v1alpha1

type BackupStorage struct {
	// s3 specifies the S3-compatible storage configuration for the etcd backup.
	// +kubebuilder:validation:Required
	S3 *S3Storage `json:"s3,omitempty"`
}

type CNIConfig struct {
	// name of CNI to use (flannel, custom, none).
	// +kubebuilder:validation:Enum=flannel;custom;none
	// +kubebuilder:validation:Optional
	Name string `json:"name,omitempty"`

	// urls containing manifests to apply for the CNI.
	// Should be present for "custom", must be empty for "flannel" and "none".
	// +kubebuilder:validation:Optional
	URLs []string `json:"urls,omitempty"`

	// flannel configuration options.
	// +kubebuilder:validation:Optional
	Flannel *FlannelCNIConfig `json:"flannel,omitempty"`
}

type FlannelCNIConfig struct {
	// extraArgs are extra arguments for 'flanneld'.
	// +kubebuilder:validation:Optional
	ExtraArgs []string `json:"extraArgs,omitempty"`
}

type HelmSpec struct {
	// chartName is the name of the Helm chart in the repository.
	// e.g. chart-path oci://repo-url/chart-name as chartName: chart-name and https://repo-url/chart-name as chartName: chart-name
	ChartName string `json:"chartName"`

	// repoURL is the URL of the Helm chart repository.
	// e.g. chart-path oci://repo-url/chart-name as repoURL: oci://repo-url and https://repo-url/chart-name as repoURL: https://repo-url
	RepoURL string `json:"repoURL"`

	// releaseName is the release name of the installed Helm chart. If it is not specified, a name will be generated.
	// +optional
	ReleaseName string `json:"releaseName,omitempty"`

	// namespace is the namespace the Helm release will be installed on each selected
	// Cluster. If it is not specified, it will be set to the default namespace.
	// +optional
	// +kubebuilder:default:=default
	ReleaseNamespace string `json:"namespace,omitempty"`

	// version is the version of the Helm chart. If it is not specified, the chart will use
	// and be kept up to date with the latest version.
	// +optional
	Version string `json:"version,omitempty"`

	// valuesTemplate is an inline YAML representing the values for the Helm chart. This YAML supports Go templating to reference
	// fields from each selected workload Cluster and programatically create and set values.
	// +optional
	ValuesTemplate string `json:"valuesTemplate,omitempty"`

	// options represents CLI flags passed to Helm operations (i.e. install, upgrade, delete)
	// include options such as wait, skipCRDs, timeout, waitForJobs, etc.
	// Inherited from Cluster API Addons API.
	// +optional
	Options *capiaddons.HelmOptions `json:"options,omitempty"`

	// credentials is a reference to an object containing the OCI credentials. If it is not specified, no credentials will be used.
	// Inherited from Cluster API Addons API.
	// +optional
	Credentials *capiaddons.Credentials `json:"credentials,omitempty"`

	// tlsConfig contains the TLS configuration for a HelmChartProxy.
	// Inherited from Cluster API Addons API.
	// +optional
	TLSConfig *capiaddons.TLSConfig `json:"tlsConfig,omitempty"`
}

type META struct {
	// hostname is the hostname for the Talos machines.
	Hostname string `json:"hostname,omitempty"`
	// interface is the network interface name for Talos machines.
	Interface string `json:"interface,omitempty"`
	// subnet is the subnet prefix length for the Talos machines.
	Subnet int `json:"subnet,omitempty"`
	// gateway is the gateway for the Talos machines.
	Gateway string `json:"gateway,omitempty"`
	// dnsServers is a list of DNS servers for the Talos machines.
	DNSServers []string `json:"dnsServers,omitempty"`
}

type Machine struct {
	// address is the IP address of the Talos machine.
	// +kubebuilder:validation:Pattern=`^(\d{1,3}\.){3}\d{1,3}$`
	Address *string `json:"address,omitempty"`
	// version of Talos to use for this machine (controller-manager, scheduler, kube-apiserver, etcd) -- e.g "v1.12.1"
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:Pattern=`^v\d+\.\d+\.\d+(-\w+)?$`
	Version string `json:"version,omitempty"`
	// image is the Talos image to use for this machine
	// +kubebuilder:validation:Optional
	Image *string `json:"image,omitempty"`
	// pxeClientSpec defines the specifications of the machines relevant for PXE boot.
	// +kubebuilder:validation:Optional
	PxeClientSpec *PxeClientSpec `json:"pxeClientSpec,omitempty"`
	// machineRef is a reference to a Kubernetes object from which the machine IP address can be extracted.
	// +kubebuilder:validation:Optional
	MachineRef *corev1.ObjectReference `json:"machineRef,omitempty"`
	// configPatches is a list of machine-specific config patches applied per machine.
	// Only define the machine level configPatches here because it appended after the root machineSpec.configPatches.
	// +kubebuilder:validation:Optional
	ConfigPatches []runtime.RawExtension `json:"configPatches,omitempty"`
	// additionalConfig is machine-specific additional Talos configuration to append to the generated config.
	// When set, it appends the root machineSpec.additionalConfig for this machine.
	// +kubebuilder:validation:Optional
	AdditionalConfig []runtime.RawExtension `json:"additionalConfig,omitempty"`
}

type MachineSpec struct {
	// installDisk is the disk to use for installing Talos on the control plane machines.
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:Pattern=`^/dev/(sd[a-z][0-9]*|vd[a-z][0-9]*|nvme[0-9]+n[0-9]+(p[0-9]+)?)$`
	InstallDisk *string `json:"installDisk,omitempty"`
	// wipe indicates whether to wipe the disk before installation.
	// +kubebuilder:validation:Optional
	// +kubebuilder:default=false
	Wipe bool `json:"wipe,omitempty"`
	// image is the Talos image to use for this machine.
	// +kubebuilder:validation:Optional
	Image *string `json:"image,omitempty"`
	// meta is the meta partition used by Talos.
	// +kubebuilder:validation:Optional
	Meta *META `json:"meta,omitempty"`
	// airGap indicates whether the machine is in an air-gapped environment.
	// +kubebuilder:validation:Optional
	// +kubebuilder:default=false
	AirGap bool `json:"airGap,omitempty"`
	// imageCache indicates whether to enable local image caching on the machine.
	// +kubebuilder:validation:Optional
	// +kubebuilder:default=false
	ImageCache bool `json:"imageCache,omitempty"`
	// allowSchedulingOnControlPlanes indicates whether to allow scheduling workloads on control plane nodes.
	// +kubebuilder:validation:Optional
	// +kubebuilder:default=false
	AllowSchedulingOnControlPlanes bool `json:"allowSchedulingOnControlPlanes,omitempty"`
	// registries is the path to a custom registries configuration file.
	// +kubebuilder:validation:Optional
	Registries *runtime.RawExtension `json:"registries,omitempty"`
	// additionalConfig is a list of additional Talos configuration documents to append to the
	// generated config, each separated by "---". Entries are appended in order: global first,
	// then machine-specific.
	// +kubebuilder:validation:Optional
	AdditionalConfig []runtime.RawExtension `json:"additionalConfig,omitempty"`
	// configPatches is a list of strategic merge patches applied to the generated Talos machine config.
	// Unlike additionalConfig (which appends a separate YAML document), each patch is merged into
	// the main machine config, allowing you to override or extend any field (e.g. machine.network).
	// +kubebuilder:validation:Optional
	ConfigPatches []runtime.RawExtension `json:"configPatches,omitempty"`
}

type MetalSpec struct {
	// machines is a list of machine specifications for the Talos control plane.
	// +listType=atomic
	Machines []Machine `json:"machines,omitempty"`
	// machineSpec defines the specifications for each Talos control plane machine.
	// +kubebuilder:validation:Optional
	MachineSpec *MachineSpec `json:"machineSpec,omitempty"`
}

type PxeClientSpec struct {
	// macAddress is the MAC address of the network interface used by the PXE firmware of the machine to boot Talos.
	// +kubebuilder:validation:Required
	MacAddress *string `json:"macAddress,omitempty"`
	// cpuArchitecture is the CPU architecture of the machine.
	// +kubebuilder:validation:Enum=amd64;arm64
	// +kubebuilder:validation:Required
	CpuArchitecture *string `json:"cpuArchitecture,omitempty"`
	// kernelCmdlineArgs specifies the additional kernel command line arguments to inject during PXE boot. These arguments are not preserved after installation.
	// +kubebuilder:validation:Optional
	KernelCmdlineArgs *string `json:"kernelCmdlineArgs,omitempty"`
}

type PxeServerSpec struct {
	// address is the IP address of the PXE server.
	// +kubebuilder:validation:Pattern=`^(\d{1,3}\.){3}\d{1,3}$`
	// +kubebuilder:validation:Required
	Address *string `json:"address,omitempty"`
	// interface is the interface connected to the network used for PXE boot (as given by Linux).
	// +kubebuilder:validation:Required
	Interface *string `json:"interface,omitempty"`
}

type S3Storage struct {
	// bucket is the name of the S3 bucket to store the etcd backup.
	Bucket string `json:"bucket"`
	// region is the AWS region where the S3 bucket is located.
	Region string `json:"region"`
	// endpoint is the S3 service endpoint (optional, for custom S3-compatible services).
	Endpoint string `json:"endpoint,omitempty"`
	// accessKeyID is the access key ID for the S3 bucket.
	AccessKeyID *corev1.SecretKeySelector `json:"accessKeyID"`
	// secretAccessKey is the secret access key for the S3 bucket.
	SecretAccessKey *corev1.SecretKeySelector `json:"secretAccessKey"`
	// insecureSkipTLSVerify skips TLS verification for the S3 endpoint (optional).
	// +kubebuilder:default:=false
	InsecureSkipTLSVerify bool `json:"insecureSkipTLSVerify,omitempty"`
}

type TalosCluster struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// spec defines the desired state of TalosCluster.
	// +optional
	Spec TalosClusterSpec `json:"spec,omitempty"`

	// status defines the observed state of TalosCluster.
	// +optional
	Status TalosClusterStatus `json:"status,omitempty"`
}

type TalosClusterAddon struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of TalosClusterAddon
	// +required
	Spec TalosClusterAddonSpec `json:"spec"`

	// status defines the observed state of TalosClusterAddon
	// +optional
	Status TalosClusterAddonStatus `json:"status,omitempty,omitzero"`
}

type TalosClusterAddonList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TalosClusterAddon `json:"items"`
}

type TalosClusterAddonRelease struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of TalosClusterAddonRelease
	// +required
	Spec TalosClusterAddonReleaseSpec `json:"spec"`

	// status defines the observed state of TalosClusterAddonRelease
	// +optional
	Status TalosClusterAddonReleaseStatus `json:"status,omitempty,omitzero"`
}

type TalosClusterAddonReleaseList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TalosClusterAddonRelease `json:"items"`
}

type TalosClusterAddonReleaseSpec struct {
	// clusterRef is a reference to the TalosCluster where the addon will be installed.
	// +kubebuilder:validation:Required
	ClusterRef corev1.ObjectReference `json:"clusterRef"`

	// helmSpec contains the configuration for the Helm chart that defines the addon.
	HelmSpec HelmSpec `json:"helmSpec,omitempty"`
}

type TalosClusterAddonReleaseStatus struct {
	// conditions represent the current state of the TalosClusterAddonRelease resource.
	// Each condition has a unique type and reflects the status of a specific aspect of the resource.
	//
	// Standard condition types include:
	// - "Available": the resource is fully functional
	// - "Progressing": the resource is being created or updated
	// - "Degraded": the resource failed to reach or maintain its desired state
	//
	// The status of each condition is one of True, False, or Unknown.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type TalosClusterAddonSpec struct {
	// clusterSelector is a label selector that matches the TalosCluster resources
	// to which this TalosClusterAddon should be applied.
	// It allows the addon to be associated with specific clusters based on their labels.
	ClusterSelector metav1.LabelSelector `json:"clusterSelector,omitempty"`

	// helmSpec contains the configuration for the Helm chart that defines the addon.
	HelmSpec HelmSpec `json:"helmSpec,omitempty"`
}

type TalosClusterAddonStatus struct {
	// conditions represent the latest available observations of the TalosClusterAddon's current state.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type TalosClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TalosCluster `json:"items"`
}

type TalosClusterSpec struct {

	// controlPlane defines the control plane configuration for the Talos cluster.
	// +kubebuilder:validation:Optional
	ControlPlane *TalosControlPlaneSpec `json:"controlPlane,omitempty"`

	// controlPlaneRef references the TalosControlPlane resource that manages the control plane.
	// +kubebuilder:validation:Optional
	ControlPlaneRef *corev1.LocalObjectReference `json:"controlPlaneRef,omitempty"`

	// worker defines the worker configuration for the Talos cluster.
	// +kubebuilder:validation:Optional
	Worker *TalosWorkerSpec `json:"worker,omitempty"`

	// workerRef references the TalosWorker resource that manages the worker nodes.
	// +kubebuilder:validation:Optional
	WorkerRef *corev1.LocalObjectReference `json:"workerRef,omitempty"`

	// pxeServerSpec defines the specifications of the server used for booting Talos using PXE.
	// +kubebuilder:validation:Optional
	PxeServerSpec *PxeServerSpec `json:"pxeServerSpec,omitempty"`
}

type TalosClusterStatus struct {
	// conditions represent the current state of the TalosCluster resource.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type TalosControlPlane struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// spec defines the desired state of TalosControlPlane.
	// +optional
	Spec TalosControlPlaneSpec `json:"spec,omitempty"`

	// status defines the observed state of TalosControlPlane.
	// +optional
	Status TalosControlPlaneStatus `json:"status,omitempty"`
}

type TalosControlPlaneList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TalosControlPlane `json:"items"`
}

type TalosControlPlaneSpec struct {

	// version of Talos to use for the control plane(controller-manager, scheduler, kube-apiserver, etcd) -- e.g "v1.12.1"
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:Pattern=`^v\d+\.\d+\.\d+(-\w+)?$`
	// +kubebuilder:default="v1.12.1"
	Version string `json:"version"`

	// mode specifies the deployment mode for the control plane (container, metal, or cloud).
	// TODO: Add support for cloud mode
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:Enum=container;metal;cloud
	Mode string `json:"mode"`

	// replicas is the number of control-plane machines to maintain. Only applies when mode is 'container'.
	// +kubebuilder:validation:Optional
	Replicas int32 `json:"replicas,omitempty"`

	// metalSpec is required when mode is 'metal'.
	MetalSpec MetalSpec `json:"metalSpec,omitempty"`

	// endpoint is the endpoint for the Kubernetes API Server.
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:Pattern=`^https?://[a-zA-Z0-9.-]+(:\d+)?$`
	Endpoint string `json:"endpoint,omitempty"`

	// kubeVersion is the version of Kubernetes to use for the control plane.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:Pattern=`^v\d+\.\d+\.\d+(-\w+)?$`
	// +kubebuilder:default="v1.35.0"
	KubeVersion string `json:"kubeVersion"`

	// clusterDomain is the domain for the Kubernetes cluster.
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:Pattern=`^([a-zA-Z0-9]([-a-zA-Z0-9]*[a-zA-Z0-9])?\.)+[a-z]{2,}$`
	// +kubebuilder:default="cluster.local"
	ClusterDomain string `json:"clusterDomain,omitempty"`

	// storageClassName is the name of the storage class to use for persistent volumes.
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:Pattern=`^[a-zA-Z0-9][-a-zA-Z0-9_.]*[a-zA-Z0-9]$`
	StorageClassName *string `json:"storageClassName,omitempty"`

	// podCIDR is the list of CIDR ranges for pod IPs in the cluster.
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:MaxItems=4
	// +kubebuilder:validation:items:MaxLength=18
	// +kubebuilder:validation:items:Pattern=`^(\d{1,3}\.){3}\d{1,3}/\d{1,2}$`
	PodCIDR []string `json:"podCIDR,omitempty"`

	// serviceCIDR is the list of CIDR ranges for service IPs in the cluster.
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:MaxItems=4
	// +kubebuilder:validation:items:MaxLength=18
	// +kubebuilder:validation:items:Pattern=`^(\d{1,3}\.){3}\d{1,3}/\d{1,2}$`
	ServiceCIDR []string `json:"serviceCIDR,omitempty"`

	// configRef is a reference to a ConfigMap containing the Talos controlplane configuration.
	// +kubebuilder:validation:Optional
	ConfigRef *corev1.ConfigMapKeySelector `json:"configRef,omitempty"`

	// cni is the CNI configuration for the cluster.
	// +kubebuilder:validation:Optional
	CNI *CNIConfig `json:"cni,omitempty"`

	// deletionPolicy specifies the deletion policy for control plane machines when deleting this Kubernetes resource (reset or preserve).
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:Enum=reset;preserve
	// +kubebuilder:default=reset
	DeletionPolicy string `json:"deletionPolicy"`
}

type TalosControlPlaneStatus struct {
	// state is the current state of the control plane.
	State string `json:"state,omitempty"`
	// conditions is a list of conditions for the Talos control plane.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
	// config is the reference to the Talos configuration used for the control plane.
	Config string `json:"config,omitempty"`
	// secretBundle is the reference to the secrets bundle used for the control plane.
	SecretBundle string `json:"secretBundle,omitempty"`
	// bundleConfig is the reference to the bundle configuration used for the control plane.
	BundleConfig string `json:"bundleConfig,omitempty"`
	// imported is only valid when ReconcileMode is 'import' and indicates whether the Talos control plane has been imported.
	Imported *bool `json:"imported,omitempty"`
	// observedKubeVersion is the observed version of Kubernetes.
	// +optional
	ObservedKubeVersion string `json:"observedKubeVersion,omitempty"`
}

type TalosEtcdBackup struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of TalosEtcdBackup
	// +required
	Spec TalosEtcdBackupSpec `json:"spec"`

	// status defines the observed state of TalosEtcdBackup
	// +optional
	Status TalosEtcdBackupStatus `json:"status,omitempty,omitzero"`
}

type TalosEtcdBackupList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TalosEtcdBackup `json:"items"`
}

type TalosEtcdBackupSchedule struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of TalosEtcdBackupSchedule
	// +required
	Spec TalosEtcdBackupScheduleSpec `json:"spec"`

	// status defines the observed state of TalosEtcdBackupSchedule
	// +optional
	Status TalosEtcdBackupScheduleStatus `json:"status,omitempty,omitzero"`
}

type TalosEtcdBackupScheduleList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TalosEtcdBackupSchedule `json:"items"`
}

type TalosEtcdBackupScheduleSpec struct {
	// schedule is a cron expression defining when to run backups.
	// For example: "0 2 * * *" for daily backups at 2 AM
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	Schedule string `json:"schedule"`

	// backupTemplate is the template for creating TalosEtcdBackup resources.
	// +kubebuilder:validation:Required
	BackupTemplate TalosEtcdBackupTemplateSpec `json:"backupTemplate"`

	// retention specifies how many successful backups to keep.
	// Older backups will be automatically deleted
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:default:=5
	// +optional
	Retention *int32 `json:"retention,omitempty"`

	// paused can be set to true to pause the backup schedule.
	// +kubebuilder:default:=false
	// +optional
	Paused bool `json:"paused,omitempty"`
}

type TalosEtcdBackupScheduleStatus struct {
	// lastScheduleTime is the last time a backup was scheduled.
	// +optional
	LastScheduleTime *metav1.Time `json:"lastScheduleTime,omitempty"`

	// lastSuccessfulBackupTime is the last time a backup completed successfully.
	// +optional
	LastSuccessfulBackupTime *metav1.Time `json:"lastSuccessfulBackupTime,omitempty"`

	// nextScheduleTime is the next time a backup will be scheduled.
	// +optional
	NextScheduleTime *metav1.Time `json:"nextScheduleTime,omitempty"`

	// activeBackups is the list of currently active backup jobs.
	// +optional
	ActiveBackups []string `json:"activeBackups,omitempty"`

	// conditions represent the current state of the TalosEtcdBackupSchedule resource.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type TalosEtcdBackupSpec struct {
	// talosControlPlaneRef is a reference to the TalosControlPlane this backup is associated with.
	// +kubebuilder:validation:required
	TalosControlPlaneRef *corev1.LocalObjectReference `json:"talosControlPlaneRef"`

	// backupStorage specifies where to store the etcd backup.
	// +kubebuilder:validation:required
	BackupStorage BackupStorage `json:"backupStorage"`
}

type TalosEtcdBackupStatus struct {
	// filename is the name of the backup file in the storage backend.
	// +optional
	Filename string `json:"filename,omitempty"`
	// stateFilename is the name of the paired state-secret backup in the storage backend.
	// +optional
	StateFilename string `json:"stateFilename,omitempty"`
	// conditions represent the current state of the TalosEtcdBackup resource.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type TalosEtcdBackupTemplateSpec struct {
	// spec is the specification of the TalosEtcdBackup to be created.
	// +kubebuilder:validation:Required
	Spec TalosEtcdBackupSpec `json:"spec"`
}

type TalosMachine struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// spec defines the desired state of TalosMachine.
	// +optional
	Spec TalosMachineSpec `json:"spec,omitempty"`

	// status defines the observed state of TalosMachine.
	// +optional
	Status TalosMachineStatus `json:"status,omitempty"`
}

type TalosMachineList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TalosMachine `json:"items"`
}

type TalosMachineSpec struct {

	// endpoint is the Talos API endpoint for this machine.
	// +kubebuilder:validation:Required
	Endpoint string `json:"endpoint"`

	// version is the desired version of Talos to run on this machine.
	// +kubebuilder:validation:Required
	Version string `json:"version"`

	// machineSpec is the machine specification for this TalosMachine.
	MachineSpec *MachineSpec `json:"machineSpec,omitempty"`

	// controlPlaneRef is a reference to the TalosControlPlane this machine belongs to.
	ControlPlaneRef *corev1.ObjectReference `json:"controlPlaneRef,omitempty"`

	// workerRef is a reference to the TalosWorker this machine belongs to.
	WorkerRef *corev1.ObjectReference `json:"workerRef,omitempty"`

	// configRef is a reference to a ConfigMap containing the Talos cluster configuration.
	// +kubebuilder:validation:Optional
	ConfigRef *corev1.ConfigMapKeySelector `json:"configRef,omitempty"`

	// deletionPolicy specifies the deletion policy for the machine when deleting this Kubernetes resource (reset or preserve).
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:Enum=reset;preserve
	// +kubebuilder:default=reset
	DeletionPolicy string `json:"deletionPolicy"`

	// pxeClientSpec defines the specifications of the machines relevant for PXE boot.
	// +kubebuilder:validation:Optional
	PxeClientSpec *PxeClientSpec `json:"pxeClientSpec,omitempty"`
}

type TalosMachineStatus struct {
	// observedVersion is the version of Talos running on this machine.
	ObservedVersion string `json:"observedVersion,omitempty"`
	// config is the base64 encoded Talos configuration.
	Config string `json:"config,omitempty"`
	// imported is only valid when ReconcileMode is 'import' and indicates whether the Talos machine has been imported.
	Imported *bool `json:"imported,omitempty"`
	// state is the current state of the machine (e.g., "Ready", "Provisioning", "Failed").
	State string `json:"state,omitempty"`
	// conditions represent the latest available observations of a TalosMachine's current state.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type TalosWorker struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// spec defines the desired state of TalosWorker.
	// +optional
	Spec TalosWorkerSpec `json:"spec,omitempty"`

	// status defines the observed state of TalosWorker.
	// +optional
	Status TalosWorkerStatus `json:"status,omitempty"`
}

type TalosWorkerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TalosWorker `json:"items"`
}

type TalosWorkerSpec struct {

	// version of Talos to use for the worker nodes -- e.g "v1.12.1"
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:Pattern=`^v\d+\.\d+\.\d+(-\w+)?$`
	// +kubebuilder:default="v1.12.1"
	Version string `json:"version"`

	// mode specifies the deployment mode for the worker nodes (container, metal, or cloud).
	// TODO: Add support for cloud mode
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:Enum=container;metal;cloud
	Mode string `json:"mode"`

	// replicas is the number of worker machines to maintain. Only applies when mode is 'container'.
	// +kubebuilder:validation:Optional
	// +kubebuilder:default=1
	Replicas int32 `json:"replicas,omitempty"`

	// metalSpec is required when mode is 'metal'.
	MetalSpec MetalSpec `json:"metalSpec,omitempty"`

	// kubeVersion is the version of Kubernetes to use for the worker nodes.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:Pattern=`^v\d+\.\d+\.\d+(-\w+)?$`
	// +kubebuilder:default="v1.35.0"
	KubeVersion string `json:"kubeVersion"`

	// storageClassName is the name of the storage class to use for persistent volumes.
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:Pattern=`^[a-zA-Z0-9][-a-zA-Z0-9_.]*[a-zA-Z0-9]$`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="StorageClassName is immutable, you cannot change it after creation"
	StorageClassName *string `json:"storageClassName,omitempty"`

	// controlPlaneRef is a reference to the TalosControlPlane that this worker belongs to.
	// +kubebuilder:validation:Optional
	ControlPlaneRef corev1.LocalObjectReference `json:"controlPlaneRef"`

	// configRef is a reference to a ConfigMap containing the Talos cluster configuration.
	// +kubebuilder:validation:Optional
	ConfigRef *corev1.ConfigMapKeySelector `json:"configRef,omitempty"`

	// deletionPolicy specifies the deletion policy for worker machines when deleting this Kubernetes resource (reset or preserve).
	// +kubebuilder:validation:Optional
	// +kubebuilder:validation:Enum=reset;preserve
	// +kubebuilder:default=reset
	DeletionPolicy string `json:"deletionPolicy"`
}

type TalosWorkerStatus struct {
	// conditions represent the current state of the TalosWorker resource.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
	// config is the serialized Talos configuration for the worker.
	Config string `json:"config,omitempty"`
	// imported is only valid when ReconcileMode is 'import' and indicates whether the Talos worker has been imported.
	Imported *bool `json:"imported,omitempty"`
	// state represents the current state of the Talos worker (e.g., "Ready", "Provisioning", "Failed").
	State string `json:"state,omitempty"`
}