhook
	// configured to post to a single receiver configured for the `proj-virtual`
	// virtual repository, an image pushed to
	// `example.frog.io/proj-<local-repo-name>/<path>/image`, will cause that
	// receiver to refresh all Warehouses subscribed to
	// `example.frog.io/proj-virtual/<path>/image`.
	//
	// +optional
	VirtualRepoName string `json:"virtualRepoName,omitempty"`
}

type AutoPromotionOptions struct {

	// SelectionPolicy specifies the rules for identifying new Freight that is
	// eligible for auto-promotion to this Stage. This field is optional. When
	// left unspecified, the field is implicitly treated as if its value were
	// "NewestFreight".
	//
	// Accepted Values:
	//
	// - "NewestFreight": The newest Freight that is available to the Stage is
	//   eligible for auto-promotion.
	//
	// - "MatchUpstream": Only the Freight currently used immediately upstream
	//   from this Stage is eligible for auto-promotion. This policy may only
	//   be applied when the Stage has exactly one upstream Stage.
	SelectionPolicy string `json:"selectionPolicy,omitempty"`
}

type AzureWebhookReceiverConfig struct {

	// SecretRef contains a reference to a Secret. For Project-scoped webhook
	// receivers, the referenced Secret must be in the same namespace as the
	// ProjectConfig.
	//
	// For cluster-scoped webhook receivers, the referenced Secret must be in the
	// designated "system resources" namespace.
	//
	// The Secret's data map is expected to contain a `secret` key whose value
	// does NOT need to be shared directly with Azure when registering a webhook.
	// It is used only by Kargo to create a complex, hard-to-guess URL,
	// which implicitly serves as a shared secret. For more information about
	// Azure webhooks, please refer to the Azure documentation:
	//
	//  Azure Container Registry:
	// 	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-repositories
	//
	//  Azure DevOps:
	// 	http://learn.microsoft.com/en-us/azure/devops/service-hooks/services/webhooks?view=azure-devops
	//
	// +kubebuilder:validation:Required
	// Required: true
	SecretRef struct {
		V1LocalObjectReference
	} `json:"secretRef"`
}

type BitbucketWebhookReceiverConfig struct {

	// SecretRef contains a reference to a Secret. For Project-scoped webhook
	// receivers, the referenced Secret must be in the same namespace as the
	// ProjectConfig.
	//
	// For cluster-scoped webhook receivers, the referenced Secret must be in the
	// designated "system resources" namespace.
	//
	// The Secret's data map is expected to contain a `secret` key whose
	// value is the shared secret used to authenticate the webhook requests sent
	// by Bitbucket. For more information please refer to the Bitbucket
	// documentation:
	//   https://support.atlassian.com/bitbucket-cloud/docs/manage-webhooks/
	//
	// +kubebuilder:validation:Required
	// Required: true
	SecretRef struct {
		V1LocalObjectReference
	} `json:"secretRef"`
}

type Chart struct {

	// Name specifies the name of the chart.
	Name string `json:"name,omitempty"`

	// RepoURL specifies the URL of a Helm chart repository. Classic chart
	// repositories (using HTTP/S) can contain differently named charts. When this
	// field points to such a repository, the Name field will specify the name of
	// the chart within the repository. In the case of a repository within an OCI
	// registry, the URL implicitly points to a specific chart and the Name field
	// will be empty.
	RepoURL string `json:"repoURL,omitempty"`

	// Version specifies a particular version of the chart.
	Version string `json:"version,omitempty"`
}

type ChartDiscoveryResult struct {

	// Name is the name of the Helm chart, as specified in the ChartSubscription.
	Name string `json:"name,omitempty"`

	// RepoURL is the repository URL of the Helm chart, as specified in the
	// ChartSubscription.
	//
	// +kubebuilder:validation:MinLength=1
	RepoURL string `json:"repoURL,omitempty"`

	// SemverConstraint is the constraint for which versions were discovered.
	// This field is optional, and only populated if the ChartSubscription
	// specifies a SemverConstraint.
	SemverConstraint string `json:"semverConstraint,omitempty"`

	// Versions is a list of versions discovered by the Warehouse for the
	// ChartSubscription. An empty list indicates that the discovery operation was
	// successful, but no versions matching the ChartSubscription criteria were
	// found.
	//
	// +optional
	Versions []string `json:"versions"`
}

type Claim struct {

	// name
	Name string `json:"name,omitempty"`

	// values
	Values []string `json:"values"`
}

type ClusterConfig struct {

	// APIVersion defines the versioned schema of this representation of an object.
	// Servers should convert recognized schemas to the latest internal value, and
	// may reject unrecognized values.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	// +optional
	APIVersion string `json:"apiVersion,omitempty"`

	// Kind is a string value representing the REST resource this object represents.
	// Servers may infer this from the endpoint the client submits requests to.
	// Cannot be updated.
	// In CamelCase.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	// +optional
	Kind string `json:"kind,omitempty"`

	// metadata
	Metadata *V1ObjectMeta `json:"metadata,omitempty"`

	// Spec describes the configuration of a cluster.
	Spec struct {
		ClusterConfigSpec
	} `json:"spec,omitempty"`

	// Status describes the current status of a ClusterConfig.
	Status struct {
		ClusterConfigStatus
	} `json:"status,omitempty"`
}

type ClusterConfigSpec struct {

	// GitClient describes cluster-level configuration for Kargo's Git client,
	// including committer identity and an optional signing key. If set, these
	// values take precedence over any configuration provided at install time
	// via the Helm chart.
	// +optional
	GitClient struct {
		GitClientConfig
	} `json:"gitClient,omitempty"`

	// WebhookReceivers describes cluster-scoped webhook receivers used for
	// processing events from various external platforms
	WebhookReceivers []*WebhookReceiverConfig `json:"webhookReceivers"`
}

type ClusterConfigStatus struct {

	// Conditions contains the last observations of the ClusterConfig's current
	// state.
	//
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []*V1Condition `json:"conditions"`

	// LastHandledRefresh holds the value of the most recent AnnotationKeyRefresh
	// annotation that was handled by the controller. This field can be used to
	// determine whether the request to refresh the resource has been handled.
	// +optional
	LastHandledRefresh string `json:"lastHandledRefresh,omitempty"`

	// ObservedGeneration represents the .metadata.generation that this
	// ClusterConfig was reconciled against.
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// WebhookReceivers describes the status of cluster-scoped webhook receivers.
	WebhookReceivers []*WebhookReceiverDetails `json:"webhookReceivers"`
}

type ClusterPromotionTask struct {

	// APIVersion defines the versioned schema of this representation of an object.
	// Servers should convert recognized schemas to the latest internal value, and
	// may reject unrecognized values.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	// +optional
	APIVersion string `json:"apiVersion,omitempty"`

	// Kind is a string value representing the REST resource this object represents.
	// Servers may infer this from the endpoint the client submits requests to.
	// Cannot be updated.
	// In CamelCase.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	// +optional
	Kind string `json:"kind,omitempty"`

	// metadata
	Metadata *V1ObjectMeta `json:"metadata,omitempty"`

	// Spec describes the desired transition of a specific Stage into a specific
	// Freight.
	//
	// +kubebuilder:validation:Required
	// Required: true
	Spec struct {
		PromotionTaskSpec
	} `json:"spec"`
}

type ClusterPromotionTaskList struct {

	// APIVersion defines the versioned schema of this representation of an object.
	// Servers should convert recognized schemas to the latest internal value, and
	// may reject unrecognized values.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	// +optional
	APIVersion string `json:"apiVersion,omitempty"`

	// items
	Items []*ClusterPromotionTask `json:"items"`

	// Kind is a string value representing the REST resource this object represents.
	// Servers may infer this from the endpoint the client submits requests to.
	// Cannot be updated.
	// In CamelCase.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	// +optional
	Kind string `json:"kind,omitempty"`

	// metadata
	Metadata *V1ListMeta `json:"metadata,omitempty"`
}

type CreateAPITokenRequest struct {

	// name
	Name string `json:"name,omitempty"`
}

type CreateConfigMapRequest struct {

	// data
	Data map[string]string `json:"data,omitempty"`

	// description
	Description string `json:"description,omitempty"`

	// name
	Name string `json:"name,omitempty"`

	// replicate
	Replicate bool `json:"replicate,omitempty"`
}

type CreateGenericCredentialsRequest struct {

	// data
	Data map[string]string `json:"data,omitempty"`

	// description
	Description string `json:"description,omitempty"`

	// name
	Name string `json:"name,omitempty"`

	// replicate
	Replicate bool `json:"replicate,omitempty"`
}

type CreateOrUpdateResourceResponse struct {

	// results
	Results []*CreateOrUpdateResourceResult `json:"results"`
}

type CreateOrUpdateResourceResult struct {

	// created resource manifest
	CreatedResourceManifest map[string]any `json:"createdResourceManifest,omitempty"`

	// error
	Error string `json:"error,omitempty"`

	// updated resource manifest
	UpdatedResourceManifest map[string]any `json:"updatedResourceManifest,omitempty"`
}

type CreateRepoCredentialsRequest struct {

	// description
	Description string `json:"description,omitempty"`

	// name
	Name string `json:"name,omitempty"`

	// #nosec G117 -- Request data is unmarshaled into this struct, but the struct
	// is never marshaled and transmitted to anywhere.
	Password string `json:"password,omitempty"`

	// repo Url
	RepoURL string `json:"repoUrl,omitempty"`

	// repo Url is regex
	RepoURLIsRegex bool `json:"repoUrlIsRegex,omitempty"`

	// type
	Type string `json:"type,omitempty"`

	// username
	Username string `json:"username,omitempty"`
}

type CreateResourceResponse struct {

	// results
	Results []*CreateResourceResult `json:"results"`
}

type CreateResourceResult struct {

	// created resource manifest
	CreatedResourceManifest map[string]any `json:"createdResourceManifest,omitempty"`

	// error
	Error string `json:"error,omitempty"`
}

type CurrentStage struct {

	// Since is the time at which the Stage most recently started using the
	// Freight. This can be used to calculate how long the Freight has been in use
	// by the Stage.
	Since string `json:"since,omitempty"`
}

type DeleteResourceResponse struct {

	// results
	Results []*DeleteResourceResult `json:"results"`
}

type DeleteResourceResult struct {

	// deleted resource manifest
	DeletedResourceManifest map[string]any `json:"deletedResourceManifest,omitempty"`

	// error
	Error string `json:"error,omitempty"`
}

type DiscoveredArtifacts struct {

	// Charts holds the charts discovered by the Warehouse for the chart
	// subscriptions.
	//
	// +optional
	Charts []*ChartDiscoveryResult `json:"charts"`

	// DiscoveredAt is the time at which the Warehouse discovered the artifacts.
	//
	// +optional
	DiscoveredAt string `json:"discoveredAt,omitempty"`

	// Git holds the commits discovered by the Warehouse for the Git
	// subscriptions.
	//
	// +optional
	Git []*GitDiscoveryResult `json:"git"`

	// Images holds the image references discovered by the Warehouse for the
	// image subscriptions.
	//
	// +optional
	Images []*ImageDiscoveryResult `json:"images"`

	// Results holds the artifact references discovered by the Warehouse.
	//
	// +optional
	Results []*DiscoveryResult `json:"results"`
}

type DiscoveredCommit struct {

	// Author is the author of the commit.
	Author string `json:"author,omitempty"`

	// Branch is the branch in which the commit was found. This field is
	// optional, and populated based on the CommitSelectionStrategy of the
	// GitSubscription.
	Branch string `json:"branch,omitempty"`

	// Committer is the person who committed the commit.
	Committer string `json:"committer,omitempty"`

	// CreatorDate is the commit creation date as specified by the commit, or
	// the tagger date if the commit belongs to an annotated tag.
	CreatorDate string `json:"creatorDate,omitempty"`

	// ID is the identifier of the commit. This typically is a SHA-1 hash.
	//
	// +kubebuilder:validation:MinLength=1
	ID string `json:"id,omitempty"`

	// Subject is the subject of the commit (i.e. the first line of the commit
	// message).
	Subject string `json:"subject,omitempty"`

	// Tag is the tag that resolved to this commit. This field is optional, and
	// populated based on the CommitSelectionStrategy of the GitSubscription.
	Tag string `json:"tag,omitempty"`
}

type DiscoveredImageReference struct {

	// Annotations is a map of key-value pairs that provide additional
	// information about the image.
	Annotations map[string]string `json:"annotations,omitempty"`

	// CreatedAt is the time the image was created. This field is optional, and
	// not populated for every ImageSelectionStrategy.
	CreatedAt string `json:"createdAt,omitempty"`

	// Digest is the digest of the image.
	//
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:Pattern=`^[a-z0-9]+:[a-f0-9]+$`
	// +akuity:test-kubebuilder-pattern=Digest
	Digest string `json:"digest,omitempty"`

	// Tag is the tag of the image.
	//
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=128
	// +kubebuilder:validation:Pattern=`^[\w.\-\_]+$`
	// +akuity:test-kubebuilder-pattern=Tag
	Tag string `json:"tag,omitempty"`
}

type DiscoveryResult struct {

	// ArtifactReferences is a list of references to specific versions of an
	// artifact.
	//
	// +optional
	ArtifactReferences []*ArtifactReference `json:"artifactReferences"`

	// SubscriptionName is the name of the Subscription that discovered these
	// results.
	//
	// +kubebuilder:validation:MinLength=1
	Name string `json:"name,omitempty"`
}

type DockerHubWebhookReceiverConfig struct {

	// SecretRef contains a reference to a Secret. For Project-scoped webhook
	// receivers, the referenced Secret must be in the same namespace as the
	// ProjectConfig.
	//
	// The Secret's data map is expected to contain a `secret` key whose value
	// does NOT need to be shared directly with Docker Hub when registering a
	// webhook. It is used only by Kargo to create a complex, hard-to-guess URL,
	// which implicitly serves as a shared secret. For more information about
	// Docker Hub webhooks, please refer to the Docker documentation:
	//   https://docs.docker.com/docker-hub/webhooks/
	//
	// +kubebuilder:validation:Required
	// Required: true
	SecretRef struct {
		V1LocalObjectReference
	} `json:"secretRef"`
}

type ExpressionVariable struct {

	// Name is the name of the variable.
	//
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:Pattern=^[a-zA-Z_]\w*$
	Name string `json:"name,omitempty"`

	// Value is the value of the variable. It is allowed to utilize expressions
	// in the value.
	// See https://docs.kargo.io/user-guide/reference-docs/expressions for details.
	Value string `json:"value,omitempty"`
}

type Freight struct {

	// Alias is a human-friendly alias for a piece of Freight. This is an optional
	// field. A defaulting webhook will sync this field with the value of the
	// kargo.akuity.io/alias label. When the alias label is not present or differs
	// from the value of this field, the defaulting webhook will set the label to
	// the value of this field. If the alias label is present and this field is
	// empty, the defaulting webhook will set the value of this field to the value
	// of the alias label. If this field is empty and the alias label is not
	// present, the defaulting webhook will choose an available alias and assign
	// it to both the field and label.
	Alias string `json:"alias,omitempty"`

	// APIVersion defines the versioned schema of this representation of an object.
	// Servers should convert recognized schemas to the latest internal value, and
	// may reject unrecognized values.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	// +optional
	APIVersion string `json:"apiVersion,omitempty"`

	// Artifacts describes specific versions of artifacts other
	// than Git repository commits, container images, and Helm charts.
	Artifacts []*ArtifactReference `json:"artifacts"`

	// Charts describes specific versions of specific Helm charts.
	Charts []*Chart `json:"charts"`

	// Commits describes specific Git repository commits.
	Commits []*GitCommit `json:"commits"`

	// Images describes specific versions of specific container images.
	Images []*Image `json:"images"`

	// Kind is a string value representing the REST resource this object represents.
	// Servers may infer this from the endpoint the client submits requests to.
	// Cannot be updated.
	// In CamelCase.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	// +optional
	Kind string `json:"kind,omitempty"`

	// metadata
	Metadata *V1ObjectMeta `json:"metadata,omitempty"`

	// Origin describes a kind of Freight in terms of its origin.
	//
	// +kubebuilder:validation:Required
	// Required: true
	Origin struct {
		FreightOrigin
	} `json:"origin"`

	// Status describes the current status of this Freight.
	Status struct {
		FreightStatus
	} `json:"status,omitempty"`
}

type FreightCollection struct {

	// ID is a unique and deterministically calculated identifier for the
	// FreightCollection. It is updated on each use of the UpdateOrPush method.
	ID string `json:"id,omitempty"`

	// Freight is a map of FreightReference objects, indexed by their Warehouse
	// origin.
	Items map[string]FreightReference `json:"items,omitempty"`

	// VerificationHistory is a stack of recent VerificationInfo. By default,
	// the last ten VerificationInfo are stored.
	VerificationHistory []*VerificationInfo `json:"verificationHistory"`
}

type FreightCreationCriteria struct {

	// Expression is an expr-lang expression that must evaluate to true for
	// Freight to be created automatically from new artifacts following discovery.
	Expression string `json:"expression,omitempty"`
}

type FreightOrigin struct {

	// Kind is the kind of resource from which Freight may have originated. At
	// present, this can only be "Warehouse".
	//
	// +kubebuilder:validation:Required
	// Required: true
	Kind *string `json:"kind"`

	// Name is the name of the resource of the kind indicated by the Kind field
	// from which Freight may originate.
	//
	// +kubebuilder:validation:Required
	// Required: true
	Name *string `json:"name"`
}

type FreightReference struct {

	// Artifacts describes specific versions of artifacts other
	// than Git repository commits, container images, and Helm charts.
	Artifacts []*ArtifactReference `json:"artifacts"`

	// Charts describes specific versions of specific Helm charts.
	Charts []*Chart `json:"charts"`

	// Commits describes specific Git repository commits.
	Commits []*GitCommit `json:"commits"`

	// Images describes specific versions of specific container images.
	Images []*Image `json:"images"`

	// Name is a system-assigned identifier derived deterministically from
	// the contents of the Freight. I.e., two pieces of Freight can be compared
	// for equality by comparing their Names.
	Name string `json:"name,omitempty"`

	// Origin describes a kind of Freight in terms of its origin.
	Origin struct {
		FreightOrigin
	} `json:"origin,omitempty"`
}

type FreightRequest struct {

	// Origin specifies from where the requested Freight must have originated.
	// This is a required field.
	//
	// +kubebuilder:validation:Required
	// Required: true
	Origin struct {
		FreightOrigin
	} `json:"origin"`

	// Sources describes where the requested Freight may be obtained from. This is
	// a required field.
	Sources struct {
		FreightSources
	} `json:"sources,omitempty"`
}

type FreightSources struct {

	// AutoPromotionOptions specifies options pertaining to auto-promotion. These
	// settings have no effect if auto-promotion is not enabled for this Stage at
	// the ProjectConfig level.
	AutoPromotionOptions struct {
		AutoPromotionOptions
	} `json:"autoPromotionOptions,omitempty"`

	// AvailabilityStrategy specifies the semantics for how requested Freight is
	// made available to the Stage. This field is optional. When left unspecified,
	// the field is implicitly treated as if its value were "OneOf".
	//
	// Accepted Values:
	//
	// - "All": Freight must be verified and, if applicable, soaked in all
	//   upstream Stages to be considered available for promotion.
	// - "OneOf": Freight must be verified and, if applicable, soaked in at least
	//    one upstream Stage to be considered available for promotion.
	// - "": Treated the same as "OneOf".
	//
	// +kubebuilder:validation:Optional
	AvailabilityStrategy string `json:"availabilityStrategy,omitempty"`

	// Direct indicates the requested Freight may be obtained directly from the
	// Warehouse from which it originated. If this field's value is false, then
	// the value of the Stages field must be non-empty. i.e. Between the two
	// fields, at least one source must be specified.
	Direct bool `json:"direct,omitempty"`

	// RequiredSoakTime specifies a minimum duration for which the requested
	// Freight must have continuously occupied ("soaked in") in an upstream Stage
	// before becoming available for promotion to this Stage. This is an optional
	// field. If nil or zero, no soak time is required. Any soak time requirement
	// is in ADDITION to the requirement that Freight be verified in an upstream
	// Stage to become available for promotion to this Stage, although a manual
	// approval for promotion to this Stage will supersede any soak time
	// requirement.
	//
	// +kubebuilder:validation:Type=string
	// +kubebuilder:validation:Pattern=`^([0-9]+(\.[0-9]+)?(s|m|h))+$`
	// +akuity:test-kubebuilder-pattern=Duration
	RequiredSoakTime string `json:"requiredSoakTime,omitempty"`

	// Stages identifies other "upstream" Stages as potential sources of the
	// requested Freight. If this field's value is empty, then the value of the
	// Direct field must be true. i.e. Between the two fields, at least on source
	// must be specified.
	Stages []string `json:"stages"`
}

type FreightStatus struct {

	// ApprovedFor describes the Stages for which this Freight has been approved
	// preemptively/manually by a user. This is useful for hotfixes, where one
	// might wish to promote a piece of Freight to a given Stage without
	// transiting the entire pipeline.
	ApprovedFor map[string]ApprovedStage `json:"approvedFor,omitempty"`

	// CurrentlyIn describes the Stages in which this Freight is currently in use.
	CurrentlyIn map[string]CurrentStage `json:"currentlyIn,omitempty"`

	// Metadata is a map of arbitrary metadata associated with the Freight.
	// This is useful for storing additional information about the Freight
	// or Promotion that can be shared across steps or stages.
	Metadata map[string]any `json:"metadata,omitempty"`

	// VerifiedIn describes the Stages in which this Freight has been verified
	// through promotion and subsequent health checks.
	VerifiedIn map[string]VerifiedStage `json:"verifiedIn,omitempty"`
}

type GenericWebhookAction struct {

	// ActionType indicates the type of action to be performed. `Refresh` is the
	// only currently supported action.
	//
	// +kubebuilder:validation:Enum=Refresh;
	Action string `json:"action,omitempty"`

	// Parameters contains additional, action-specific parameters. Values may be
	// static or extracted from the request using expressions.
	//
	// +optional
	Parameters map[string]string `json:"parameters,omitempty"`

	// TargetSelectionCriteria is a list of selection criteria for the resources on which the
	// action should be performed.
	//
	// +kubebuilder:validation:MinItems=1
	TargetSelectionCriteria []*GenericWebhookTargetSelectionCriteria `json:"targetSelectionCriteria"`

	// WhenExpression defines criteria that a request must meet to run this
	// action.
	//
	// +optional
	WhenExpression string `json:"whenExpression,omitempty"`
}

type GenericWebhookReceiverConfig struct {

	// Actions is a list of actions to be performed when a webhook event is received.
	//
	// +kubebuilder:validation:MinItems=1
	Actions []*GenericWebhookAction `json:"actions"`

	// SecretRef contains a reference to a Secret. For Project-scoped webhook
	// receivers, the referenced Secret must be in the same namespace as the
	// ProjectConfig.
	//
	// For cluster-scoped webhook receivers, the referenced Secret must be in the
	// designated "system resources" namespace.
	//
	// The Secret's data map is expected to contain a `secret` key whose value
	// does NOT need to be shared directly with the sender. It is used only by
	// Kargo to create a complex, hard-to-guess URL, which implicitly serves as a
	// shared secret.
	//
	// +kubebuilder:validation:Required
	// Required: true
	SecretRef struct {
		V1LocalObjectReference
	} `json:"secretRef"`
}

type GenericWebhookTargetSelectionCriteria struct {

	// IndexSelector is a selector used to identify cached target resources by cache key.
	// If used with LabelSelector and/or Name, the results are the combined (logical AND) of all the criteria.
	//
	// +optional
	IndexSelector struct {
		IndexSelector
	} `json:"indexSelector,omitempty"`

	// Kind is the kind of the target resource.
	//
	// +kubebuilder:validation:Enum=Warehouse;
	Kind string `json:"kind,omitempty"`

	// LabelSelector is a label selector to identify the target resources.
	// If used with IndexSelector and/or Name, the results are the combined (logical AND) of all the criteria.
	//
	// +optional
	LabelSelector struct {
		V1LabelSelector
	} `json:"labelSelector,omitempty"`

	// Name is the name of the target resource. If LabelSelector and/or IndexSelectors
	// are also specified, the results are the combined (logical AND) of the criteria.
	//
	// +optional
	Name string `json:"name,omitempty"`
}

type GetConfigResponse struct {

	// argocd shards
	ArgocdShards map[string]ArgoCDShard `json:"argocdShards,omitempty"`

	// has analysis run logs Url template
	HasAnalysisRunLogsURLTemplate bool `json:"hasAnalysisRunLogsUrlTemplate,omitempty"`

	// kargo namespace
	KargoNamespace string `json:"kargoNamespace,omitempty"`

	// secret management enabled
	SecretManagementEnabled bool `json:"secretManagementEnabled,omitempty"`

	// shared resources namespace
	SharedResourcesNamespace string `json:"sharedResourcesNamespace,omitempty"`

	// system resources namespace
	SystemResourcesNamespace string `json:"systemResourcesNamespace,omitempty"`
}

type GitClientConfig struct {

	// Email is the email address used for Git commits made by Kargo.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:Format="email"
	// Required: true
	Email *string `json:"email"`

	// Name is the name used for Git commits made by Kargo.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// Required: true
	Name *string `json:"name"`

	// SigningKeySecret references a Secret in the system namespace containing
	// a GPG signing key for commit signing. The Secret must contain a data
	// key named "signingKey" with the GPG private key material.
	// +optional
	SigningKeySecret struct {
		V1LocalObjectReference
	} `json:"signingKeySecret,omitempty"`
}

type GitCommit struct {

	// Author is the author of the commit.
	Author string `json:"author,omitempty"`

	// Branch denotes the branch of the repository where this commit was found.
	Branch string `json:"branch,omitempty"`

	// Committer is the person who committed the commit.
	Committer string `json:"committer,omitempty"`

	// ID is the ID of a specific commit in the Git repository specified by
	// RepoURL.
	ID string `json:"id,omitempty"`

	// Message is the message associated with the commit. At present, this only
	// contains the first line (subject) of the commit message.
	Message string `json:"message,omitempty"`

	// RepoURL is the URL of a Git repository.
	RepoURL string `json:"repoURL,omitempty"`

	// Tag denotes a tag in the repository that matched selection criteria and
	// resolved to this commit.
	Tag string `json:"tag,omitempty"`
}

type GitDiscoveryResult struct {

	// Commits is a list of commits discovered by the Warehouse for the
	// GitSubscription. An empty list indicates that the discovery operation was
	// successful, but no commits matching the GitSubscription criteria were found.
	//
	// +optional
	Commits []*DiscoveredCommit `json:"commits"`

	// RepoURL is the repository URL of the GitSubscription.
	//
	// TODO(v1.13.0): Remove SSH/SCP-style URL support from this pattern.
	//
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:Pattern=`(?:^(ssh|https?)://(?:([\w-]+)(:(.+))?@)?([\w-]+(?:\.[\w-]+)*)(?::(\d{1,5}))?(/.*)$)|(?:^([\w-]+)@([\w+]+(?:\.[\w-]+)*):(/?.*))`
	// +akuity:test-kubebuilder-pattern=GitRepoURLPattern
	RepoURL string `json:"repoURL,omitempty"`
}

type GitHubWebhookReceiverConfig struct {

	// SecretRef contains a reference to a Secret. For Project-scoped webhook
	// receivers, the referenced Secret must be in the same namespace as the
	// ProjectConfig.
	//
	// For cluster-scoped webhook receivers, the referenced Secret must be in the
	// designated "system resources" namespace.
	//
	// The Secret's data map is expected to contain a `secret` key whose value is
	// the shared secret used to authenticate the webhook requests sent by GitHub.
	// For more information please refer to GitHub documentation:
	//   https://docs.github.com/en/webhooks/using-webhooks/validating-webhook-deliveries
	//
	// +kubebuilder:validation:Required
	// Required: true
	SecretRef struct {
		V1LocalObjectReference
	} `json:"secretRef"`
}

type GitLabWebhookReceiverConfig struct {

	// SecretRef contains a reference to a Secret. For Project-scoped webhook
	// receivers, the referenced Secret must be in the same namespace as the
	// ProjectConfig.
	//
	// For cluster-scoped webhook receivers, the referenced Secret must be in the
	// designated "system resources" namespace.
	//
	// The secret is expected to contain a `secret-token` key containing the
	// shared secret specified when registering the webhook in GitLab. For more
	// information about this token, please refer to the GitLab documentation:
	//   https://docs.gitlab.com/user/project/integrations/webhooks/
	//
	// +kubebuilder:validation:Required
	// Required: true
	SecretRef struct {
		V1LocalObjectReference
	} `json:"secretRef"`
}

type GiteaWebhookReceiverConfig struct {

	// SecretRef contains a reference to a Secret. For Project-scoped webhook
	// receivers, the referenced Secret must be in the same namespace as the
	// ProjectConfig.
	//
	// For cluster-scoped webhook receivers, the referenced Secret must be in the
	// designated "system resources" namespace.
	//
	// The Secret's data map is expected to contain a `secret` key whose value is
	// the shared secret used to authenticate the webhook requests sent by Gitea.
	// For more information please refer to the Gitea documentation:
	//   https://docs.gitea.io/en-us/webhooks/
	//
	// +kubebuilder:validation:Required
	// Required: true
	SecretRef struct {
		V1LocalObjectReference
	} `json:"secretRef"`
}